This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json) Hash identifier: ihzsQYUS46GLucJOhCEtCV8UzsrCxeJ6uQH3jKPHq3U= Subject key identifier: A7:6F:0C:2D:64:37:7B:F6:F8:04:BF:E5:2E:2A:09:BC:6C:1D:67:3C Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2 Certificate serial: 019B48B8F5C5C19614778EFD0785C2745E98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 01:00:39 +0000 Manifest this update: Tue 23 Dec 2025 01:00:39 +0000 Manifest next update: Wed 24 Dec 2025 01:00:39 +0000 Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=) 2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: zxB1hsTrAK440Hvb+Y+BFhDA7OyxydrQ8rLkptHE2sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:f5:c5:c1:96:14:77:8e:fd:07:85:c2:74:5e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2 Validity Not Before: Dec 23 01:00:39 2025 GMT Not After : Dec 24 01:00:39 2025 GMT Subject: CN=a76f0c2d64377bf6f804bfe52e2a09bc6c1d673c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:34:3b:77:69:87:25:ce:8a:1c:d3:62:32: 5f:0e:95:cd:3f:ef:fb:35:6b:53:a0:29:4c:71:0c: 30:4d:4f:86:86:b8:86:c3:cc:bf:21:46:51:41:63: ea:ff:51:db:7c:b6:a9:13:1e:38:55:82:ef:b3:eb: 06:15:0c:9d:26:1d:a0:70:74:1d:6f:be:da:91:93: 02:27:e6:2f:16:f4:03:7c:37:f0:d1:d6:eb:85:3e: a6:7c:19:aa:20:fb:f8:0d:79:2d:ef:c7:e3:cc:5d: ac:d0:14:09:41:e1:43:17:a2:a8:7c:38:32:c8:f6: b9:fa:60:c8:ec:e6:be:cc:07:98:4c:a8:0d:51:34: e5:a6:24:a2:a3:21:7f:52:44:27:cf:ce:12:0d:30: 83:3c:8b:38:c9:81:05:f0:d6:6c:b6:c8:21:c4:69: b4:b7:83:62:ce:ce:ed:c2:83:13:21:f2:ed:5f:ac: de:e8:8f:73:2e:a4:0a:24:6f:09:13:15:cd:0c:e6: 5d:8d:42:21:92:95:9f:69:5b:cc:37:b6:97:3c:06: 3f:98:5f:49:eb:e7:d2:d4:e8:58:2a:db:61:e8:1d: 0c:9d:3e:7c:27:75:66:64:56:52:a9:52:7d:8e:72: 26:ba:30:ac:82:07:be:e7:22:e0:4b:e7:c0:74:39: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6F:0C:2D:64:37:7B:F6:F8:04:BF:E5:2E:2A:09:BC:6C:1D:67:3C X509v3 Authority Key Identifier: keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e1:e6:83:91:c9:cd:2e:87:30:2f:70:fc:1a:be:e6:4f:6e: 66:57:4b:b9:9d:c1:a9:9a:3d:04:87:d6:ea:b3:34:3f:98:55: 1a:88:7d:0d:93:2a:42:54:23:48:91:9d:bb:4e:d0:ab:d5:50: f3:f5:8b:f7:17:5d:e6:b1:83:61:03:49:59:72:7c:87:49:00: db:42:b7:5d:b0:45:bc:a3:f4:bd:aa:69:25:b6:95:6a:21:24: 12:d3:32:44:2d:0c:ae:5c:4b:b3:43:98:5c:cd:4f:7b:40:71: f0:cf:80:44:ff:33:78:4e:86:18:0a:20:69:ac:98:74:7a:f8: 63:bd:bf:e2:b2:41:37:97:bc:43:eb:59:c1:cb:e4:4d:d2:81: df:6f:f5:d6:9a:75:d5:3c:69:87:c2:81:eb:d7:16:dd:fa:e8: d3:da:b0:74:43:bc:14:4d:81:8f:79:d6:b4:82:b2:0f:59:32: a4:ee:8d:95:b7:af:3f:20:75:3f:50:5b:e6:3b:9e:b9:37:b7: 4e:e6:19:68:49:12:3e:8d:c5:12:bf:9f:25:64:c0:d4:39:4a: 94:3b:cf:e2:55:8e:9c:51:a9:b2:49:44:2c:51:49:bf:2c:78: fc:f4:4f:56:26:65:19:f3:06:eb:59:63:e4:02:ba:c5:9d:08: 1b:63:fc:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuPXFwZYUd479B4XCdF6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm MjIzZjIwHhcNMjUxMjIzMDEwMDM5WhcNMjUxMjI0MDEwMDM5WjAzMTEwLwYDVQQD EyhhNzZmMGMyZDY0Mzc3YmY2ZjgwNGJmZTUyZTJhMDliYzZjMWQ2NzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8w0O3dphyXOihzTYjJfDpXNP+/7 NWtToClMcQwwTU+GhriGw8y/IUZRQWPq/1HbfLapEx44VYLvs+sGFQydJh2gcHQd b77akZMCJ+YvFvQDfDfw0dbrhT6mfBmqIPv4DXkt78fjzF2s0BQJQeFDF6KofDgy yPa5+mDI7Oa+zAeYTKgNUTTlpiSioyF/UkQnz84SDTCDPIs4yYEF8NZstsghxGm0 t4Nizs7twoMTIfLtX6ze6I9zLqQKJG8JExXNDOZdjUIhkpWfaVvMN7aXPAY/mF9J 6+fS1OhYKtth6B0MnT58J3VmZFZSqVJ9jnImujCsgge+5yLgS+fAdDlC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdvDC1kN3v2+AS/5S4qCbxsHWc8MB8GA1UdIwQY MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4 LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+Hmg5HJ zS6HMC9w/Bq+5k9uZldLuZ3BqZo9BIfW6rM0P5hVGoh9DZMqQlQjSJGdu07Qq9VQ 8/WL9xdd5rGDYQNJWXJ8h0kA20K3XbBFvKP0vappJbaVaiEkEtMyRC0MrlxLs0OY XM1Pe0Bx8M+ARP8zeE6GGAogaayYdHr4Y72/4rJBN5e8Q+tZwcvkTdKB32/11pp1 1Txph8KB69cW3fro09qwdEO8FE2Bj3nWtIKyD1kypO6NlbevPyB1P1Bb5jueuTe3 TuYZaEkSPo3FEr+fJWTA1DlKlDvP4lWOnFGpsklELFFJvyx4/PRPViZlGfMG61lj 5AK6xZ0IG2P8Wg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:46:35 2025 by rpki-client