This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json) Hash identifier: WTpvLq31wxfa4RTKGIWQkJafPDYrQUF94QbJ2DpxGLU= Subject key identifier: 11:51:AE:E4:A6:56:43:5C:C5:0F:D5:1E:38:83:08:59:DC:DD:47:45 Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef Certificate serial: 019B3CB53F82A9DF6B8E691B8337A5F509CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft Manifest number: 12E5 Signing time: Sat 20 Dec 2025 17:01:09 +0000 Manifest this update: Sat 20 Dec 2025 17:01:09 +0000 Manifest next update: Sun 21 Dec 2025 17:01:09 +0000 Files and hashes: 1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=) 2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: fe67klh5btRSjft8xa8wqlv/5SQQ010/vvwRLIKlA98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3f:82:a9:df:6b:8e:69:1b:83:37:a5:f5:09:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef Validity Not Before: Dec 20 17:01:09 2025 GMT Not After : Dec 21 17:01:09 2025 GMT Subject: CN=1151aee4a656435cc50fd51e38830859dcdd4745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:17:1c:f5:58:32:75:3a:80:f0:4e:24:38: 9c:7d:da:e6:65:d3:e3:d0:c9:61:c5:34:cd:a1:e2: b2:f4:40:eb:4e:77:43:7d:d4:2c:b5:62:cc:d8:4b: fb:a9:07:ec:2f:28:f2:63:b5:bc:fe:f6:2d:de:df: 7d:f8:98:6a:47:d1:32:be:73:30:1b:28:3d:d5:fa: 1d:6f:be:db:b8:fa:ca:af:7b:02:b3:f2:20:51:fa: 40:45:e7:d3:03:2a:c6:30:dc:1a:08:a6:9a:88:dc: 81:82:aa:d6:6e:5e:ac:b9:7a:d0:d7:ab:03:dc:cb: 32:0a:80:2f:4f:84:d8:92:82:58:7f:c9:7f:c1:29: f8:1f:f1:b3:32:4b:15:1f:ed:a9:25:5f:65:fd:07: 40:6c:57:ec:ce:88:a9:89:58:7e:2c:b0:c3:79:0f: 33:d1:7d:ba:31:72:80:6e:8b:63:6e:fd:e0:1e:d6: ec:08:d3:13:a9:8b:b7:f0:b0:1e:c1:2b:42:ea:eb: 33:04:0d:72:04:f8:cb:b1:6f:ed:b3:60:00:c3:45: 43:b5:91:38:0d:d2:d3:ca:94:bd:14:eb:18:c6:c1: bb:cf:cd:d1:eb:d5:da:b3:75:69:5f:e8:c3:53:6b: dd:a5:89:fa:23:91:fd:71:fa:0d:55:2f:84:f1:29: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:AE:E4:A6:56:43:5C:C5:0F:D5:1E:38:83:08:59:DC:DD:47:45 X509v3 Authority Key Identifier: keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ad:c9:4c:3b:41:18:75:b8:4e:9f:06:c2:4d:aa:9b:e1:c1: 42:c9:70:ec:3e:b3:6a:bd:cb:1a:2e:85:54:01:95:b1:44:6c: 8f:39:19:29:36:d4:dd:9d:8a:8f:e8:42:5a:0a:93:54:5c:c3: 4b:b5:01:92:89:8d:bf:6a:fe:4f:99:49:fb:df:45:c8:45:63: 13:a8:12:a2:58:ef:6b:87:81:7e:b6:87:20:49:7c:c9:f5:d8: 76:21:ff:8a:1c:93:a1:38:d7:a6:f1:d8:11:52:2c:36:d1:d9: 11:73:17:fc:56:0d:5c:ed:97:08:e6:98:3a:76:1d:25:16:ba: 13:a5:16:15:df:04:24:44:8c:fe:16:ea:46:c4:7f:22:9e:f4: 3d:8b:53:82:7d:b6:fa:0e:12:cb:8c:05:0d:41:57:f4:ac:96: 2a:4a:85:5d:58:29:37:a0:b1:a6:f2:dc:3b:36:e9:a8:7f:76: bf:58:74:3e:ae:ea:71:8e:ef:96:ae:a2:e0:7d:49:98:35:c6: 3e:6f:fa:ca:6d:1b:d0:20:22:1b:63:5b:9a:65:85:2d:e5:2c: 54:35:7d:e6:01:c3:48:ed:c8:36:25:21:a5:fb:5b:bf:e7:48: 8c:fa:f6:84:d2:4a:9f:0e:69:db:7b:b9:fd:ac:e7:fa:5c:0e: 0d:86:9f:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tT+Cqd9rjmkbgzel9QnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmVmYTBhYjk3NDAwNDhkODNiNDg5ZDljYTRlMDI4ZTBm NWNmZWYwHhcNMjUxMjIwMTcwMTA5WhcNMjUxMjIxMTcwMTA5WjAzMTEwLwYDVQQD EygxMTUxYWVlNGE2NTY0MzVjYzUwZmQ1MWUzODgzMDg1OWRjZGQ0NzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD0XHPVYMnU6gPBOJDicfdrmZdPj 0MlhxTTNoeKy9EDrTndDfdQstWLM2Ev7qQfsLyjyY7W8/vYt3t99+JhqR9EyvnMw Gyg91fodb77buPrKr3sCs/IgUfpARefTAyrGMNwaCKaaiNyBgqrWbl6suXrQ16sD 3MsyCoAvT4TYkoJYf8l/wSn4H/GzMksVH+2pJV9l/QdAbFfszoipiVh+LLDDeQ8z 0X26MXKAbotjbv3gHtbsCNMTqYu38LAewStC6uszBA1yBPjLsW/ts2AAw0VDtZE4 DdLTypS9FOsYxsG7z83R69Xas3VpX+jDU2vdpYn6I5H9cfoNVS+E8SlalQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFRruSmVkNcxQ/VHjiDCFnc3UdFMB8GA1UdIwQY MBaAFLz++gq5dABI2DtInZyk4Cjg9c/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUt YzY2YmVhMWYxYWEyLzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUtYzY2YmVhMWYxYWEy LzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi63JTDtB GHW4Tp8Gwk2qm+HBQslw7D6zar3LGi6FVAGVsURsjzkZKTbU3Z2Kj+hCWgqTVFzD S7UBkomNv2r+T5lJ+99FyEVjE6gSoljva4eBfraHIEl8yfXYdiH/ihyToTjXpvHY EVIsNtHZEXMX/FYNXO2XCOaYOnYdJRa6E6UWFd8EJESM/hbqRsR/Ip70PYtTgn22 +g4Sy4wFDUFX9KyWKkqFXVgpN6CxpvLcOzbpqH92v1h0Pq7qcY7vlq6i4H1JmDXG Pm/6ym0b0CAiG2NbmmWFLeUsVDV95gHDSO3INiUhpftbv+dIjPr2hNJKnw5p23u5 /azn+lwODYafbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:00 2025 by rpki-client