This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json) Hash identifier: hJSYnXQTyQRwx65rYTKAnnnjiRmNe4NZfo7AJuh4Mns= Subject key identifier: 8D:54:00:C8:3E:A4:C9:6A:68:68:1E:D3:F0:4B:79:B0:9F:69:A3:C8 Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea Certificate serial: 019AF3891CCBC463501754141D868737F0A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:00:40 +0000 Manifest this update: Sat 06 Dec 2025 12:00:40 +0000 Manifest next update: Sun 07 Dec 2025 12:00:40 +0000 Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=) 2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=) 3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: uV5N6LTn/BHTmIcBjovSiNeeQLM5bUgWjAZyyw8xBIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1c:cb:c4:63:50:17:54:14:1d:86:87:37:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea Validity Not Before: Dec 6 12:00:40 2025 GMT Not After : Dec 7 12:00:40 2025 GMT Subject: CN=8d5400c83ea4c96a68681ed3f04b79b09f69a3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:fc:97:1a:15:70:58:a5:7e:f6:3a:dc:19: f1:7c:e7:7a:6c:08:0b:2f:dd:df:0c:0f:46:31:85: 72:88:ac:0b:df:95:cb:60:86:2d:fc:14:a0:20:92: 77:70:74:3e:ac:be:17:e4:71:e3:39:22:4c:76:8f: a0:e8:0a:99:4d:b5:bc:ef:aa:99:89:d0:f1:63:49: 6c:01:8c:d3:f7:12:8d:02:52:36:ea:12:c2:94:8f: 06:39:83:85:3c:36:cb:c2:fc:a5:bc:52:4e:a6:30: 30:2b:aa:04:22:90:9c:3c:b1:6b:e4:72:69:ca:d0: a3:85:65:77:e5:88:de:0c:ad:55:01:35:9d:2f:6c: 26:02:c5:eb:13:94:d5:76:95:96:35:b8:c1:d1:17: 46:7a:f2:4b:da:58:2e:87:a4:01:99:18:84:c5:58: bb:d9:ec:9a:85:d9:ca:a9:6d:a1:7b:cd:9b:1a:55: 1d:4f:0d:4d:d6:9e:ba:0d:f2:5f:74:eb:45:43:0b: c6:c6:bc:d5:57:90:e9:99:39:3a:4a:cf:97:64:0b: 71:24:b9:67:61:7e:8f:93:71:e1:1a:95:df:c3:b7: 94:a4:95:c7:ab:c3:8f:d6:ae:87:17:9e:cc:98:64: 50:57:f9:e9:54:ff:47:7f:81:44:ae:1e:25:b3:65: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:00:C8:3E:A4:C9:6A:68:68:1E:D3:F0:4B:79:B0:9F:69:A3:C8 X509v3 Authority Key Identifier: keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:6b:31:1e:b5:0d:ed:bf:5b:f1:1e:f7:74:d8:d4:09:f7:41: 2c:97:b9:c1:6f:01:35:68:66:29:05:ef:00:21:c8:26:4e:29: 64:4a:e5:54:d2:88:42:05:84:30:17:26:ae:79:7f:da:a3:60: 98:0e:e5:5a:95:32:bf:7a:9e:6f:62:7d:bc:24:a9:5f:08:95: 66:ef:a2:be:41:6d:ec:07:20:94:87:6b:10:83:9b:ee:b3:dd: d8:d8:bf:7a:09:fb:6e:8a:89:68:08:f8:7d:e4:60:73:4d:a1: 65:0b:85:56:6f:ed:49:6c:99:da:c3:d0:5a:da:22:1a:5e:8e: d3:59:c6:e0:59:bf:cb:d4:49:2d:80:17:a2:76:72:60:15:27: 15:e9:65:d2:ac:3f:e4:ea:85:9c:77:cf:c0:04:a2:5e:6f:77: 51:28:1a:8e:a7:6b:6f:1e:d9:c0:c7:1d:5e:13:fa:56:e1:a2: e1:72:ff:24:c0:f8:3b:38:5b:5d:df:a2:2e:a1:af:c8:60:f7: 9c:28:b0:79:9e:4e:4b:0b:45:d9:7c:de:ec:4f:aa:7a:0f:6f: 49:e9:30:34:1b:84:93:ac:5f:2a:4d:45:59:45:fa:12:74:aa: ba:94:67:7a:37:3a:68:dc:9d:b9:50:8c:fd:34:17:a7:67:80: 65:ba:51:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRzLxGNQF1QUHYaHN/CoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTZmYzc2OGFkNDdiOTY4ZTBhMjU5ZmVjYzhhM2RhMzJm YWM1ZWEwHhcNMjUxMjA2MTIwMDQwWhcNMjUxMjA3MTIwMDQwWjAzMTEwLwYDVQQD Eyg4ZDU0MDBjODNlYTRjOTZhNjg2ODFlZDNmMDRiNzliMDlmNjlhM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyT8lxoVcFilfvY63BnxfOd6bAgL L93fDA9GMYVyiKwL35XLYIYt/BSgIJJ3cHQ+rL4X5HHjOSJMdo+g6AqZTbW876qZ idDxY0lsAYzT9xKNAlI26hLClI8GOYOFPDbLwvylvFJOpjAwK6oEIpCcPLFr5HJp ytCjhWV35YjeDK1VATWdL2wmAsXrE5TVdpWWNbjB0RdGevJL2lguh6QBmRiExVi7 2eyahdnKqW2he82bGlUdTw1N1p66DfJfdOtFQwvGxrzVV5DpmTk6Ss+XZAtxJLln YX6Pk3HhGpXfw7eUpJXHq8OP1q6HF57MmGRQV/npVP9Hf4FErh4ls2V1OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1UAMg+pMlqaGge0/BLebCfaaPIMB8GA1UdIwQY MBaAFL/m/HaK1HuWjgoln+zIo9oy+sXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMt ZWE1N2NiZTM2ODExLzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMtZWE1N2NiZTM2ODEx LzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGsxHrUN 7b9b8R73dNjUCfdBLJe5wW8BNWhmKQXvACHIJk4pZErlVNKIQgWEMBcmrnl/2qNg mA7lWpUyv3qeb2J9vCSpXwiVZu+ivkFt7AcglIdrEIOb7rPd2Ni/egn7boqJaAj4 feRgc02hZQuFVm/tSWyZ2sPQWtoiGl6O01nG4Fm/y9RJLYAXonZyYBUnFell0qw/ 5OqFnHfPwASiXm93USgajqdrbx7ZwMcdXhP6VuGi4XL/JMD4OzhbXd+iLqGvyGD3 nCiweZ5OSwtF2Xze7E+qeg9vSekwNBuEk6xfKk1FWUX6EnSqupRnejc6aNyduVCM /TQXp2eAZbpRfw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:06 2025 by rpki-client