This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json) Hash identifier: wyZAjLXX74qX2y5Tyc4U3KPKrqQmRlozuxYoVtBMReo= Subject key identifier: 3F:40:89:36:53:15:E1:04:ED:95:A1:94:37:CA:B8:6A:B9:44:6C:FD Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Certificate serial: 019AF208BCF572C0431C845F8F98BD7C039A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft Manifest number: 151F Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=) 2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=) 3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: dbgrBRpWGqO7LXe8rDDszS2bbuMApwB8REcEl5Xr4A8=) 4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=) 5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bc:f5:72:c0:43:1c:84:5f:8f:98:bd:7c:03:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=3f4089365315e104ed95a19437cab86ab9446cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:71:e1:62:24:4e:82:8e:91:9c:fd:76:db: c3:bf:4a:8b:81:22:f9:26:4b:f1:87:84:36:9e:04: 1d:e2:e6:31:26:3a:32:ca:32:75:0e:23:87:e4:35: 75:74:ed:1c:07:5d:9a:c2:e5:86:03:7f:ed:a0:2e: 59:e4:64:01:51:b5:c0:9c:ce:cc:77:44:e9:0e:e5: 7b:31:4d:19:68:8e:b4:c4:7a:4a:9a:24:0e:d9:62: 6e:3e:6d:84:89:ad:06:dc:13:a8:e1:c0:5f:f3:78: 71:c1:a3:65:8d:c4:09:14:de:51:56:f3:32:cf:b7: d9:72:94:dd:3a:5f:3c:0a:f6:23:8b:54:4c:c5:45: 34:b9:c1:31:f3:ef:c1:a8:ac:fc:ee:f3:65:e7:a4: 16:55:e0:85:d1:41:08:2f:e2:1b:be:52:c9:15:00: 00:41:6d:f0:bd:10:d2:cd:a0:ac:8b:29:6b:cc:11: 70:82:30:74:b4:6c:37:d2:4d:ce:49:13:10:8b:61: 9c:7f:1a:94:99:cf:b5:3e:6f:7c:0a:0b:10:f5:97: b8:62:1b:8e:e1:1f:25:fa:07:ce:0d:df:be:38:da: 2d:ab:fb:f3:5e:b6:3c:af:7e:dd:af:fe:05:4a:74: ee:6f:fa:2f:c0:17:b6:22:8a:61:4b:7a:8a:a2:40: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:40:89:36:53:15:E1:04:ED:95:A1:94:37:CA:B8:6A:B9:44:6C:FD X509v3 Authority Key Identifier: keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2a:6b:48:c7:e6:66:7c:cf:f4:2f:71:ac:58:bd:2e:e5:87: ba:c2:e1:59:39:b1:cc:74:67:f3:f1:cc:fb:c4:57:b5:af:a6: 13:fb:46:a1:b7:4f:d6:cb:fa:fd:2a:0b:44:cc:82:c8:20:98: d9:60:1e:90:4c:7f:a1:b6:55:8a:c9:90:bf:02:46:4d:59:fe: f7:fd:a2:b0:81:ca:e7:5e:e4:51:a5:d5:75:eb:d7:4f:98:65: 40:a3:93:f6:b3:a5:41:fa:c2:3f:95:e7:ec:92:cd:8a:dd:bb: 29:31:42:4a:33:ad:1b:34:a0:58:2c:98:20:5c:da:95:08:0d: 2a:1a:f2:cc:48:3f:d1:5d:54:8c:4d:dc:af:6d:0d:c8:14:6b: 0f:a6:ce:54:0f:f3:8f:e3:db:79:84:ed:16:8a:03:20:f5:63: 0f:9f:59:c5:5e:a3:7e:ab:8c:20:be:9d:33:4d:06:dd:d4:e2: e4:42:48:c3:eb:0c:24:45:1e:6e:24:ae:4a:5c:db:df:3e:8b: 6a:c9:81:f9:cb:01:a9:2b:f8:8a:8a:93:b0:81:94:21:4e:16: 4d:30:69:6b:dd:20:ca:11:0d:f6:5c:36:f1:a3:b7:d5:ca:87: c1:bc:3c:64:6d:67:55:3f:32:43:30:07:12:84:9c:dc:6b:6e: 3b:a3:ca:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLz1csBDHIRfj5i9fAOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh ZWYxZmYwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EygzZjQwODkzNjUzMTVlMTA0ZWQ5NWExOTQzN2NhYjg2YWI5NDQ2Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvZx4WIkToKOkZz9dtvDv0qLgSL5 Jkvxh4Q2ngQd4uYxJjoyyjJ1DiOH5DV1dO0cB12awuWGA3/toC5Z5GQBUbXAnM7M d0TpDuV7MU0ZaI60xHpKmiQO2WJuPm2Eia0G3BOo4cBf83hxwaNljcQJFN5RVvMy z7fZcpTdOl88CvYji1RMxUU0ucEx8+/BqKz87vNl56QWVeCF0UEIL+IbvlLJFQAA QW3wvRDSzaCsiylrzBFwgjB0tGw30k3OSRMQi2GcfxqUmc+1Pm98CgsQ9Ze4YhuO 4R8l+gfODd++ONotq/vzXrY8r37dr/4FSnTub/ovwBe2IophS3qKokChDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9AiTZTFeEE7ZWhlDfKuGq5RGz9MB8GA1UdIwQY MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciprSMfm ZnzP9C9xrFi9LuWHusLhWTmxzHRn8/HM+8RXta+mE/tGobdP1sv6/SoLRMyCyCCY 2WAekEx/obZVismQvwJGTVn+9/2isIHK517kUaXVdevXT5hlQKOT9rOlQfrCP5Xn 7JLNit27KTFCSjOtGzSgWCyYIFzalQgNKhryzEg/0V1UjE3cr20NyBRrD6bOVA/z j+PbeYTtFooDIPVjD59ZxV6jfquMIL6dM00G3dTi5EJIw+sMJEUebiSuSlzb3z6L asmB+csBqSv4ioqTsIGUIU4WTTBpa90gyhEN9lw28aO31cqHwbw8ZG1nVT8yQzAH EoSc3GtuO6PK1A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:46 2025 by rpki-client