This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json) Hash identifier: d+E84FQqoaHXRPI0CL7JTBN9yRvUd89SIHtutG4iLZ0= Subject key identifier: DF:50:D1:6F:2C:64:1A:70:BF:89:3F:54:80:E8:D6:D6:74:2F:8B:46 Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Certificate serial: 019B2F670EC9DF0F2ABD240B14BDDD3455B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft Manifest number: 14A0 Signing time: Thu 18 Dec 2025 03:00:41 +0000 Manifest this update: Thu 18 Dec 2025 03:00:41 +0000 Manifest next update: Fri 19 Dec 2025 03:00:41 +0000 Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: ryYnhderGZsBoRgMKXeHhgd69iz1tp9lIWHDsdcfAG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:0e:c9:df:0f:2a:bd:24:0b:14:bd:dd:34:55:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Validity Not Before: Dec 18 03:00:41 2025 GMT Not After : Dec 19 03:00:41 2025 GMT Subject: CN=df50d16f2c641a70bf893f5480e8d6d6742f8b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:a7:5e:9f:f0:6f:22:0c:cb:f0:22:fa:27: 22:51:3f:2c:43:67:a4:9e:a8:0f:16:92:54:77:1e: a2:84:68:fb:1d:e5:60:30:ce:22:cb:1b:a2:02:b2: cd:0b:64:35:96:a7:ba:d4:23:f9:2e:fd:11:1a:94: 20:49:c8:c6:9c:8a:8c:65:85:0e:32:4b:72:ac:14: 2f:b5:de:58:d1:d1:aa:bb:8d:a4:4f:94:0f:81:bc: c9:ec:1f:24:8d:08:82:63:ab:28:c6:1f:63:b5:74: b7:00:97:47:b4:ce:1b:b5:d8:c6:27:1f:25:af:f5: 1f:d8:e2:45:3b:56:f4:27:ce:b4:89:c9:61:ad:61: 20:a1:96:2b:f2:1c:39:50:7d:2c:aa:42:68:db:6f: c5:23:14:df:02:a2:4b:9d:0f:85:09:d4:e7:90:ea: e8:53:52:40:ea:46:80:c6:e5:98:f9:41:8e:68:a3: 0e:54:a2:32:0f:ed:f9:1c:cf:3d:22:cd:b1:0e:09: 1c:5b:5f:17:72:d0:de:a0:5b:ae:ed:14:a6:6e:ff: 32:c2:7f:fe:1f:56:6a:a5:14:35:37:e3:dc:4a:75: cf:f7:32:01:99:66:82:d4:e5:d5:54:6d:65:1d:31: cd:75:9f:65:7e:79:63:a4:4b:dc:3f:2b:ca:d5:c1: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:D1:6F:2C:64:1A:70:BF:89:3F:54:80:E8:D6:D6:74:2F:8B:46 X509v3 Authority Key Identifier: keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2c:f2:76:e0:23:c4:11:68:93:fe:c0:b4:bd:f5:7d:79:24: 38:0e:12:7d:29:36:59:6f:29:bb:8a:b8:89:8e:50:5f:1d:0b: 39:8c:a3:b0:8e:24:33:0d:1b:4e:1a:74:8b:d7:cd:b1:66:b8: 6c:f0:24:74:79:d3:93:79:ea:29:b0:7c:6d:18:23:04:c5:d5: 6a:2e:ae:4b:8f:32:1b:9a:c8:4f:4e:9d:cc:95:2d:64:d2:62: ec:66:03:63:31:1c:a8:14:15:20:e7:93:8d:21:29:62:1d:db: 97:45:6d:ab:4d:b6:4b:78:c0:1d:28:5f:de:91:d9:e0:81:79: 76:8c:9c:e9:8c:18:54:ec:ba:22:a1:68:64:18:e7:18:38:4a: cd:63:75:80:85:4c:e3:5f:a7:d1:df:80:a0:98:37:1f:d0:98: bb:c3:99:eb:ca:bc:7d:6c:86:81:f7:fe:ff:c1:5d:a8:0a:a7: c9:1f:63:0a:2c:c9:bf:14:de:c5:56:54:db:4d:b0:2a:49:47: 54:ee:e4:e9:2d:7d:c1:1e:63:f0:44:51:ce:d4:3c:bb:93:7c: 58:ea:7d:de:00:ab:b1:15:0a:f8:9c:d7:7f:cc:e9:03:9c:37: 13:a2:96:df:a5:ef:6a:65:f7:55:cb:f7:da:d4:34:aa:b6:79: 7d:74:c0:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZw7J3w8qvSQLFL3dNFW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZjg3NGQwMTU0MDcwZTk2MmEzYzg3MTk4MjFmZGI5Y2Ix MDE2ZTEwHhcNMjUxMjE4MDMwMDQxWhcNMjUxMjE5MDMwMDQxWjAzMTEwLwYDVQQD EyhkZjUwZDE2ZjJjNjQxYTcwYmY4OTNmNTQ4MGU4ZDZkNjc0MmY4YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso6nXp/wbyIMy/Ai+iciUT8sQ2ek nqgPFpJUdx6ihGj7HeVgMM4iyxuiArLNC2Q1lqe61CP5Lv0RGpQgScjGnIqMZYUO MktyrBQvtd5Y0dGqu42kT5QPgbzJ7B8kjQiCY6soxh9jtXS3AJdHtM4btdjGJx8l r/Uf2OJFO1b0J860iclhrWEgoZYr8hw5UH0sqkJo22/FIxTfAqJLnQ+FCdTnkOro U1JA6kaAxuWY+UGOaKMOVKIyD+35HM89Is2xDgkcW18XctDeoFuu7RSmbv8ywn/+ H1ZqpRQ1N+PcSnXP9zIBmWaC1OXVVG1lHTHNdZ9lfnljpEvcPyvK1cEzrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9Q0W8sZBpwv4k/VIDo1tZ0L4tGMB8GA1UdIwQY MBaAFL/4dNAVQHDpYqPIcZgh/bnLEBbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQt OWIyMWYzMzRkMDI4LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQtOWIyMWYzMzRkMDI4 LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSzyduAj xBFok/7AtL31fXkkOA4SfSk2WW8pu4q4iY5QXx0LOYyjsI4kMw0bThp0i9fNsWa4 bPAkdHnTk3nqKbB8bRgjBMXVai6uS48yG5rIT06dzJUtZNJi7GYDYzEcqBQVIOeT jSEpYh3bl0Vtq022S3jAHShf3pHZ4IF5doyc6YwYVOy6IqFoZBjnGDhKzWN1gIVM 41+n0d+AoJg3H9CYu8OZ68q8fWyGgff+/8FdqAqnyR9jCizJvxTexVZU202wKklH VO7k6S19wR5j8ERRztQ8u5N8WOp93gCrsRUK+JzXf8zpA5w3E6KW36XvamX3Vcv3 2tQ0qrZ5fXTAQw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:54:17 2025 by rpki-client