This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft File: v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json) Hash identifier: xSIztB0I+c0NiGqOC7IIWx2JnFOoOtVtGdJ4Ncpo7T4= Subject key identifier: 25:C5:5F:8A:1D:21:74:03:47:A4:BD:EE:F1:39:69:5C:2B:B5:64:B5 Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 Certificate issuer: /CN=bfb548d85725104527f3be47976b674739ae2f13 Certificate serial: 019B3F1130F55D57127455A6663AD791DF21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 04:00:49 +0000 Manifest this update: Sun 21 Dec 2025 04:00:49 +0000 Manifest next update: Mon 22 Dec 2025 04:00:49 +0000 Files and hashes: 1: nI_8YGf_KIt8612GRNYpw062gLo.roa (hash: hhjvYhiG9KK3YdbRnKxZqPKderlpYCo7W5KoODn99Eg=) 2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: Yz+dCs9XpfUpJV6chtP/j6prDJ4OIogeSDWAbxKf6kY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:30:f5:5d:57:12:74:55:a6:66:3a:d7:91:df:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13 Validity Not Before: Dec 21 04:00:49 2025 GMT Not After : Dec 22 04:00:49 2025 GMT Subject: CN=25c55f8a1d21740347a4bdeef139695c2bb564b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:f8:0c:b2:9a:96:8b:76:d3:f3:36:aa:09: 0f:9a:f9:9f:28:8b:6a:62:a4:4e:74:2c:53:ae:20: 85:fa:86:88:b7:59:8f:42:b2:6e:6d:b5:66:86:93: 40:d3:ea:f7:34:ef:5b:84:f0:f3:56:3a:47:8c:f2: ba:46:71:a5:0f:66:4c:c3:2c:b9:1f:d6:b1:6e:16: 7e:9a:02:9b:9b:6d:62:e2:36:0a:41:13:9d:9c:39: 3d:fa:89:45:96:82:77:47:bf:76:e9:a6:fe:8f:26: ba:db:09:90:d9:ce:3f:3f:0d:f5:24:e5:25:d2:5c: 32:b1:9d:e0:37:96:d4:dd:38:db:b2:fa:2d:57:22: 32:ca:4a:cb:1f:3c:77:d5:7a:04:5b:e6:d2:c9:df: 6c:ae:b7:1c:fe:91:1f:a9:dc:84:92:eb:9c:f7:c8: a3:69:46:99:f4:1d:0f:58:15:98:17:32:87:2d:f9: 97:c4:b1:71:cd:54:a6:5d:a3:b6:59:3f:ae:43:d0: 76:ec:43:2b:9e:0b:98:c5:ee:1c:53:95:64:8c:3d: 9f:29:63:d7:35:0b:cb:24:ea:78:2f:5c:3b:01:5d: 78:fb:a4:2d:04:f4:85:6e:75:41:26:56:88:0b:08: c1:4b:ac:65:ed:b7:07:a0:cf:5d:10:ab:fb:6e:5f: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:5F:8A:1D:21:74:03:47:A4:BD:EE:F1:39:69:5C:2B:B5:64:B5 X509v3 Authority Key Identifier: keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:cd:ed:91:fc:fa:df:ac:04:fa:99:1d:7a:1a:c8:44:19:4c: 7e:ff:bf:5b:ab:3f:44:41:bb:7a:9b:ff:b7:d1:ff:2b:20:ce: 1d:e7:ff:d6:a2:ec:a1:1b:7b:f5:3b:2b:2b:9f:7e:f3:ec:46: b4:f7:f4:62:71:af:e8:ef:b8:38:8c:1e:c5:32:36:ce:29:f5: 3e:00:93:7e:71:1f:85:9a:96:dc:81:82:69:19:6c:55:d7:03: 5f:d2:8d:eb:f7:e3:a2:5e:42:35:11:dd:07:b3:ff:1c:a3:08: f7:10:44:35:99:9a:b2:5e:92:ef:64:ab:12:01:70:83:bf:f5: 4d:d4:4e:cb:3a:2a:61:92:4e:18:dc:07:87:ef:1c:0a:77:83: 96:93:c3:b4:8a:9f:04:05:d7:70:eb:8b:15:51:1d:75:16:64: e5:14:35:32:d1:8f:7a:b6:51:d3:65:72:d3:d0:83:4e:c4:c7: f6:b6:f0:84:32:ad:ec:72:70:56:22:f8:62:0d:ce:04:c4:eb: 70:0e:a8:b2:35:3b:7a:c8:6f:0b:56:04:3e:d8:d4:cf:3b:3d: a4:c9:8f:3f:37:66:b0:a0:d7:53:a8:11:09:af:81:2e:b3:44: b2:c6:8e:91:18:fd:a7:6c:b0:79:06:e2:e0:86:a9:bc:46:e9: fc:b1:14:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETD1XVcSdFWmZjrXkd8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjU0OGQ4NTcyNTEwNDUyN2YzYmU0Nzk3NmI2NzQ3Mzlh ZTJmMTMwHhcNMjUxMjIxMDQwMDQ5WhcNMjUxMjIyMDQwMDQ5WjAzMTEwLwYDVQQD EygyNWM1NWY4YTFkMjE3NDAzNDdhNGJkZWVmMTM5Njk1YzJiYjU2NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27/4DLKalot20/M2qgkPmvmfKItq YqROdCxTriCF+oaIt1mPQrJubbVmhpNA0+r3NO9bhPDzVjpHjPK6RnGlD2ZMwyy5 H9axbhZ+mgKbm21i4jYKQROdnDk9+olFloJ3R7926ab+jya62wmQ2c4/Pw31JOUl 0lwysZ3gN5bU3TjbsvotVyIyykrLHzx31XoEW+bSyd9srrcc/pEfqdyEkuuc98ij aUaZ9B0PWBWYFzKHLfmXxLFxzVSmXaO2WT+uQ9B27EMrnguYxe4cU5VkjD2fKWPX NQvLJOp4L1w7AV14+6QtBPSFbnVBJlaICwjBS6xl7bcHoM9dEKv7bl/W0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXFX4odIXQDR6S97vE5aVwrtWS1MB8GA1UdIwQY MBaAFL+1SNhXJRBFJ/O+R5drZ0c5ri8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzIt NzFjNDZjMTk5NjM2LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzItNzFjNDZjMTk5NjM2 LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn83tkfz6 36wE+pkdehrIRBlMfv+/W6s/REG7epv/t9H/KyDOHef/1qLsoRt79TsrK59+8+xG tPf0YnGv6O+4OIwexTI2zin1PgCTfnEfhZqW3IGCaRlsVdcDX9KN6/fjol5CNRHd B7P/HKMI9xBENZmasl6S72SrEgFwg7/1TdROyzoqYZJOGNwHh+8cCneDlpPDtIqf BAXXcOuLFVEddRZk5RQ1MtGPerZR02Vy09CDTsTH9rbwhDKt7HJwViL4Yg3OBMTr cA6osjU7eshvC1YEPtjUzzs9pMmPPzdmsKDXU6gRCa+BLrNEssaOkRj9p2yweQbi 4IapvEbp/LEUWw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:33 2025 by rpki-client