This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json) Hash identifier: /+ut6sNTzj0ZZpG8aIZeK0oT+FJn0ZL7MJKd2+vYFSY= Subject key identifier: 6D:2C:9C:AE:BD:47:95:C2:65:3E:26:BF:6F:DA:3B:73:3F:F2:67:D5 Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29 Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29 Certificate serial: 019B5CE48EADD9AF6B5D1BCEE3236756D62B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft Manifest number: 17A1 Signing time: Fri 26 Dec 2025 23:00:41 +0000 Manifest this update: Fri 26 Dec 2025 23:00:41 +0000 Manifest next update: Sat 27 Dec 2025 23:00:41 +0000 Files and hashes: 1: I8tF4bSTVlY_zcxDyq3l5_8IsrA.roa (hash: 5MOyttbZDP6FZTfK0vRCCZXf2h18nz/X4xmp4raP59M=) 2: lQvYusY5Bl_PfdoUcvrPOL-wcCs.roa (hash: VFB6axYvb982LJ/mO7LbOHRpnlHtYSLfSLTa1NlOXm8=) 3: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: XPwpqKw2zVUY5exsO4GkvVflsTbKTvi+XzGDZx80nCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:8e:ad:d9:af:6b:5d:1b:ce:e3:23:67:56:d6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29 Validity Not Before: Dec 26 23:00:41 2025 GMT Not After : Dec 27 23:00:41 2025 GMT Subject: CN=6d2c9caebd4795c2653e26bf6fda3b733ff267d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:9b:93:2b:44:4f:9f:47:a0:ec:1c:4e:71: 17:b4:a7:5a:8b:04:c5:ab:11:13:7b:ef:24:d5:4f: 9a:47:89:38:c5:5c:47:a5:87:95:b9:9c:83:37:50: d3:ff:a7:48:22:dd:bb:7e:17:a4:63:76:84:78:d6: df:61:8f:21:79:63:57:c0:66:0e:d8:48:0d:4f:17: 9b:65:cb:b4:b1:f2:83:f7:d0:91:73:18:99:c9:99: c9:69:51:00:63:49:42:56:88:da:e3:4c:19:c5:c8: 0c:8b:ac:3f:17:ab:57:18:e5:b9:01:53:3e:2e:8f: be:de:17:03:71:f1:b1:99:9a:5a:99:17:45:ff:bf: b4:d2:2e:21:5b:6b:34:b3:d4:89:05:05:a1:2a:c2: 05:b9:d1:fa:bb:d7:22:7d:32:f9:5d:fd:44:00:a3: f6:ea:af:fd:34:11:b0:5e:c4:f8:8a:dc:85:38:06: 6d:80:a1:66:68:f2:4f:2d:57:05:08:dc:4d:6a:f9: be:8d:66:a4:7b:3b:74:79:4a:12:97:69:ed:e6:37: bb:fb:ce:86:2b:9e:47:c9:f6:68:71:7c:79:4c:e1: 18:f4:c3:c4:ef:78:e7:2f:fd:2b:07:d3:65:10:b2: cb:28:e3:c3:54:09:e5:1c:bb:95:1a:c9:04:d0:1b: 52:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:9C:AE:BD:47:95:C2:65:3E:26:BF:6F:DA:3B:73:3F:F2:67:D5 X509v3 Authority Key Identifier: keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a9:39:ec:e6:84:44:78:62:7b:9a:19:49:49:24:bb:8d:66: 37:62:f9:dd:fd:1d:2b:07:94:80:77:b1:a3:4a:4f:d5:43:6d: d5:68:18:6e:7a:8f:9d:33:83:38:22:71:37:e1:2d:47:d5:e2: 3e:b7:90:d7:0c:d8:3d:30:3c:80:27:4f:fd:2b:fe:34:6e:c5: cc:0e:32:7e:72:17:7d:ec:c6:d9:e0:54:ae:40:5f:64:3d:8b: 35:43:48:24:91:72:f1:17:91:82:a2:7b:75:56:42:20:60:a4: cc:bc:62:e1:f8:6e:23:f1:eb:50:1c:e5:49:03:46:5b:e4:df: 38:15:70:67:2a:38:7e:65:c9:36:4f:3e:c8:3b:c3:6c:65:88: b2:23:fb:d7:0e:da:4f:d2:7f:19:12:a1:f0:7e:21:87:95:53: db:d2:34:48:6d:ee:46:00:7a:24:16:40:86:89:77:be:f1:40: a2:06:ec:29:29:27:ed:22:95:c2:28:43:0e:db:34:f4:42:57: bd:b0:86:7d:e1:41:ba:0e:f8:ac:2d:20:e9:f4:a7:7c:e0:7a: 62:fe:ea:aa:26:f3:76:58:c4:28:dc:dc:99:29:7b:93:5b:7a: 52:25:b3:a7:9b:b5:a8:5a:12:2b:82:2b:e1:a5:f4:d9:5b:2f: 40:93:16:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5I6t2a9rXRvO4yNnVtYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi YWJjMjkwHhcNMjUxMjI2MjMwMDQxWhcNMjUxMjI3MjMwMDQxWjAzMTEwLwYDVQQD Eyg2ZDJjOWNhZWJkNDc5NWMyNjUzZTI2YmY2ZmRhM2I3MzNmZjI2N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaKbkytET59HoOwcTnEXtKdaiwTF qxETe+8k1U+aR4k4xVxHpYeVuZyDN1DT/6dIIt27fhekY3aEeNbfYY8heWNXwGYO 2EgNTxebZcu0sfKD99CRcxiZyZnJaVEAY0lCVoja40wZxcgMi6w/F6tXGOW5AVM+ Lo++3hcDcfGxmZpamRdF/7+00i4hW2s0s9SJBQWhKsIFudH6u9cifTL5Xf1EAKP2 6q/9NBGwXsT4ityFOAZtgKFmaPJPLVcFCNxNavm+jWakezt0eUoSl2nt5je7+86G K55HyfZocXx5TOEY9MPE73jnL/0rB9NlELLLKOPDVAnlHLuVGskE0BtSWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0snK69R5XCZT4mv2/aO3M/8mfVMB8GA1UdIwQY MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt Y2M0MWM0YTMxOThkLzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6k57OaE RHhie5oZSUkku41mN2L53f0dKweUgHexo0pP1UNt1WgYbnqPnTODOCJxN+EtR9Xi PreQ1wzYPTA8gCdP/Sv+NG7FzA4yfnIXfezG2eBUrkBfZD2LNUNIJJFy8ReRgqJ7 dVZCIGCkzLxi4fhuI/HrUBzlSQNGW+TfOBVwZyo4fmXJNk8+yDvDbGWIsiP71w7a T9J/GRKh8H4hh5VT29I0SG3uRgB6JBZAhol3vvFAogbsKSkn7SKVwihDDts09EJX vbCGfeFBug74rC0g6fSnfOB6Yv7qqibzdljEKNzcmSl7k1t6UiWzp5u1qFoSK4Ir 4aX02VsvQJMWlQ== -----END CERTIFICATE-----Generated at Sat Dec 27 00:45:28 2025 by rpki-client