This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft File: v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json) Hash identifier: v+2VW4ZFniuRwGV6Umraxo0tyzkH07kd9YxYZSmauA0= Subject key identifier: 66:2F:DE:F2:D6:3E:F2:59:0B:8A:8A:11:B2:69:D6:78:F7:91:6B:49 Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB Certificate issuer: /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Certificate serial: 019B3C7EAF2E1BE8719F0F81EDE4BDFFA3C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:01:33 +0000 Manifest this update: Sat 20 Dec 2025 16:01:33 +0000 Manifest next update: Sun 21 Dec 2025 16:01:33 +0000 Files and hashes: 1: a9grNvqYQZL96vSZgUaaUYW4pkM.roa (hash: UKQ9pbHuGJ7bkpOIdTsqFdrfM/n6bQ9BIxk/0hKXTX8=) 2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: hpl2ubFEZU1QMod1/ide7VfL27x+C4s5HH5CaArTAZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:af:2e:1b:e8:71:9f:0f:81:ed:e4:bd:ff:a3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Validity Not Before: Dec 20 16:01:33 2025 GMT Not After : Dec 21 16:01:33 2025 GMT Subject: CN=662fdef2d63ef2590b8a8a11b269d678f7916b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:14:7c:1c:3f:62:c6:39:bc:42:f0:5e:4b: 51:61:c3:b5:96:bb:9d:4f:81:58:9e:2a:ed:32:52: f8:b1:25:bd:ab:58:fb:c8:e4:8b:85:74:be:17:39: 9a:a6:45:37:44:b4:99:e8:3d:8a:d7:2b:ed:eb:b0: 85:ba:12:ed:da:9e:b6:7d:74:c8:c2:b3:31:97:f8: 30:04:e8:1e:1e:0d:94:88:dc:8a:7d:be:f6:99:2f: d9:98:68:34:0a:67:f1:58:01:06:32:3d:0e:15:4e: fd:a0:cd:89:9a:42:61:22:5b:1f:ae:11:2f:d9:ce: f8:7d:c7:d4:77:8b:d2:61:c2:a1:4b:09:2c:03:06: 9d:8c:35:e1:cc:98:35:11:09:96:21:25:7c:f3:0d: cf:a2:5e:55:ab:cb:e3:3e:6e:86:38:e7:f7:ab:6e: ec:d9:b7:6b:cb:0c:40:27:9a:d7:b9:cc:ec:d7:32: 6b:ea:cf:39:a9:d1:c7:20:c8:17:dc:da:b0:f0:a7: 02:6e:c5:68:6c:55:53:4b:17:a6:25:11:45:59:70: 15:c8:96:fa:c6:3a:72:6a:a2:5b:6b:ee:46:ac:a2: 1b:7f:8a:bf:cf:f0:32:42:e5:4c:c6:4d:f2:75:0c: 23:43:45:47:d7:cc:b3:6b:23:bf:12:4f:26:9d:e7: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:DE:F2:D6:3E:F2:59:0B:8A:8A:11:B2:69:D6:78:F7:91:6B:49 X509v3 Authority Key Identifier: keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:be:96:5c:6e:e4:38:f6:3e:09:b0:e7:e0:3a:14:f2:73:02: d3:05:74:3f:29:65:ac:e0:bc:5b:97:e8:90:59:af:74:10:fb: d9:c3:1a:d5:3d:f5:59:1a:97:71:b9:2e:9c:f0:5e:fb:10:94: 1f:3b:a4:6b:7a:e2:25:40:1c:98:81:2e:b4:29:bb:95:69:c4: 77:b8:de:e2:d5:78:8a:d9:6f:71:31:86:da:15:c2:61:99:4d: 1c:8d:f3:07:7e:b4:e6:5a:c2:8c:8b:09:f4:d2:62:da:1c:5e: 8a:e1:ed:c1:87:66:37:94:13:c0:c3:ca:92:1f:19:77:c6:34: 97:20:97:41:89:be:41:07:a8:8a:e4:f8:bd:0a:a7:fc:97:cf: 9f:ec:e5:56:81:71:68:7f:9b:cd:aa:e6:e4:39:2b:2c:b4:18: 1f:03:44:f3:6d:dd:14:31:f1:d1:71:7d:0b:1f:c9:b7:f9:af: 64:03:32:79:dc:49:a3:38:b4:95:57:97:e3:6b:66:09:fe:19: ec:c4:fd:9a:c7:40:71:a5:c4:e8:5e:64:71:12:0a:e6:b1:40: 7f:02:e0:8e:90:5e:49:f9:42:f0:39:c3:0f:39:0e:26:27:55: cf:3d:7f:c6:af:62:73:74:1c:39:23:a9:e1:0a:2e:b6:fa:12: f2:ad:73:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fq8uG+hxnw+B7eS9/6PEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTU3Y2MzZGIxODQwNDcwYzczYTA5NjA1ZDE4N2Q3YmQ5 NTk1Y2IwHhcNMjUxMjIwMTYwMTMzWhcNMjUxMjIxMTYwMTMzWjAzMTEwLwYDVQQD Eyg2NjJmZGVmMmQ2M2VmMjU5MGI4YThhMTFiMjY5ZDY3OGY3OTE2YjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhIUfBw/YsY5vELwXktRYcO1lrud T4FYnirtMlL4sSW9q1j7yOSLhXS+FzmapkU3RLSZ6D2K1yvt67CFuhLt2p62fXTI wrMxl/gwBOgeHg2UiNyKfb72mS/ZmGg0CmfxWAEGMj0OFU79oM2JmkJhIlsfrhEv 2c74fcfUd4vSYcKhSwksAwadjDXhzJg1EQmWISV88w3Pol5Vq8vjPm6GOOf3q27s 2bdrywxAJ5rXuczs1zJr6s85qdHHIMgX3Nqw8KcCbsVobFVTSxemJRFFWXAVyJb6 xjpyaqJba+5GrKIbf4q/z/AyQuVMxk3ydQwjQ0VH18yzayO/Ek8mnefRGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYv3vLWPvJZC4qKEbJp1nj3kWtJMB8GA1UdIwQY MBaAFL/lfMPbGEBHDHOglgXRh9e9lZXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEt MGEyNzVhNjc2M2NlLzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEtMGEyNzVhNjc2M2Nl LzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARL6WXG7k OPY+CbDn4DoU8nMC0wV0PyllrOC8W5fokFmvdBD72cMa1T31WRqXcbkunPBe+xCU Hzuka3riJUAcmIEutCm7lWnEd7je4tV4itlvcTGG2hXCYZlNHI3zB3605lrCjIsJ 9NJi2hxeiuHtwYdmN5QTwMPKkh8Zd8Y0lyCXQYm+QQeoiuT4vQqn/JfPn+zlVoFx aH+bzarm5DkrLLQYHwNE823dFDHx0XF9Cx/Jt/mvZAMyedxJozi0lVeX42tmCf4Z 7MT9msdAcaXE6F5kcRIK5rFAfwLgjpBeSflC8DnDDzkOJidVzz1/xq9ic3QcOSOp 4QoutvoS8q1z+w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:28 2025 by rpki-client