This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json) Hash identifier: bZv9J0bj/vZo77c6Oz+AmofpqL7lYEjSFpv+o291jcc= Subject key identifier: EF:A9:DA:27:D9:C9:7E:8D:DC:3C:58:AD:99:4A:8D:95:59:73:4F:A7 Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Certificate serial: 019B3CEBCFE644218DA0B6790110BB7C1A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 18:00:45 +0000 Manifest this update: Sat 20 Dec 2025 18:00:45 +0000 Manifest next update: Sun 21 Dec 2025 18:00:45 +0000 Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=) 2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: dgezLD82LwZ6Ytx6zN5c7YnCSwN7RsTW4nlrTEzdbuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:cf:e6:44:21:8d:a0:b6:79:01:10:bb:7c:1a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Validity Not Before: Dec 20 18:00:45 2025 GMT Not After : Dec 21 18:00:45 2025 GMT Subject: CN=efa9da27d9c97e8ddc3c58ad994a8d9559734fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:a0:89:53:6b:5f:e9:4a:2c:24:ff:b4:d0: ef:b3:6d:cc:db:84:65:2a:38:b5:dd:d7:5c:53:db: cc:f0:a7:36:85:ad:78:a1:05:9c:7e:04:fc:d1:4c: b8:dc:8c:2d:58:38:f7:27:7b:be:31:46:2b:1c:05: 83:f2:8a:bf:aa:1d:ff:a7:04:95:b9:4f:83:56:d5: a8:9a:af:37:f8:b4:06:3a:8e:55:d5:20:10:67:3d: b3:d3:a1:d0:0a:09:8f:09:56:13:39:d3:08:c2:eb: 3b:31:9b:05:70:25:bd:eb:30:a0:4f:91:cf:13:81: 81:5b:df:44:4e:6a:d0:f7:d7:7f:95:be:11:62:43: 4f:9d:97:27:c7:14:41:6a:a1:b1:05:fd:d1:35:dd: 58:00:27:70:ba:2d:e4:2b:dd:f8:99:32:55:a6:04: fc:80:12:84:c1:3e:92:74:3a:31:fa:5d:66:93:5c: dd:56:26:b8:b1:2c:9f:88:73:ae:2c:18:88:16:68: d6:43:bd:11:98:fe:d8:95:7d:bd:4a:1f:1e:5e:1b: 94:e2:cd:d2:04:34:25:25:50:41:19:53:bc:06:8a: 2c:2c:41:cb:37:00:52:1b:c6:e5:56:ec:70:41:9d: f8:85:1a:f2:16:03:3d:5a:8c:b4:7a:a4:ff:79:f1: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A9:DA:27:D9:C9:7E:8D:DC:3C:58:AD:99:4A:8D:95:59:73:4F:A7 X509v3 Authority Key Identifier: keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:73:f2:68:01:a5:fa:4d:9c:8d:73:6a:59:fc:5d:df:06:43: 91:65:bb:d4:d1:b5:78:2b:03:00:81:cc:8c:51:05:1a:59:58: 95:ca:29:b0:2a:26:1f:92:a8:40:0d:be:13:9a:7b:99:d1:af: 44:83:4b:e2:c7:15:1f:da:17:b6:72:e6:3a:5a:f9:f0:b5:08: 06:d2:37:39:85:6d:37:23:d1:1f:3e:f3:78:43:e8:c3:ad:71: fd:ba:73:b6:33:bd:77:6e:b2:6b:69:30:d6:50:b0:f4:82:58: 54:81:fe:6e:a8:0b:56:12:b0:a2:e1:c5:72:97:8c:98:f8:4a: fc:3d:e9:a2:de:68:2e:22:6d:d8:b6:6e:58:72:8d:81:23:53: b1:34:2b:8f:0c:bf:15:16:ae:1a:d3:e1:3e:a7:06:a8:29:83: 3e:df:8f:d0:97:84:3f:b5:48:51:8a:8d:41:13:f2:76:7f:f3: 4d:08:f9:c3:26:cc:17:24:bd:a0:fe:08:ba:53:41:42:fe:84: 95:91:3e:ba:92:62:16:d7:55:09:98:7c:cc:a2:ae:ca:72:d2: cc:d7:35:ec:d3:ae:80:2d:77:b6:63:7f:ae:5b:8d:01:d7:13: 81:9e:72:1c:6b:0d:2f:bc:a2:41:4d:b4:a8:08:6e:2e:bb:59: d5:27:a7:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868/mRCGNoLZ5ARC7fBobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWJkYzQxMDZhZGRlODllMWNlOWMzMmI4MDdiMjA4MmVi Yjk5NDQwHhcNMjUxMjIwMTgwMDQ1WhcNMjUxMjIxMTgwMDQ1WjAzMTEwLwYDVQQD EyhlZmE5ZGEyN2Q5Yzk3ZThkZGMzYzU4YWQ5OTRhOGQ5NTU5NzM0ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUmgiVNrX+lKLCT/tNDvs23M24Rl Kji13ddcU9vM8Kc2ha14oQWcfgT80Uy43IwtWDj3J3u+MUYrHAWD8oq/qh3/pwSV uU+DVtWomq83+LQGOo5V1SAQZz2z06HQCgmPCVYTOdMIwus7MZsFcCW96zCgT5HP E4GBW99ETmrQ99d/lb4RYkNPnZcnxxRBaqGxBf3RNd1YACdwui3kK934mTJVpgT8 gBKEwT6SdDox+l1mk1zdVia4sSyfiHOuLBiIFmjWQ70RmP7YlX29Sh8eXhuU4s3S BDQlJVBBGVO8BoosLEHLNwBSG8blVuxwQZ34hRryFgM9Woy0eqT/efFqRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+p2ifZyX6N3DxYrZlKjZVZc0+nMB8GA1UdIwQY MBaAFL9b3EEGrd6J4c6cMrgHsgguu5lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMt YmVkYWMxMGFhY2RjLzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMtYmVkYWMxMGFhY2Rj LzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXPyaAGl +k2cjXNqWfxd3wZDkWW71NG1eCsDAIHMjFEFGllYlcopsComH5KoQA2+E5p7mdGv RINL4scVH9oXtnLmOlr58LUIBtI3OYVtNyPRHz7zeEPow61x/bpztjO9d26ya2kw 1lCw9IJYVIH+bqgLVhKwouHFcpeMmPhK/D3pot5oLiJt2LZuWHKNgSNTsTQrjwy/ FRauGtPhPqcGqCmDPt+P0JeEP7VIUYqNQRPydn/zTQj5wybMFyS9oP4IulNBQv6E lZE+upJiFtdVCZh8zKKuynLSzNc17NOugC13tmN/rluNAdcTgZ5yHGsNL7yiQU20 qAhuLrtZ1SenEw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:18:34 2025 by rpki-client