This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft File: vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json) Hash identifier: pU0CZMB7km0zW1BlE9VYDuyR/Pd+TmPSMnbozESoHWk= Subject key identifier: 3B:96:9D:C6:3A:62:53:FA:9F:89:D3:22:5D:48:FD:FD:DC:83:A8:50 Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Certificate serial: 019B601CD3930BC7BAE98DB70EF89271E8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft Manifest number: 101F Signing time: Sat 27 Dec 2025 14:01:00 +0000 Manifest this update: Sat 27 Dec 2025 14:01:00 +0000 Manifest next update: Sun 28 Dec 2025 14:01:00 +0000 Files and hashes: 1: h4LBRXlaL-oC3DBkosImeYIzlhM.roa (hash: fcJ0091j9gyLpmNM62v9sM4sdOjqt1S8YmfKAgde0r4=) 2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: h7LjRgbtzB99sboqLLHWHagxciaJ98BswBhPJ9W0ziY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:d3:93:0b:c7:ba:e9:8d:b7:0e:f8:92:71:e8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Validity Not Before: Dec 27 14:01:00 2025 GMT Not After : Dec 28 14:01:00 2025 GMT Subject: CN=3b969dc63a6253fa9f89d3225d48fdfddc83a850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:6e:07:05:f4:c1:81:a3:85:bd:b4:90:7b: bc:44:88:4d:35:1e:78:ef:8c:ed:85:f2:e4:80:45: 61:b9:73:94:ad:9f:4f:e0:2d:60:bc:7f:c2:bb:4f: b2:52:77:5e:ac:18:8d:fb:a5:89:c9:c8:6e:61:ca: 9d:c9:56:fb:38:b5:9c:1d:4d:fc:5d:6b:a0:ac:d3: e5:4d:87:fc:f7:05:f3:c4:cc:8e:c8:6e:04:f7:19: 36:a6:2d:12:55:a4:84:bf:5c:57:c1:e7:2d:be:cb: 70:a6:0e:ae:55:b4:6c:58:bb:6f:bf:b6:8f:a2:1c: 68:d4:4f:e8:d2:ec:5d:ed:df:20:c1:73:ce:fd:a8: a3:00:be:4e:57:a6:5f:57:58:26:78:e3:4e:b9:26: ae:a2:a1:01:2a:74:39:87:f5:69:d1:9a:1e:db:77: de:6a:07:fc:98:57:09:5e:94:37:f5:44:9b:6e:e4: 68:bf:de:21:07:39:3a:c2:45:ca:78:f1:5e:73:ef: 14:4d:d9:a7:4c:ba:e8:f9:b3:29:5d:fa:ef:9e:1c: 64:f3:1b:2c:1b:b5:05:92:0b:90:e6:f0:d2:ca:c2: 23:72:cc:a5:d6:cf:13:7a:07:21:7e:48:e9:b9:35: 26:38:b6:0c:d7:ed:32:e0:04:de:6f:f5:b0:be:ff: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:96:9D:C6:3A:62:53:FA:9F:89:D3:22:5D:48:FD:FD:DC:83:A8:50 X509v3 Authority Key Identifier: keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c8:35:1d:cd:89:a6:15:83:93:8a:97:1a:86:d3:9a:89:9a: 0f:1f:06:f0:78:66:4b:cc:36:29:9e:0c:62:cf:94:ec:94:a0: eb:60:65:f7:8f:d2:3b:9e:3b:d8:87:6b:f2:b4:0a:53:76:ff: 13:65:45:6a:f3:42:89:58:93:45:33:62:57:62:d8:80:0d:e8: 57:4d:bc:46:de:b2:90:c8:c7:54:81:c6:6b:e2:a2:9c:1a:8b: 9e:b6:4a:18:6b:ad:c7:52:d1:32:43:11:ed:22:00:9a:5f:05: 8d:68:ed:4d:d1:1f:bb:27:3d:04:a2:25:3a:0c:3d:92:92:4c: 62:23:af:90:93:77:c7:4b:d8:5c:b7:88:db:b9:7d:3c:ff:aa: 1d:a4:31:a6:5c:0d:28:2f:f7:69:fd:fe:07:3c:9a:1c:d8:60: 7c:da:d2:c5:1e:b5:ff:f8:51:b4:aa:e6:8d:16:1b:80:32:24: 54:69:cd:fe:a6:22:91:48:92:ee:ee:71:f0:f3:a2:59:7b:72: ca:a5:97:c6:c2:a8:4c:c7:ab:fd:05:20:61:85:fe:e5:cf:39: 8c:6e:97:31:1c:25:fd:68:4b:b0:a1:01:36:06:3b:4c:13:83: 52:92:79:a5:75:54:f3:66:41:f9:f9:a2:2b:40:69:97:fd:06: 1c:1e:21:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHNOTC8e66Y23DviScejPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWMxNmY1YmUzN2ZmNmM1ZDQyMDVmMmFiYTI1ZmNlMzU4 OTAzMzUwHhcNMjUxMjI3MTQwMTAwWhcNMjUxMjI4MTQwMTAwWjAzMTEwLwYDVQQD EygzYjk2OWRjNjNhNjI1M2ZhOWY4OWQzMjI1ZDQ4ZmRmZGRjODNhODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx75uBwX0wYGjhb20kHu8RIhNNR54 74zthfLkgEVhuXOUrZ9P4C1gvH/Cu0+yUnderBiN+6WJychuYcqdyVb7OLWcHU38 XWugrNPlTYf89wXzxMyOyG4E9xk2pi0SVaSEv1xXwectvstwpg6uVbRsWLtvv7aP ohxo1E/o0uxd7d8gwXPO/aijAL5OV6ZfV1gmeONOuSauoqEBKnQ5h/Vp0Zoe23fe agf8mFcJXpQ39USbbuRov94hBzk6wkXKePFec+8UTdmnTLro+bMpXfrvnhxk8xss G7UFkguQ5vDSysIjcsyl1s8TegchfkjpuTUmOLYM1+0y4ATeb/Wwvv8XowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuWncY6YlP6n4nTIl1I/f3cg6hQMB8GA1UdIwQY MBaAFLwcFvW+N/9sXUIF8quiX841iQM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYt YWJkNmYyYjM0MTBiLzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYtYWJkNmYyYjM0MTBi LzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScg1Hc2J phWDk4qXGobTmomaDx8G8HhmS8w2KZ4MYs+U7JSg62Bl94/SO5472Idr8rQKU3b/ E2VFavNCiViTRTNiV2LYgA3oV028Rt6ykMjHVIHGa+KinBqLnrZKGGutx1LRMkMR 7SIAml8FjWjtTdEfuyc9BKIlOgw9kpJMYiOvkJN3x0vYXLeI27l9PP+qHaQxplwN KC/3af3+BzyaHNhgfNrSxR61//hRtKrmjRYbgDIkVGnN/qYikUiS7u5x8POiWXty yqWXxsKoTMer/QUgYYX+5c85jG6XMRwl/WhLsKEBNgY7TBODUpJ5pXVU82ZB+fmi K0Bpl/0GHB4hQg== -----END CERTIFICATE-----Generated at Sat Dec 27 23:43:19 2025 by rpki-client