This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json) Hash identifier: ToOkPUHiw6lb75BO+ViL8eTVqNfuEokv/xRb32vG62Q= Subject key identifier: FC:FC:F0:2B:52:FD:07:BB:5C:E4:FF:F4:00:D5:3D:F4:9F:63:D3:1F Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af Certificate serial: 019B3C0FDC03CAD1D042C440808E7FA4E9D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: 9hz8fJnAPH9LGnQ9q+EB7GTZD4A04tylMV9tHy6HKbw=) 2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:dc:03:ca:d1:d0:42:c4:40:80:8e:7f:a4:e9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=fcfcf02b52fd07bb5ce4fff400d53df49f63d31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8f:55:8e:22:b8:cc:ff:3c:1d:dd:81:7a:d7: 65:82:f0:b8:74:01:51:e4:48:05:b6:a5:32:7f:08: c4:c6:8d:a6:fe:80:59:19:db:d7:46:6c:5c:d2:ab: f8:2d:b4:92:83:62:37:19:b1:c9:bc:58:73:e7:ec: 67:e6:1d:fb:d9:95:41:92:09:e9:70:92:40:56:07: cc:ce:b0:9e:88:33:6c:70:5d:4f:68:10:1c:e7:95: eb:92:55:6d:06:d6:a2:fc:80:93:7f:ff:08:f4:28: 76:57:04:d5:45:1b:c7:a5:1c:bd:0c:6a:e7:44:de: f1:70:30:34:f3:4c:ec:43:ad:36:5f:19:eb:ef:79: ae:81:a1:d1:44:2c:c2:13:67:31:0b:e2:04:37:a8: 2a:20:41:cd:fe:5a:93:c5:fd:a7:19:2c:26:d1:0d: ac:8f:7e:3a:af:d0:b4:4d:d3:61:0a:f3:63:92:65: 14:69:22:a7:f6:dc:ea:0e:27:24:88:6d:b1:00:c9: 76:30:b9:13:4c:eb:58:8e:99:b6:3a:72:de:1c:2b: f5:c6:33:62:96:93:49:a8:08:8b:b7:18:72:8e:24: c8:9d:92:13:38:dc:9b:d1:70:53:20:f1:cd:a1:a1: 27:43:d6:8f:22:98:19:ff:38:57:f0:3e:79:f2:7c: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:F0:2B:52:FD:07:BB:5C:E4:FF:F4:00:D5:3D:F4:9F:63:D3:1F X509v3 Authority Key Identifier: keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:38:6b:6e:95:0c:49:da:05:36:db:89:ef:36:d7:87:0d:88: 1d:36:0d:b6:8d:ef:15:f6:9f:78:b9:db:da:73:86:b2:31:ad: 62:8e:bf:c4:d6:19:46:c0:08:08:ed:25:bd:bf:8a:66:09:23: 06:92:8b:23:83:47:32:f5:3a:a0:54:29:35:13:39:df:57:a1: e8:2c:9f:4f:4c:e8:4b:ba:45:89:02:1e:c9:ad:29:de:0f:a9: c5:01:21:00:91:9f:83:6b:18:c3:a8:7a:78:de:ef:79:30:f1: d1:ab:a9:2e:aa:f8:d6:01:a0:af:3e:37:42:88:6e:ba:60:5e: b6:37:06:cf:74:f2:6a:e8:51:c0:91:69:06:44:e1:7b:fa:ad: 2d:4d:15:7d:39:e9:37:36:58:cf:3e:5c:f7:69:69:9a:95:31: 58:db:a9:b7:a4:2d:39:70:ce:d3:9f:3b:b6:10:dc:ab:79:52: 70:b7:7b:ea:eb:9d:64:3b:2b:98:45:e2:56:10:f6:d1:a4:da: e9:1b:94:70:bf:92:6d:18:41:87:8e:83:95:2c:68:de:27:16: b8:05:06:6f:ca:94:a0:c7:df:6c:9c:f2:7c:cb:29:6c:de:a4: 52:f8:5c:68:d0:cc:28:bd:b7:55:84:ea:c3:ba:49:5a:de:d1: 2e:41:0b:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9wDytHQQsRAgI5/pOnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk ZTUzYWYwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD EyhmY2ZjZjAyYjUyZmQwN2JiNWNlNGZmZjQwMGQ1M2RmNDlmNjNkMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy49VjiK4zP88Hd2BetdlgvC4dAFR 5EgFtqUyfwjExo2m/oBZGdvXRmxc0qv4LbSSg2I3GbHJvFhz5+xn5h372ZVBkgnp cJJAVgfMzrCeiDNscF1PaBAc55XrklVtBtai/ICTf/8I9Ch2VwTVRRvHpRy9DGrn RN7xcDA080zsQ602Xxnr73mugaHRRCzCE2cxC+IEN6gqIEHN/lqTxf2nGSwm0Q2s j346r9C0TdNhCvNjkmUUaSKn9tzqDickiG2xAMl2MLkTTOtYjpm2OnLeHCv1xjNi lpNJqAiLtxhyjiTInZITONyb0XBTIPHNoaEnQ9aPIpgZ/zhX8D558nxWLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPz88CtS/Qe7XOT/9ADVPfSfY9MfMB8GA1UdIwQY MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt MWIzZDk4YmVmMWU5LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5 LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDhrbpUM SdoFNtuJ7zbXhw2IHTYNto3vFfafeLnb2nOGsjGtYo6/xNYZRsAICO0lvb+KZgkj BpKLI4NHMvU6oFQpNRM531eh6CyfT0zoS7pFiQIeya0p3g+pxQEhAJGfg2sYw6h6 eN7veTDx0aupLqr41gGgrz43QohuumBetjcGz3TyauhRwJFpBkThe/qtLU0VfTnp NzZYzz5c92lpmpUxWNupt6QtOXDO0587thDcq3lScLd76uudZDsrmEXiVhD20aTa 6RuUcL+SbRhBh46DlSxo3icWuAUGb8qUoMffbJzyfMspbN6kUvhcaNDMKL23VYTq w7pJWt7RLkELiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:52:54 2025 by rpki-client