This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json) Hash identifier: rtnAJz5y/EbdR+rCQjzSovmwlolWjoKsUDi5Z4ZtVSk= Subject key identifier: 8C:29:86:90:9F:02:42:7F:E0:2F:91:7B:19:0E:CF:AF:E6:9A:D8:CA Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb Certificate serial: 019AF088A91B36CAEE00A1B484972A1C6BC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft Manifest number: 16F1 Signing time: Fri 05 Dec 2025 22:01:19 +0000 Manifest this update: Fri 05 Dec 2025 22:01:19 +0000 Manifest next update: Sat 06 Dec 2025 22:01:19 +0000 Files and hashes: 1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=) 2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: T4V3+TmX9r6k6XszSUXSzWho9zrSEcP1S7ZD1Apjh4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a9:1b:36:ca:ee:00:a1:b4:84:97:2a:1c:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb Validity Not Before: Dec 5 22:01:19 2025 GMT Not After : Dec 6 22:01:19 2025 GMT Subject: CN=8c2986909f02427fe02f917b190ecfafe69ad8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:ef:4c:32:57:e9:b4:d6:27:77:a7:80:8f: c3:17:70:f2:8a:52:e8:5d:39:ac:89:a4:ed:b2:a1: df:09:b1:2c:3e:78:20:2c:47:0f:b7:cc:4e:96:42: e7:80:48:c5:10:72:51:0f:2c:ff:68:7e:42:0f:46: 66:31:5b:29:73:8b:98:9a:36:83:0e:b1:7b:7a:c1: 9c:57:76:ef:d9:ba:05:6a:04:f2:96:59:0d:f0:18: 37:cd:a9:cd:fe:22:8c:b9:a7:33:b7:be:93:46:df: 8c:0a:5c:94:df:3a:1f:de:73:65:66:29:66:03:2f: f1:d2:57:8b:df:41:1e:91:a6:33:a9:d4:19:48:2c: 20:af:64:1c:1a:6c:2b:b4:a0:93:42:59:c8:41:4a: 2e:07:c3:4c:74:93:80:52:30:2e:a8:66:d6:d7:69: 64:95:96:af:55:96:dd:e8:bd:44:01:07:01:4d:4c: 02:b3:de:35:de:6b:38:fb:80:50:42:57:5d:b3:78: d2:dc:98:a7:c9:38:12:b0:a8:3e:f0:9d:14:a8:05: 38:a8:b5:fe:9c:05:c8:06:c5:04:f3:27:c2:ce:6b: ee:ee:a9:ef:1f:62:f1:0b:bd:79:f2:c4:57:3f:0d: 67:0e:9a:51:e1:e5:4c:d6:c9:10:59:18:c0:ac:79: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:86:90:9F:02:42:7F:E0:2F:91:7B:19:0E:CF:AF:E6:9A:D8:CA X509v3 Authority Key Identifier: keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:46:ec:99:51:77:1f:00:71:2c:88:b6:2f:f5:58:d1:2a:c7: 01:70:70:a6:5a:02:51:a7:33:16:60:88:af:c2:1c:a3:29:98: 11:71:9a:57:10:f0:ab:8c:f6:9c:dd:0e:c9:20:91:f0:69:0c: 20:4c:85:6c:02:3d:93:24:64:62:cb:d9:38:70:24:70:62:24: 35:cc:81:c7:2e:04:c3:df:e4:12:ed:e8:5c:0d:b9:21:b1:cb: 3b:1f:34:dd:30:e2:87:0f:ab:a3:d2:e0:ed:6b:b9:a7:99:8f: b5:17:12:bf:37:21:50:02:5b:77:70:af:5f:62:ec:c0:b0:17: bb:05:99:db:23:c9:fd:90:f6:95:2c:9f:a7:57:8a:d3:c9:88: 5f:ce:2e:41:6e:50:c3:b0:c4:8f:09:a9:04:a7:5a:69:38:a9: 4e:41:ed:e7:17:73:8b:e5:ee:5f:f0:0b:7a:5d:ac:1d:91:92: 24:e0:f1:30:13:c3:9f:36:ef:b3:2c:3a:4e:bf:8e:34:93:bb: 74:12:bd:53:ac:94:24:07:70:b0:45:18:36:78:80:9e:79:47: 52:29:35:23:64:1a:06:31:45:6c:77:f1:5a:89:dc:0e:8b:60: 2e:c7:be:09:50:41:2c:0b:3c:be:41:b7:35:74:47:90:12:ec: 2f:f4:42:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKkbNsruAKG0hJcqHGvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjhjMWRhZDkxYTQxMDFjNzE1M2MwZjZkMDE1NjIzOGFk NzQ2YmIwHhcNMjUxMjA1MjIwMTE5WhcNMjUxMjA2MjIwMTE5WjAzMTEwLwYDVQQD Eyg4YzI5ODY5MDlmMDI0MjdmZTAyZjkxN2IxOTBlY2ZhZmU2OWFkOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiXvTDJX6bTWJ3engI/DF3DyilLo XTmsiaTtsqHfCbEsPnggLEcPt8xOlkLngEjFEHJRDyz/aH5CD0ZmMVspc4uYmjaD DrF7esGcV3bv2boFagTyllkN8Bg3zanN/iKMuaczt76TRt+MClyU3zof3nNlZilm Ay/x0leL30EekaYzqdQZSCwgr2QcGmwrtKCTQlnIQUouB8NMdJOAUjAuqGbW12lk lZavVZbd6L1EAQcBTUwCs9413ms4+4BQQldds3jS3JinyTgSsKg+8J0UqAU4qLX+ nAXIBsUE8yfCzmvu7qnvH2LxC7158sRXPw1nDppR4eVM1skQWRjArHmv7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwphpCfAkJ/4C+RexkOz6/mmtjKMB8GA1UdIwQY MBaAFL1owdrZGkEBxxU8D20BViOK10a7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2Qt MTM2OWNlZjdhNGNhLzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2QtMTM2OWNlZjdhNGNh LzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakbsmVF3 HwBxLIi2L/VY0SrHAXBwploCUaczFmCIr8IcoymYEXGaVxDwq4z2nN0OySCR8GkM IEyFbAI9kyRkYsvZOHAkcGIkNcyBxy4Ew9/kEu3oXA25IbHLOx803TDihw+ro9Lg 7Wu5p5mPtRcSvzchUAJbd3CvX2LswLAXuwWZ2yPJ/ZD2lSyfp1eK08mIX84uQW5Q w7DEjwmpBKdaaTipTkHt5xdzi+XuX/ALel2sHZGSJODxMBPDnzbvsyw6Tr+ONJO7 dBK9U6yUJAdwsEUYNniAnnlHUik1I2QaBjFFbHfxWoncDotgLse+CVBBLAs8vkG3 NXRHkBLsL/RC9w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:08 2025 by rpki-client