This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft File: vJjaCfCkWkCPW38brm2R4zM9VzI.mft (raw, json) Hash identifier: aG+SHmKrFEQ51WWMZTtrOZbbsiLD3Npd4YOGHFhsEh0= Subject key identifier: 50:70:F7:CC:66:2A:A0:CC:3F:9F:81:93:A0:E0:F6:A5:62:67:07:F3 Authority key identifier: BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32 Certificate issuer: /CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732 Certificate serial: 019B25BF48960A1A42EAA3B1A228DE3DDE16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 06:00:51 +0000 Manifest this update: Tue 16 Dec 2025 06:00:51 +0000 Manifest next update: Wed 17 Dec 2025 06:00:51 +0000 Files and hashes: 1: fxhyywtkkeQkBb1LWBBLmBYmdhw.roa (hash: JEDR1+B65jcWiXG9Txje4CaMRNTaWS3SE4CY6nIrNeE=) 2: vJjaCfCkWkCPW38brm2R4zM9VzI.crl (hash: FegB8/yGysjuH08KMrIvwQ+Xxjle7MuVj+nc3NJEK7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:48:96:0a:1a:42:ea:a3:b1:a2:28:de:3d:de:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc98da09f0a45a408f5b7f1bae6d91e3333d5732 Validity Not Before: Dec 16 06:00:51 2025 GMT Not After : Dec 17 06:00:51 2025 GMT Subject: CN=5070f7cc662aa0cc3f9f8193a0e0f6a5626707f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:a0:66:26:29:60:82:d8:82:e3:aa:25:ff: 79:0c:42:41:80:c4:23:72:6b:3f:09:39:68:07:8f: 4b:05:7b:25:12:f7:ce:e9:54:93:4f:53:a3:f3:43: aa:0e:66:94:37:16:86:34:b6:7c:97:ea:ad:72:c8: ea:b9:f2:7d:a1:63:26:8f:2a:86:5b:29:55:e4:12: c4:5b:3e:22:e0:20:cb:ec:90:85:ba:f6:d5:9b:13: 91:e6:a1:80:9a:df:37:16:26:dc:3e:02:d9:f8:a0: df:c4:f5:37:1e:42:39:2b:25:b8:24:a5:06:5f:ee: 0c:65:76:02:d5:65:19:38:07:b4:2b:cc:55:44:fd: f5:a5:92:0e:c6:a2:01:9e:8f:e6:03:3e:60:3c:e0: a7:1f:06:87:c2:13:dc:5f:5d:f4:b3:ba:ec:c2:a5: e9:7f:15:59:f0:df:50:9b:65:69:fe:aa:35:54:3e: e3:35:f9:db:ed:8c:de:a4:9e:5c:3f:33:0e:1c:60: ce:d0:4e:81:d8:3f:b6:68:6e:04:0d:ee:2b:de:b4: be:44:53:6e:9e:5f:8c:65:2b:51:b1:33:af:c4:19: 52:6c:4f:99:68:b5:6d:3d:01:73:84:cb:b5:44:b0: dc:e2:56:c3:a9:16:a9:4a:0f:0b:75:51:21:8a:51: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:70:F7:CC:66:2A:A0:CC:3F:9F:81:93:A0:E0:F6:A5:62:67:07:F3 X509v3 Authority Key Identifier: keyid:BC:98:DA:09:F0:A4:5A:40:8F:5B:7F:1B:AE:6D:91:E3:33:3D:57:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJjaCfCkWkCPW38brm2R4zM9VzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f2cd5e-fd1c-4b47-aa65-5e861165884c/1/vJjaCfCkWkCPW38brm2R4zM9VzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:96:c3:92:62:db:45:06:18:4b:3d:ff:d7:80:6f:f6:64:ab: 11:b9:ea:8d:eb:d6:96:21:de:5a:67:0c:25:c2:30:38:d1:14: ff:8d:65:48:66:81:d1:0a:ef:f5:92:01:fd:9a:30:e0:6b:27: b6:a8:24:9d:ac:dc:ea:a6:9e:03:46:ca:08:2c:1b:5b:7f:26: 42:ed:12:fd:27:5a:05:8a:63:0e:70:cc:53:5b:e9:57:77:7d: 2d:1c:86:7d:7b:03:59:0a:d2:5a:da:8a:96:5e:b9:83:ab:2a: 8c:56:31:0c:30:55:2d:f4:04:e5:91:38:e2:a6:b7:77:11:ee: cd:a4:77:53:ff:d5:64:00:66:b4:d5:20:3c:06:46:4c:21:16: 14:a7:a4:05:57:cd:d1:aa:25:49:1d:83:5c:4b:1a:bb:32:2c: 44:85:06:66:85:81:0d:3b:44:b8:a8:f3:11:d2:91:b1:37:0e: 84:e5:e0:f4:30:52:4f:a8:94:6b:26:4d:bc:c2:91:e6:fc:fc: 0a:2b:27:85:88:10:31:4b:c0:51:fb:a0:37:e2:92:0e:74:9c: 94:ab:d6:65:da:69:da:18:32:b2:84:6f:37:bd:06:fc:82:90: 9b:7d:cd:4c:5e:a6:6e:71:07:e3:ba:8f:00:c7:da:5e:00:a4: dd:09:9e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv0iWChpC6qOxoijePd4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOThkYTA5ZjBhNDVhNDA4ZjViN2YxYmFlNmQ5MWUzMzMz ZDU3MzIwHhcNMjUxMjE2MDYwMDUxWhcNMjUxMjE3MDYwMDUxWjAzMTEwLwYDVQQD Eyg1MDcwZjdjYzY2MmFhMGNjM2Y5ZjgxOTNhMGUwZjZhNTYyNjcwN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ+gZiYpYILYguOqJf95DEJBgMQj cms/CTloB49LBXslEvfO6VSTT1Oj80OqDmaUNxaGNLZ8l+qtcsjqufJ9oWMmjyqG WylV5BLEWz4i4CDL7JCFuvbVmxOR5qGAmt83FibcPgLZ+KDfxPU3HkI5KyW4JKUG X+4MZXYC1WUZOAe0K8xVRP31pZIOxqIBno/mAz5gPOCnHwaHwhPcX130s7rswqXp fxVZ8N9Qm2Vp/qo1VD7jNfnb7YzepJ5cPzMOHGDO0E6B2D+2aG4EDe4r3rS+RFNu nl+MZStRsTOvxBlSbE+ZaLVtPQFzhMu1RLDc4lbDqRapSg8LdVEhilGUYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBw98xmKqDMP5+Bk6Dg9qViZwfzMB8GA1UdIwQY MBaAFLyY2gnwpFpAj1t/G65tkeMzPVcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUt NWU4NjExNjU4ODRjLzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9mMmNkNWUtZmQxYy00YjQ3LWFhNjUtNWU4NjExNjU4ODRj LzEvdkpqYUNmQ2tXa0NQVzM4YnJtMlI0ek05VnpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspbDkmLb RQYYSz3/14Bv9mSrEbnqjevWliHeWmcMJcIwONEU/41lSGaB0Qrv9ZIB/Zow4Gsn tqgknazc6qaeA0bKCCwbW38mQu0S/SdaBYpjDnDMU1vpV3d9LRyGfXsDWQrSWtqK ll65g6sqjFYxDDBVLfQE5ZE44qa3dxHuzaR3U//VZABmtNUgPAZGTCEWFKekBVfN 0aolSR2DXEsauzIsRIUGZoWBDTtEuKjzEdKRsTcOhOXg9DBST6iUayZNvMKR5vz8 CisnhYgQMUvAUfugN+KSDnSclKvWZdpp2hgysoRvN70G/IKQm33NTF6mbnEH47qP AMfaXgCk3QmebA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:18:58 2025 by rpki-client