This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json) Hash identifier: vqt07+KW5rJSx7YRA+lXobvduI1olrK3D8T/E1dyNwo= Subject key identifier: 26:F6:F9:D9:62:D1:46:B6:F9:8C:72:1A:52:92:5B:80:4A:FC:92:F6 Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Certificate serial: 019AF19ACA7380958850CE3BA4E943A1C18F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=) 2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: 1F4Fa7VDNo9Zb0q7eBIq6QoLDtfsATMKzgbv0yQzGGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ca:73:80:95:88:50:ce:3b:a4:e9:43:a1:c1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=26f6f9d962d146b6f98c721a52925b804afc92f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:bc:e9:5c:34:d6:c3:1f:48:02:b6:6f:ef: 74:38:db:8a:b7:bd:89:c1:f5:ec:d2:87:57:5b:0e: ff:ee:bd:04:89:42:a9:01:ed:54:a4:16:98:73:8c: 92:65:1b:ba:0a:d4:f0:60:bc:b0:8b:9b:81:ea:17: 4e:88:9d:c6:a3:39:c7:b0:75:44:c7:38:ac:a4:42: 9a:fe:00:37:56:1f:ff:c4:50:3a:ed:4b:2f:25:e1: a5:4e:5d:78:65:93:67:5f:14:b2:9d:96:36:54:55: af:55:2b:3b:7c:7f:fd:a5:ff:95:16:74:2a:1a:db: 23:60:ba:2e:e8:16:53:88:6b:4c:2c:7c:44:9b:e2: a5:bc:13:82:9e:fd:37:0f:c2:0d:05:5f:77:c3:a0: cf:28:a9:bb:67:ce:d8:fa:50:0c:01:9d:f4:7a:0a: a4:92:26:29:ee:5b:1f:2b:0c:7b:d5:42:6e:7e:2a: 03:c0:c0:b0:b5:ef:4d:2f:52:7e:e0:27:03:09:eb: b0:46:e4:8d:4d:31:27:ef:16:83:21:be:5c:d3:13: 50:79:9c:6b:14:51:51:9f:cd:40:be:74:9f:b4:5b: 58:64:38:e4:13:52:42:c9:20:d8:39:62:7b:ae:85: 44:fa:88:41:32:06:e1:ad:a1:63:d2:9c:f8:b9:14: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:F9:D9:62:D1:46:B6:F9:8C:72:1A:52:92:5B:80:4A:FC:92:F6 X509v3 Authority Key Identifier: keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:64:73:a4:ea:36:70:7a:a2:93:68:3b:d0:09:50:1c:07:5d: f5:59:69:e5:10:ad:ea:18:ed:47:8c:69:48:21:11:ea:30:93: 5f:44:c2:66:2b:74:0a:c3:9c:37:2e:e6:8c:48:8b:54:60:e9: 42:7e:2a:50:f6:c8:3c:67:50:c7:3e:7d:9c:7b:27:58:02:6f: 6c:e5:82:3e:38:a2:ba:75:a2:5c:ba:ed:92:16:38:9f:21:6e: c7:71:f6:e7:f4:3e:92:ae:90:6c:e7:44:29:b0:1f:da:17:c5: de:4c:77:cd:34:90:28:47:55:9b:32:a6:28:a2:16:65:25:69: c7:c7:ee:e4:bb:fc:0d:57:00:66:bb:79:d5:67:a1:be:95:32: f1:56:99:ca:c9:5a:df:df:eb:39:a8:f4:1e:21:14:3f:7e:db: 91:de:41:9c:eb:9b:d6:a2:43:0d:fc:f0:f4:6f:25:a2:d7:6b: 31:7c:50:12:a1:de:e3:70:c0:f5:b5:06:a2:56:76:3b:ec:20: 05:9a:c9:9b:b2:0d:27:e5:91:e5:5c:62:27:83:b2:89:b8:fe: 3a:da:bd:8e:d9:bd:77:6e:1e:da:e2:28:ec:15:e5:84:e7:11: 19:4a:2e:f2:2f:e2:f0:35:14:4c:ac:17:24:f2:61:04:99:4d: 32:9a:dd:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmspzgJWIUM47pOlDocGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWJkYzQxMDZhZGRlODllMWNlOWMzMmI4MDdiMjA4MmVi Yjk5NDQwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD EygyNmY2ZjlkOTYyZDE0NmI2Zjk4YzcyMWE1MjkyNWI4MDRhZmM5MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKa86Vw01sMfSAK2b+90ONuKt72J wfXs0odXWw7/7r0EiUKpAe1UpBaYc4ySZRu6CtTwYLywi5uB6hdOiJ3GoznHsHVE xzispEKa/gA3Vh//xFA67UsvJeGlTl14ZZNnXxSynZY2VFWvVSs7fH/9pf+VFnQq GtsjYLou6BZTiGtMLHxEm+KlvBOCnv03D8INBV93w6DPKKm7Z87Y+lAMAZ30egqk kiYp7lsfKwx71UJufioDwMCwte9NL1J+4CcDCeuwRuSNTTEn7xaDIb5c0xNQeZxr FFFRn81AvnSftFtYZDjkE1JCySDYOWJ7roVE+ohBMgbhraFj0pz4uRQ6UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb2+dli0Ua2+YxyGlKSW4BK/JL2MB8GA1UdIwQY MBaAFL9b3EEGrd6J4c6cMrgHsgguu5lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMt YmVkYWMxMGFhY2RjLzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMtYmVkYWMxMGFhY2Rj LzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2RzpOo2 cHqik2g70AlQHAdd9Vlp5RCt6hjtR4xpSCER6jCTX0TCZit0CsOcNy7mjEiLVGDp Qn4qUPbIPGdQxz59nHsnWAJvbOWCPjiiunWiXLrtkhY4nyFux3H25/Q+kq6QbOdE KbAf2hfF3kx3zTSQKEdVmzKmKKIWZSVpx8fu5Lv8DVcAZrt51WehvpUy8VaZysla 39/rOaj0HiEUP37bkd5BnOub1qJDDfzw9G8lotdrMXxQEqHe43DA9bUGolZ2O+wg BZrJm7INJ+WR5VxiJ4Oyibj+Otq9jtm9d24e2uIo7BXlhOcRGUou8i/i8DUUTKwX JPJhBJlNMprdZg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:36 2025 by rpki-client