This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json) Hash identifier: BAFThhrhWAvdppyFjxnyYAVAxRQ/+jAx76MMiKIxTqE= Subject key identifier: 66:EF:FA:99:41:09:F7:B7:6E:D4:54:0F:0A:5F:6D:8D:84:BA:BD:BB Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7 Certificate serial: 019B38A19B3E5E062B131CD7862A41E47955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 22:01:13 +0000 Manifest this update: Fri 19 Dec 2025 22:01:13 +0000 Manifest next update: Sat 20 Dec 2025 22:01:13 +0000 Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=) 2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: j7f95AtdSxNDwBMXm20C0umh5F6/MJcKOa5UDh6Am14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:9b:3e:5e:06:2b:13:1c:d7:86:2a:41:e4:79:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7 Validity Not Before: Dec 19 22:01:13 2025 GMT Not After : Dec 20 22:01:13 2025 GMT Subject: CN=66effa994109f7b76ed4540f0a5f6d8d84babdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:b0:33:b5:79:36:aa:08:26:09:67:e6:c5: 2b:4b:6f:c4:d2:bb:98:3e:0a:3d:c3:cf:94:f1:db: ba:96:bb:48:57:7c:17:05:90:05:0b:63:79:06:32: 80:ba:8c:a5:25:9b:08:51:2d:d5:ff:e2:e7:37:7f: ad:55:b6:c5:3d:a2:bb:a3:f9:17:fd:94:cd:3c:99: fb:86:81:3e:e4:98:02:8e:0d:98:06:10:32:2a:10: 8f:b2:4a:66:4d:3b:f4:74:b0:fd:7d:90:e3:0c:74: 51:f9:be:b1:54:05:cc:d3:01:2b:4c:82:df:9f:58: 35:17:02:6d:e9:ba:c3:c4:12:59:bb:e9:5b:33:1a: de:b4:1c:4f:d7:75:e3:13:42:22:f5:b9:a9:40:46: a5:63:5d:02:a3:3c:ca:b2:7a:c3:1c:c3:d2:45:a0: 15:06:fc:2b:41:ed:24:c1:f0:21:06:a8:3f:95:aa: 5e:36:47:ed:f7:f1:e9:34:13:7b:ad:58:74:5e:27: e9:7f:7f:e5:83:f5:c9:85:50:96:2b:04:16:ef:65: 41:94:51:b7:c7:88:f3:8b:ca:d0:7d:04:28:d1:58: dc:91:f7:e9:84:7d:fb:ed:7a:c9:b3:57:9b:1c:34: 71:16:78:61:59:50:85:0e:b2:60:ad:2a:1c:98:3b: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EF:FA:99:41:09:F7:B7:6E:D4:54:0F:0A:5F:6D:8D:84:BA:BD:BB X509v3 Authority Key Identifier: keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:00:94:f0:4a:24:9a:17:20:ad:b7:59:7c:f9:b4:35:e5:a6: b9:c2:3c:c1:a8:9c:c6:b5:d3:9e:0e:87:ba:65:d8:39:ea:1f: 7a:24:a0:52:ce:dc:c7:9b:01:84:39:07:2c:56:77:ab:f4:7f: 94:19:56:04:83:37:fc:f5:96:a7:60:fe:86:8e:f1:95:ea:55: 20:4f:b3:07:8f:df:f1:60:5f:1a:45:25:48:d8:06:07:63:48: 5c:3b:b6:8b:1e:09:9d:8d:e0:36:cf:92:0c:b8:7f:b2:b8:9c: b0:f1:c3:39:33:2e:78:a4:33:59:41:b4:56:70:81:36:c7:61: 46:ca:3f:fe:56:03:68:84:48:bf:14:97:7c:9d:c0:34:c4:30: b8:ec:9d:cc:bc:ee:c4:42:d4:b4:2a:0f:a0:13:e6:c2:dc:74: 6a:b6:f3:76:89:3b:63:49:ee:55:bc:dc:be:49:b7:aa:db:18: 59:59:3d:66:3b:72:62:3c:4a:05:76:0e:9e:e0:99:2a:e0:ce: b2:90:ee:0b:94:90:c3:bb:0e:2e:a6:04:f0:39:e9:bc:94:0a: 54:df:1f:99:10:de:0c:f8:6d:b0:9f:04:be:e4:9f:18:f8:a5: 30:59:c1:91:a7:e2:48:b0:0f:63:0e:ac:a0:31:ee:8d:86:7f: 4f:4a:05:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oZs+XgYrExzXhipB5HlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5 NDVhZTcwHhcNMjUxMjE5MjIwMTEzWhcNMjUxMjIwMjIwMTEzWjAzMTEwLwYDVQQD Eyg2NmVmZmE5OTQxMDlmN2I3NmVkNDU0MGYwYTVmNmQ4ZDg0YmFiZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokSwM7V5NqoIJgln5sUrS2/E0ruY Pgo9w8+U8du6lrtIV3wXBZAFC2N5BjKAuoylJZsIUS3V/+LnN3+tVbbFPaK7o/kX /ZTNPJn7hoE+5JgCjg2YBhAyKhCPskpmTTv0dLD9fZDjDHRR+b6xVAXM0wErTILf n1g1FwJt6brDxBJZu+lbMxretBxP13XjE0Ii9bmpQEalY10CozzKsnrDHMPSRaAV BvwrQe0kwfAhBqg/lapeNkft9/HpNBN7rVh0Xifpf3/lg/XJhVCWKwQW72VBlFG3 x4jzi8rQfQQo0VjckffphH377XrJs1ebHDRxFnhhWVCFDrJgrSocmDsXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbv+plBCfe3btRUDwpfbY2Eur27MB8GA1UdIwQY MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcACU8Eok mhcgrbdZfPm0NeWmucI8waicxrXTng6HumXYOeofeiSgUs7cx5sBhDkHLFZ3q/R/ lBlWBIM3/PWWp2D+ho7xlepVIE+zB4/f8WBfGkUlSNgGB2NIXDu2ix4JnY3gNs+S DLh/sricsPHDOTMueKQzWUG0VnCBNsdhRso//lYDaIRIvxSXfJ3ANMQwuOydzLzu xELUtCoPoBPmwtx0arbzdok7Y0nuVbzcvkm3qtsYWVk9ZjtyYjxKBXYOnuCZKuDO spDuC5SQw7sOLqYE8DnpvJQKVN8fmRDeDPhtsJ8EvuSfGPilMFnBkafiSLAPYw6s oDHujYZ/T0oFsg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:14:08 2025 by rpki-client