This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft File: v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json) Hash identifier: HD5Shebv+NQIZLZMF7O9WFUnMAZ9dthfOR3K/0y+LuU= Subject key identifier: 23:5B:33:4C:39:CF:BC:75:2A:FC:57:03:06:87:56:4F:B1:03:98:5E Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 Certificate issuer: /CN=bfb548d85725104527f3be47976b674739ae2f13 Certificate serial: 019B3D230EC013922209692BAEFD5C51A96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 19:01:05 +0000 Manifest this update: Sat 20 Dec 2025 19:01:05 +0000 Manifest next update: Sun 21 Dec 2025 19:01:05 +0000 Files and hashes: 1: nI_8YGf_KIt8612GRNYpw062gLo.roa (hash: hhjvYhiG9KK3YdbRnKxZqPKderlpYCo7W5KoODn99Eg=) 2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: pC2CP9svulRGuSdvXq5s3spU1EB125zK5vxzwOJaEcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:0e:c0:13:92:22:09:69:2b:ae:fd:5c:51:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13 Validity Not Before: Dec 20 19:01:05 2025 GMT Not After : Dec 21 19:01:05 2025 GMT Subject: CN=235b334c39cfbc752afc57030687564fb103985e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:77:b9:28:3d:d7:c5:78:70:3e:68:2c:77: 57:62:83:5c:bc:a5:1c:c5:85:14:84:72:37:6c:6a: a6:76:14:01:d1:b0:f7:f2:82:cd:6b:1b:d9:2b:5c: d0:7d:ca:64:85:83:29:89:d1:1f:1a:cc:c9:21:a8: 54:95:1c:e9:bd:e6:04:59:b5:4a:14:c4:f9:0e:b9: e7:22:18:2b:9d:ac:46:86:fc:c1:d6:0b:aa:ab:cc: b8:95:ba:4e:27:76:cd:e0:e1:ce:7f:8a:17:97:2c: 82:5c:f6:e4:77:82:0e:fb:90:f8:11:c8:59:2c:04: af:ef:58:d1:9b:b8:6f:ab:63:fa:11:94:aa:ed:7a: b2:1c:4e:36:bf:10:c1:10:22:43:41:7d:5e:ad:03: b3:28:68:74:b8:b8:c7:d4:83:f7:c8:53:db:80:ff: 69:be:0d:7b:ac:94:20:f0:b1:85:c4:43:47:40:18: e0:66:53:84:da:2f:b7:4b:5f:68:7c:1f:39:09:11: 8d:62:a4:7a:bd:8e:e6:1a:60:0f:d5:8f:f1:81:ba: ec:61:8e:49:de:1f:07:2b:f7:f5:90:5c:aa:d0:45: 79:6b:21:15:8b:47:7f:74:7f:09:b9:1f:6d:4a:04: e0:f1:6d:f3:f7:d2:60:80:26:b6:fa:c6:ef:f1:11: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5B:33:4C:39:CF:BC:75:2A:FC:57:03:06:87:56:4F:B1:03:98:5E X509v3 Authority Key Identifier: keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ab:96:e3:76:d4:69:3b:4a:8e:01:d2:d9:d1:3a:2c:8d:7d: 39:02:fb:51:e9:ea:19:a4:6b:71:f1:93:48:2f:4c:e3:45:a8: e5:45:91:4b:62:05:6f:39:54:5e:b8:f3:96:ec:5d:5d:2c:ce: a7:2c:e9:a1:43:16:43:e8:9b:56:97:3a:bb:08:fb:e9:b9:dd: da:d0:88:e0:54:dd:36:3d:2f:0e:60:97:b5:01:6d:55:55:8b: 8c:31:ff:e8:fc:ba:a7:e2:0a:ea:73:75:84:6e:ce:15:89:e5: 97:3f:fb:41:1e:8f:c8:66:55:ce:91:cf:32:51:14:3e:a0:da: dc:d9:12:1a:e1:e1:10:58:ec:52:50:dd:12:c9:91:7d:21:9d: ab:90:3d:de:fa:70:a6:8d:90:ad:13:39:2c:8b:18:02:a0:19: ea:12:2f:38:ba:7f:cd:b8:73:04:03:09:cb:79:03:87:f6:b9: a0:88:7c:df:f5:77:76:7b:5d:05:4c:83:54:b1:b9:99:76:4a: f5:08:ac:d3:2c:b5:bc:94:75:2c:c3:9d:e8:7c:c0:5b:c7:2c: 9e:94:18:06:a7:6a:f4:15:b3:59:4a:ae:d3:b3:81:b9:a9:33: 14:ac:e6:6f:c9:f0:8a:fb:25:d7:3e:49:62:c1:16:f3:5d:c7: 26:a9:b9:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iw7AE5IiCWkrrv1cUaluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjU0OGQ4NTcyNTEwNDUyN2YzYmU0Nzk3NmI2NzQ3Mzlh ZTJmMTMwHhcNMjUxMjIwMTkwMTA1WhcNMjUxMjIxMTkwMTA1WjAzMTEwLwYDVQQD EygyMzViMzM0YzM5Y2ZiYzc1MmFmYzU3MDMwNjg3NTY0ZmIxMDM5ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg53uSg918V4cD5oLHdXYoNcvKUc xYUUhHI3bGqmdhQB0bD38oLNaxvZK1zQfcpkhYMpidEfGszJIahUlRzpveYEWbVK FMT5DrnnIhgrnaxGhvzB1guqq8y4lbpOJ3bN4OHOf4oXlyyCXPbkd4IO+5D4EchZ LASv71jRm7hvq2P6EZSq7XqyHE42vxDBECJDQX1erQOzKGh0uLjH1IP3yFPbgP9p vg17rJQg8LGFxENHQBjgZlOE2i+3S19ofB85CRGNYqR6vY7mGmAP1Y/xgbrsYY5J 3h8HK/f1kFyq0EV5ayEVi0d/dH8JuR9tSgTg8W3z99JggCa2+sbv8RE5HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNbM0w5z7x1KvxXAwaHVk+xA5heMB8GA1UdIwQY MBaAFL+1SNhXJRBFJ/O+R5drZ0c5ri8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzIt NzFjNDZjMTk5NjM2LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzItNzFjNDZjMTk5NjM2 LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMquW43bU aTtKjgHS2dE6LI19OQL7UenqGaRrcfGTSC9M40Wo5UWRS2IFbzlUXrjzluxdXSzO pyzpoUMWQ+ibVpc6uwj76bnd2tCI4FTdNj0vDmCXtQFtVVWLjDH/6Py6p+IK6nN1 hG7OFYnllz/7QR6PyGZVzpHPMlEUPqDa3NkSGuHhEFjsUlDdEsmRfSGdq5A93vpw po2QrRM5LIsYAqAZ6hIvOLp/zbhzBAMJy3kDh/a5oIh83/V3dntdBUyDVLG5mXZK 9Qis0yy1vJR1LMOd6HzAW8csnpQYBqdq9BWzWUqu07OBuakzFKzmb8nwivsl1z5J YsEW813HJqm5bg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:17 2025 by rpki-client