This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json) Hash identifier: 4Oj9FH93/fbj2tPGu8eedNRotJvwoeUND+oRW/kMQKo= Subject key identifier: 15:2E:84:62:81:DF:5F:17:0F:7C:3C:22:4A:4B:CA:D8:52:23:F6:3B Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d Certificate serial: 019AF2AD43295482C7FE76FC0D5FC6516E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 08:00:32 +0000 Manifest this update: Sat 06 Dec 2025 08:00:32 +0000 Manifest next update: Sun 07 Dec 2025 08:00:32 +0000 Files and hashes: 1: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=) 2: VJMTsLB0DoA7dIhG-PlGlwqEhfg.roa (hash: zqcr9YUGQTYEQLg2JeQTvIegn0/uHC3qCTzqhOaEtjE=) 3: fyx1ny3-_FInDq0dmTByBfBn0j8.roa (hash: oB7Zx3DOWzJhigoLM671xc6bT3MSHf/pGnlfM7WSuvs=) 4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: 8e54n+86ZpgU41gVUo07U4o8i1LtVdhBuPfpqk1XgUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:43:29:54:82:c7:fe:76:fc:0d:5f:c6:51:6e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d Validity Not Before: Dec 6 08:00:32 2025 GMT Not After : Dec 7 08:00:32 2025 GMT Subject: CN=152e846281df5f170f7c3c224a4bcad85223f63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:e5:fc:47:b0:13:06:83:28:61:cf:01:35: 6c:c0:84:31:7d:a4:6f:54:fd:2d:a2:02:12:da:bf: 17:89:1e:ab:39:50:80:e1:cf:3c:1c:70:12:0d:0c: e3:81:14:a0:fc:ff:07:cc:5d:1c:cd:d5:d8:85:4b: 7e:b4:81:b4:b5:a3:a8:87:2c:8c:eb:1a:13:f7:b2: 9b:6c:72:dd:1f:6d:72:42:51:6b:6e:47:5c:9f:59: 61:8a:d8:c6:a1:4c:a6:a8:c3:39:ae:63:ab:f5:71: 28:80:35:f5:7b:dc:06:ec:84:de:95:2d:c5:9d:27: 51:c1:d6:c2:ca:93:8c:5e:6f:72:87:85:61:73:53: 06:27:59:bc:18:d9:cb:e0:65:15:80:d6:78:80:5b: f8:89:3b:0a:fd:23:c5:4b:4a:ce:23:ac:ec:52:78: 2c:69:c2:00:44:2d:d6:db:c3:fd:2c:33:6a:26:fb: e3:47:67:66:20:11:77:68:77:c5:78:5c:e5:87:ba: d5:f7:2a:7d:31:43:1d:bd:30:23:ca:2e:c4:70:53: b8:11:e6:e1:6c:18:62:39:fd:d8:30:11:98:10:0b: 50:b9:46:55:bf:c4:05:4a:52:2c:95:57:27:85:71: 0d:8e:d3:71:df:2e:f1:0e:14:ec:95:b2:7f:45:6a: 75:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2E:84:62:81:DF:5F:17:0F:7C:3C:22:4A:4B:CA:D8:52:23:F6:3B X509v3 Authority Key Identifier: keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e6:1c:c2:b5:86:f3:69:b1:55:13:96:bd:dc:08:ee:e6:49: f9:5a:5f:34:4a:91:f8:46:9b:53:18:a8:3a:29:4d:2c:f5:5f: 00:2b:77:ea:f4:35:57:91:e3:90:60:7e:fe:a7:01:f8:51:3f: f9:eb:6b:f8:ae:be:34:4b:42:13:37:bd:f1:e1:18:93:a9:cf: ee:99:ec:2e:a3:7f:40:33:10:ea:41:b5:61:86:38:d6:39:e5: b0:b9:e9:02:41:ef:a5:c7:8e:46:2a:f6:6f:2e:46:02:96:51: f6:78:c7:28:e4:93:1c:6a:27:e1:61:3d:a2:5f:85:69:df:bd: 30:72:43:7b:27:d7:ac:ef:42:df:90:ac:ec:c0:3d:23:c9:cb: af:fc:31:40:fa:f6:96:e2:62:e4:94:b8:98:8b:c3:d7:9a:71: 72:c1:f0:93:f0:b8:39:bc:32:d6:82:78:30:42:cb:f9:79:98: 56:73:35:36:af:8f:9e:75:1f:75:77:87:a5:c4:44:32:80:ac: 6f:44:a1:73:ad:49:43:67:9b:43:0d:5b:df:90:cd:8d:81:40: 6c:c7:f9:5e:c1:c7:dc:65:31:20:86:fd:89:f4:17:8b:84:cc: e9:98:70:f8:11:5d:44:ed:32:96:7e:b4:f4:9b:6c:b7:e0:aa: b6:fe:8c:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUMpVILH/nb8DV/GUW5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm MTU4N2QwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD EygxNTJlODQ2MjgxZGY1ZjE3MGY3YzNjMjI0YTRiY2FkODUyMjNmNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHXl/EewEwaDKGHPATVswIQxfaRv VP0togIS2r8XiR6rOVCA4c88HHASDQzjgRSg/P8HzF0czdXYhUt+tIG0taOohyyM 6xoT97KbbHLdH21yQlFrbkdcn1lhitjGoUymqMM5rmOr9XEogDX1e9wG7ITelS3F nSdRwdbCypOMXm9yh4Vhc1MGJ1m8GNnL4GUVgNZ4gFv4iTsK/SPFS0rOI6zsUngs acIARC3W28P9LDNqJvvjR2dmIBF3aHfFeFzlh7rV9yp9MUMdvTAjyi7EcFO4Eebh bBhiOf3YMBGYEAtQuUZVv8QFSlIslVcnhXENjtNx3y7xDhTslbJ/RWp1fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUuhGKB318XD3w8IkpLythSI/Y7MB8GA1UdIwQY MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt MDk5MGNlNzQ4MWU3LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3 LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauYcwrWG 82mxVROWvdwI7uZJ+VpfNEqR+EabUxioOilNLPVfACt36vQ1V5HjkGB+/qcB+FE/ +etr+K6+NEtCEze98eEYk6nP7pnsLqN/QDMQ6kG1YYY41jnlsLnpAkHvpceORir2 by5GApZR9njHKOSTHGon4WE9ol+Fad+9MHJDeyfXrO9C35Cs7MA9I8nLr/wxQPr2 luJi5JS4mIvD15pxcsHwk/C4Obwy1oJ4MELL+XmYVnM1Nq+PnnUfdXeHpcREMoCs b0Shc61JQ2ebQw1b35DNjYFAbMf5XsHH3GUxIIb9ifQXi4TM6Zhw+BFdRO0yln60 9Jtst+Cqtv6MrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:12 2025 by rpki-client