This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json) Hash identifier: oOvqsVv3Eaxs5tCDLHCOyMvVmEQGAadGYwSOUagCxdY= Subject key identifier: 5C:55:53:0A:E1:1F:E7:27:AF:B2:7B:F4:14:A8:11:93:C5:6B:93:49 Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47 Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847 Certificate serial: 019B2BC22D644120B7FAC10CFC10DB33E850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 10:01:44 +0000 Manifest this update: Wed 17 Dec 2025 10:01:44 +0000 Manifest next update: Thu 18 Dec 2025 10:01:44 +0000 Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=) 2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=) 3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: pR8I7a3fXTPd7T9bpf/qquqNN9I1HtflXJMVL0z7BPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:2d:64:41:20:b7:fa:c1:0c:fc:10:db:33:e8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847 Validity Not Before: Dec 17 10:01:44 2025 GMT Not After : Dec 18 10:01:44 2025 GMT Subject: CN=5c55530ae11fe727afb27bf414a81193c56b9349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:a3:00:c2:bc:cd:df:a8:0a:bc:e9:66:4f: 94:b1:a0:39:31:b6:af:71:48:33:43:f8:53:57:ae: b4:9e:b5:9a:7d:1e:0c:18:f0:73:49:6c:fe:59:46: 93:86:54:51:d5:90:2d:09:8f:a1:f0:ce:d2:82:83: ea:b3:21:bf:ab:74:c3:c5:a7:73:26:31:1c:d5:41: 82:a0:f6:45:bc:57:2a:c3:b9:27:ef:86:3f:66:a4: 3f:d7:ee:bb:05:7d:94:82:00:fe:21:e9:38:48:40: 2c:73:23:2a:92:7a:e7:02:ff:8d:52:85:d3:e9:7a: 47:15:98:83:f8:7c:bb:79:38:0c:d1:09:e0:5b:b4: f1:22:18:f5:1b:f5:6d:f5:76:80:d0:c5:b1:3e:95: f0:e6:85:3b:a6:f4:8b:41:71:08:06:94:66:c2:1d: ab:26:63:ac:98:d3:8f:0a:9a:38:39:75:06:30:53: 1e:97:c5:ac:a0:f5:08:26:0f:56:73:bf:00:3e:70: b5:70:b5:29:3f:77:05:9b:7f:df:53:d0:42:80:6e: 99:af:76:d7:db:91:6a:c6:49:60:44:86:6b:43:84: 67:58:6a:a5:ca:94:96:aa:d3:2a:b2:31:e3:23:d2: f0:23:5d:d1:65:dc:53:e8:2f:28:35:a5:d9:b7:a5: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:55:53:0A:E1:1F:E7:27:AF:B2:7B:F4:14:A8:11:93:C5:6B:93:49 X509v3 Authority Key Identifier: keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:61:1e:db:49:31:d9:2c:a2:b7:cc:da:a2:ae:be:5f:b2:6e: ed:fd:9e:01:fd:67:22:7c:65:c8:09:10:a8:10:a2:c7:4b:f1: 55:42:45:65:22:07:52:22:80:17:d8:58:4e:f1:b7:98:2b:6f: ca:9e:2f:ce:32:17:b6:81:f9:5c:74:ce:53:7b:74:10:e3:78: 9d:ed:8f:ea:54:6e:70:20:a7:ab:e6:52:1e:88:71:a3:91:95: 4f:3f:0a:47:cd:68:ab:c1:a7:14:6c:cb:b3:d7:8b:67:13:88: c9:d1:be:7f:83:9e:22:82:37:01:33:53:75:6c:54:d5:f1:2e: a8:29:67:12:c1:0c:86:19:ba:f1:6b:2f:05:52:38:4f:1b:e8: 25:66:43:da:88:d0:ca:d6:cd:ec:35:8a:5c:9b:58:6f:92:e0: 3e:e0:3a:9c:58:8a:9c:ec:e1:bc:8a:e5:d4:f2:ba:4f:a7:07: 0c:87:84:8e:07:b6:cb:ac:2b:fd:02:c0:cc:65:53:7b:2b:73: 38:dd:e5:05:4d:90:84:eb:4d:d4:d3:b3:93:fa:6a:a7:46:c8: 38:a7:17:b4:b8:dd:f5:10:39:5a:bb:6a:81:c2:59:bc:23:33: 2d:f9:93:d8:b8:00:8e:f0:ca:e8:20:32:f6:60:7e:de:1d:0d: ea:24:b5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwi1kQSC3+sEM/BDbM+hQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTM1NDJkZDYzZmVkMjUwZGU1Y2I2NWY2ZWNhNDg3ZTdm NDc4NDcwHhcNMjUxMjE3MTAwMTQ0WhcNMjUxMjE4MTAwMTQ0WjAzMTEwLwYDVQQD Eyg1YzU1NTMwYWUxMWZlNzI3YWZiMjdiZjQxNGE4MTE5M2M1NmI5MzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr+jAMK8zd+oCrzpZk+UsaA5Mbav cUgzQ/hTV660nrWafR4MGPBzSWz+WUaThlRR1ZAtCY+h8M7SgoPqsyG/q3TDxadz JjEc1UGCoPZFvFcqw7kn74Y/ZqQ/1+67BX2UggD+Iek4SEAscyMqknrnAv+NUoXT 6XpHFZiD+Hy7eTgM0QngW7TxIhj1G/Vt9XaA0MWxPpXw5oU7pvSLQXEIBpRmwh2r JmOsmNOPCpo4OXUGMFMel8WsoPUIJg9Wc78APnC1cLUpP3cFm3/fU9BCgG6Zr3bX 25FqxklgRIZrQ4RnWGqlypSWqtMqsjHjI9LwI13RZdxT6C8oNaXZt6WHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxVUwrhH+cnr7J79BSoEZPFa5NJMB8GA1UdIwQY MBaAFL/jVC3WP+0lDeXLZfbspIfn9HhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEt OGQzYTZkMTY1ZGEzLzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEtOGQzYTZkMTY1ZGEz LzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWEe20kx 2Syit8zaoq6+X7Ju7f2eAf1nInxlyAkQqBCix0vxVUJFZSIHUiKAF9hYTvG3mCtv yp4vzjIXtoH5XHTOU3t0EON4ne2P6lRucCCnq+ZSHohxo5GVTz8KR81oq8GnFGzL s9eLZxOIydG+f4OeIoI3ATNTdWxU1fEuqClnEsEMhhm68WsvBVI4TxvoJWZD2ojQ ytbN7DWKXJtYb5LgPuA6nFiKnOzhvIrl1PK6T6cHDIeEjge2y6wr/QLAzGVTeytz ON3lBU2QhOtN1NOzk/pqp0bIOKcXtLjd9RA5WrtqgcJZvCMzLfmT2LgAjvDK6CAy 9mB+3h0N6iS1jw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:13 2025 by rpki-client