This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json) Hash identifier: 7DDvHSD8qKhpBuSZmnwkoLD2NGBNy0czDm/QeIWvTeI= Subject key identifier: 86:A6:31:A0:C4:09:87:B1:E3:72:DB:72:96:BB:21:54:70:0A:B9:48 Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Certificate serial: 019B4B4CE4AA0D42A7AAD36554FA93BEF3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft Manifest number: 0488 Signing time: Tue 23 Dec 2025 13:01:28 +0000 Manifest this update: Tue 23 Dec 2025 13:01:28 +0000 Manifest next update: Wed 24 Dec 2025 13:01:28 +0000 Files and hashes: 1: ELATsGohvpc6joSTJ_uIEE11SGA.roa (hash: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=) 2: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: caPMjS2sKGVITpD3/uG8ieRhxV2yA0PJ7hDHwykXjfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:e4:aa:0d:42:a7:aa:d3:65:54:fa:93:be:f3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57 Validity Not Before: Dec 23 13:01:28 2025 GMT Not After : Dec 24 13:01:28 2025 GMT Subject: CN=86a631a0c40987b1e372db7296bb2154700ab948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4f:b2:62:5b:98:3c:c8:69:c3:8f:17:df:aa: f5:a7:ed:03:70:61:58:69:51:76:5b:4d:51:d0:fb: 6b:83:c6:dc:0b:f6:52:ad:b4:44:84:37:84:32:2f: 9d:ff:b6:07:2e:e0:ed:81:48:d6:c5:c0:30:0d:58: fe:68:54:ef:32:bc:c6:d4:43:5b:d1:d9:b7:82:1d: dd:23:64:09:b2:df:86:ae:98:b1:e7:46:78:93:28: ae:11:12:bf:b2:07:6f:b5:32:87:ff:6e:67:7b:3d: 7d:38:39:10:91:fb:b0:a8:d3:70:ba:a4:82:b0:f6: 84:fa:8a:d9:c1:5e:25:81:92:e8:dc:77:f2:d9:a0: 81:35:ce:53:e0:37:71:b4:01:c3:19:61:75:a0:f8: d3:c7:70:11:55:3d:ac:02:53:8c:26:49:87:44:7a: e7:3d:77:f2:b8:f9:c9:78:a4:81:8c:44:96:f9:59: 42:0a:2a:d2:77:81:b7:6f:20:f2:d6:96:6c:32:db: bd:11:09:33:16:ae:a6:04:09:a8:eb:61:91:88:c6: 72:5d:27:b1:ea:d3:23:f3:32:82:b1:90:54:cf:0f: 91:20:64:eb:20:4e:91:47:12:4d:80:79:9e:69:0f: 21:60:f8:92:5f:8c:ea:93:1a:f5:23:3e:bd:c8:3d: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A6:31:A0:C4:09:87:B1:E3:72:DB:72:96:BB:21:54:70:0A:B9:48 X509v3 Authority Key Identifier: keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:47:24:0d:17:03:9d:18:cf:ac:18:0b:35:b6:0a:b0:66:1c: 89:ea:a6:70:a9:b5:bd:9b:7d:87:4e:93:2a:7a:bc:d9:89:0c: a1:19:40:ea:d0:00:44:e0:8f:1a:21:be:58:09:6d:fd:ae:af: 8c:63:92:fa:6a:6e:25:4f:a1:29:9f:1a:86:67:da:24:eb:d9: 97:27:c7:d4:d9:9f:0d:88:a7:d7:6c:60:7a:db:bd:c4:a1:fd: 7e:e2:6b:b1:25:10:10:c3:be:a5:ae:da:4a:4a:c4:cb:7f:7f: f5:dd:e4:be:89:ff:63:4f:c6:4f:af:91:bf:24:2d:e7:35:0d: 9b:c0:4b:82:61:92:01:03:8e:f7:aa:db:b4:25:b7:11:a9:9f: 8c:97:d4:07:8f:2e:92:49:8c:54:84:2f:5e:d8:56:d1:8c:69: 28:8d:45:ba:b1:ee:37:b4:65:db:6e:9a:aa:cc:bd:7c:7c:3b: 13:cc:1a:e9:fd:48:a9:0f:0c:7a:87:73:b7:bb:a1:18:6b:e9: 3a:4e:52:ad:9f:32:5b:44:df:12:23:98:55:e1:bc:f4:cf:e5: cf:bd:51:a2:39:eb:8e:fa:d5:30:f7:3f:18:1f:07:bf:af:5e: 9d:2f:ee:ad:89:06:67:f8:3b:7c:58:e4:9c:ee:fe:e8:7b:66: bf:7e:e4:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTOSqDUKnqtNlVPqTvvPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWUzNTZjZTgzOWY4ZDM5MzA2N2QxZjA5YjdkZDFjNTVh MDFlNTcwHhcNMjUxMjIzMTMwMTI4WhcNMjUxMjI0MTMwMTI4WjAzMTEwLwYDVQQD Eyg4NmE2MzFhMGM0MDk4N2IxZTM3MmRiNzI5NmJiMjE1NDcwMGFiOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E+yYluYPMhpw48X36r1p+0DcGFY aVF2W01R0Ptrg8bcC/ZSrbREhDeEMi+d/7YHLuDtgUjWxcAwDVj+aFTvMrzG1ENb 0dm3gh3dI2QJst+Grpix50Z4kyiuERK/sgdvtTKH/25nez19ODkQkfuwqNNwuqSC sPaE+orZwV4lgZLo3Hfy2aCBNc5T4DdxtAHDGWF1oPjTx3ARVT2sAlOMJkmHRHrn PXfyuPnJeKSBjESW+VlCCirSd4G3byDy1pZsMtu9EQkzFq6mBAmo62GRiMZyXSex 6tMj8zKCsZBUzw+RIGTrIE6RRxJNgHmeaQ8hYPiSX4zqkxr1Iz69yD2p2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIamMaDECYex43Lbcpa7IVRwCrlIMB8GA1UdIwQY MBaAFL9eNWzoOfjTkwZ9Hwm33RxVoB5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYt Yzk4ODAwOTBlM2M1LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYtYzk4ODAwOTBlM2M1 LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEckDRcD nRjPrBgLNbYKsGYcieqmcKm1vZt9h06TKnq82YkMoRlA6tAAROCPGiG+WAlt/a6v jGOS+mpuJU+hKZ8ahmfaJOvZlyfH1NmfDYin12xgetu9xKH9fuJrsSUQEMO+pa7a SkrEy39/9d3kvon/Y0/GT6+RvyQt5zUNm8BLgmGSAQOO96rbtCW3EamfjJfUB48u kkmMVIQvXthW0YxpKI1FurHuN7Rl226aqsy9fHw7E8wa6f1IqQ8Meodzt7uhGGvp Ok5SrZ8yW0TfEiOYVeG89M/lz71RojnrjvrVMPc/GB8Hv69enS/urYkGZ/g7fFjk nO7+6Htmv37k4Q== -----END CERTIFICATE-----Generated at Tue Dec 23 18:54:19 2025 by rpki-client