This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json) Hash identifier: h40RRa4kpvzFqMwyCOKtt9bjwL1pbewALD5VGahAMIU= Subject key identifier: AC:FA:11:30:44:FE:C8:06:D0:C8:22:85:0F:7A:5A:BC:B3:B4:9E:26 Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Certificate serial: 019AF1D1D853641C8374E4264AB908C49758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=) 2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: 7mnEz24tH9VY4sjJnWudimBtY5kKFbMe1m0FfOUkDUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d8:53:64:1c:83:74:e4:26:4a:b9:08:c4:97:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=acfa113044fec806d0c822850f7a5abcb3b49e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:12:a9:9d:5c:0b:b2:ad:a8:bb:9d:72:2d: ce:5d:f8:95:8a:98:72:c9:26:50:65:07:bd:d7:55: 0f:67:7d:9f:10:78:81:41:b4:a2:05:db:41:1c:2b: df:16:29:02:0c:0e:b6:94:68:b9:b7:c8:28:0f:bb: 10:86:a6:ab:4b:47:52:d1:da:48:28:df:37:fb:18: 6c:cd:ff:91:bb:36:98:02:01:ae:05:a1:51:fd:7f: 90:c5:d5:07:00:cc:d8:ec:fd:27:af:10:33:ea:0a: a7:ed:c9:18:26:2c:4c:40:4d:f8:89:1e:72:72:6c: 84:c7:e0:5d:38:5f:55:f4:b2:0c:3b:c1:94:2d:a9: e2:52:0f:54:d9:76:02:3f:29:70:fc:0e:c7:68:ff: 15:f2:33:ea:24:4d:1e:f0:08:99:dd:39:48:14:30: a5:dd:a6:15:8d:8d:c6:b2:4e:f8:4b:84:45:58:27: d5:f6:47:fd:41:f0:fc:48:6a:3b:79:cd:db:86:c8: 72:53:df:11:b7:e8:33:f4:7c:a3:94:16:fa:54:eb: 30:c8:8f:28:0b:98:2a:34:9f:c4:60:a3:45:5c:3f: db:8f:50:22:01:55:e8:b5:71:ef:14:7e:20:a5:46: 02:4d:21:93:25:0a:19:e7:da:56:1a:55:f1:36:0d: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FA:11:30:44:FE:C8:06:D0:C8:22:85:0F:7A:5A:BC:B3:B4:9E:26 X509v3 Authority Key Identifier: keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2c:4c:c0:40:2e:e7:a4:8c:ac:4c:d4:21:0b:72:58:db:15: ef:d1:38:cd:86:b0:83:99:14:58:01:29:5d:0f:eb:27:2c:03: eb:69:b9:10:13:8a:ca:55:21:71:52:22:2a:23:68:ff:bc:f6: ae:14:66:53:e8:6b:20:8d:71:bc:48:de:d5:06:13:e0:78:68: 62:b9:d4:1d:1f:79:62:84:e4:8b:9c:0c:3c:36:a3:cf:c9:96: f4:00:ee:b9:b6:56:30:a5:29:f7:14:a3:eb:89:3a:12:6d:2a: f0:37:b4:56:a8:af:50:ce:53:be:48:e2:9d:78:4d:2d:5c:72: 86:b2:94:26:91:1c:81:60:e6:7b:77:bc:a5:fd:43:ae:fa:33: 99:1f:02:71:50:8a:98:26:26:83:7e:91:3c:3e:49:44:c9:73: e7:40:21:d3:e8:1c:2b:f7:4f:c5:29:bc:ea:c4:97:83:b9:8a: 31:1b:e1:16:fa:93:b5:ec:f4:aa:fc:9f:81:a3:75:f4:38:65: a1:3c:04:26:67:98:8f:77:b7:3a:10:bf:23:41:f6:67:e2:cc: 6c:c1:9c:fe:f5:f3:da:ca:e3:06:1b:25:a3:d2:ad:99:01:96: 60:db:a6:1f:05:93:83:74:ea:ed:73:18:27:7c:b5:b7:91:00: 4c:18:5c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dhTZByDdOQmSrkIxJdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNWY4M2VlMDJiMTczNzQ4YmU1ZGUzYjNiOWMyNTMxNzk5 MjY4ZTgwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhhY2ZhMTEzMDQ0ZmVjODA2ZDBjODIyODUwZjdhNWFiY2IzYjQ5ZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj44SqZ1cC7KtqLudci3OXfiViphy ySZQZQe911UPZ32fEHiBQbSiBdtBHCvfFikCDA62lGi5t8goD7sQhqarS0dS0dpI KN83+xhszf+RuzaYAgGuBaFR/X+QxdUHAMzY7P0nrxAz6gqn7ckYJixMQE34iR5y cmyEx+BdOF9V9LIMO8GULaniUg9U2XYCPylw/A7HaP8V8jPqJE0e8AiZ3TlIFDCl 3aYVjY3Gsk74S4RFWCfV9kf9QfD8SGo7ec3bhshyU98Rt+gz9HyjlBb6VOswyI8o C5gqNJ/EYKNFXD/bj1AiAVXotXHvFH4gpUYCTSGTJQoZ59pWGlXxNg3WJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz6ETBE/sgG0MgihQ96WryztJ4mMB8GA1UdIwQY MBaAFG1fg+4CsXN0i+XeOzucJTF5kmjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzIt YjJlN2ZlZmY0MDJmLzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzItYjJlN2ZlZmY0MDJm LzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACixMwEAu 56SMrEzUIQtyWNsV79E4zYawg5kUWAEpXQ/rJywD62m5EBOKylUhcVIiKiNo/7z2 rhRmU+hrII1xvEje1QYT4HhoYrnUHR95YoTki5wMPDajz8mW9ADuubZWMKUp9xSj 64k6Em0q8De0VqivUM5TvkjinXhNLVxyhrKUJpEcgWDme3e8pf1DrvozmR8CcVCK mCYmg36RPD5JRMlz50Ah0+gcK/dPxSm86sSXg7mKMRvhFvqTtez0qvyfgaN19Dhl oTwEJmeYj3e3OhC/I0H2Z+LMbMGc/vXz2srjBhslo9KtmQGWYNumHwWTg3Tq7XMY J3y1t5EATBhcTw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:58 2025 by rpki-client