This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json) Hash identifier: bPR3ihWnrJ59A+BIBSzVyzNPqXSK0vmWWsRLNhm03S4= Subject key identifier: C4:B7:E3:B6:19:E0:CC:6B:D8:A5:66:40:16:55:FD:B6:37:5A:92:10 Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f Certificate serial: 019B43CA0ED6DFEF2364A951B5B40FA42AE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 02:01:14 +0000 Manifest this update: Mon 22 Dec 2025 02:01:14 +0000 Manifest next update: Tue 23 Dec 2025 02:01:14 +0000 Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=) 2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: 0+t//y+qMbHDYYbjtAzydvvHFDCF1pUChuMxqjNnP4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:0e:d6:df:ef:23:64:a9:51:b5:b4:0f:a4:2a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f Validity Not Before: Dec 22 02:01:14 2025 GMT Not After : Dec 23 02:01:14 2025 GMT Subject: CN=c4b7e3b619e0cc6bd8a566401655fdb6375a9210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:ba:50:7e:78:16:5c:ac:9c:a1:c4:d8:d2: 49:48:a6:08:73:3b:1f:a6:14:d1:bd:a9:8e:7b:af: e0:6d:b3:9a:0f:a1:df:b0:b7:dd:4b:26:63:44:46: da:0c:f2:8b:3f:fd:d2:e5:4f:e8:be:ac:52:6d:75: d3:fc:d3:da:70:58:b9:24:df:c7:07:db:7a:f7:1e: df:b6:bb:87:65:6e:c6:ff:59:55:13:6f:8b:ce:be: bd:ed:35:4a:16:22:f7:09:e7:c4:29:25:83:50:0f: 74:79:0d:fb:8f:50:88:a3:ad:8b:6e:44:13:51:ec: ab:cb:c9:37:76:d4:fb:2e:83:8d:4a:0e:e7:66:26: d1:7f:60:f7:ce:04:b5:8a:2c:70:6c:90:0c:23:10: f6:3f:4d:c6:cd:9c:64:cc:8f:b0:62:73:ea:fc:8e: 08:19:8e:78:df:41:a5:6a:4a:f2:54:27:36:64:ba: 01:a7:20:b8:1b:94:1d:e3:54:56:b8:36:7b:c2:94: a4:d1:8d:20:d5:4e:95:ea:7d:0e:a7:ba:b9:e6:f4: 1a:36:58:f4:1e:12:73:3a:94:95:12:5c:d7:49:0e: 25:b2:85:0d:e3:4f:59:29:9d:7e:5a:94:1d:5b:0d: f1:05:63:17:ef:7f:e1:97:f6:3c:15:14:04:68:12: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:E3:B6:19:E0:CC:6B:D8:A5:66:40:16:55:FD:B6:37:5A:92:10 X509v3 Authority Key Identifier: keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e0:40:99:35:e0:a6:d7:b5:39:a7:c3:c1:d5:2e:75:d2:17: 8f:98:50:6f:6e:73:d4:92:c6:63:cc:67:f1:10:c9:8c:ab:03: 92:e4:dd:c4:05:3f:11:b6:02:dc:d1:22:6a:25:9b:fb:bd:be: 94:56:39:3d:f5:04:d8:6f:66:20:50:0f:3e:4b:7c:9b:6a:07: 37:de:b5:4d:4e:0d:a5:2c:65:4d:5a:81:37:5d:68:5a:8a:e0: cb:02:9e:8d:22:f3:b5:01:dd:e4:ec:6f:d9:a7:1f:b8:13:83: fd:31:a1:11:e2:0c:2e:00:f1:16:6a:93:31:c9:4f:da:3f:78: a2:e2:a0:e1:d6:65:f4:ab:f4:de:73:4b:b5:3b:12:e0:30:40: 2a:c3:c8:1e:b1:cc:c9:9e:1c:df:07:0f:12:51:af:05:cd:5d: c1:ac:3a:4e:40:ea:ce:57:d0:ba:bc:91:39:b4:36:02:05:86: 81:65:ef:00:2b:72:d0:1e:a5:5d:81:1a:49:5b:26:e2:76:13: 59:8c:14:2f:fc:7b:0c:b1:72:e6:a7:b7:a1:f6:ae:b0:ea:8e: 5f:73:05:ec:3c:b6:6c:c2:6a:22:22:e6:31:bc:db:1e:30:8f: ef:26:6c:66:7e:69:89:c9:c4:17:4c:fd:40:e7:fa:23:d6:6c: 47:0e:ef:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyg7W3+8jZKlRtbQPpCroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWQyMDkzNjYyNmI1NTc0M2M2NTk0NTEyZGU0MmVmOWY4 ZTkwNWYwHhcNMjUxMjIyMDIwMTE0WhcNMjUxMjIzMDIwMTE0WjAzMTEwLwYDVQQD EyhjNGI3ZTNiNjE5ZTBjYzZiZDhhNTY2NDAxNjU1ZmRiNjM3NWE5MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPi6UH54FlysnKHE2NJJSKYIczsf phTRvamOe6/gbbOaD6HfsLfdSyZjREbaDPKLP/3S5U/ovqxSbXXT/NPacFi5JN/H B9t69x7ftruHZW7G/1lVE2+Lzr697TVKFiL3CefEKSWDUA90eQ37j1CIo62LbkQT Ueyry8k3dtT7LoONSg7nZibRf2D3zgS1iixwbJAMIxD2P03GzZxkzI+wYnPq/I4I GY5430GlakryVCc2ZLoBpyC4G5Qd41RWuDZ7wpSk0Y0g1U6V6n0Op7q55vQaNlj0 HhJzOpSVElzXSQ4lsoUN409ZKZ1+WpQdWw3xBWMX73/hl/Y8FRQEaBIkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS347YZ4Mxr2KVmQBZV/bY3WpIQMB8GA1UdIwQY MBaAFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgt MWYxZGM1MmJiYjk4LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgtMWYxZGM1MmJiYjk4 LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuBAmTXg pte1OafDwdUuddIXj5hQb25z1JLGY8xn8RDJjKsDkuTdxAU/EbYC3NEiaiWb+72+ lFY5PfUE2G9mIFAPPkt8m2oHN961TU4NpSxlTVqBN11oWorgywKejSLztQHd5Oxv 2acfuBOD/TGhEeIMLgDxFmqTMclP2j94ouKg4dZl9Kv03nNLtTsS4DBAKsPIHrHM yZ4c3wcPElGvBc1dwaw6TkDqzlfQuryRObQ2AgWGgWXvACty0B6lXYEaSVsm4nYT WYwUL/x7DLFy5qe3ofausOqOX3MF7Dy2bMJqIiLmMbzbHjCP7yZsZn5picnEF0z9 QOf6I9ZsRw7v/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 07:18:52 2025 by rpki-client