This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json) Hash identifier: y94hY0mmuokvBV3prFHILlkz0XqN5jpUSwbF/sCTqIA= Subject key identifier: E5:23:B9:C2:9E:73:34:7D:49:B6:2A:D3:0A:5E:C3:B3:78:10:A6:66 Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6 Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6 Certificate serial: 019B691FF62B22FAA03151FEE74FF5C0D2F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft Manifest number: 0C1B Signing time: Mon 29 Dec 2025 08:01:00 +0000 Manifest this update: Mon 29 Dec 2025 08:01:00 +0000 Manifest next update: Tue 30 Dec 2025 08:01:00 +0000 Files and hashes: 1: BFvGU9aoz7rWEn9pDQTts3L78L8.roa (hash: +uFs0aOYRrvBvDpuqjNUWAjstxrFKIih9wDuEmZp20g=) 2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: LQOj9XxEwu7fmTzx/ShrVz/Z6xz0/gAPuCYN8RdL9LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:1f:f6:2b:22:fa:a0:31:51:fe:e7:4f:f5:c0:d2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6 Validity Not Before: Dec 29 08:01:00 2025 GMT Not After : Dec 30 08:01:00 2025 GMT Subject: CN=e523b9c29e73347d49b62ad30a5ec3b37810a666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:f4:68:69:fd:fe:ac:2d:cd:e8:6b:cb:64: 29:53:44:78:66:05:55:28:1c:f4:0c:a3:30:5a:d8: 5e:0e:a9:e5:77:fc:ba:b1:4e:a0:ff:db:04:18:c8: 30:9a:06:8b:ac:bb:c2:ae:96:bc:ba:1b:bc:7d:eb: a2:89:d3:46:07:ac:80:9f:7b:bf:4d:15:cb:d0:30: d0:d9:47:0e:5e:b0:4f:98:1f:7a:d7:e3:e1:5d:02: b4:43:3a:3f:5f:65:49:71:bb:1b:ce:3a:cb:48:6f: 90:79:b1:53:0d:86:f1:bf:c7:75:21:c2:ef:64:f3: 48:94:6e:37:43:d5:66:24:04:2b:a3:ad:54:5a:e0: 18:6e:c1:a3:c2:bf:f2:cd:e6:fc:30:7b:cc:f1:c5: 4c:b9:5e:06:f1:bf:88:87:e8:ca:5b:10:cf:b5:19: 17:99:26:59:12:6e:6c:db:36:89:9c:43:80:96:76: 10:59:33:cd:a6:97:0d:f6:63:cf:d1:9c:84:ab:05: 63:ec:65:d5:fd:db:f7:61:95:3c:51:df:7e:a3:7a: 74:8d:6e:f8:4b:9e:a3:9b:3e:7a:f7:ab:f7:50:e3: ce:a4:1e:d9:9f:c8:c2:93:e0:4a:2a:31:dc:1f:93: f5:62:85:b8:7a:36:be:66:ef:13:b5:d2:42:79:9f: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:B9:C2:9E:73:34:7D:49:B6:2A:D3:0A:5E:C3:B3:78:10:A6:66 X509v3 Authority Key Identifier: keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8f:82:49:2a:3b:89:63:57:1d:19:43:cc:50:22:f2:c9:04: 60:92:f1:57:b1:b5:30:8e:47:17:c1:5f:24:bd:d9:5a:65:60: 83:5a:c2:24:7a:86:fb:36:a7:13:87:fd:77:2c:fd:9d:43:61: c4:94:67:1d:45:18:6e:1b:cc:cb:e1:44:19:db:f1:24:28:d7: 78:9f:47:10:28:44:ef:8c:30:ac:3b:4a:93:74:c4:38:be:29: ca:04:61:95:b2:08:0a:cc:e1:27:02:0b:a5:5b:cb:f1:56:08: 2c:a7:8f:06:8f:c1:6a:0a:db:32:20:dd:4f:e6:0e:f3:92:ec: 1b:5e:c6:16:04:7c:65:b5:fa:68:55:70:f8:99:12:4c:0c:01: 3a:60:55:59:a2:77:58:a8:8e:26:19:91:f6:66:28:f7:86:75: 85:5b:5f:bb:76:58:9c:6d:fd:a2:22:f4:fe:90:79:db:84:51: c5:64:7d:a3:83:62:1c:e9:cc:f2:86:94:63:4e:64:76:48:f4: 1f:3f:c4:06:05:57:e3:67:02:96:d0:44:ea:c4:60:2a:a8:47: f7:c9:01:cc:26:ef:b8:db:a1:5e:1b:2d:f1:33:4e:76:6c:78: 3e:8d:e2:22:a5:92:5b:21:23:fa:d4:c3:b2:3e:33:cf:3f:cc: 04:5c:dd:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpH/YrIvqgMVH+50/1wNL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2YwYjZkZDEyYTM3NGJjMjkzNWNiZTlkZjYxZTA5M2I1 NWJlZjYwHhcNMjUxMjI5MDgwMTAwWhcNMjUxMjMwMDgwMTAwWjAzMTEwLwYDVQQD EyhlNTIzYjljMjllNzMzNDdkNDliNjJhZDMwYTVlYzNiMzc4MTBhNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuf0aGn9/qwtzehry2QpU0R4ZgVV KBz0DKMwWtheDqnld/y6sU6g/9sEGMgwmgaLrLvCrpa8uhu8feuiidNGB6yAn3u/ TRXL0DDQ2UcOXrBPmB961+PhXQK0Qzo/X2VJcbsbzjrLSG+QebFTDYbxv8d1IcLv ZPNIlG43Q9VmJAQro61UWuAYbsGjwr/yzeb8MHvM8cVMuV4G8b+Ih+jKWxDPtRkX mSZZEm5s2zaJnEOAlnYQWTPNppcN9mPP0ZyEqwVj7GXV/dv3YZU8Ud9+o3p0jW74 S56jmz5696v3UOPOpB7Zn8jCk+BKKjHcH5P1YoW4eja+Zu8TtdJCeZ/FkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUjucKeczR9SbYq0wpew7N4EKZmMB8GA1UdIwQY MBaAFL9/C23RKjdLwpNcvp32Hgk7Vb72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGIt ZjdkMTEzMzlkYmFkLzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGItZjdkMTEzMzlkYmFk LzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI+CSSo7 iWNXHRlDzFAi8skEYJLxV7G1MI5HF8FfJL3ZWmVgg1rCJHqG+zanE4f9dyz9nUNh xJRnHUUYbhvMy+FEGdvxJCjXeJ9HEChE74wwrDtKk3TEOL4pygRhlbIICszhJwIL pVvL8VYILKePBo/BagrbMiDdT+YO85LsG17GFgR8ZbX6aFVw+JkSTAwBOmBVWaJ3 WKiOJhmR9mYo94Z1hVtfu3ZYnG39oiL0/pB524RRxWR9o4NiHOnM8oaUY05kdkj0 Hz/EBgVX42cCltBE6sRgKqhH98kBzCbvuNuhXhst8TNOdmx4Po3iIqWSWyEj+tTD sj4zzz/MBFzd9w== -----END CERTIFICATE-----Generated at Mon Dec 29 14:40:44 2025 by rpki-client