This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json) Hash identifier: WHrD28rYUwT3017rUgUEZ4Ua4HUB5RxjcMCZlSwX9tg= Subject key identifier: 57:FE:10:47:25:60:62:8F:16:E9:A0:D9:5F:B0:0B:87:84:21:FB:DD Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Certificate serial: 019AFB437BA22D451C3BEBB2F8E18AB531E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft Manifest number: 163F Signing time: Mon 08 Dec 2025 00:01:34 +0000 Manifest this update: Mon 08 Dec 2025 00:01:34 +0000 Manifest next update: Tue 09 Dec 2025 00:01:34 +0000 Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=) 2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: b7vBY6dEZQFVh+diEMMtXet3EMH+avZZWrqPrQENrQc=) 3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:7b:a2:2d:45:1c:3b:eb:b2:f8:e1:8a:b5:31:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Validity Not Before: Dec 8 00:01:34 2025 GMT Not After : Dec 9 00:01:34 2025 GMT Subject: CN=57fe10472560628f16e9a0d95fb00b878421fbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f1:af:60:8d:e5:87:8a:4f:f1:7b:af:2a:49: 8c:d4:2d:b4:0d:20:ce:34:74:81:2f:56:94:d9:a8: 53:f9:54:af:ae:59:66:de:c3:00:26:2d:22:79:27: d2:a1:b6:63:05:c9:2b:21:e2:ff:dd:19:d5:ac:1b: 4f:53:99:94:7a:de:34:9a:40:3d:81:7e:6b:8e:b2: 68:ba:ce:2c:e2:87:e5:11:2e:8d:c6:84:f6:04:78: 50:eb:72:09:88:1c:28:0b:7f:08:3d:48:3a:61:27: fe:4b:b8:58:5c:43:ac:74:b0:1c:e6:71:99:3e:3c: bb:df:66:a2:59:51:6c:24:11:4f:5c:37:54:3c:f2: 20:75:48:54:9e:3a:a8:13:77:65:68:c0:a5:21:12: 67:5e:23:1b:15:1d:0a:a9:ad:d3:e8:9d:34:90:c5: a6:73:aa:91:61:c8:68:07:2d:fa:5f:20:f6:3d:61: d5:be:dd:b9:42:96:83:ec:46:86:ee:7b:d7:f9:b4: 79:12:cd:9f:73:ce:51:ca:1f:93:79:1f:70:6b:40: 40:87:88:51:11:26:bd:dd:c8:2a:21:8f:2d:14:21: 2d:fc:92:f9:78:38:b0:3a:64:07:37:4b:35:4e:1d: a4:1d:41:ac:2a:fc:04:c9:2b:97:d9:2f:8c:04:02: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:10:47:25:60:62:8F:16:E9:A0:D9:5F:B0:0B:87:84:21:FB:DD X509v3 Authority Key Identifier: keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:99:9d:a8:aa:1a:6c:57:1b:f2:fe:ec:80:fe:59:bb:3e:ad: c5:8b:51:38:8c:26:9d:73:f2:ac:4d:11:4d:af:54:3a:68:63: 01:fa:1d:ff:7c:39:a5:43:4f:1e:c6:0c:df:5a:bf:77:f4:69: 12:e5:62:c1:c4:da:3a:bf:88:ce:e4:e3:88:e7:51:40:6f:a8: ac:e3:c3:bf:f8:cb:22:cd:c2:c5:1c:87:40:2b:7c:eb:0c:00: b1:09:ab:12:dc:aa:0f:16:7b:c2:c7:a5:c0:83:b0:d3:16:18: e3:62:b8:dd:18:73:9f:a5:a8:62:c7:78:37:3b:4a:bd:c9:90: 05:78:e5:3d:de:5f:60:12:35:38:73:77:53:d9:9f:7b:41:b5: 37:2b:3a:5d:f7:ff:b2:30:4c:32:30:44:e5:ba:cd:a6:05:1d: 72:6c:01:08:6b:92:fc:0c:42:11:5b:42:d5:87:bc:9e:8d:d6: 9b:8c:79:23:ed:f2:b2:b0:53:d0:5c:88:a0:31:8a:0c:fd:db: f1:b8:7a:60:01:67:dc:56:55:d8:30:ab:f8:1c:2b:0d:b0:98: 82:38:54:f2:40:22:0e:23:52:ac:68:62:19:b2:7d:90:9a:5a: ba:f3:88:84:93:69:bd:d3:70:c9:7f:4a:46:a3:0d:94:61:b2: 28:3b:68:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7Q3uiLUUcO+uy+OGKtTHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx MjU1OTkwHhcNMjUxMjA4MDAwMTM0WhcNMjUxMjA5MDAwMTM0WjAzMTEwLwYDVQQD Eyg1N2ZlMTA0NzI1NjA2MjhmMTZlOWEwZDk1ZmIwMGI4Nzg0MjFmYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/GvYI3lh4pP8XuvKkmM1C20DSDO NHSBL1aU2ahT+VSvrllm3sMAJi0ieSfSobZjBckrIeL/3RnVrBtPU5mUet40mkA9 gX5rjrJous4s4oflES6NxoT2BHhQ63IJiBwoC38IPUg6YSf+S7hYXEOsdLAc5nGZ Pjy732aiWVFsJBFPXDdUPPIgdUhUnjqoE3dlaMClIRJnXiMbFR0Kqa3T6J00kMWm c6qRYchoBy36XyD2PWHVvt25QpaD7EaG7nvX+bR5Es2fc85Ryh+TeR9wa0BAh4hR ESa93cgqIY8tFCEt/JL5eDiwOmQHN0s1Th2kHUGsKvwEySuX2S+MBAInhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf+EEclYGKPFumg2V+wC4eEIfvdMB8GA1UdIwQY MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5mdqKoa bFcb8v7sgP5Zuz6txYtROIwmnXPyrE0RTa9UOmhjAfod/3w5pUNPHsYM31q/d/Rp EuViwcTaOr+IzuTjiOdRQG+orOPDv/jLIs3CxRyHQCt86wwAsQmrEtyqDxZ7wsel wIOw0xYY42K43Rhzn6WoYsd4NztKvcmQBXjlPd5fYBI1OHN3U9mfe0G1Nys6Xff/ sjBMMjBE5brNpgUdcmwBCGuS/AxCEVtC1Ye8no3Wm4x5I+3ysrBT0FyIoDGKDP3b 8bh6YAFn3FZV2DCr+BwrDbCYgjhU8kAiDiNSrGhiGbJ9kJpauvOIhJNpvdNwyX9K RqMNlGGyKDtoVQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:47 2025 by rpki-client