This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json) Hash identifier: +q2PYpZkyYeVQpdBGTNuiR2e0C3van+zQdfaVkkUafo= Subject key identifier: E9:D2:05:B7:F3:5B:39:E3:A0:CD:34:71:FF:A5:1E:98:54:91:0F:09 Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3 Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3 Certificate serial: 019B3DFE7F5F44B4331B9B43004C8801A7AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 23:00:47 +0000 Manifest this update: Sat 20 Dec 2025 23:00:47 +0000 Manifest next update: Sun 21 Dec 2025 23:00:47 +0000 Files and hashes: 1: IVWLNAUIsWDuNfRfR17vH-v5XfI.roa (hash: OmbLmtXQG4MyTcSNnTCa+QZsFqNmOgdwU2G3Jors4PA=) 2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: yytH485Tx8qdobAZW7iOS/wR0xsIVvsx0tEVt/0bEeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:7f:5f:44:b4:33:1b:9b:43:00:4c:88:01:a7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3 Validity Not Before: Dec 20 23:00:47 2025 GMT Not After : Dec 21 23:00:47 2025 GMT Subject: CN=e9d205b7f35b39e3a0cd3471ffa51e9854910f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:b8:03:2d:10:00:c6:34:34:8a:f5:27:fd: 8d:e5:94:5e:8d:1c:d4:23:43:0d:61:88:b1:d1:ae: 07:6d:ae:f3:47:0e:6b:be:79:2f:23:aa:70:b6:b2: f4:76:fb:fa:36:48:e5:cc:14:52:ff:23:d3:5e:18: 89:0b:04:a0:fa:7f:ec:9b:87:5f:bb:59:bc:f7:8a: 99:7f:bf:ee:93:8c:fb:59:c3:9e:ee:ff:70:e9:85: 27:61:1c:59:89:8e:40:b8:78:97:db:e8:fa:aa:1a: ef:cf:28:5b:92:06:aa:a5:78:10:49:93:e9:07:f8: 2a:e0:cb:a9:63:61:42:47:83:31:7b:b4:11:1d:b1: ad:10:19:a5:d1:7e:c9:70:54:44:e6:18:34:65:2a: b6:ac:ad:34:6c:63:2f:b8:c0:a0:4e:a3:e5:6c:40: b1:85:9b:ff:aa:c4:5c:c3:24:8b:61:c9:b1:3d:38: b8:ac:e6:21:04:c5:55:4e:35:df:4d:23:93:92:26: b0:b3:bf:af:fa:94:7b:d3:85:b5:1c:db:fe:0f:20: 30:9d:74:4d:7a:57:a2:b6:34:ac:e6:a4:e2:0e:df: 9e:6a:23:6c:9f:c1:ca:39:ef:6c:9f:cf:f3:5a:c8: f3:bb:64:c5:fb:9f:d2:44:79:14:98:66:9d:48:6b: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:05:B7:F3:5B:39:E3:A0:CD:34:71:FF:A5:1E:98:54:91:0F:09 X509v3 Authority Key Identifier: keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0a:3e:97:d6:d7:ef:83:7d:4d:b1:29:78:b0:1c:7b:47:7a: f4:b4:20:fa:46:74:3d:4f:24:f5:73:d8:77:a9:cd:89:dd:49: 05:d8:fa:02:5e:95:83:b4:cc:1f:a3:f8:0e:ce:3c:94:ff:69: f8:28:a9:91:61:7c:81:9f:d7:06:14:03:cf:ca:e7:6a:93:b1: 39:41:05:44:16:86:9b:7c:c4:79:61:93:34:23:a9:e2:75:c1: c8:3a:7d:6d:b2:9a:d0:22:39:1d:ac:a8:e1:47:5b:33:55:e3: b3:45:f2:05:d5:f5:e5:22:01:a5:e0:88:0e:9b:a0:27:f7:f2: f7:ce:e1:e9:36:ae:95:0b:e7:5a:d8:04:c9:0b:77:7d:d4:3c: 6c:d1:8f:7a:bd:65:eb:96:ee:c3:eb:c1:22:68:eb:c2:3f:5c: d2:ff:5c:e0:46:3f:6c:54:27:4b:e0:0a:ca:e5:57:9c:f9:c6: e3:28:e3:5e:73:3a:e8:da:26:f7:8b:53:a8:54:c8:96:0c:5c: 0b:5f:e4:5c:d8:a9:94:cb:7e:3b:c0:83:e4:1c:47:11:c2:17: 5b:a2:e1:ba:6c:16:94:b9:e8:d8:d5:59:df:db:bf:6c:ee:ff: 77:b3:ad:0a:48:bf:2c:2e:62:a4:5c:e6:12:b2:d9:06:8b:9f: 9c:c7:c9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/n9fRLQzG5tDAEyIAaerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2Q1Y2FkNGQzMzA2YzRmNzJjNDJhZmMwNmU1Y2QxZmJh ZmUzYTMwHhcNMjUxMjIwMjMwMDQ3WhcNMjUxMjIxMjMwMDQ3WjAzMTEwLwYDVQQD EyhlOWQyMDViN2YzNWIzOWUzYTBjZDM0NzFmZmE1MWU5ODU0OTEwZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuK4Ay0QAMY0NIr1J/2N5ZRejRzU I0MNYYix0a4Hba7zRw5rvnkvI6pwtrL0dvv6NkjlzBRS/yPTXhiJCwSg+n/sm4df u1m894qZf7/uk4z7WcOe7v9w6YUnYRxZiY5AuHiX2+j6qhrvzyhbkgaqpXgQSZPp B/gq4MupY2FCR4Mxe7QRHbGtEBml0X7JcFRE5hg0ZSq2rK00bGMvuMCgTqPlbECx hZv/qsRcwySLYcmxPTi4rOYhBMVVTjXfTSOTkiaws7+v+pR704W1HNv+DyAwnXRN eleitjSs5qTiDt+eaiNsn8HKOe9sn8/zWsjzu2TF+5/SRHkUmGadSGvAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnSBbfzWznjoM00cf+lHphUkQ8JMB8GA1UdIwQY MBaAFG7NXK1NMwbE9yxCr8BuXNH7r+OjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgt NWZiYzIzMGFiZGMyLzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80OTY1MjUtMmMwZC00M2U0LTgxODgtNWZiYzIzMGFiZGMy LzEvYnMxY3JVMHpCc1QzTEVLdndHNWMwZnV2NDZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwo+l9bX 74N9TbEpeLAce0d69LQg+kZ0PU8k9XPYd6nNid1JBdj6Al6Vg7TMH6P4Ds48lP9p +CipkWF8gZ/XBhQDz8rnapOxOUEFRBaGm3zEeWGTNCOp4nXByDp9bbKa0CI5Hayo 4UdbM1Xjs0XyBdX15SIBpeCIDpugJ/fy987h6TaulQvnWtgEyQt3fdQ8bNGPer1l 65buw+vBImjrwj9c0v9c4EY/bFQnS+AKyuVXnPnG4yjjXnM66Nom94tTqFTIlgxc C1/kXNiplMt+O8CD5BxHEcIXW6LhumwWlLno2NVZ39u/bO7/d7OtCki/LC5ipFzm ErLZBoufnMfJWA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:20:15 2025 by rpki-client