This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json) Hash identifier: QTaMf1QG98u5y/KXgfprxvOulMjyGcYWVLjyq23iZNk= Subject key identifier: 88:68:6F:AD:30:79:28:02:82:3E:01:E6:C0:E8:51:AC:03:F1:7D:F1 Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332 Certificate serial: 019B6BB3147F4C113FDD8A6FD68D98A82B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft Manifest number: 0B9A Signing time: Mon 29 Dec 2025 20:00:56 +0000 Manifest this update: Mon 29 Dec 2025 20:00:56 +0000 Manifest next update: Tue 30 Dec 2025 20:00:56 +0000 Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=) 2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: Xqhj5mExapwJ4XDTK536YOdp9+1cGK7sFf/XvbafqoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b3:14:7f:4c:11:3f:dd:8a:6f:d6:8d:98:a8:2b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332 Validity Not Before: Dec 29 20:00:56 2025 GMT Not After : Dec 30 20:00:56 2025 GMT Subject: CN=88686fad30792802823e01e6c0e851ac03f17df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:7b:06:89:b4:11:5b:96:1c:02:49:68:4e: 26:eb:6c:bd:de:cd:4d:35:de:11:73:06:93:ed:08: 4a:ad:d5:0d:f3:3d:b0:19:fa:a6:8b:01:c2:f0:8b: b9:fc:60:10:01:eb:3a:0f:4e:ea:c3:b5:0d:72:38: db:4a:6f:9b:7a:94:fc:67:f1:e2:83:d6:74:61:ec: 9f:a3:97:fe:3c:63:d9:8c:14:ba:48:e7:b4:ad:fb: 2a:91:de:f1:85:e4:52:16:a0:34:e2:c3:29:39:e1: 4c:7d:1e:34:b8:53:2b:54:b9:a8:1b:00:bf:11:92: 35:ec:f5:68:a2:34:ee:0b:88:3e:d3:cb:24:48:b2: b1:2a:28:7f:cd:a5:d7:5e:02:b2:50:25:fc:53:fe: 36:40:1e:b3:d2:4e:5a:0b:fb:89:28:91:d1:cd:4f: 66:2d:a6:92:fa:22:04:0c:51:f5:b4:a8:c9:0a:11: 5b:6b:eb:3c:b5:23:8c:c8:53:05:05:45:21:e7:61: 4c:19:e2:86:6f:41:15:3f:d1:d6:93:e9:63:23:84: e2:88:ef:78:8d:23:46:14:f0:ce:fa:62:34:c7:50: cf:33:2f:07:ce:ac:55:2c:7a:25:7e:94:40:0a:c4: 3b:0f:db:31:14:9f:1f:7a:5e:76:96:76:15:9d:9c: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:68:6F:AD:30:79:28:02:82:3E:01:E6:C0:E8:51:AC:03:F1:7D:F1 X509v3 Authority Key Identifier: keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:50:73:8c:5d:e9:42:ad:1e:ba:64:97:74:56:dc:54:21:ff: 52:f8:75:0d:5f:b9:46:c9:5c:c6:2e:80:15:80:31:8f:50:04: ed:89:9c:81:f1:e2:1a:80:85:a6:a4:6a:61:c2:15:03:49:5a: da:67:f3:6a:71:1c:e8:d8:6c:3e:38:0b:f9:b7:f7:ed:f1:9c: 13:10:de:5a:9b:d2:ed:37:2c:9d:9e:7c:d5:09:13:de:f8:d8: 57:eb:dd:01:85:10:e3:4d:cf:f2:77:04:db:62:83:5e:59:d8: c7:fc:d0:17:7a:fd:62:4b:fe:11:78:5e:61:c0:cb:1e:6e:2f: 0d:97:8b:5a:19:a2:e3:e3:20:0a:6e:c4:00:ee:f0:bc:16:8b: cc:64:61:2f:6c:fe:1a:87:23:53:99:19:79:49:83:05:a3:56: 97:86:c3:8b:a3:26:c4:b8:f8:ee:24:3c:3b:ad:20:2c:4a:10: ef:0d:16:59:b4:79:a9:9d:cf:08:03:1d:09:e4:18:78:f1:59: a0:3b:07:d4:47:eb:8f:66:c6:3c:63:09:00:32:c4:61:65:8e: a2:c2:39:a3:5b:f6:e1:6a:1a:40:b9:10:88:bb:96:4e:17:04: 8d:4a:b5:f9:e3:52:55:11:97:21:b7:23:10:d4:40:aa:3f:48: 82:50:73:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsxR/TBE/3Ypv1o2YqCt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODg4ZjA1MzA5OWZhYzNhNTU5ODY0NDdjYjNiMTAzODQ5 NWYzMzIwHhcNMjUxMjI5MjAwMDU2WhcNMjUxMjMwMjAwMDU2WjAzMTEwLwYDVQQD Eyg4ODY4NmZhZDMwNzkyODAyODIzZTAxZTZjMGU4NTFhYzAzZjE3ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzF7Bom0EVuWHAJJaE4m62y93s1N Nd4RcwaT7QhKrdUN8z2wGfqmiwHC8Iu5/GAQAes6D07qw7UNcjjbSm+bepT8Z/Hi g9Z0Yeyfo5f+PGPZjBS6SOe0rfsqkd7xheRSFqA04sMpOeFMfR40uFMrVLmoGwC/ EZI17PVoojTuC4g+08skSLKxKih/zaXXXgKyUCX8U/42QB6z0k5aC/uJKJHRzU9m LaaS+iIEDFH1tKjJChFba+s8tSOMyFMFBUUh52FMGeKGb0EVP9HWk+ljI4TiiO94 jSNGFPDO+mI0x1DPMy8HzqxVLHolfpRACsQ7D9sxFJ8fel52lnYVnZyybwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhob60weSgCgj4B5sDoUawD8X3xMB8GA1UdIwQY MBaAFLyIjwUwmfrDpVmGRHyzsQOElfMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEt YzdlMzM4ZmYzYjU5LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEtYzdlMzM4ZmYzYjU5 LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVBzjF3p Qq0eumSXdFbcVCH/Uvh1DV+5Rslcxi6AFYAxj1AE7YmcgfHiGoCFpqRqYcIVA0la 2mfzanEc6NhsPjgL+bf37fGcExDeWpvS7TcsnZ581QkT3vjYV+vdAYUQ403P8ncE 22KDXlnYx/zQF3r9Ykv+EXheYcDLHm4vDZeLWhmi4+MgCm7EAO7wvBaLzGRhL2z+ GocjU5kZeUmDBaNWl4bDi6MmxLj47iQ8O60gLEoQ7w0WWbR5qZ3PCAMdCeQYePFZ oDsH1Efrj2bGPGMJADLEYWWOosI5o1v24WoaQLkQiLuWThcEjUq1+eNSVRGXIbcj ENRAqj9IglBzzw== -----END CERTIFICATE-----Generated at Mon Dec 29 23:47:19 2025 by rpki-client