This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft File: vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json) Hash identifier: wCt0cCwb7xax1HY8C4LfPuu8a7gmRtdYpaW/FzBmtIE= Subject key identifier: 13:98:5C:7F:49:88:12:E3:34:26:C7:11:90:A4:63:9B:AF:9F:B7:23 Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4 Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4 Certificate serial: 019AFC5591D357D0B369E5C5714E7E7D4505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft Manifest number: 064A Signing time: Mon 08 Dec 2025 05:00:57 +0000 Manifest this update: Mon 08 Dec 2025 05:00:57 +0000 Manifest next update: Tue 09 Dec 2025 05:00:57 +0000 Files and hashes: 1: 8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa (hash: Fwwqse9/8KZUX187OjpN/LZOPaaW4loyUBTUxSbinX0=) 2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: X6RHKIuCVstpPu+YyPqQrbHxT80Qeg0iK6S53Kvj44w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:91:d3:57:d0:b3:69:e5:c5:71:4e:7e:7d:45:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4 Validity Not Before: Dec 8 05:00:57 2025 GMT Not After : Dec 9 05:00:57 2025 GMT Subject: CN=13985c7f498812e33426c71190a4639baf9fb723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:cf:74:b7:12:c0:0b:67:92:35:5b:cf:e3: 0b:36:f3:fd:5c:a6:42:b5:22:19:14:c2:9e:59:91: e3:ef:f6:6b:01:ef:9c:de:db:6c:63:19:5d:3c:32: 58:6f:9e:63:e3:72:50:e3:66:da:44:8d:8c:d5:83: e1:6d:07:75:4c:58:90:da:20:1c:39:d3:b3:a5:cc: 88:54:fc:50:95:d6:83:f1:df:df:87:3a:b9:9d:2d: 49:0d:a9:50:e7:31:2d:e0:14:df:bb:a8:14:e2:ad: fb:ec:3f:40:1d:3f:5b:1c:6f:36:89:d6:d8:55:97: 47:d9:00:40:25:15:39:b8:3c:fe:0b:91:0f:cb:c4: 29:45:7b:6a:c7:5d:06:ba:34:72:2b:1b:e1:82:2c: 45:6a:7a:b9:2a:a5:5c:c3:dc:2a:1c:d3:de:2a:16: a1:02:e7:c4:4c:a1:9e:9b:a9:dd:39:33:19:ce:4b: 1d:15:07:18:a9:2c:15:d1:90:5f:d3:63:f8:f0:1c: 9e:df:e7:21:3a:e4:65:a8:9f:57:90:30:b1:51:ef: 7d:27:07:79:5e:74:38:24:7e:d3:7b:b8:3b:7e:bf: 32:ae:43:38:21:ac:50:5d:f5:a1:d1:28:9a:90:17: 26:5e:60:31:e9:36:f8:5a:c4:01:3b:50:02:29:d2: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:98:5C:7F:49:88:12:E3:34:26:C7:11:90:A4:63:9B:AF:9F:B7:23 X509v3 Authority Key Identifier: keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:dd:1d:af:5c:54:c7:ec:99:be:b1:56:86:40:58:c3:43:72: d6:c4:10:52:48:e8:ed:c5:11:ac:94:40:54:ac:b3:97:f5:30: 14:e3:85:e7:d1:57:40:1e:55:91:80:b5:7f:95:f1:a6:42:ad: 98:93:7d:58:2a:8e:47:87:c2:97:5d:38:43:e1:e2:c9:ce:ae: a3:ae:3e:fa:5c:8f:69:cd:e1:75:ee:0f:ea:15:19:e3:11:03: 5d:54:6b:21:7e:01:e4:e7:b7:a8:4d:20:79:10:b4:2b:02:9f: 40:ee:40:78:a7:47:39:d3:5c:c9:fb:9b:1a:da:5f:cf:5f:bc: 75:de:00:08:37:a2:95:fa:c8:4c:f0:6d:ac:00:66:d7:45:6b: bd:61:4e:ad:05:87:8e:0e:7c:e6:01:67:1b:d7:3c:16:b1:99: 65:95:f7:68:d2:2e:58:b8:9e:84:01:73:ad:c9:a7:cb:bc:fd: 15:d6:d9:e3:66:57:8b:5c:dc:b3:88:9b:50:78:c0:fe:a6:e7: 04:d1:4b:15:ef:0a:e0:d2:4f:f9:6e:a5:db:36:13:96:88:bc: 8a:7a:77:ec:32:48:4a:cb:05:6d:a9:23:19:af:69:79:d0:68: c9:2a:f9:3e:1d:c0:46:e0:0e:26:17:b6:e0:a0:a7:c6:ea:f1: 9b:2a:49:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8VZHTV9CzaeXFcU5+fUUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmVlMmZmNjg2ZGU4ODljM2Y1OGRmMWQ5ZjVlMmI3OGQ2 NDFkZTQwHhcNMjUxMjA4MDUwMDU3WhcNMjUxMjA5MDUwMDU3WjAzMTEwLwYDVQQD EygxMzk4NWM3ZjQ5ODgxMmUzMzQyNmM3MTE5MGE0NjM5YmFmOWZiNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP/PdLcSwAtnkjVbz+MLNvP9XKZC tSIZFMKeWZHj7/ZrAe+c3ttsYxldPDJYb55j43JQ42baRI2M1YPhbQd1TFiQ2iAc OdOzpcyIVPxQldaD8d/fhzq5nS1JDalQ5zEt4BTfu6gU4q377D9AHT9bHG82idbY VZdH2QBAJRU5uDz+C5EPy8QpRXtqx10GujRyKxvhgixFanq5KqVcw9wqHNPeKhah AufETKGem6ndOTMZzksdFQcYqSwV0ZBf02P48Bye3+chOuRlqJ9XkDCxUe99Jwd5 XnQ4JH7Te7g7fr8yrkM4IaxQXfWh0SiakBcmXmAx6Tb4WsQBO1ACKdIVLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOYXH9JiBLjNCbHEZCkY5uvn7cjMB8GA1UdIwQY MBaAFLz+4v9obeiJw/WN8dn14reNZB3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82MDI3N2MtZDAzNy00ODVjLWE0YjAt ZGIzOTkzY2M1MTI1LzEvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82MDI3N2MtZDAzNy00ODVjLWE0YjAtZGIzOTkzY2M1MTI1 LzEvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2N0dr1xU x+yZvrFWhkBYw0Ny1sQQUkjo7cURrJRAVKyzl/UwFOOF59FXQB5VkYC1f5XxpkKt mJN9WCqOR4fCl104Q+Hiyc6uo64++lyPac3hde4P6hUZ4xEDXVRrIX4B5Oe3qE0g eRC0KwKfQO5AeKdHOdNcyfubGtpfz1+8dd4ACDeilfrITPBtrABm10VrvWFOrQWH jg585gFnG9c8FrGZZZX3aNIuWLiehAFzrcmny7z9FdbZ42ZXi1zcs4ibUHjA/qbn BNFLFe8K4NJP+W6l2zYTloi8inp37DJISssFbakjGa9pedBoySr5Ph3ARuAOJhe2 4KCnxurxmypJPg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:39:19 2025 by rpki-client