This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft File: vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json) Hash identifier: viBzllkGBp24Zwer5zhIzS9F0M77IJy71AfjpyvtpfU= Subject key identifier: 40:32:4D:77:4E:AB:3A:C2:EC:C2:8C:ED:8B:62:7A:5C:78:96:85:6F Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13 Certificate serial: 019B631DF42229D1F464F369EE8488BA5306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 04:01:06 +0000 Manifest this update: Sun 28 Dec 2025 04:01:06 +0000 Manifest next update: Mon 29 Dec 2025 04:01:06 +0000 Files and hashes: 1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=) 2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=) 3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=) 4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=) 5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=) 6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: ZXStBuSIgJ6ZPDujFukDGGQXfH9pa6UDK9wAkHH0A44=) 7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:f4:22:29:d1:f4:64:f3:69:ee:84:88:ba:53:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13 Validity Not Before: Dec 28 04:01:06 2025 GMT Not After : Dec 29 04:01:06 2025 GMT Subject: CN=40324d774eab3ac2ecc28ced8b627a5c7896856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:81:da:98:22:e6:7e:33:43:dc:ee:2d:8f: 9d:01:58:8b:a5:8a:fd:84:b1:7e:5a:38:36:64:41: f6:8f:f5:8a:f9:8e:e3:b0:6f:c6:da:a9:af:4b:9e: 19:b8:d8:53:25:fd:40:bf:fd:7a:f0:c5:dd:df:07: 41:94:d7:6e:3e:34:37:57:51:f5:ab:98:ba:a1:26: 51:0d:61:51:94:ef:7d:be:ac:ff:b5:29:cd:80:12: 05:06:95:fd:b9:04:7f:13:e0:dd:f7:86:89:3a:43: 02:18:2e:cf:3c:74:11:b1:66:72:eb:f5:f1:9c:c1: 86:f7:b8:a0:16:8f:90:a9:12:04:74:9b:c8:5b:ce: 50:ea:46:0d:75:97:bb:f9:cb:8e:4c:a7:5d:d1:78: 95:60:1f:8b:66:94:e0:85:73:70:0a:7e:48:9d:54: 80:4a:f8:c9:72:44:80:4b:01:d1:2a:52:5e:ae:fc: 1e:95:01:90:e9:8b:0d:d0:d2:b8:90:8f:fb:71:88: a3:39:59:ea:cc:22:9f:67:a9:a6:ea:45:26:88:10: 5f:4c:e0:94:30:d2:64:c3:9a:e9:81:d5:e8:53:eb: f3:e2:90:21:5b:28:e7:b5:6c:cb:9a:56:9e:11:8f: 1d:91:e6:a7:13:c0:e7:0c:4a:a7:08:ca:ce:93:36: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:32:4D:77:4E:AB:3A:C2:EC:C2:8C:ED:8B:62:7A:5C:78:96:85:6F X509v3 Authority Key Identifier: keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8b:f9:f1:f3:7f:aa:5e:78:1c:0e:f0:74:53:db:c3:bd:e6: a1:ca:c8:16:df:72:31:e2:f4:25:ad:37:bc:42:fd:f7:01:20: 97:f7:ba:e8:b1:a0:90:3e:47:ed:e9:ac:a8:86:cb:3d:b9:78: e5:52:d9:0e:34:9e:d9:a9:ae:2c:cb:4c:d8:5b:12:ff:dd:22: 4a:8c:fd:de:5f:0c:10:42:2e:83:31:a1:48:cc:96:bf:d7:d4: 9f:fb:66:a7:85:63:76:35:14:65:80:4f:42:7e:ea:0d:1f:6a: 61:08:ed:8b:e4:c9:10:34:63:c1:18:24:26:50:81:b5:ca:3b: d8:95:5b:54:f6:a2:14:15:40:16:39:0f:92:5b:45:63:7c:d2: d9:73:ba:58:d2:bd:e8:a5:f8:16:a3:18:ee:07:16:27:f5:ba: ae:1a:d1:9d:8d:f4:87:b9:3a:05:b5:76:83:69:0d:72:12:84: 8c:9d:e2:2a:79:c4:d8:7d:69:d3:4c:71:fd:2a:06:a4:a6:aa: 31:7d:77:63:ec:bc:09:54:45:98:bf:7c:6b:b5:1f:4c:d4:37: 80:f7:c2:74:25:87:56:6d:c1:6e:a1:98:fe:ab:9f:70:8a:8b: e2:26:21:d1:a5:75:e0:11:a8:43:0b:16:06:35:52:2f:79:eb: d1:30:a5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHfQiKdH0ZPNp7oSIulMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2U1OTA3MTFhZTdmY2IwMTZlZWI3Mzc2YjBhN2ZjNzY2 MWNiMTMwHhcNMjUxMjI4MDQwMTA2WhcNMjUxMjI5MDQwMTA2WjAzMTEwLwYDVQQD Eyg0MDMyNGQ3NzRlYWIzYWMyZWNjMjhjZWQ4YjYyN2E1Yzc4OTY4NTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXGB2pgi5n4zQ9zuLY+dAViLpYr9 hLF+Wjg2ZEH2j/WK+Y7jsG/G2qmvS54ZuNhTJf1Av/168MXd3wdBlNduPjQ3V1H1 q5i6oSZRDWFRlO99vqz/tSnNgBIFBpX9uQR/E+Dd94aJOkMCGC7PPHQRsWZy6/Xx nMGG97igFo+QqRIEdJvIW85Q6kYNdZe7+cuOTKdd0XiVYB+LZpTghXNwCn5InVSA SvjJckSASwHRKlJervwelQGQ6YsN0NK4kI/7cYijOVnqzCKfZ6mm6kUmiBBfTOCU MNJkw5rpgdXoU+vz4pAhWyjntWzLmlaeEY8dkeanE8DnDEqnCMrOkzZkMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAyTXdOqzrC7MKM7Ytielx4loVvMB8GA1UdIwQY MBaAFLzOWQcRrn/LAW7rc3awp/x2YcsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUt MDVkYjQ5N2FjNDU1LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUtMDVkYjQ5N2FjNDU1 LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYv58fN/ ql54HA7wdFPbw73mocrIFt9yMeL0Ja03vEL99wEgl/e66LGgkD5H7emsqIbLPbl4 5VLZDjSe2amuLMtM2FsS/90iSoz93l8MEEIugzGhSMyWv9fUn/tmp4VjdjUUZYBP Qn7qDR9qYQjti+TJEDRjwRgkJlCBtco72JVbVPaiFBVAFjkPkltFY3zS2XO6WNK9 6KX4FqMY7gcWJ/W6rhrRnY30h7k6BbV2g2kNchKEjJ3iKnnE2H1p00xx/SoGpKaq MX13Y+y8CVRFmL98a7UfTNQ3gPfCdCWHVm3BbqGY/qufcIqL4iYh0aV14BGoQwsW BjVSL3nr0TClhw== -----END CERTIFICATE-----Generated at Sun Dec 28 07:32:40 2025 by rpki-client