This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json) Hash identifier: EBzoGT9MvIxs0yvI6sieEa0masoOaTXWA2+sTNgJe7w= Subject key identifier: 09:B7:7F:D4:7F:9B:CC:FC:02:3E:70:EC:AF:7D:05:79:38:97:81:45 Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb Certificate serial: 019B3C7E112E7103953C297D0BE77CC50C9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:53 +0000 Manifest this update: Sat 20 Dec 2025 16:00:53 +0000 Manifest next update: Sun 21 Dec 2025 16:00:53 +0000 Files and hashes: 1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=) 2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: axPFCzmalomOuuDkyU3nNhfZs1dpQuE6Oj3JcKyEndU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:11:2e:71:03:95:3c:29:7d:0b:e7:7c:c5:0c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb Validity Not Before: Dec 20 16:00:53 2025 GMT Not After : Dec 21 16:00:53 2025 GMT Subject: CN=09b77fd47f9bccfc023e70ecaf7d057938978145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:36:79:c2:5a:18:4e:63:5b:0c:fe:57:03: f6:c6:ec:8c:8e:26:5a:6e:d7:bf:d1:55:46:a9:dd: b8:63:aa:00:54:75:76:cd:db:28:8f:e0:53:ad:2d: 20:b9:c1:7e:0f:2e:e1:ea:64:fd:2c:5d:5d:8f:97: 7f:23:4c:96:c5:66:53:ae:05:b8:f0:80:4d:f2:1f: 5e:ae:db:0a:da:c2:7e:40:ad:37:46:c1:79:a8:62: 22:54:70:65:d3:a9:4c:5f:d5:6f:3d:4b:18:aa:b2: fd:53:8b:ef:f1:5e:77:8f:fd:34:03:3f:a2:fb:2b: 00:23:d2:93:1b:0f:9b:e6:77:9c:cb:50:71:11:05: 40:e0:b0:b1:00:22:c0:2a:51:d2:d7:c4:d5:96:a5: ba:3c:cd:71:b6:49:07:c5:36:67:33:2f:85:6f:1c: a8:6c:68:f3:8e:55:7f:5a:3b:20:8e:18:cf:08:f5: a4:3b:00:0e:e8:11:50:96:68:94:08:cd:65:10:ba: 31:57:22:e2:1b:72:47:a0:f1:0d:ee:46:0c:84:bf: 86:a8:88:ef:4f:dd:12:e5:9d:dc:84:d2:16:eb:68: 39:25:80:4c:d6:20:9e:75:a0:0a:1f:c6:dd:c0:da: ea:93:0a:19:b3:dd:9b:6d:a9:41:87:47:b8:13:73: 43:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:7F:D4:7F:9B:CC:FC:02:3E:70:EC:AF:7D:05:79:38:97:81:45 X509v3 Authority Key Identifier: keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ee:14:62:00:25:c0:eb:0a:42:dc:61:ed:64:b1:5e:37:ca: 9b:ef:92:fa:af:ff:91:3a:07:18:6a:d0:83:3f:2a:96:c4:f4: 0b:f1:e6:59:5f:f1:2b:55:93:cc:8c:2f:f6:4e:e0:e1:a4:46: f7:57:07:9e:e8:8b:a3:cf:63:b5:97:e6:84:26:d3:0c:87:be: 93:c0:32:9c:29:eb:69:79:d7:6a:0f:3e:3e:a9:df:b6:b5:37: f1:ea:dc:ea:d9:0f:64:30:c8:70:91:f7:12:2e:07:7b:09:c1: 00:ad:fa:42:d4:c3:f0:f5:ff:9d:96:9a:d5:65:d8:e3:a4:5d: 08:38:b1:42:6d:9c:a8:ec:a7:e7:6b:62:63:2c:6d:35:d6:c8: 2e:66:ec:3b:90:ae:35:6c:65:6a:9b:19:74:b8:67:1e:93:2b: bf:fc:b0:18:bf:17:af:61:22:e3:56:93:a8:fc:8d:ab:62:9a: ed:02:d0:1b:cf:94:82:4d:9d:d6:78:34:22:17:a0:2a:01:61: d4:5a:ea:68:e6:9e:b7:b3:95:b8:9f:0a:e5:d1:82:36:25:03: d7:ff:c1:19:b4:f8:39:0a:d8:6c:79:59:ca:04:df:49:37:4e: 4d:7f:34:ff:5c:b3:d1:fd:61:3f:41:88:68:fd:39:c1:af:50: c0:66:9f:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhEucQOVPCl9C+d8xQydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZWJkNTRiZjA1YWE1MGVjZTljNTI2ZDBjZDU1ZGU2MmJk YjExZmIwHhcNMjUxMjIwMTYwMDUzWhcNMjUxMjIxMTYwMDUzWjAzMTEwLwYDVQQD EygwOWI3N2ZkNDdmOWJjY2ZjMDIzZTcwZWNhZjdkMDU3OTM4OTc4MTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVg2ecJaGE5jWwz+VwP2xuyMjiZa bte/0VVGqd24Y6oAVHV2zdsoj+BTrS0gucF+Dy7h6mT9LF1dj5d/I0yWxWZTrgW4 8IBN8h9ertsK2sJ+QK03RsF5qGIiVHBl06lMX9VvPUsYqrL9U4vv8V53j/00Az+i +ysAI9KTGw+b5necy1BxEQVA4LCxACLAKlHS18TVlqW6PM1xtkkHxTZnMy+Fbxyo bGjzjlV/WjsgjhjPCPWkOwAO6BFQlmiUCM1lELoxVyLiG3JHoPEN7kYMhL+GqIjv T90S5Z3chNIW62g5JYBM1iCedaAKH8bdwNrqkwoZs92bbalBh0e4E3NDEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm3f9R/m8z8Aj5w7K99BXk4l4FFMB8GA1UdIwQY MBaAFP/r1UvwWqUOzpxSbQzVXeYr2xH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85MTU5MmUtYWViZS00MmI2LTgwODIt NmZkNjdhOTJmMThmLzEvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85MTU5MmUtYWViZS00MmI2LTgwODItNmZkNjdhOTJmMThm LzEvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApO4UYgAl wOsKQtxh7WSxXjfKm++S+q//kToHGGrQgz8qlsT0C/HmWV/xK1WTzIwv9k7g4aRG 91cHnuiLo89jtZfmhCbTDIe+k8AynCnraXnXag8+PqnftrU38erc6tkPZDDIcJH3 Ei4HewnBAK36QtTD8PX/nZaa1WXY46RdCDixQm2cqOyn52tiYyxtNdbILmbsO5Cu NWxlapsZdLhnHpMrv/ywGL8Xr2Ei41aTqPyNq2Ka7QLQG8+Ugk2d1ng0IhegKgFh 1FrqaOaet7OVuJ8K5dGCNiUD1//BGbT4OQrYbHlZygTfSTdOTX80/1yz0f1hP0GI aP05wa9QwGafhA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:28 2025 by rpki-client