This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json) Hash identifier: sjfAgHxNUQMcA10Hra/vBnp2NQmyoURVRzAtSL54TGM= Subject key identifier: 6E:0E:39:4C:18:F7:67:09:B5:13:31:47:BB:74:40:EA:17:4E:B1:37 Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332 Certificate serial: 019B33B23F7091D4ED743ADD5CA8ED56308B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft Manifest number: 0B7D Signing time: Thu 18 Dec 2025 23:01:18 +0000 Manifest this update: Thu 18 Dec 2025 23:01:18 +0000 Manifest next update: Fri 19 Dec 2025 23:01:18 +0000 Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=) 2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: /Md/ccszpr2Qtvf0r62JlLgHDp0WLdRRk31XrHJjU+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:3f:70:91:d4:ed:74:3a:dd:5c:a8:ed:56:30:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332 Validity Not Before: Dec 18 23:01:18 2025 GMT Not After : Dec 19 23:01:18 2025 GMT Subject: CN=6e0e394c18f76709b5133147bb7440ea174eb137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:af:79:89:fb:44:8c:db:4b:73:a8:ff:1b: fa:52:a4:da:2e:6b:76:76:ef:24:94:e0:2b:62:cb: fd:4d:ef:08:ad:1d:49:b9:71:fe:bf:a4:cb:f7:10: 65:bd:1f:4f:77:92:66:b2:ed:fd:57:3f:73:bb:9d: 86:5f:4d:60:7f:b8:e8:6d:62:0e:0c:a5:3b:aa:c9: 42:80:e5:77:64:74:a0:5c:19:dd:1d:83:5c:3b:b6: 88:00:3a:97:75:2a:fb:cc:d2:0b:ed:4d:df:d5:f9: bc:dd:a1:4f:bb:ec:36:46:35:8c:94:66:c6:de:42: 16:68:d4:d8:e7:c1:eb:f1:20:05:a8:1e:32:af:3b: 33:2b:5c:d5:e0:7d:7a:7e:ec:4a:25:d6:94:12:90: 54:4b:f3:48:82:3f:95:0f:67:51:66:d6:2c:71:b3: c6:ab:83:f5:70:44:c5:18:ad:5c:82:ab:0c:13:9b: ec:12:54:90:9b:ed:d7:4a:74:c2:21:d0:3b:09:38: 7e:ad:ab:9f:57:65:a6:b9:eb:b2:42:a3:00:6b:11: ad:4b:ed:ef:f4:6e:f5:6b:b4:85:44:c4:aa:9e:2b: 61:33:80:08:ef:d6:58:29:6f:10:b5:c0:ad:43:de: 00:7d:b4:93:d3:99:89:ae:20:a5:1b:66:1d:cd:ed: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0E:39:4C:18:F7:67:09:B5:13:31:47:BB:74:40:EA:17:4E:B1:37 X509v3 Authority Key Identifier: keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3a:12:24:eb:d0:a9:b7:d9:ce:23:41:09:db:29:d5:f8:30: 4e:b6:e5:c0:90:38:2a:a3:6b:2f:ff:be:09:e9:b3:74:66:1e: f4:a2:29:eb:8c:a6:7c:4b:31:ca:85:ee:38:42:8b:c6:60:1d: 37:7f:fb:6a:a0:7c:39:da:e6:f4:9d:fd:fd:df:91:f0:d8:eb: ea:1d:e2:ab:b9:25:d0:22:bb:29:41:e6:c2:7c:e3:03:ad:c6: 57:7a:2f:67:e3:78:a5:c7:2b:28:a8:12:d3:28:e6:31:87:a6: 02:28:29:fe:41:5b:a9:e3:ff:bc:53:26:7c:06:c6:21:b6:6c: dc:25:3d:a3:71:82:af:e4:3f:08:d9:2b:4c:15:51:a8:f3:c2: 26:c6:36:1f:e8:b6:30:26:28:55:6c:5f:bb:39:51:d6:7c:bc: 3a:b3:7e:d1:5f:78:40:bd:a2:3a:5b:fc:77:9c:74:db:43:ff: 79:65:ed:26:45:2a:ef:8c:34:ba:67:43:22:14:57:f6:3a:b4: 43:a1:bf:f7:eb:e7:e5:98:15:9c:4b:8b:f8:2f:01:3f:14:ef: 5c:48:60:e7:40:42:fc:b5:d1:0e:b5:21:27:c8:6a:e4:5e:69: 8a:a9:3e:3c:ec:f2:d5:6a:0d:14:58:9d:0f:bb:5a:8f:9d:32: ee:55:fd:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsj9wkdTtdDrdXKjtVjCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODg4ZjA1MzA5OWZhYzNhNTU5ODY0NDdjYjNiMTAzODQ5 NWYzMzIwHhcNMjUxMjE4MjMwMTE4WhcNMjUxMjE5MjMwMTE4WjAzMTEwLwYDVQQD Eyg2ZTBlMzk0YzE4Zjc2NzA5YjUxMzMxNDdiYjc0NDBlYTE3NGViMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlmveYn7RIzbS3Oo/xv6UqTaLmt2 du8klOArYsv9Te8IrR1JuXH+v6TL9xBlvR9Pd5Jmsu39Vz9zu52GX01gf7jobWIO DKU7qslCgOV3ZHSgXBndHYNcO7aIADqXdSr7zNIL7U3f1fm83aFPu+w2RjWMlGbG 3kIWaNTY58Hr8SAFqB4yrzszK1zV4H16fuxKJdaUEpBUS/NIgj+VD2dRZtYscbPG q4P1cETFGK1cgqsME5vsElSQm+3XSnTCIdA7CTh+raufV2WmueuyQqMAaxGtS+3v 9G71a7SFRMSqnithM4AI79ZYKW8QtcCtQ94AfbST05mJriClG2Ydze0clQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4OOUwY92cJtRMxR7t0QOoXTrE3MB8GA1UdIwQY MBaAFLyIjwUwmfrDpVmGRHyzsQOElfMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEt YzdlMzM4ZmYzYjU5LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEtYzdlMzM4ZmYzYjU5 LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVToSJOvQ qbfZziNBCdsp1fgwTrblwJA4KqNrL/++CemzdGYe9KIp64ymfEsxyoXuOEKLxmAd N3/7aqB8Odrm9J39/d+R8Njr6h3iq7kl0CK7KUHmwnzjA63GV3ovZ+N4pccrKKgS 0yjmMYemAigp/kFbqeP/vFMmfAbGIbZs3CU9o3GCr+Q/CNkrTBVRqPPCJsY2H+i2 MCYoVWxfuzlR1ny8OrN+0V94QL2iOlv8d5x020P/eWXtJkUq74w0umdDIhRX9jq0 Q6G/9+vn5ZgVnEuL+C8BPxTvXEhg50BC/LXRDrUhJ8hq5F5piqk+POzy1WoNFFid D7taj50y7lX9Uw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:54 2025 by rpki-client