This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft File: vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json) Hash identifier: V4WZNdCecrdryqwQ9xRJ6K5nfv0jXcjj6gxuldz+d7g= Subject key identifier: 7A:5C:10:C8:CF:1B:A3:EB:58:DC:4D:0D:F7:99:33:D7:E3:25:4E:D3 Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13 Certificate serial: 019B3C7E6A191B65DD702DD38D39EDEEB669 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:16 +0000 Manifest this update: Sat 20 Dec 2025 16:01:16 +0000 Manifest next update: Sun 21 Dec 2025 16:01:16 +0000 Files and hashes: 1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=) 2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=) 3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=) 4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=) 5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=) 6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: X72xjWNpzHqiU1izYuwLLolPxp4dTkMehw1JxL4DiN8=) 7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:6a:19:1b:65:dd:70:2d:d3:8d:39:ed:ee:b6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13 Validity Not Before: Dec 20 16:01:16 2025 GMT Not After : Dec 21 16:01:16 2025 GMT Subject: CN=7a5c10c8cf1ba3eb58dc4d0df79933d7e3254ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:ba:ef:13:20:e0:d9:6e:e0:39:b8:10:3f: e4:08:81:bf:02:64:f4:b2:53:10:e9:ae:02:0c:7b: c7:19:61:8b:fa:b3:dc:86:b1:34:02:36:e5:b1:bd: c7:3c:c2:c5:38:34:84:1e:c3:c9:7b:bd:a2:ce:b0: b1:99:d2:96:6f:dd:36:9d:0a:ab:81:b8:1c:c8:5a: 08:d2:85:c2:c2:87:49:ad:2d:0d:45:9b:47:ae:00: 72:62:50:c9:8a:57:f3:6c:d7:e7:c9:b6:75:46:19: d8:03:d5:4a:02:6f:93:c1:43:cf:2e:29:31:ff:9d: 92:cf:f6:af:12:90:68:18:fe:da:8d:75:aa:b1:84: c0:ea:e9:c6:1a:6f:21:e1:70:9a:05:3f:9d:75:c1: 88:56:7a:00:a9:1d:77:aa:a9:2b:50:3c:d7:e3:d1: 3b:b4:bc:b4:9f:96:0b:ec:da:7a:f9:96:62:03:ff: 8d:8a:9b:a4:4d:76:29:8f:7c:9d:30:6a:8f:37:c6: f0:42:58:f7:8a:33:56:80:d6:45:96:f8:14:3a:84: 28:65:01:fb:38:6c:a7:ab:b8:09:68:1e:df:3d:fd: 65:d1:2c:84:ac:79:8b:0e:09:2f:05:0b:58:b9:89: 69:e4:26:90:d3:65:7e:c7:6e:33:4c:ac:0f:be:cc: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5C:10:C8:CF:1B:A3:EB:58:DC:4D:0D:F7:99:33:D7:E3:25:4E:D3 X509v3 Authority Key Identifier: keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e0:9b:c6:6e:09:4f:65:aa:cf:04:f7:23:ec:4c:0e:b3:9e: 01:18:29:16:4e:e5:88:b3:4d:db:e0:32:cc:5b:bc:02:60:29: 9d:35:43:cb:6d:19:58:2e:3e:ec:04:b4:3f:7c:13:09:db:6f: 91:58:cd:5a:a4:62:80:e6:d8:76:1b:9d:2b:7c:b9:f0:bd:d7: 6c:d9:41:c4:99:78:65:45:ac:10:7e:13:d6:e3:6a:04:0a:0d: 84:6e:b9:29:cb:f6:f3:af:22:d5:7a:70:81:ef:d5:28:89:25: cd:1d:da:6c:47:20:3a:9d:ac:8c:eb:5b:23:25:a9:3e:61:b0: b7:33:9d:67:c9:b4:78:30:7a:b7:08:f5:ca:2a:7a:ca:e6:8c: c1:44:f3:d8:a2:89:dd:cb:36:c5:3f:52:64:a2:c9:a6:8c:ca: c4:2e:e9:c2:ce:73:e1:cc:0b:7c:73:6a:e9:15:d6:25:4a:d8: 63:a1:11:5d:1a:6c:f2:58:7f:39:74:93:e3:28:58:79:d1:dc: 4b:6b:d1:73:46:5e:25:e7:3e:0b:58:be:5a:81:aa:8c:9f:4e: ca:a7:f5:02:0d:98:41:38:30:07:35:bf:ce:eb:83:df:10:d3: aa:51:e5:13:bd:48:79:c5:7c:79:4b:f0:b0:52:54:2a:5d:ef: 5a:12:58:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmoZG2XdcC3TjTnt7rZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2U1OTA3MTFhZTdmY2IwMTZlZWI3Mzc2YjBhN2ZjNzY2 MWNiMTMwHhcNMjUxMjIwMTYwMTE2WhcNMjUxMjIxMTYwMTE2WjAzMTEwLwYDVQQD Eyg3YTVjMTBjOGNmMWJhM2ViNThkYzRkMGRmNzk5MzNkN2UzMjU0ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoO67xMg4Nlu4Dm4ED/kCIG/AmT0 slMQ6a4CDHvHGWGL+rPchrE0Ajblsb3HPMLFODSEHsPJe72izrCxmdKWb902nQqr gbgcyFoI0oXCwodJrS0NRZtHrgByYlDJilfzbNfnybZ1RhnYA9VKAm+TwUPPLikx /52Sz/avEpBoGP7ajXWqsYTA6unGGm8h4XCaBT+ddcGIVnoAqR13qqkrUDzX49E7 tLy0n5YL7Np6+ZZiA/+NipukTXYpj3ydMGqPN8bwQlj3ijNWgNZFlvgUOoQoZQH7 OGynq7gJaB7fPf1l0SyErHmLDgkvBQtYuYlp5CaQ02V+x24zTKwPvsyPpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpcEMjPG6PrWNxNDfeZM9fjJU7TMB8GA1UdIwQY MBaAFLzOWQcRrn/LAW7rc3awp/x2YcsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUt MDVkYjQ5N2FjNDU1LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUtMDVkYjQ5N2FjNDU1 LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuCbxm4J T2WqzwT3I+xMDrOeARgpFk7liLNN2+AyzFu8AmApnTVDy20ZWC4+7AS0P3wTCdtv kVjNWqRigObYdhudK3y58L3XbNlBxJl4ZUWsEH4T1uNqBAoNhG65Kcv2868i1Xpw ge/VKIklzR3abEcgOp2sjOtbIyWpPmGwtzOdZ8m0eDB6twj1yip6yuaMwUTz2KKJ 3cs2xT9SZKLJpozKxC7pws5z4cwLfHNq6RXWJUrYY6ERXRps8lh/OXST4yhYedHc S2vRc0ZeJec+C1i+WoGqjJ9Oyqf1Ag2YQTgwBzW/zuuD3xDTqlHlE71IecV8eUvw sFJUKl3vWhJYUw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:01:23 2025 by rpki-client