This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json) Hash identifier: qV5oPAtXFIDPwdJgbmkDoxgRmYCXKyPUoTzeYX5ZsKc= Subject key identifier: F8:AE:E0:7E:E2:02:FF:C9:BA:08:EC:06:E8:5F:D3:A3:11:86:55:22 Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Certificate serial: 019AF389CCC5F5312259A08B040BF804F82F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:25 +0000 Manifest this update: Sat 06 Dec 2025 12:01:25 +0000 Manifest next update: Sun 07 Dec 2025 12:01:25 +0000 Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=) 2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=) 3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=) 4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=) 5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: SpF2FVv+94Jcm+XE+ep3pygpQoU4hvqK/wSnSIPmK5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:cc:c5:f5:31:22:59:a0:8b:04:0b:f8:04:f8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Validity Not Before: Dec 6 12:01:25 2025 GMT Not After : Dec 7 12:01:25 2025 GMT Subject: CN=f8aee07ee202ffc9ba08ec06e85fd3a311865522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:23:68:cc:ce:c7:7f:b5:ae:bc:24:a1:85: db:5b:21:91:73:64:9f:c5:28:71:70:2d:e2:ad:ea: 0a:5b:5a:97:e0:0b:ac:31:6f:90:d6:1c:d3:00:af: 5d:3a:92:45:90:24:4b:eb:47:5d:9a:dc:98:2e:49: f7:7c:f5:d3:ac:49:9e:90:e0:d7:3b:ea:fe:0e:6a: b0:c2:4d:3c:1b:cd:f1:82:95:ee:3d:e0:e1:68:d4: 62:04:bd:d3:4a:9b:ef:b1:05:c7:dc:75:59:fc:4b: 32:2b:53:38:b5:f3:51:6d:f5:58:8a:dc:4e:eb:59: 29:cc:62:a2:16:e9:66:34:67:2f:09:af:20:86:59: 11:b8:01:6f:1e:2c:be:f0:c3:37:08:5f:75:0f:99: c2:c3:72:1a:b3:c9:84:8d:a5:dc:d1:6a:aa:8e:fa: 3a:b2:21:03:4d:c0:59:98:0d:a7:ad:9a:0c:e5:94: 21:c6:f3:9d:aa:e6:17:2e:8b:6c:36:9b:cb:cc:02: 51:59:35:8e:57:3f:4a:0a:9f:2e:08:cf:d1:b5:b4: b0:fe:b1:81:73:d2:af:75:fe:0a:b2:f9:99:9a:46: 94:9c:f0:c8:15:8b:ae:aa:08:f2:a7:00:69:17:b9: 5a:15:d4:e5:bf:e7:74:9e:4e:81:52:53:1e:1f:0f: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AE:E0:7E:E2:02:FF:C9:BA:08:EC:06:E8:5F:D3:A3:11:86:55:22 X509v3 Authority Key Identifier: keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:72:7c:22:2c:67:31:3a:d7:a6:76:a0:52:2a:8b:f8:c2:19: a1:8a:74:6e:2e:e7:d8:6a:f6:b5:75:be:b6:5d:cf:98:b3:44: 7f:f7:54:7d:c1:dc:75:57:28:13:df:f9:63:0a:0a:eb:85:a0: 9d:7a:eb:5d:59:0b:f1:2e:ad:a2:83:da:7d:09:e7:a9:30:89: 3a:2f:71:3d:57:6b:b3:d5:62:b1:29:a7:f9:72:a8:84:e2:bd: d6:a6:c4:7b:e2:f2:2a:1b:c2:7c:58:37:ee:da:eb:f7:cb:35: e6:61:05:33:d7:80:55:d3:cd:90:6a:14:1c:f4:0d:e3:3b:09: 7a:bb:ff:f4:fa:d0:c4:37:cf:b2:e8:b8:f4:42:b8:d7:6d:41: 8e:0c:18:54:c7:de:aa:ea:d9:b6:cb:91:c4:d8:f1:95:46:da: 99:96:e7:44:9d:5e:f5:2b:5f:9d:78:ac:58:f8:6a:b9:30:28: f0:e4:77:5e:21:af:1b:9d:90:c4:10:6d:3d:40:cb:2f:2d:c5: 83:7c:60:eb:02:f2:77:bb:66:0a:44:32:78:85:a9:94:f4:87: b7:77:b1:66:3c:7c:36:8a:27:af:51:2d:f8:72:92:52:98:27: 8c:90:55:06:0c:be:80:0f:61:82:bc:40:ac:68:39:a5:44:7b: ce:b4:f2:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziczF9TEiWaCLBAv4BPgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl ZDFhZDUwHhcNMjUxMjA2MTIwMTI1WhcNMjUxMjA3MTIwMTI1WjAzMTEwLwYDVQQD EyhmOGFlZTA3ZWUyMDJmZmM5YmEwOGVjMDZlODVmZDNhMzExODY1NTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQUjaMzOx3+1rrwkoYXbWyGRc2Sf xShxcC3ireoKW1qX4AusMW+Q1hzTAK9dOpJFkCRL60ddmtyYLkn3fPXTrEmekODX O+r+Dmqwwk08G83xgpXuPeDhaNRiBL3TSpvvsQXH3HVZ/EsyK1M4tfNRbfVYitxO 61kpzGKiFulmNGcvCa8ghlkRuAFvHiy+8MM3CF91D5nCw3Ias8mEjaXc0Wqqjvo6 siEDTcBZmA2nrZoM5ZQhxvOdquYXLotsNpvLzAJRWTWOVz9KCp8uCM/RtbSw/rGB c9Kvdf4KsvmZmkaUnPDIFYuuqgjypwBpF7laFdTlv+d0nk6BUlMeHw8pcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiu4H7iAv/JugjsBuhf06MRhlUiMB8GA1UdIwQY MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt NzE1ZjA5ODE3MzQxLzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXJ8Iixn MTrXpnagUiqL+MIZoYp0bi7n2Gr2tXW+tl3PmLNEf/dUfcHcdVcoE9/5YwoK64Wg nXrrXVkL8S6tooPafQnnqTCJOi9xPVdrs9VisSmn+XKohOK91qbEe+LyKhvCfFg3 7trr98s15mEFM9eAVdPNkGoUHPQN4zsJerv/9PrQxDfPsui49EK4121BjgwYVMfe qurZtsuRxNjxlUbamZbnRJ1e9StfnXisWPhquTAo8OR3XiGvG52QxBBtPUDLLy3F g3xg6wLyd7tmCkQyeIWplPSHt3exZjx8Noonr1Et+HKSUpgnjJBVBgy+gA9hgrxA rGg5pUR7zrTykA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:14 2025 by rpki-client