This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json) Hash identifier: s3C6WNZ9Aa+mhxwh6NofbO9doHp57rV5Lu8x/UfkUfw= Subject key identifier: FD:E1:B5:73:01:53:65:6C:BF:A7:01:17:AB:17:29:47:AF:69:9C:77 Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Certificate serial: 019B3DFE79AC43B162AA8B3224A9EC6B057B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 23:00:45 +0000 Manifest this update: Sat 20 Dec 2025 23:00:45 +0000 Manifest next update: Sun 21 Dec 2025 23:00:45 +0000 Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=) 2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: 3V4dnLrnzEtVUcMhdiMbfO2povIyfDKt4UhmT+hQCFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:79:ac:43:b1:62:aa:8b:32:24:a9:ec:6b:05:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Validity Not Before: Dec 20 23:00:45 2025 GMT Not After : Dec 21 23:00:45 2025 GMT Subject: CN=fde1b5730153656cbfa70117ab172947af699c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:a5:b0:cc:29:b1:91:f8:74:bf:dd:cd:f1: 6c:0c:eb:32:61:61:b3:f2:d7:df:3f:28:74:48:26: 40:37:5e:2c:b6:cc:04:27:80:ba:7a:15:f7:38:64: 85:7f:2d:f3:61:25:14:86:c6:c4:05:98:7e:b5:be: d2:3e:5e:df:85:cc:61:ce:ea:11:9b:73:98:83:31: 78:fa:d3:2a:3d:32:0d:1e:fe:93:8a:e7:63:50:08: df:56:0e:19:59:84:31:cb:62:58:6e:77:26:2e:15: 85:09:13:41:81:c6:a3:60:5a:3c:6e:d9:fc:00:e8: ef:e8:44:31:20:7f:91:d5:98:ab:5d:e3:1e:c0:99: 3a:d6:94:b4:27:62:6a:b6:d2:76:0c:34:1e:a6:a9: 10:6f:74:20:06:c8:d1:f1:ee:e5:27:30:b9:4c:62: 94:72:36:25:d0:c2:7c:4a:20:99:f9:d5:77:e2:85: b2:a0:8a:ae:43:e7:b9:4d:f0:06:ab:c9:54:6d:1c: f1:db:a5:f4:ec:3c:f7:c6:b1:19:da:2c:d5:83:e2: 90:a5:a8:90:e3:19:db:91:98:e9:6f:d6:51:ec:aa: 9d:76:4e:d5:3b:30:05:ae:ec:3f:4f:b5:ae:47:da: 39:cd:94:47:66:30:b2:c6:97:49:a4:d3:19:a8:8f: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E1:B5:73:01:53:65:6C:BF:A7:01:17:AB:17:29:47:AF:69:9C:77 X509v3 Authority Key Identifier: keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:88:a5:7f:ef:17:be:fc:7c:09:68:98:e8:41:90:42:d0:80: d2:12:a5:a6:35:cd:7c:11:cd:b1:aa:b2:e5:6b:b9:21:1f:57: 75:d4:9e:5d:77:e0:83:14:9d:dc:92:ab:db:82:6e:68:28:33: 35:31:08:ec:ee:57:42:0c:f3:11:b6:49:df:2d:16:19:4e:c2: fc:69:41:c1:c6:1e:b9:5e:36:9a:6a:f7:5e:fc:0e:65:95:a3: b1:e0:72:79:14:69:a2:49:f4:3e:82:94:61:a6:0e:16:2d:e8: af:40:62:af:ad:e8:e9:86:05:73:bc:3a:db:1e:60:9f:e3:43: a5:98:6a:7e:23:2f:2e:79:23:10:73:7c:cc:bf:78:f4:d2:e2: f2:e2:33:67:e0:47:d5:c2:b8:03:54:f4:bd:52:7c:be:ee:41: 93:b9:2e:54:48:48:1b:8d:0b:f1:91:7f:97:59:33:9f:34:25: 2a:ed:6b:d5:35:0c:f0:95:c1:17:99:76:88:5c:1c:02:c9:08: 27:5b:4c:05:1d:96:09:fd:d6:60:ac:a7:f3:4d:78:04:e7:aa: 54:ab:38:f7:d8:79:3b:e6:ee:fe:b2:7d:d3:f4:4a:53:93:bf: 73:35:d2:fc:51:89:3c:b4:18:72:ac:fc:d7:b8:34:1f:8d:bf: 54:93:bb:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nmsQ7FiqosyJKnsawV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl MTQzYmIwHhcNMjUxMjIwMjMwMDQ1WhcNMjUxMjIxMjMwMDQ1WjAzMTEwLwYDVQQD EyhmZGUxYjU3MzAxNTM2NTZjYmZhNzAxMTdhYjE3Mjk0N2FmNjk5Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJOlsMwpsZH4dL/dzfFsDOsyYWGz 8tffPyh0SCZAN14stswEJ4C6ehX3OGSFfy3zYSUUhsbEBZh+tb7SPl7fhcxhzuoR m3OYgzF4+tMqPTINHv6TiudjUAjfVg4ZWYQxy2JYbncmLhWFCRNBgcajYFo8btn8 AOjv6EQxIH+R1ZirXeMewJk61pS0J2JqttJ2DDQepqkQb3QgBsjR8e7lJzC5TGKU cjYl0MJ8SiCZ+dV34oWyoIquQ+e5TfAGq8lUbRzx26X07Dz3xrEZ2izVg+KQpaiQ 4xnbkZjpb9ZR7Kqddk7VOzAFruw/T7WuR9o5zZRHZjCyxpdJpNMZqI9gwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3htXMBU2Vsv6cBF6sXKUevaZx3MB8GA1UdIwQY MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIilf+8X vvx8CWiY6EGQQtCA0hKlpjXNfBHNsaqy5Wu5IR9XddSeXXfggxSd3JKr24JuaCgz NTEI7O5XQgzzEbZJ3y0WGU7C/GlBwcYeuV42mmr3XvwOZZWjseByeRRpokn0PoKU YaYOFi3or0Bir63o6YYFc7w62x5gn+NDpZhqfiMvLnkjEHN8zL949NLi8uIzZ+BH 1cK4A1T0vVJ8vu5Bk7kuVEhIG40L8ZF/l1kznzQlKu1r1TUM8JXBF5l2iFwcAskI J1tMBR2WCf3WYKyn8014BOeqVKs499h5O+bu/rJ90/RKU5O/czXS/FGJPLQYcqz8 17g0H42/VJO7Cg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:28 2025 by rpki-client