This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft File: v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json) Hash identifier: KS1DwukV1uqtrnaSgQzHKICJSB2svuBSXbWpx17VfIQ= Subject key identifier: 29:48:FE:4E:FA:C9:47:68:44:F0:EC:83:48:8E:EF:CE:DD:AB:8C:F2 Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA Certificate issuer: /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da Certificate serial: 019B435BC5C9223FA0846491BFCB4280336C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft Manifest number: 1429 Signing time: Mon 22 Dec 2025 00:00:46 +0000 Manifest this update: Mon 22 Dec 2025 00:00:46 +0000 Manifest next update: Tue 23 Dec 2025 00:00:46 +0000 Files and hashes: 1: Li-Y8dn1F69FZoMGQvQz_fZ7l4Y.roa (hash: caOJpFofpginvCZ1ci6afUcY092BORN7MXA50NlfY8Y=) 2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: Kv8W0mR7GYOsfwAvMKfIPBWacP/g0V7rKmthX01bZ0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:c5:c9:22:3f:a0:84:64:91:bf:cb:42:80:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da Validity Not Before: Dec 22 00:00:46 2025 GMT Not After : Dec 23 00:00:46 2025 GMT Subject: CN=2948fe4efac9476844f0ec83488eefceddab8cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:e4:da:f1:69:41:c1:eb:c3:18:53:72:fe: aa:31:8e:cd:61:9e:69:c9:0b:6f:18:18:fa:76:6d: cb:7f:8b:9a:c1:f3:aa:61:9a:0f:59:88:52:6e:f5: 97:47:a0:1f:d8:be:6f:a1:c4:c2:c3:27:3e:11:c4: 38:5b:76:6d:e0:dd:fc:4c:fd:dd:23:0b:dd:f4:c5: a4:35:22:eb:39:7e:c2:35:f7:8a:b5:65:fe:04:de: f2:56:e9:2c:cf:6f:58:fa:a0:8a:e8:78:74:59:4e: ed:16:7d:d2:2c:80:22:97:e4:3f:0a:ee:f3:1e:e3: 5d:de:86:21:6d:2a:f4:b0:e3:79:f3:d9:ea:26:84: 0c:eb:54:cb:12:9a:4b:f7:ab:48:e8:9a:63:ba:45: 02:59:f9:59:25:de:4f:02:eb:e9:fb:ff:9d:e9:9a: ce:49:fe:14:6f:5f:b8:01:a1:ab:df:75:9a:60:c1: a6:1b:9d:f1:5e:53:21:e3:de:f8:1a:49:44:b2:e7: b0:03:68:39:61:9f:ab:ea:e6:a9:c8:95:4b:96:4b: 69:66:8b:ae:7c:4b:3b:bb:33:2c:d4:7f:bf:8f:c3: 6f:af:f4:05:c7:e4:1c:9a:a3:2f:77:9e:8e:8a:95: 49:d5:c8:d3:20:34:4a:ec:b9:a0:e4:bb:19:36:6f: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:48:FE:4E:FA:C9:47:68:44:F0:EC:83:48:8E:EF:CE:DD:AB:8C:F2 X509v3 Authority Key Identifier: keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:94:09:d3:eb:84:a4:fc:8e:f1:01:3a:1e:2b:cd:bc:df: 3e:76:91:86:4b:96:0d:83:74:c8:f4:29:91:93:3c:d1:20:45: d0:ba:d2:19:f7:12:ec:48:e7:b7:f8:9d:df:6a:69:d1:03:8b: d6:22:f2:1f:f2:eb:97:bf:b5:70:6f:e5:0d:11:30:f5:a8:db: f9:11:3c:fc:a3:ff:85:6c:6a:ae:48:39:c3:f5:a8:a3:5d:cc: 41:00:17:60:8c:6e:c7:e7:a5:e0:ab:73:c6:82:7d:c6:7e:ae: 56:4e:fb:0a:e0:00:2a:f6:55:a1:6e:1c:53:54:59:14:25:a2: 7b:29:c0:db:4e:17:8b:cd:b8:7c:ca:3c:fa:b2:b2:33:21:33: 73:0b:d2:c3:58:08:26:b8:ad:88:fa:bf:d0:ae:73:ba:62:a1: b9:ab:dd:cb:36:d6:ca:d8:6a:3b:7e:3f:73:ed:c2:c5:e5:6c: c0:75:3c:14:cd:ee:53:f6:f9:84:d8:9e:72:9b:b3:54:41:34: b2:c2:e2:a1:96:3b:b7:26:8e:ae:0b:e6:b6:89:60:01:fa:98: 2a:fc:ac:24:95:31:40:d7:46:ba:65:57:b3:5d:86:9a:54:c5: 8d:80:8b:a8:c8:c0:00:cf:58:ed:b3:c0:f0:3c:65:29:61:17: 86:fb:aa:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW8XJIj+ghGSRv8tCgDNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZWFhYjFiYTY4ZTg3YzlmN2FiMGQ5MDUwYmZmOWYyMGE2 MjY3ZGEwHhcNMjUxMjIyMDAwMDQ2WhcNMjUxMjIzMDAwMDQ2WjAzMTEwLwYDVQQD EygyOTQ4ZmU0ZWZhYzk0NzY4NDRmMGVjODM0ODhlZWZjZWRkYWI4Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArajk2vFpQcHrwxhTcv6qMY7NYZ5p yQtvGBj6dm3Lf4uawfOqYZoPWYhSbvWXR6Af2L5vocTCwyc+EcQ4W3Zt4N38TP3d Iwvd9MWkNSLrOX7CNfeKtWX+BN7yVuksz29Y+qCK6Hh0WU7tFn3SLIAil+Q/Cu7z HuNd3oYhbSr0sON589nqJoQM61TLEppL96tI6JpjukUCWflZJd5PAuvp+/+d6ZrO Sf4Ub1+4AaGr33WaYMGmG53xXlMh4974GklEsuewA2g5YZ+r6uapyJVLlktpZouu fEs7uzMs1H+/j8Nvr/QFx+QcmqMvd56OipVJ1cjTIDRK7Lmg5LsZNm/hIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClI/k76yUdoRPDsg0iO787dq4zyMB8GA1UdIwQY MBaAFL/qqxumjofJ96sNkFC/+fIKYmfaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYt ZjMzNzQxMjk1MTAxLzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYtZjMzNzQxMjk1MTAx LzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActyUCdPr hKT8jvEBOh4rzbzfPnaRhkuWDYN0yPQpkZM80SBF0LrSGfcS7Ejnt/id32pp0QOL 1iLyH/Lrl7+1cG/lDREw9ajb+RE8/KP/hWxqrkg5w/Woo13MQQAXYIxux+el4Ktz xoJ9xn6uVk77CuAAKvZVoW4cU1RZFCWieynA204Xi824fMo8+rKyMyEzcwvSw1gI JritiPq/0K5zumKhuavdyzbWythqO34/c+3CxeVswHU8FM3uU/b5hNiecpuzVEE0 ssLioZY7tyaOrgvmtolgAfqYKvysJJUxQNdGumVXs12GmlTFjYCLqMjAAM9Y7bPA 8DxlKWEXhvuqCg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:16 2025 by rpki-client