This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json) Hash identifier: wpNO7NQjr3loGPD4lxDs6EL6kTWyD4HE6WHH1ccaw4Q= Subject key identifier: 22:18:34:C2:28:68:4A:76:B4:E7:37:00:6B:AF:AE:CF:55:48:10:C3 Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2 Certificate serial: 019AF1D210A3757B87C4492B5EA709FD6816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=) 2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: 1qwysDz2zIJDIKoCMfe3qTLmb7M3meoMlHcyQgMYXvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:10:a3:75:7b:87:c4:49:2b:5e:a7:09:fd:68:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=221834c228684a76b4e737006bafaecf554810c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:fc:7b:32:b0:d2:4f:2a:40:67:81:ee:db: d0:a3:54:39:b7:bd:6e:11:80:a9:da:61:29:10:0d: 64:2e:86:ca:5f:0a:03:92:c2:ca:fb:38:45:4d:24: 2a:23:7d:52:2f:fb:d9:e5:7f:4b:2f:ec:35:13:9d: ff:fa:8e:fd:d1:14:f6:14:b6:b2:96:f5:33:d7:12: 2a:ff:47:83:d2:5e:fd:76:5e:7d:dd:85:c6:7f:ca: bf:5b:ca:93:1e:6b:b4:ea:df:9c:6a:bc:c6:a7:7c: 17:04:4a:19:f4:0a:8a:19:2b:05:03:5c:51:1f:16: 80:00:1d:a5:5b:c2:91:06:f6:93:84:f7:96:dd:6a: 2e:5e:16:dc:b2:bc:9f:86:7b:07:7b:e7:3e:34:64: 9a:1a:77:06:9c:57:93:42:5a:ce:f0:5a:61:e0:27: 8d:0c:96:d2:e8:61:11:88:a1:49:83:f5:ca:15:0e: 3f:c0:21:62:37:83:94:e3:65:8a:39:6c:48:6c:7f: e9:95:0c:75:80:96:91:ad:12:b7:a1:a3:24:86:d4: 6b:7e:ab:a1:5a:04:e1:ef:a5:7c:4a:a6:9b:00:1b: 8c:58:32:60:eb:9c:cc:89:54:1a:2e:58:d0:6e:1d: 14:7c:3c:a0:eb:db:a4:5b:76:a2:b4:a0:fa:44:79: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:18:34:C2:28:68:4A:76:B4:E7:37:00:6B:AF:AE:CF:55:48:10:C3 X509v3 Authority Key Identifier: keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:47:b8:31:0a:79:0f:eb:4c:18:48:03:74:83:87:b2:9b:a4: 54:88:d7:d1:c7:e5:c1:52:41:60:e7:3a:04:3e:58:a2:0f:bf: 21:80:1b:ad:c6:fd:99:37:af:a9:07:42:73:3f:b1:ed:a0:65: 4e:6b:48:66:96:18:b2:4e:d2:7c:02:00:68:f4:bd:2b:13:87: 4d:5d:b2:b3:c3:c0:86:cb:54:34:58:e2:ea:11:dd:f6:cf:76: 09:05:d5:e8:41:1b:8f:c7:2b:b6:b6:6e:81:fd:df:d9:af:8c: 56:b7:11:bf:ca:e0:30:83:5b:ff:52:39:68:28:3e:71:1b:10: 01:66:35:eb:52:a0:04:02:96:41:b2:ac:ae:d0:ae:80:b8:f9: 9c:76:2d:ab:0c:b2:7f:a7:8d:2b:87:38:6a:54:88:68:5a:7c: 0c:9a:04:a5:18:ab:c9:96:16:f7:5c:34:4b:f8:3f:7c:23:a8: 84:82:b3:f6:48:2e:d2:8b:e8:1c:f9:f5:b2:f0:97:4e:90:f9: f1:fc:67:9d:52:97:12:95:0a:69:b6:e9:be:ce:94:6b:76:12: c3:61:51:53:87:5d:de:5e:ab:89:3e:d4:37:1d:f2:45:c3:4e: 1e:9d:14:5b:a0:46:9a:81:b5:f7:1a:bc:cf:f0:d6:4f:03:22: e8:33:1b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hCjdXuHxEkrXqcJ/WgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm MjIzZjIwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EygyMjE4MzRjMjI4Njg0YTc2YjRlNzM3MDA2YmFmYWVjZjU1NDgxMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdL8ezKw0k8qQGeB7tvQo1Q5t71u EYCp2mEpEA1kLobKXwoDksLK+zhFTSQqI31SL/vZ5X9LL+w1E53/+o790RT2FLay lvUz1xIq/0eD0l79dl593YXGf8q/W8qTHmu06t+carzGp3wXBEoZ9AqKGSsFA1xR HxaAAB2lW8KRBvaThPeW3WouXhbcsryfhnsHe+c+NGSaGncGnFeTQlrO8Fph4CeN DJbS6GERiKFJg/XKFQ4/wCFiN4OU42WKOWxIbH/plQx1gJaRrRK3oaMkhtRrfquh WgTh76V8SqabABuMWDJg65zMiVQaLljQbh0UfDyg69ukW3aitKD6RHnPzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIYNMIoaEp2tOc3AGuvrs9VSBDDMB8GA1UdIwQY MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4 LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0e4MQp5 D+tMGEgDdIOHspukVIjX0cflwVJBYOc6BD5Yog+/IYAbrcb9mTevqQdCcz+x7aBl TmtIZpYYsk7SfAIAaPS9KxOHTV2ys8PAhstUNFji6hHd9s92CQXV6EEbj8crtrZu gf3f2a+MVrcRv8rgMINb/1I5aCg+cRsQAWY161KgBAKWQbKsrtCugLj5nHYtqwyy f6eNK4c4alSIaFp8DJoEpRiryZYW91w0S/g/fCOohIKz9kgu0ovoHPn1svCXTpD5 8fxnnVKXEpUKabbpvs6Ua3YSw2FRU4dd3l6riT7UNx3yRcNOHp0UW6BGmoG19xq8 z/DWTwMi6DMbyw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:53 2025 by rpki-client