This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json) Hash identifier: VRUu1/AYMvdi3A45QMN3+Yl0IjWaDegDd8SpdcGHwxE= Subject key identifier: E5:3A:46:0D:8D:01:87:07:1E:F4:07:D8:F8:BA:12:5F:56:87:5F:5A Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0 Certificate serial: 019B57BE1CB3C3306F557EE79C453174B3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft Manifest number: 0F0B Signing time: Thu 25 Dec 2025 23:00:35 +0000 Manifest this update: Thu 25 Dec 2025 23:00:35 +0000 Manifest next update: Fri 26 Dec 2025 23:00:35 +0000 Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=) 2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: Y206bi6NGgSWen2pbU/YKYsbmr3UAtSwkI/iRYrH640=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:be:1c:b3:c3:30:6f:55:7e:e7:9c:45:31:74:b3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0 Validity Not Before: Dec 25 23:00:35 2025 GMT Not After : Dec 26 23:00:35 2025 GMT Subject: CN=e53a460d8d0187071ef407d8f8ba125f56875f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:01:b5:bf:d8:4a:38:8f:51:8c:11:11:bb: a5:54:2b:c2:03:fd:2e:d8:ea:bf:1e:1b:d5:8e:ef: 3f:ef:48:11:46:d5:a9:7c:54:0b:95:67:6d:86:cd: 0e:4f:51:36:9c:6b:4b:26:e2:b5:50:89:c4:9a:df: ce:93:d7:fa:cb:50:1d:60:fd:7a:ca:ad:99:67:b8: 8c:f9:61:eb:be:ad:4f:34:2c:41:11:77:c6:a9:6e: 2b:4f:6a:53:d0:6e:ff:eb:c8:c2:7d:42:24:6c:b2: 91:31:a0:8e:97:1b:66:19:c7:68:38:7f:b6:ff:bb: 9b:b4:42:8b:55:d1:75:f3:db:6d:f1:c1:bd:f5:a4: 65:ae:09:53:13:53:df:39:d6:d3:04:3a:4d:cb:0a: 0d:5c:8b:4b:e3:e4:2d:13:fa:c3:4d:5b:fb:ac:ec: 3f:da:ae:42:c5:d4:94:a2:20:bd:c9:6a:79:7c:dc: e3:7d:54:30:a6:b5:16:12:dd:7c:da:1d:d3:c9:2f: 07:c5:36:af:76:ed:52:ab:30:51:41:3c:cc:e5:d1: f7:00:6d:1b:db:06:0d:b2:7a:13:7f:a2:ff:68:19: bc:c7:a7:8a:bb:1d:8d:6b:61:34:cb:fe:4d:be:92: b4:10:9b:1e:6c:54:9a:76:08:2b:40:56:84:4d:c9: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3A:46:0D:8D:01:87:07:1E:F4:07:D8:F8:BA:12:5F:56:87:5F:5A X509v3 Authority Key Identifier: keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f9:b0:73:ac:2f:dd:27:c9:ad:ab:74:89:11:87:50:e8:8e: 33:19:45:01:7f:16:9f:d8:2d:4c:78:9f:1a:53:ac:07:83:55: 4b:dc:fb:37:00:c5:3c:41:44:59:48:e4:1b:15:11:3f:a6:86: 0e:70:f4:92:37:0b:87:a8:df:b7:21:4c:91:be:29:3c:92:43: cd:33:26:b8:b7:b2:fa:79:62:7f:be:8f:29:c0:35:41:12:30: 5e:85:c0:10:dc:4c:41:2c:83:0a:7c:7c:c7:a8:4f:ef:49:73: d6:cf:74:1a:21:15:24:fb:7c:99:77:50:76:b6:85:fa:f9:1d: 8a:dd:1c:2b:bc:5b:71:f5:f5:e5:7c:88:f9:80:18:fd:46:59: 37:2d:d7:47:70:45:9e:21:ca:30:ce:5c:8c:0c:98:fa:41:cf: e7:6a:e7:fa:36:a0:12:d8:ed:77:06:61:2c:f5:1b:7f:87:43: 51:33:97:31:4b:cf:bd:12:b2:bf:05:17:c2:7c:68:49:ca:1a: bd:ab:48:57:36:a4:ff:65:3a:cd:b1:65:01:2c:e1:ce:b6:67: 16:a4:ce:cb:d9:9f:75:72:b5:ad:d7:ee:99:25:39:ef:1f:01: 24:2b:76:88:b9:0e:37:90:a2:00:84:06:e4:f0:5e:26:01:01: 09:c0:4d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXvhyzwzBvVX7nnEUxdLO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2FlMzY2OWY4NDdmYTI3YTY5YjE0YmI4N2Y4YzdiZmQ3 OTllZTAwHhcNMjUxMjI1MjMwMDM1WhcNMjUxMjI2MjMwMDM1WjAzMTEwLwYDVQQD EyhlNTNhNDYwZDhkMDE4NzA3MWVmNDA3ZDhmOGJhMTI1ZjU2ODc1ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnoBtb/YSjiPUYwREbulVCvCA/0u 2Oq/HhvVju8/70gRRtWpfFQLlWdths0OT1E2nGtLJuK1UInEmt/Ok9f6y1AdYP16 yq2ZZ7iM+WHrvq1PNCxBEXfGqW4rT2pT0G7/68jCfUIkbLKRMaCOlxtmGcdoOH+2 /7ubtEKLVdF189tt8cG99aRlrglTE1PfOdbTBDpNywoNXItL4+QtE/rDTVv7rOw/ 2q5CxdSUoiC9yWp5fNzjfVQwprUWEt182h3TyS8HxTavdu1SqzBRQTzM5dH3AG0b 2wYNsnoTf6L/aBm8x6eKux2Na2E0y/5NvpK0EJsebFSadggrQFaETckl7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU6Rg2NAYcHHvQH2Pi6El9Wh19aMB8GA1UdIwQY MBaAFL9642afhH+iemmxS7h/jHv9eZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYt ZGI4MDMwODc5ZjUxLzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYtZGI4MDMwODc5ZjUx LzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/mwc6wv 3SfJrat0iRGHUOiOMxlFAX8Wn9gtTHifGlOsB4NVS9z7NwDFPEFEWUjkGxURP6aG DnD0kjcLh6jftyFMkb4pPJJDzTMmuLey+nlif76PKcA1QRIwXoXAENxMQSyDCnx8 x6hP70lz1s90GiEVJPt8mXdQdraF+vkdit0cK7xbcfX15XyI+YAY/UZZNy3XR3BF niHKMM5cjAyY+kHP52rn+jagEtjtdwZhLPUbf4dDUTOXMUvPvRKyvwUXwnxoScoa vatIVzak/2U6zbFlASzhzrZnFqTOy9mfdXK1rdfumSU57x8BJCt2iLkON5CiAIQG 5PBeJgEBCcBNkw== -----END CERTIFICATE-----Generated at Fri Dec 26 07:53:02 2025 by rpki-client