This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json) Hash identifier: Y4IU7E04kiasA1698QSZKakoN0E1JVzJlUTyJGJ/ip4= Subject key identifier: A4:FD:96:D1:7E:14:E5:DA:72:7D:25:95:57:1C:08:C5:68:1C:D4:9E Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b Certificate serial: 019B4136D0024BF151A566D9F03BA2D40EBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft Manifest number: 0C Signing time: Sun 21 Dec 2025 14:01:09 +0000 Manifest this update: Sun 21 Dec 2025 14:01:09 +0000 Manifest next update: Mon 22 Dec 2025 14:01:09 +0000 Files and hashes: 1: rANm87WqORmafEWHghrrK-0l72M.asa (hash: Fgz6vPciEn1J0Q0dP4IkhgZ0dZebnzwKhwY9olb/BWo=) 2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: h9Ns6O06VPMK1drbk7Z75DBvq7mxWqGRpqohrIadyGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:d0:02:4b:f1:51:a5:66:d9:f0:3b:a2:d4:0e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b Validity Not Before: Dec 21 14:01:09 2025 GMT Not After : Dec 22 14:01:09 2025 GMT Subject: CN=a4fd96d17e14e5da727d2595571c08c5681cd49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:3b:53:a4:ca:70:4c:ad:7f:99:37:f9:e9: 38:57:b2:e9:c2:be:3f:8f:f2:f5:01:b7:56:4b:db: 1f:be:14:0e:3c:71:24:33:f2:c6:b7:ed:7e:40:8f: bb:fa:eb:5d:3b:32:5a:39:20:fc:6e:c2:0c:27:fd: 10:fa:dd:47:55:7b:ff:a7:68:db:43:c2:94:ac:8c: 6e:2d:6a:03:9b:38:eb:12:62:03:d2:ec:68:e7:de: 0a:a3:64:70:15:3e:de:6d:f2:4a:92:d6:14:6d:d7: 26:cd:cf:7b:b0:85:5e:90:d5:6a:57:c6:24:4f:10: f7:05:e5:b6:5f:41:eb:6a:51:cd:3d:36:f0:d2:61: c0:59:27:16:49:d4:e4:ee:b7:6d:1b:35:8d:43:91: 92:13:00:6a:a6:ad:5f:b8:cf:5d:a2:f5:95:d0:4e: 60:93:5d:1f:ca:da:ae:a2:05:b0:4d:54:64:69:dc: 8b:79:0f:60:5b:ba:34:ce:8a:31:e5:4d:21:04:dd: 56:36:d4:b2:7c:80:d4:d2:e1:d8:0a:f3:53:2e:ab: be:34:d1:13:e8:d5:16:e2:db:ce:9c:45:02:b2:20: f2:3a:e5:3c:de:a4:0f:41:3b:bf:20:fb:d0:06:ab: b7:00:b3:6e:16:86:09:33:4f:12:c6:f7:3e:d1:18: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:96:D1:7E:14:E5:DA:72:7D:25:95:57:1C:08:C5:68:1C:D4:9E X509v3 Authority Key Identifier: keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9e:b1:21:dd:3f:a0:c3:4f:b2:59:e7:a0:21:70:85:76:ad: 8b:b5:3e:64:91:76:5e:14:e8:0e:df:42:76:65:ad:d0:1d:8a: f6:de:b6:fc:d3:e6:2b:5e:69:2f:49:9f:0b:a3:f3:f8:d4:c6: c6:56:43:b8:6f:92:b1:fb:27:57:67:c2:2c:d2:d4:41:76:8b: 70:07:b9:3b:4e:69:3a:0d:99:76:d3:e9:a4:13:ec:a4:57:8c: 27:93:84:dc:1e:d6:ce:af:a9:96:76:de:3a:07:3c:c1:7a:27: 2d:b9:64:70:38:9a:13:3d:19:a6:f0:7b:a3:95:90:9d:1a:d7: 43:03:aa:79:0c:5d:79:93:66:d9:ed:c4:8f:ee:5f:7f:57:a8: f2:87:26:61:0a:d7:0a:3b:05:5e:a2:2d:3a:93:79:f2:47:15: 85:d6:90:a5:5f:8e:83:a2:e7:6d:ef:f3:16:23:bb:e8:c3:1c: e4:d8:6b:72:c4:11:e2:7f:65:42:8f:3d:1e:be:1c:4d:0a:25: 51:a6:50:7c:cb:21:a9:60:50:de:d9:33:45:8f:70:7a:b6:76: 61:90:15:ea:73:8f:5e:bc:ae:62:40:e3:27:fb:2b:37:cd:21: c6:a3:3a:17:a7:44:6b:58:93:ac:ee:d9:c1:2e:24:bf:3a:a0: df:12:2b:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtACS/FRpWbZ8Dui1A67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDlkZjU3N2YwZWU0NDMxODhjMDI5MzIzNDU3YmJjNWEw ZWFkM2IwHhcNMjUxMjIxMTQwMTA5WhcNMjUxMjIyMTQwMTA5WjAzMTEwLwYDVQQD EyhhNGZkOTZkMTdlMTRlNWRhNzI3ZDI1OTU1NzFjMDhjNTY4MWNkNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbc7U6TKcEytf5k3+ek4V7Lpwr4/ j/L1AbdWS9sfvhQOPHEkM/LGt+1+QI+7+utdOzJaOSD8bsIMJ/0Q+t1HVXv/p2jb Q8KUrIxuLWoDmzjrEmID0uxo594Ko2RwFT7ebfJKktYUbdcmzc97sIVekNVqV8Yk TxD3BeW2X0HralHNPTbw0mHAWScWSdTk7rdtGzWNQ5GSEwBqpq1fuM9dovWV0E5g k10fytquogWwTVRkadyLeQ9gW7o0zoox5U0hBN1WNtSyfIDU0uHYCvNTLqu+NNET 6NUW4tvOnEUCsiDyOuU83qQPQTu/IPvQBqu3ALNuFoYJM08Sxvc+0RiLywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT9ltF+FOXacn0llVccCMVoHNSeMB8GA1UdIwQY MBaAFL9J31d/DuRDGIwCkyNFe7xaDq07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMt OThjMmEzYzU3Yjg4LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMtOThjMmEzYzU3Yjg4 LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp6xId0/ oMNPslnnoCFwhXati7U+ZJF2XhToDt9CdmWt0B2K9t62/NPmK15pL0mfC6Pz+NTG xlZDuG+SsfsnV2fCLNLUQXaLcAe5O05pOg2ZdtPppBPspFeMJ5OE3B7Wzq+plnbe Ogc8wXonLblkcDiaEz0ZpvB7o5WQnRrXQwOqeQxdeZNm2e3Ej+5ff1eo8ocmYQrX CjsFXqItOpN58kcVhdaQpV+Og6Lnbe/zFiO76MMc5NhrcsQR4n9lQo89Hr4cTQol UaZQfMshqWBQ3tkzRY9werZ2YZAV6nOPXryuYkDjJ/srN80hxqM6F6dEa1iTrO7Z wS4kvzqg3xIrFw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:16:10 2025 by rpki-client