This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json) Hash identifier: ZCx6aIwBHZqQMaet3pifwL7cFRSjx0vnAcY7AHhN9NE= Subject key identifier: 2B:00:60:92:84:96:0D:2D:50:36:9A:C0:D2:F1:40:98:56:A6:3A:11 Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef Certificate serial: 019B5B9B4FAACE06E2ED8C277E1E60B31ED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft Manifest number: 12F5 Signing time: Fri 26 Dec 2025 17:01:03 +0000 Manifest this update: Fri 26 Dec 2025 17:01:03 +0000 Manifest next update: Sat 27 Dec 2025 17:01:03 +0000 Files and hashes: 1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=) 2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: KXuMHTqPtuM3KKlV8UXnkmGZW8mwNhOfLE1NAF5weN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:4f:aa:ce:06:e2:ed:8c:27:7e:1e:60:b3:1e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef Validity Not Before: Dec 26 17:01:03 2025 GMT Not After : Dec 27 17:01:03 2025 GMT Subject: CN=2b00609284960d2d50369ac0d2f1409856a63a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:d9:85:b8:11:75:f0:3f:ba:88:07:e7:fc: cd:42:1c:eb:b0:6e:24:a2:de:2a:fb:4a:a6:04:26: c1:c6:64:24:9d:93:a5:48:56:0a:63:9c:4f:ab:13: b4:75:18:49:53:63:17:cd:93:ca:22:cc:5a:82:a8: 9b:3c:86:3b:65:73:5f:fc:51:c1:14:57:d0:14:20: 41:3a:09:f6:ac:3b:b2:06:9b:58:c9:1c:c7:e9:2e: b9:70:1f:6f:c4:76:79:fa:84:a2:b8:14:27:90:dc: 74:c6:a7:ed:bf:5e:2b:6c:ac:38:e6:1f:c2:71:5c: 94:ef:66:50:bd:d9:df:58:f0:6c:c7:17:71:0d:e6: e3:1d:bc:08:74:36:da:c3:2a:42:3a:e7:42:e5:8b: d2:ba:70:00:6a:9a:d3:46:36:c7:96:98:bd:87:fb: b0:4b:e5:64:19:ca:97:e7:9d:ed:53:d0:26:6d:c2: 07:e8:6d:b2:a5:62:9a:39:86:c1:b2:cc:12:d7:9a: b9:f0:43:9e:ec:9a:89:50:ae:ce:61:af:a9:d7:b1: 9c:a8:c0:b3:d0:ee:f1:e5:47:a1:c7:8c:d0:91:11: 13:88:f2:26:cd:a9:79:66:38:c8:d9:5d:6b:16:e5: e9:68:be:25:7e:81:ba:3d:bd:61:97:1b:c3:25:4b: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:00:60:92:84:96:0D:2D:50:36:9A:C0:D2:F1:40:98:56:A6:3A:11 X509v3 Authority Key Identifier: keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:bb:3e:16:fc:7c:a3:46:91:db:71:62:83:2f:a8:d9:b1:0f: 30:fc:21:8c:78:e3:e5:59:10:07:66:f6:f6:70:79:e0:ea:a3: 0b:16:c5:db:3f:a1:91:20:53:cf:90:af:7c:01:06:32:d8:ce: 2c:d9:12:c0:dd:5b:90:a1:5d:8a:12:80:a0:b2:1f:13:ee:99: ec:74:63:a4:31:00:ab:5b:79:fe:87:55:58:f4:6f:99:33:44: 47:bb:b6:8d:1c:8c:83:48:22:de:58:91:a9:ee:bc:6b:46:9d: 60:35:92:87:3d:01:c2:b4:68:87:91:94:65:02:c2:15:3f:94: 35:07:54:c1:40:d9:e8:e4:21:ce:44:1e:70:e2:3b:30:d4:1a: bd:d9:26:3d:4a:34:4f:fa:01:11:32:b0:97:d9:ce:c2:65:ef: 56:09:e9:54:a4:f5:4c:31:b4:c2:41:b9:fa:17:e4:85:e7:30: c5:d6:a8:2d:ca:51:51:27:0e:d1:7a:4e:d5:95:b4:70:c9:ea: 65:7c:26:7c:d6:d9:01:fd:71:b4:51:3c:c2:2d:af:09:02:13: 3b:df:ee:b5:35:c5:bb:c8:72:ec:2d:82:d5:6e:5e:0b:a9:fe: 85:2a:f6:3c:ae:4e:7e:2f:65:df:21:34:13:e0:a3:3d:44:f7: 1e:90:39:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbm0+qzgbi7Ywnfh5gsx7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmVmYTBhYjk3NDAwNDhkODNiNDg5ZDljYTRlMDI4ZTBm NWNmZWYwHhcNMjUxMjI2MTcwMTAzWhcNMjUxMjI3MTcwMTAzWjAzMTEwLwYDVQQD EygyYjAwNjA5Mjg0OTYwZDJkNTAzNjlhYzBkMmYxNDA5ODU2YTYzYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntfZhbgRdfA/uogH5/zNQhzrsG4k ot4q+0qmBCbBxmQknZOlSFYKY5xPqxO0dRhJU2MXzZPKIsxagqibPIY7ZXNf/FHB FFfQFCBBOgn2rDuyBptYyRzH6S65cB9vxHZ5+oSiuBQnkNx0xqftv14rbKw45h/C cVyU72ZQvdnfWPBsxxdxDebjHbwIdDbawypCOudC5YvSunAAaprTRjbHlpi9h/uw S+VkGcqX553tU9AmbcIH6G2ypWKaOYbBsswS15q58EOe7JqJUK7OYa+p17GcqMCz 0O7x5Uehx4zQkRETiPImzal5ZjjI2V1rFuXpaL4lfoG6Pb1hlxvDJUuABwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsAYJKElg0tUDaawNLxQJhWpjoRMB8GA1UdIwQY MBaAFLz++gq5dABI2DtInZyk4Cjg9c/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUt YzY2YmVhMWYxYWEyLzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUtYzY2YmVhMWYxYWEy LzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrs+Fvx8 o0aR23Figy+o2bEPMPwhjHjj5VkQB2b29nB54OqjCxbF2z+hkSBTz5CvfAEGMtjO LNkSwN1bkKFdihKAoLIfE+6Z7HRjpDEAq1t5/odVWPRvmTNER7u2jRyMg0gi3liR qe68a0adYDWShz0BwrRoh5GUZQLCFT+UNQdUwUDZ6OQhzkQecOI7MNQavdkmPUo0 T/oBETKwl9nOwmXvVgnpVKT1TDG0wkG5+hfkhecwxdaoLcpRUScO0XpO1ZW0cMnq ZXwmfNbZAf1xtFE8wi2vCQITO9/utTXFu8hy7C2C1W5eC6n+hSr2PK5Ofi9l3yE0 E+CjPUT3HpA5oQ== -----END CERTIFICATE-----Generated at Sat Dec 27 00:44:44 2025 by rpki-client