This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json) Hash identifier: 9g7owZ54M2O7SumJujke35wePlCGro8XjSRfhaFRShw= Subject key identifier: 66:3D:57:7C:91:C2:9D:2E:3F:E6:8B:C9:79:97:F5:49:95:F7:C2:14 Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Certificate serial: 019B337B5019A7DA6D909504ED50E79F565A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 22:01:17 +0000 Manifest this update: Thu 18 Dec 2025 22:01:17 +0000 Manifest next update: Fri 19 Dec 2025 22:01:17 +0000 Files and hashes: 1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=) 2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: me/Az+aC4m3DtSdDhOB9pifcbixdEHHdmAMNJg9wlfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:50:19:a7:da:6d:90:95:04:ed:50:e7:9f:56:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Validity Not Before: Dec 18 22:01:17 2025 GMT Not After : Dec 19 22:01:17 2025 GMT Subject: CN=663d577c91c29d2e3fe68bc97997f54995f7c214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:84:d6:f1:29:b8:5c:4c:47:0d:b7:9d:16: 3d:5f:80:55:98:8a:33:82:1e:04:26:0f:ec:89:e8: 23:34:09:c6:e0:65:3f:73:22:64:9f:16:83:8f:e1: 5a:76:7e:c9:50:9a:b6:53:bd:47:d4:ee:cf:f3:b5: fb:44:78:34:f0:52:62:a5:1a:5b:b8:db:ef:57:44: 5e:1c:6b:b0:b4:7c:f0:aa:56:34:2a:04:e2:2f:28: cf:f4:4e:41:df:c8:b1:2c:e1:c7:2b:44:9c:93:0b: 76:19:cd:11:a6:11:d4:ec:98:1f:dd:16:94:c3:e8: eb:2d:c9:ba:f8:7f:99:e8:12:0e:40:c8:0f:5e:81: 04:91:a3:87:9b:77:36:e9:d9:41:f4:d8:f6:72:da: 7e:2c:d2:a3:e3:c5:73:89:01:3b:09:1c:7c:01:0b: bf:45:2f:2a:66:d8:2c:d7:39:56:11:2c:cc:9e:20: b0:0a:a1:a2:f4:23:38:c2:3b:01:a2:20:4c:20:24: 3a:90:45:e1:a9:7b:70:fa:c3:e7:47:d6:17:d6:fd: fd:58:f9:8a:d3:f8:c3:35:a2:9b:e0:a0:1d:3d:4a: 9f:d0:74:3b:a1:0b:2b:e0:b1:d1:c0:d4:29:9c:f1: 76:6c:e1:81:3a:1d:30:58:ff:25:af:9e:8a:8b:eb: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3D:57:7C:91:C2:9D:2E:3F:E6:8B:C9:79:97:F5:49:95:F7:C2:14 X509v3 Authority Key Identifier: keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ef:15:9f:79:94:80:0f:2b:aa:3e:e5:17:e7:a9:d6:bb:a5: f2:5a:82:d9:57:d2:83:24:ee:2a:72:8c:ce:15:c6:7f:54:ca: b4:6c:ac:ca:c0:39:1f:65:9c:3e:b0:68:69:31:0b:be:9f:d1: f4:0c:72:0c:e3:19:91:a3:b3:71:82:f3:9f:33:c9:8f:14:c7: 31:d3:2c:10:20:e9:ae:bd:7f:91:55:c4:da:1b:66:6d:1f:79: 9a:85:0f:56:70:fa:72:fb:86:f7:ec:8d:93:95:00:9f:a0:6a: 8c:a1:e9:cc:9c:c3:36:17:6c:57:12:73:1e:45:af:e5:8a:4f: 78:44:12:9f:68:57:c1:af:eb:72:f1:de:9f:d9:a3:bf:66:e4: 28:c8:61:8f:0e:76:10:05:ca:c1:ed:ba:d3:e6:0c:8c:63:8a: b8:c6:3d:c8:3c:2a:2b:de:02:ac:aa:0b:41:6d:79:a9:9b:7d: 2c:6b:94:ff:c7:d8:4d:59:fe:d0:ca:f7:14:9d:7d:9c:22:93: 22:07:d6:59:92:37:93:68:08:d7:cd:d3:6b:fc:7d:9c:bf:25: 04:87:e3:18:11:9a:77:bc:14:26:ef:e9:ab:b1:ef:f2:61:6e: 5c:b8:71:90:6c:b7:db:5d:a1:85:cc:9c:4a:d5:de:1b:8a:24: 3c:89:7b:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1AZp9ptkJUE7VDnn1ZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNWY4M2VlMDJiMTczNzQ4YmU1ZGUzYjNiOWMyNTMxNzk5 MjY4ZTgwHhcNMjUxMjE4MjIwMTE3WhcNMjUxMjE5MjIwMTE3WjAzMTEwLwYDVQQD Eyg2NjNkNTc3YzkxYzI5ZDJlM2ZlNjhiYzk3OTk3ZjU0OTk1ZjdjMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SuE1vEpuFxMRw23nRY9X4BVmIoz gh4EJg/siegjNAnG4GU/cyJknxaDj+Fadn7JUJq2U71H1O7P87X7RHg08FJipRpb uNvvV0ReHGuwtHzwqlY0KgTiLyjP9E5B38ixLOHHK0Sckwt2Gc0RphHU7Jgf3RaU w+jrLcm6+H+Z6BIOQMgPXoEEkaOHm3c26dlB9Nj2ctp+LNKj48VziQE7CRx8AQu/ RS8qZtgs1zlWESzMniCwCqGi9CM4wjsBoiBMICQ6kEXhqXtw+sPnR9YX1v39WPmK 0/jDNaKb4KAdPUqf0HQ7oQsr4LHRwNQpnPF2bOGBOh0wWP8lr56Ki+vpWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGY9V3yRwp0uP+aLyXmX9UmV98IUMB8GA1UdIwQY MBaAFG1fg+4CsXN0i+XeOzucJTF5kmjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzIt YjJlN2ZlZmY0MDJmLzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzItYjJlN2ZlZmY0MDJm LzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATe8Vn3mU gA8rqj7lF+ep1rul8lqC2VfSgyTuKnKMzhXGf1TKtGysysA5H2WcPrBoaTELvp/R 9AxyDOMZkaOzcYLznzPJjxTHMdMsECDprr1/kVXE2htmbR95moUPVnD6cvuG9+yN k5UAn6BqjKHpzJzDNhdsVxJzHkWv5YpPeEQSn2hXwa/rcvHen9mjv2bkKMhhjw52 EAXKwe260+YMjGOKuMY9yDwqK94CrKoLQW15qZt9LGuU/8fYTVn+0Mr3FJ19nCKT IgfWWZI3k2gI183Ta/x9nL8lBIfjGBGad7wUJu/pq7Hv8mFuXLhxkGy3212hhcyc StXeG4okPIl7gg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:21 2025 by rpki-client