This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft File: pVz4nuVieX53WqTR0ffkX0Zqc8M.mft (raw, json) Hash identifier: jG8hnfDgtgjPyUfVS5Be3bq1PfLv+snZJZIAZQfH2Jo= Subject key identifier: CF:BB:73:55:CB:D7:E4:69:F3:C6:E4:27:82:E5:33:59:85:93:C4:BF Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Certificate serial: 019B3BD9AA94595CC58635DF1A780AAB3679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft Manifest number: 0BCC Signing time: Sat 20 Dec 2025 13:01:19 +0000 Manifest this update: Sat 20 Dec 2025 13:01:19 +0000 Manifest next update: Sun 21 Dec 2025 13:01:19 +0000 Files and hashes: 1: Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa (hash: ebLELH5oRyZKdj3cm3xGsR3F/jIoIGMnEcP8nrCpL+8=) 2: XgJMBh2hNxFsZKvQI54PTTXI760.roa (hash: UdEfAkLTD+qMIgaGI74a4ajbejj1YgoNe9s0PRF/Uus=) 3: cLGpimzWzwHzqIbopne7t52wISg.roa (hash: 9i9sbe7IcV9dEAByxfhmrcjdOqaaf18dgDnNY+xafnk=) 4: pVz4nuVieX53WqTR0ffkX0Zqc8M.crl (hash: R5n37oh+ClYqZ9hZ5wLdr4XDjtE8COILMISc2pNjko4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:aa:94:59:5c:c5:86:35:df:1a:78:0a:ab:36:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Validity Not Before: Dec 20 13:01:19 2025 GMT Not After : Dec 21 13:01:19 2025 GMT Subject: CN=cfbb7355cbd7e469f3c6e42782e533598593c4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:e3:4a:0c:3e:54:59:d9:63:4f:e9:d8:0d: 33:65:3c:0b:3a:67:bf:a0:38:6d:dc:7c:9f:38:f2: 69:c6:59:30:c1:18:54:5a:c8:af:65:f3:99:bb:d2: bf:88:4d:04:14:96:44:d4:64:ec:ba:36:f1:da:24: 72:45:80:65:99:0f:f5:cf:6f:d7:92:4c:a2:4d:d2: 19:e8:46:ff:b4:7d:d9:2c:42:75:4a:b3:97:b0:3d: d3:cd:a7:c6:9d:ec:c6:e0:d1:29:81:97:da:ee:71: 67:82:fc:c0:8a:d1:03:e4:0f:dc:51:ff:78:19:ba: 5c:19:3d:4f:68:81:4b:fb:38:2b:6b:b2:53:a2:05: 20:c9:75:09:f2:e6:31:b6:f7:5d:65:8a:bb:90:9f: 86:34:13:51:49:51:d1:40:dc:dd:87:5c:06:0b:97: 10:f5:6c:8f:14:9c:9a:e8:5f:d2:6a:7b:77:7c:6b: 72:4d:a2:4a:77:6d:7a:7c:61:19:b8:f3:5a:0e:f8: d9:f4:2b:75:dc:5c:1e:42:85:24:a5:20:1a:ce:10: 05:a5:92:ef:5e:49:82:94:44:6a:4e:1e:8e:f0:2d: c1:8f:77:bf:ed:64:d8:01:3a:c3:40:e7:99:f4:ad: 73:5b:fb:d1:ea:ba:65:a1:ca:77:4c:86:70:44:92: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BB:73:55:CB:D7:E4:69:F3:C6:E4:27:82:E5:33:59:85:93:C4:BF X509v3 Authority Key Identifier: keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b2:c5:e5:ca:02:cd:cd:cc:a2:46:1e:02:98:03:50:b2:f3: bb:0d:2e:aa:e8:35:e0:0a:58:32:38:d8:61:2a:41:b0:4e:24: 08:db:64:2c:b6:4d:ea:51:be:aa:23:9b:18:bc:b1:7d:83:a7: 0d:c0:6c:f5:eb:1d:29:4e:f2:9e:47:48:54:35:03:a4:d8:fe: 55:aa:f3:b5:32:d6:a0:55:eb:ed:ce:7c:e6:ca:8c:a8:75:6f: b3:97:a1:f2:85:b3:40:7b:2d:bc:6e:de:fe:99:d6:b5:e3:6f: 49:ad:b8:74:cb:cd:c7:71:ad:a9:fd:50:41:e1:f8:0a:14:e5: f7:d5:ce:90:10:64:19:c4:cd:78:54:3d:83:4e:f9:46:8d:0d: be:cf:05:b4:45:c4:61:36:f0:2f:97:9a:45:15:93:15:34:14: fa:71:ad:e4:83:97:3c:f9:d6:6b:9c:f1:3b:67:87:51:84:51: a8:73:8b:98:28:ab:09:8a:8e:3b:3a:ac:51:3b:80:d5:d7:ae: e5:cd:e6:42:fb:df:cb:c2:d7:e2:a3:a3:48:91:33:4e:1f:7c: db:f2:ae:70:93:d1:4f:38:86:e3:7b:44:38:93:9f:0b:2f:e3: ff:22:d2:ab:e0:31:d4:72:0a:6b:bd:cb:2d:a0:a5:4f:48:5e: 62:6f:4e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72aqUWVzFhjXfGngKqzZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2 YTczYzMwHhcNMjUxMjIwMTMwMTE5WhcNMjUxMjIxMTMwMTE5WjAzMTEwLwYDVQQD EyhjZmJiNzM1NWNiZDdlNDY5ZjNjNmU0Mjc4MmU1MzM1OTg1OTNjNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsPjSgw+VFnZY0/p2A0zZTwLOme/ oDht3HyfOPJpxlkwwRhUWsivZfOZu9K/iE0EFJZE1GTsujbx2iRyRYBlmQ/1z2/X kkyiTdIZ6Eb/tH3ZLEJ1SrOXsD3TzafGnezG4NEpgZfa7nFngvzAitED5A/cUf94 GbpcGT1PaIFL+zgra7JTogUgyXUJ8uYxtvddZYq7kJ+GNBNRSVHRQNzdh1wGC5cQ 9WyPFJya6F/Sant3fGtyTaJKd216fGEZuPNaDvjZ9Ct13FweQoUkpSAazhAFpZLv XkmClERqTh6O8C3Bj3e/7WTYATrDQOeZ9K1zW/vR6rplocp3TIZwRJLlKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+7c1XL1+Rp88bkJ4LlM1mFk8S/MB8GA1UdIwQY MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt YWJjYjFlNzU4MmIzLzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7LF5coC zc3MokYeApgDULLzuw0uqug14ApYMjjYYSpBsE4kCNtkLLZN6lG+qiObGLyxfYOn DcBs9esdKU7ynkdIVDUDpNj+VarztTLWoFXr7c585sqMqHVvs5eh8oWzQHstvG7e /pnWteNvSa24dMvNx3Gtqf1QQeH4ChTl99XOkBBkGcTNeFQ9g075Ro0Nvs8FtEXE YTbwL5eaRRWTFTQU+nGt5IOXPPnWa5zxO2eHUYRRqHOLmCirCYqOOzqsUTuA1deu 5c3mQvvfy8LX4qOjSJEzTh982/KucJPRTziG43tEOJOfCy/j/yLSq+Ax1HIKa73L LaClT0heYm9O2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:23:55 2025 by rpki-client