This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json) Hash identifier: OQht3ZNO2C5fh9C3cHdnkzpZFvWfkddRVZMv97jOBHg= Subject key identifier: 07:0D:B0:60:EB:98:6F:51:63:B3:C4:40:27:9C:AD:98:96:F9:79:7F Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Certificate serial: 019B3DC763534702F5777537201BBDDE1A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 22:00:35 +0000 Manifest this update: Sat 20 Dec 2025 22:00:35 +0000 Manifest next update: Sun 21 Dec 2025 22:00:35 +0000 Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=) 2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: 57hDj6gZkS+Fr8x1gkzInzlzHFrvKBRF+6uPGyvpFhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:63:53:47:02:f5:77:75:37:20:1b:bd:de:1a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Validity Not Before: Dec 20 22:00:35 2025 GMT Not After : Dec 21 22:00:35 2025 GMT Subject: CN=070db060eb986f5163b3c440279cad9896f9797f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:bb:9e:c4:15:34:15:93:25:a6:c2:c1:90: d8:31:d7:db:26:21:51:04:bc:80:a3:ee:ab:3f:2d: 16:92:c1:7e:29:d1:cf:52:d3:df:a0:90:9f:78:fa: ac:8e:c4:e1:0c:7b:45:ee:08:ac:2a:f1:60:54:fe: e1:ee:fd:3d:c7:d7:14:f5:86:36:ff:b0:3f:63:cc: ee:40:83:68:b1:88:af:52:cc:6c:45:c9:f2:e6:bf: c3:ab:db:d6:c9:fc:25:ba:47:26:08:b5:63:8a:8f: ed:16:4a:7c:bb:12:8b:81:c1:88:f2:56:50:4d:e5: 9a:d2:0d:9e:0c:9c:31:82:3e:2b:61:08:f8:1b:34: e3:8a:d9:51:8f:01:68:05:4e:02:3c:e5:53:ca:c8: 30:d9:97:41:64:2e:98:be:6b:2b:ae:eb:f9:c4:ee: c3:8c:a8:6f:58:71:e2:d0:9a:13:41:38:e6:0b:b0: 7b:3f:f9:82:ec:11:24:b3:4b:8f:5b:90:5f:d0:12: a6:a2:83:08:dd:56:05:68:8a:22:9c:6c:79:52:40: 65:62:07:64:6a:0f:34:db:56:12:c5:fa:59:9b:c8: fe:10:71:de:a0:ae:c6:4e:12:84:cb:07:a9:74:42: 44:35:9e:99:5d:a6:7d:8f:63:8d:6e:af:ac:1c:69: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:B0:60:EB:98:6F:51:63:B3:C4:40:27:9C:AD:98:96:F9:79:7F X509v3 Authority Key Identifier: keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8a:f5:f1:51:fc:fe:81:66:6f:c3:1a:f1:a5:2f:02:df:b9: ba:0c:c9:88:56:c7:ba:51:34:46:fe:c9:c7:64:c4:ab:4f:35: 43:5f:d6:3e:d7:92:60:e3:dc:fe:32:bd:ab:0f:72:f9:43:06: 4f:03:ba:69:73:a7:81:a3:bc:d4:96:3a:89:35:33:e8:69:bc: bf:29:5f:ea:50:de:80:a4:3b:cb:17:7b:1a:38:a3:1f:63:cb: 11:1b:39:20:18:44:c7:d7:39:19:0b:85:ce:1e:c3:ce:d4:13: c2:61:47:ad:98:e0:11:64:71:12:ba:9a:60:67:7b:0b:7e:57: 01:f9:1f:d3:19:ef:98:10:fa:80:aa:f7:93:f6:49:e3:25:a3: e3:af:ea:37:ea:5c:5f:3a:be:4a:98:35:eb:20:20:16:8f:4d: ac:38:43:41:59:91:ac:b4:40:eb:14:1c:6c:b6:e3:48:0e:d2: 43:6b:0f:f3:f1:d3:8f:67:db:59:5a:f3:7c:8f:e5:ce:15:f6: c3:d9:77:03:c2:8a:15:6b:00:f5:c8:b8:f3:0f:7c:77:c5:07: 2a:7b:5f:e8:17:f9:44:84:a3:73:2a:b6:20:13:8d:6a:26:56: 50:16:de:da:14:f8:1f:6c:43:00:d1:5f:d2:ed:d2:cd:8b:16: dd:ef:f7:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x2NTRwL1d3U3IBu93hpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy Y2UzYTkwHhcNMjUxMjIwMjIwMDM1WhcNMjUxMjIxMjIwMDM1WjAzMTEwLwYDVQQD EygwNzBkYjA2MGViOTg2ZjUxNjNiM2M0NDAyNzljYWQ5ODk2Zjk3OTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKW7nsQVNBWTJabCwZDYMdfbJiFR BLyAo+6rPy0WksF+KdHPUtPfoJCfePqsjsThDHtF7gisKvFgVP7h7v09x9cU9YY2 /7A/Y8zuQINosYivUsxsRcny5r/Dq9vWyfwlukcmCLVjio/tFkp8uxKLgcGI8lZQ TeWa0g2eDJwxgj4rYQj4GzTjitlRjwFoBU4CPOVTysgw2ZdBZC6Yvmsrruv5xO7D jKhvWHHi0JoTQTjmC7B7P/mC7BEks0uPW5Bf0BKmooMI3VYFaIoinGx5UkBlYgdk ag8021YSxfpZm8j+EHHeoK7GThKEywepdEJENZ6ZXaZ9j2ONbq+sHGkFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcNsGDrmG9RY7PEQCecrZiW+Xl/MB8GA1UdIwQY MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYr18VH8 /oFmb8Ma8aUvAt+5ugzJiFbHulE0Rv7Jx2TEq081Q1/WPteSYOPc/jK9qw9y+UMG TwO6aXOngaO81JY6iTUz6Gm8vylf6lDegKQ7yxd7GjijH2PLERs5IBhEx9c5GQuF zh7DztQTwmFHrZjgEWRxErqaYGd7C35XAfkf0xnvmBD6gKr3k/ZJ4yWj46/qN+pc Xzq+Spg16yAgFo9NrDhDQVmRrLRA6xQcbLbjSA7SQ2sP8/HTj2fbWVrzfI/lzhX2 w9l3A8KKFWsA9ci48w98d8UHKntf6Bf5RISjcyq2IBONaiZWUBbe2hT4H2xDANFf 0u3SzYsW3e/3Gw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:31:01 2025 by rpki-client