This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft File: v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json) Hash identifier: q38GiUaK1m8cO+WEpf01sTeMxcBXUfkJDGWObf4ovk4= Subject key identifier: 39:45:6B:39:B1:74:DA:B3:DB:46:56:23:6F:9F:DA:E1:B6:8A:26:1E Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB Certificate issuer: /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Certificate serial: 019B5788DBBD14CFAA1655ECEF46DB8B1B3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 22:02:25 +0000 Manifest this update: Thu 25 Dec 2025 22:02:25 +0000 Manifest next update: Fri 26 Dec 2025 22:02:25 +0000 Files and hashes: 1: a9grNvqYQZL96vSZgUaaUYW4pkM.roa (hash: UKQ9pbHuGJ7bkpOIdTsqFdrfM/n6bQ9BIxk/0hKXTX8=) 2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: LxR6JQIBLRcFWUvZIRKt3+7Lv96cEL4YQSWJVyZz0TY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 22:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:db:bd:14:cf:aa:16:55:ec:ef:46:db:8b:1b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Validity Not Before: Dec 25 22:02:25 2025 GMT Not After : Dec 26 22:02:25 2025 GMT Subject: CN=39456b39b174dab3db4656236f9fdae1b68a261e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:b2:a5:8a:e3:22:7e:55:40:a7:41:fa:50: 48:52:90:13:34:55:b5:cc:32:bc:2f:0d:c7:7a:11: 16:ac:db:8f:05:aa:83:46:3f:11:03:e3:8a:cf:54: 4e:9f:97:16:8c:66:86:9c:3f:d2:aa:4c:95:42:57: 6e:d0:45:64:0c:ca:ed:0e:32:ee:5a:e7:28:74:a8: 22:bd:67:7c:6f:15:6c:eb:79:a1:dc:21:e9:bf:9b: af:86:b7:e8:29:7a:dd:f5:15:76:57:d5:e2:dc:91: 32:69:16:c8:0c:9d:f4:01:64:e7:14:e8:bb:f9:9e: 72:fc:24:12:55:6f:de:c1:66:e1:bf:3f:bd:e6:4f: fc:5b:70:fe:bd:30:d7:d2:47:63:e9:6a:8f:e0:c5: 31:a7:8e:28:2d:6d:4b:d0:de:ec:26:0d:c6:03:9a: 11:ae:8f:f4:49:55:87:8a:d9:4b:84:37:54:60:52: 1b:98:eb:49:d7:54:d2:12:b8:5b:00:10:b3:62:6e: c9:bf:78:58:93:df:0a:6f:a7:28:36:e7:5b:e8:19: 96:c7:7c:51:2c:50:af:ac:7c:8c:28:b4:25:54:c8: 42:62:6c:c9:c2:26:f1:59:e3:af:65:a6:23:49:ef: f8:99:ae:a8:3d:ab:4c:c2:27:bd:d6:84:f9:43:85: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:45:6B:39:B1:74:DA:B3:DB:46:56:23:6F:9F:DA:E1:B6:8A:26:1E X509v3 Authority Key Identifier: keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:24:21:e2:d9:31:9f:b3:b0:c2:11:4f:a0:78:22:62:47:ea: 6d:5b:3b:52:74:14:e3:06:0f:1d:29:10:f3:ba:52:a2:a6:82: 46:26:49:cf:b9:f5:82:20:b2:c0:ba:85:6c:9e:95:5c:b5:47: 3f:78:6e:a2:ec:9c:8e:0f:58:aa:3b:69:35:3a:22:ec:e8:d0: d4:3f:a4:59:24:de:51:b1:31:16:29:3e:c8:03:d1:70:80:c6: 49:2d:0e:b6:96:eb:ed:d3:e5:27:04:7b:43:6b:d3:32:52:d2: 88:f2:6e:79:08:af:e2:49:64:a7:36:ed:14:0e:b8:a1:2e:de: b2:eb:90:82:e7:4f:89:ba:1d:1d:c1:8b:3c:0d:87:85:0d:e3: 9b:c5:92:fa:71:96:99:db:43:3f:f0:1d:ec:a2:f6:9f:35:3c: 2e:0c:1f:33:9e:75:eb:ff:47:b7:34:56:27:5c:aa:40:ee:44: 40:57:da:ec:f2:3c:90:67:39:cb:ae:67:aa:7c:70:52:4b:91: 18:b6:66:6a:a8:9c:03:5c:2c:c5:63:fd:ab:fe:1d:81:37:2e: 05:01:52:91:a5:03:92:fc:e5:96:f2:cf:ee:af:2e:90:04:d4: 21:4f:8e:3a:18:c2:57:a3:92:bb:e6:9f:13:36:ac:1b:50:09: d3:63:c4:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiNu9FM+qFlXs70bbixs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTU3Y2MzZGIxODQwNDcwYzczYTA5NjA1ZDE4N2Q3YmQ5 NTk1Y2IwHhcNMjUxMjI1MjIwMjI1WhcNMjUxMjI2MjIwMjI1WjAzMTEwLwYDVQQD EygzOTQ1NmIzOWIxNzRkYWIzZGI0NjU2MjM2ZjlmZGFlMWI2OGEyNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO+ypYrjIn5VQKdB+lBIUpATNFW1 zDK8Lw3HehEWrNuPBaqDRj8RA+OKz1ROn5cWjGaGnD/SqkyVQldu0EVkDMrtDjLu WucodKgivWd8bxVs63mh3CHpv5uvhrfoKXrd9RV2V9Xi3JEyaRbIDJ30AWTnFOi7 +Z5y/CQSVW/ewWbhvz+95k/8W3D+vTDX0kdj6WqP4MUxp44oLW1L0N7sJg3GA5oR ro/0SVWHitlLhDdUYFIbmOtJ11TSErhbABCzYm7Jv3hYk98Kb6coNudb6BmWx3xR LFCvrHyMKLQlVMhCYmzJwibxWeOvZaYjSe/4ma6oPatMwie91oT5Q4Xq7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlFazmxdNqz20ZWI2+f2uG2iiYeMB8GA1UdIwQY MBaAFL/lfMPbGEBHDHOglgXRh9e9lZXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEt MGEyNzVhNjc2M2NlLzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEtMGEyNzVhNjc2M2Nl LzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSQh4tkx n7OwwhFPoHgiYkfqbVs7UnQU4wYPHSkQ87pSoqaCRiZJz7n1giCywLqFbJ6VXLVH P3huouycjg9YqjtpNToi7OjQ1D+kWSTeUbExFik+yAPRcIDGSS0Otpbr7dPlJwR7 Q2vTMlLSiPJueQiv4klkpzbtFA64oS7esuuQgudPibodHcGLPA2HhQ3jm8WS+nGW mdtDP/Ad7KL2nzU8LgwfM5516/9HtzRWJ1yqQO5EQFfa7PI8kGc5y65nqnxwUkuR GLZmaqicA1wsxWP9q/4dgTcuBQFSkaUDkvzllvLP7q8ukATUIU+OOhjCV6OSu+af EzasG1AJ02PEfg== -----END CERTIFICATE-----Generated at Fri Dec 26 07:48:32 2025 by rpki-client