This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json) Hash identifier: XRbXTRyDeyhe3Sihxy+9Dsh+P5yNBbTGfwjjSiTCtRI= Subject key identifier: 4F:99:52:60:72:B6:74:2A:EF:1E:1C:1B:5F:C8:1B:A0:01:66:C8:50 Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08 Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08 Certificate serial: 019B3DC81CF240FE5C7158FC5F904FCE40CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft Manifest number: 028F Signing time: Sat 20 Dec 2025 22:01:23 +0000 Manifest this update: Sat 20 Dec 2025 22:01:23 +0000 Manifest next update: Sun 21 Dec 2025 22:01:23 +0000 Files and hashes: 1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: AjFdTsZ3OMQVi/6YwTYJxIoXX7Js8mgJWEXodj+aTOs=) 2: d3aJ-4s3b0XQhPZWIMC7alyfBOU.roa (hash: lUrFbjaMQOBwh3PKz+J4c1ZHgMiiHoAtuygvxP3srTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1c:f2:40:fe:5c:71:58:fc:5f:90:4f:ce:40:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08 Validity Not Before: Dec 20 22:01:23 2025 GMT Not After : Dec 21 22:01:23 2025 GMT Subject: CN=4f99526072b6742aef1e1c1b5fc81ba00166c850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:cd:eb:c9:6f:69:92:45:55:ea:60:c0:72: 5f:ea:9b:9c:bb:eb:a0:0e:c2:a7:03:0e:98:5a:5c: 6b:c6:83:16:9a:a7:23:f9:86:db:1d:66:33:33:44: 7c:a3:08:ef:c2:2d:15:d6:51:b2:0f:2e:f7:f1:02: 5c:dd:3c:f5:8c:b9:ba:f6:50:62:fe:9c:47:d0:0a: 90:46:11:2a:0d:4d:2f:59:d9:20:af:c8:90:4b:d4: 35:92:46:7a:bd:1a:3a:ce:6c:a8:b2:dd:4b:c6:c8: 17:a5:f3:9b:1c:5a:4f:c3:53:85:ac:ed:49:4d:bb: b8:e4:bc:ef:69:e2:5c:ec:0b:34:ee:1e:a1:2e:9b: 39:78:4e:70:fd:80:04:46:9e:72:b3:d2:79:8b:8a: 3e:2a:8a:07:c5:1b:c8:37:4a:f0:90:40:23:32:b4: 41:b7:71:3b:ff:3e:b2:36:31:72:41:a5:a0:2b:9a: 88:fb:3f:2b:07:63:c6:22:d0:4a:d0:15:4c:09:84: ad:5a:c2:14:fe:ab:25:4d:da:a3:e4:8f:29:0a:a6: e6:05:3c:68:3c:16:4a:4e:5b:2b:ed:94:a1:0f:e1: 25:3a:2d:d0:09:d2:a0:5f:31:09:60:19:54:17:1e: 84:db:e6:c1:d0:13:c7:c8:2b:f8:a2:35:bb:df:91: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:52:60:72:B6:74:2A:EF:1E:1C:1B:5F:C8:1B:A0:01:66:C8:50 X509v3 Authority Key Identifier: keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ab:a8:9b:88:ce:d8:07:64:75:6d:2b:62:e3:2e:e1:f3:f6: 39:21:6b:9b:4c:94:a7:86:80:d6:72:19:67:00:85:85:0d:eb: bd:da:6b:2a:9f:11:98:19:f8:9d:0c:49:52:c1:55:38:73:9e: ec:1f:3f:dd:87:d8:13:bf:1c:27:e6:2b:db:9d:be:cb:11:55: 74:62:05:06:e3:d0:cd:d0:0e:a6:d5:13:25:93:95:84:f9:e3: 47:d1:3c:e4:65:25:d9:3c:51:6f:52:4e:26:bf:79:b7:07:ba: 42:0a:06:38:28:01:34:57:ab:43:9a:a2:e8:28:64:fa:a1:a4: 9b:cb:d6:40:1d:3a:24:ff:5d:bf:5c:20:d2:7c:c6:e7:e6:d0: 76:85:8b:16:69:4b:5a:d6:7a:d1:18:b5:d5:66:ad:90:2a:d6: 9d:24:68:e4:a9:d0:80:9b:bb:ea:36:17:f2:9b:31:31:01:88: c1:f6:2e:74:2f:77:c1:af:bd:d1:bf:2a:68:f0:a0:9e:ce:45: 9d:99:4b:18:26:c0:54:8b:f0:cc:d1:63:29:78:5a:de:6d:c6: 4f:09:08:0b:1d:f5:09:de:88:00:bc:4d:62:e3:37:b9:82:27: 11:0d:cc:b0:74:2e:33:ad:8a:9b:92:ff:6d:22:20:83:a7:89: e3:98:bf:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBzyQP5ccVj8X5BPzkDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTU3ZDM5NmVkOTkyODQzZGFlZWY3YjljY2E3M2IwNDM5 NjZjMDgwHhcNMjUxMjIwMjIwMTIzWhcNMjUxMjIxMjIwMTIzWjAzMTEwLwYDVQQD Eyg0Zjk5NTI2MDcyYjY3NDJhZWYxZTFjMWI1ZmM4MWJhMDAxNjZjODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJTN68lvaZJFVepgwHJf6pucu+ug DsKnAw6YWlxrxoMWmqcj+YbbHWYzM0R8owjvwi0V1lGyDy738QJc3Tz1jLm69lBi /pxH0AqQRhEqDU0vWdkgr8iQS9Q1kkZ6vRo6zmyost1LxsgXpfObHFpPw1OFrO1J Tbu45LzvaeJc7As07h6hLps5eE5w/YAERp5ys9J5i4o+KooHxRvIN0rwkEAjMrRB t3E7/z6yNjFyQaWgK5qI+z8rB2PGItBK0BVMCYStWsIU/qslTdqj5I8pCqbmBTxo PBZKTlsr7ZShD+ElOi3QCdKgXzEJYBlUFx6E2+bB0BPHyCv4ojW735Gk6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+ZUmBytnQq7x4cG1/IG6ABZshQMB8GA1UdIwQY MBaAFPwVfTlu2ZKEPa7ve5zKc7BDlmwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjct YzBkY2NkYjdhOTA1LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjctYzBkY2NkYjdhOTA1 LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKuom4jO 2AdkdW0rYuMu4fP2OSFrm0yUp4aA1nIZZwCFhQ3rvdprKp8RmBn4nQxJUsFVOHOe 7B8/3YfYE78cJ+Yr252+yxFVdGIFBuPQzdAOptUTJZOVhPnjR9E85GUl2TxRb1JO Jr95twe6QgoGOCgBNFerQ5qi6Chk+qGkm8vWQB06JP9dv1wg0nzG5+bQdoWLFmlL WtZ60Ri11WatkCrWnSRo5KnQgJu76jYX8psxMQGIwfYudC93wa+90b8qaPCgns5F nZlLGCbAVIvwzNFjKXha3m3GTwkICx31Cd6IALxNYuM3uYInEQ3MsHQuM62Km5L/ bSIgg6eJ45i/0g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:14:55 2025 by rpki-client