This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json) Hash identifier: ec1duAejHoXb1A/R1tK/5f9qxjtGE/9+kG9P229vqZk= Subject key identifier: 20:FC:85:CA:B7:87:64:63:9E:25:C5:B6:F5:21:EA:91:13:52:15:48 Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff Certificate serial: 019AF19BAA61B0A38429B827B8FD69268FAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft Manifest number: 0E29 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=) 2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: lXpx7Ib2PWTsh8dHr1bCI07w6K9sj6TOWk4//PnjsaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:aa:61:b0:a3:84:29:b8:27:b8:fd:69:26:8f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=20fc85cab78764639e25c5b6f521ea9113521548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:fe:f0:70:85:b5:70:70:f0:eb:42:d1:60: be:3c:fe:d4:4b:03:ac:06:1e:94:dd:fe:8e:c5:63: 04:8a:90:51:5d:d9:90:e2:e6:1f:19:ee:ef:4f:d5: f0:05:08:51:14:96:33:12:1f:8a:ea:09:60:f6:7a: 27:0e:55:9c:0c:51:bb:00:96:72:cc:28:ac:53:b7: 89:bd:44:c2:f1:a8:81:3a:41:ce:c0:32:61:f0:b4: a9:31:73:63:17:2d:47:6f:3e:13:88:cb:fa:aa:50: 1a:44:48:4c:66:59:4b:12:9f:e2:b4:6f:9f:31:1a: db:c4:ce:31:a8:55:5f:4f:d3:ed:78:0f:ec:bf:cf: d5:d1:8f:d1:e6:aa:23:1c:07:2e:3d:05:44:f2:e6: d9:62:7f:57:1f:57:ec:db:39:02:b2:47:f1:fc:e3: 86:95:4d:92:85:c5:45:93:21:c4:b5:f5:66:ed:26: ca:81:8c:b7:d8:7d:e9:10:aa:19:fd:56:1d:fe:a7: 25:3c:02:21:c5:80:09:b1:07:ad:16:d9:05:6f:bb: 58:4a:80:83:3a:9b:6c:44:d1:d8:f3:af:d6:8a:24: df:0d:22:48:76:ac:6d:60:8b:bc:ad:bc:99:0e:3d: 3e:13:00:33:b8:2c:6c:55:8a:ab:c6:93:3a:55:5e: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FC:85:CA:B7:87:64:63:9E:25:C5:B6:F5:21:EA:91:13:52:15:48 X509v3 Authority Key Identifier: keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:42:b6:37:77:f7:e0:2f:aa:a4:58:ab:68:42:e7:ee:58:43: c6:a2:d7:31:02:b2:6e:00:b7:b1:7a:4d:b3:fc:d8:ce:7f:2a: bc:c6:d6:68:35:26:27:88:28:5b:1f:b5:18:a5:17:08:92:5a: 9c:6d:f4:a4:1f:a1:c3:1e:4f:f4:70:80:59:57:f3:5a:3d:5c: 1e:a6:ef:c4:36:c9:c2:f3:8e:55:fb:10:2f:d0:ec:69:2c:c7: 2b:41:68:8c:e3:c1:ee:e4:5b:49:44:64:61:75:0d:dc:38:49: b8:8e:6f:72:20:1c:90:1e:4d:36:45:39:f9:13:e6:75:6e:68: 15:0c:ff:e1:cf:59:db:0e:30:85:cb:a1:72:17:be:0e:c7:58: 39:bc:50:7f:4f:e8:2e:1b:5c:97:71:04:12:43:22:f8:ed:34: e9:67:39:59:f6:ad:65:ec:66:e3:db:98:b7:6b:0a:d7:aa:cb: 68:d3:1a:a7:9b:3b:c8:25:45:f7:5a:1b:d3:d1:84:72:61:b9: 7b:e6:50:fc:a4:c9:e9:d8:8e:c5:e5:6d:60:98:c3:24:e7:e5: 51:2a:9a:3e:a0:27:04:68:0c:e0:5a:b9:ba:ee:4c:b7:25:1b: 54:24:ac:78:4b:75:2d:f5:e4:f2:f9:4b:a4:39:5e:c0:5b:40: 3a:d1:be:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6phsKOEKbgnuP1pJo+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOTAzNDAzYzIwYTZjZGIyMjM2NmNjN2FjZjQ4ZTlmOTli ZTM0ZmYwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EygyMGZjODVjYWI3ODc2NDYzOWUyNWM1YjZmNTIxZWE5MTEzNTIxNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXD+8HCFtXBw8OtC0WC+PP7USwOs Bh6U3f6OxWMEipBRXdmQ4uYfGe7vT9XwBQhRFJYzEh+K6glg9nonDlWcDFG7AJZy zCisU7eJvUTC8aiBOkHOwDJh8LSpMXNjFy1Hbz4TiMv6qlAaREhMZllLEp/itG+f MRrbxM4xqFVfT9PteA/sv8/V0Y/R5qojHAcuPQVE8ubZYn9XH1fs2zkCskfx/OOG lU2ShcVFkyHEtfVm7SbKgYy32H3pEKoZ/VYd/qclPAIhxYAJsQetFtkFb7tYSoCD OptsRNHY86/WiiTfDSJIdqxtYIu8rbyZDj0+EwAzuCxsVYqrxpM6VV64yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD8hcq3h2RjniXFtvUh6pETUhVIMB8GA1UdIwQY MBaAFLyQNAPCCmzbIjZsx6z0jp+ZvjT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2It MDM1MDc4NzIyNWM4LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2ItMDM1MDc4NzIyNWM4 LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUK2N3f3 4C+qpFiraELn7lhDxqLXMQKybgC3sXpNs/zYzn8qvMbWaDUmJ4goWx+1GKUXCJJa nG30pB+hwx5P9HCAWVfzWj1cHqbvxDbJwvOOVfsQL9DsaSzHK0FojOPB7uRbSURk YXUN3DhJuI5vciAckB5NNkU5+RPmdW5oFQz/4c9Z2w4whcuhche+DsdYObxQf0/o Lhtcl3EEEkMi+O006Wc5WfatZexm49uYt2sK16rLaNMap5s7yCVF91ob09GEcmG5 e+ZQ/KTJ6diOxeVtYJjDJOflUSqaPqAnBGgM4Fq5uu5MtyUbVCSseEt1LfXk8vlL pDlewFtAOtG+2w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:25 2025 by rpki-client