This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json) Hash identifier: U0AlE/CYDTdOH8ShzoaxC17Pm4CFXACchc0MQPjF9bw= Subject key identifier: 30:EB:6A:CF:B0:D5:5E:EB:9F:18:19:FD:06:0B:8C:06:D1:9B:BC:C6 Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c Certificate serial: 019B3D22B564F8AA73C3C9B0999FD7995149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 19:00:43 +0000 Manifest this update: Sat 20 Dec 2025 19:00:43 +0000 Manifest next update: Sun 21 Dec 2025 19:00:43 +0000 Files and hashes: 1: 0PxrjgmZQbJVDcH4mMDl7gGNKZc.roa (hash: bjnIOfIl4+9c19F8Gpi8S4s/MfRm6ysLGSGly8bkYvk=) 2: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (hash: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=) 3: fHkoAZxOrb4jS9uptQ9di3MomH4.roa (hash: OuL9G7DUjjtpe04g3KNS/iW0YgxTMwqsjJxCgrATRoE=) 4: gA1d2jY3nghc_kTFDgqzR_V4tPo.roa (hash: MVElriob5MX1tbQ4YiwNJ86SZ2jP9GGb5E+1TagXoxo=) 5: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: /d6EapopQ5Lwa/WSpmtn4W4l7P0bNFrTU2PDVfyuUuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:b5:64:f8:aa:73:c3:c9:b0:99:9f:d7:99:51:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c Validity Not Before: Dec 20 19:00:43 2025 GMT Not After : Dec 21 19:00:43 2025 GMT Subject: CN=30eb6acfb0d55eeb9f1819fd060b8c06d19bbcc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:7b:09:05:e5:55:c1:56:b4:f3:bf:27:35: 79:66:d5:f1:28:63:31:81:eb:6d:b8:0a:77:f3:b6: 71:12:52:67:c4:91:46:66:cc:18:d6:4d:53:63:e4: 3e:0d:03:34:54:ea:6d:07:96:d2:6f:fb:38:3d:e5: 07:d4:1c:db:12:d4:b3:12:85:f0:c2:23:32:1f:ce: 12:92:49:87:af:fa:bf:40:f5:46:d4:34:f7:5e:53: 51:e5:07:07:52:1d:ed:6f:f6:7f:f6:eb:0e:bd:28: 55:47:91:b7:86:fb:a6:c1:48:a9:70:09:dd:f5:83: f2:9d:ae:86:74:22:aa:d2:8f:57:bc:fd:9f:3f:9b: 9c:c7:55:f5:94:5d:79:cd:2f:14:00:4e:86:71:34: ea:02:af:ab:49:3e:4c:f7:fe:9a:2a:48:83:91:c0: 74:50:b5:10:84:ba:dc:3c:c9:88:a8:93:01:45:81: 79:0b:ca:05:a6:3d:eb:a1:41:42:23:49:3c:fe:5f: c5:75:c7:e7:48:c6:d9:7b:26:3a:b5:2d:c2:d7:24: 56:5a:58:d2:d7:54:b0:48:fc:23:58:c9:56:81:f1: 72:2c:6b:2c:8a:7d:a3:77:f3:81:e0:b4:2c:67:e3: e9:1e:9b:52:04:4a:0c:6d:a6:7c:18:60:49:a0:12: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EB:6A:CF:B0:D5:5E:EB:9F:18:19:FD:06:0B:8C:06:D1:9B:BC:C6 X509v3 Authority Key Identifier: keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a2:25:f4:13:7c:45:28:9a:39:44:12:0f:05:2e:ef:df:5c: 17:3d:d7:5a:12:c2:42:3c:34:84:11:ff:e1:c7:d4:11:e1:c4: fc:87:a4:ac:72:f1:e7:80:20:41:e1:14:c2:15:6c:23:da:ce: 96:85:c7:11:cc:2f:b5:ef:0d:55:8a:a5:88:78:64:2b:99:66: a3:a5:5a:89:c0:e7:ca:0c:a5:9f:5d:25:1d:54:33:2c:32:3b: 9b:0e:2f:fd:1f:ea:e9:09:77:fb:53:16:60:76:11:36:f7:59: 49:a9:0c:3a:a5:8e:5c:00:9a:77:4d:53:b4:79:d3:82:c7:55: 60:b2:19:dc:b7:bb:2d:27:c8:3a:72:d5:1a:95:63:55:61:c9: 23:44:63:4c:aa:62:2c:bd:af:c1:78:b5:8e:91:e3:74:4d:ca: c4:ae:b8:94:9a:48:43:43:f1:0c:b8:e7:65:6e:64:bb:89:b9: 8e:ab:7c:49:b6:a6:47:c7:c7:78:66:25:d0:e5:76:9b:fb:0d: 06:93:9f:56:ba:94:36:56:fb:d8:5e:78:ee:7b:93:45:08:42: f4:6d:ea:72:c4:88:a6:a8:7d:d8:4e:40:12:12:b4:6c:1c:f4: 3f:b2:d2:56:99:2e:fb:c0:44:31:9b:f9:d2:57:09:a2:89:65: 32:5c:81:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrVk+Kpzw8mwmZ/XmVFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh NzQzMWMwHhcNMjUxMjIwMTkwMDQzWhcNMjUxMjIxMTkwMDQzWjAzMTEwLwYDVQQD EygzMGViNmFjZmIwZDU1ZWViOWYxODE5ZmQwNjBiOGMwNmQxOWJiY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIl7CQXlVcFWtPO/JzV5ZtXxKGMx gettuAp387ZxElJnxJFGZswY1k1TY+Q+DQM0VOptB5bSb/s4PeUH1BzbEtSzEoXw wiMyH84SkkmHr/q/QPVG1DT3XlNR5QcHUh3tb/Z/9usOvShVR5G3hvumwUipcAnd 9YPyna6GdCKq0o9XvP2fP5ucx1X1lF15zS8UAE6GcTTqAq+rST5M9/6aKkiDkcB0 ULUQhLrcPMmIqJMBRYF5C8oFpj3roUFCI0k8/l/FdcfnSMbZeyY6tS3C1yRWWljS 11SwSPwjWMlWgfFyLGssin2jd/OB4LQsZ+PpHptSBEoMbaZ8GGBJoBI40wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDras+w1V7rnxgZ/QYLjAbRm7zGMB8GA1UdIwQY MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt NjE1YWNhNTFlMmY2LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2 LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaIl9BN8 RSiaOUQSDwUu799cFz3XWhLCQjw0hBH/4cfUEeHE/IekrHLx54AgQeEUwhVsI9rO loXHEcwvte8NVYqliHhkK5lmo6VaicDnygyln10lHVQzLDI7mw4v/R/q6Ql3+1MW YHYRNvdZSakMOqWOXACad01TtHnTgsdVYLIZ3Le7LSfIOnLVGpVjVWHJI0RjTKpi LL2vwXi1jpHjdE3KxK64lJpIQ0PxDLjnZW5ku4m5jqt8SbamR8fHeGYl0OV2m/sN BpOfVrqUNlb72F547nuTRQhC9G3qcsSIpqh92E5AEhK0bBz0P7LSVpku+8BEMZv5 0lcJoollMlyBBw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:29 2025 by rpki-client