This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json) Hash identifier: lFWrN1SjhjgL5uz0Ojo7y377Xc2PC2fqnDpOFPeMwBk= Subject key identifier: 99:B3:12:87:36:95:B9:DA:1B:FE:C0:34:E6:50:28:2D:F4:84:53:9E Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Certificate serial: 019AF57789028BC685CF75E421B057A6B354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft Manifest number: 1482 Signing time: Sat 06 Dec 2025 21:00:42 +0000 Manifest this update: Sat 06 Dec 2025 21:00:42 +0000 Manifest next update: Sun 07 Dec 2025 21:00:42 +0000 Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: sZ0R3WoOA+aLYXXf0b1PvpDPWe46CKsgp1xOBfrVdos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:89:02:8b:c6:85:cf:75:e4:21:b0:57:a6:b3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Validity Not Before: Dec 6 21:00:42 2025 GMT Not After : Dec 7 21:00:42 2025 GMT Subject: CN=99b312873695b9da1bfec034e650282df484539e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:70:2a:85:1d:2c:da:c4:21:8f:7a:78:99: 08:a6:4b:3f:5a:ba:9b:ad:4d:8a:96:4c:12:03:95: 13:0b:8a:89:c3:26:8c:e5:c8:a9:a5:f0:a5:f2:d1: 56:69:1c:db:e9:2c:81:79:64:13:34:9f:35:3e:4b: 7f:ac:d8:4d:37:27:81:16:81:19:18:79:09:93:0a: c7:1f:c9:65:39:f0:f6:0f:9f:fc:76:f7:8e:11:ca: 1f:d6:ae:63:b5:2c:ef:eb:8f:5f:27:f5:ac:ff:e7: 63:00:9d:48:cb:28:0e:73:a3:d0:8a:8e:74:08:93: 95:71:fb:e2:e4:43:f4:76:9e:fc:7f:2b:bd:1f:1c: 10:7c:43:14:45:ac:25:32:d8:7f:82:f5:59:e3:3f: 05:70:73:af:ee:1b:e8:fd:2a:15:53:c0:f7:98:1f: ca:ad:84:d3:3d:f4:33:3a:28:a9:36:7e:ea:bd:d7: ea:b3:fe:17:dc:ce:f5:9c:7c:2a:09:56:84:03:b2: be:02:73:be:44:e4:69:07:0c:d4:55:9a:9b:c3:5a: ba:b1:d2:f2:dd:0e:35:76:b2:d6:22:33:7f:36:d6: 5b:90:da:30:bd:07:43:56:37:7f:cd:04:89:b8:9e: 20:ae:a2:e8:b9:f8:fa:6d:d2:45:1b:d2:4a:3d:2f: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B3:12:87:36:95:B9:DA:1B:FE:C0:34:E6:50:28:2D:F4:84:53:9E X509v3 Authority Key Identifier: keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4f:62:20:b3:be:93:61:4a:1c:18:d2:0b:f8:62:68:6f:26: cf:60:92:ac:20:e2:5e:68:b2:2b:db:a0:0d:46:6d:8a:db:1a: 77:67:5a:cb:84:71:3b:04:9a:fe:01:90:21:54:e6:aa:1f:fe: a2:9e:61:4d:9b:5d:4d:4c:c9:4e:95:bf:79:31:57:2e:09:7d: 63:2c:57:db:73:c2:ab:32:69:f9:f3:f8:0d:6c:05:c2:f7:36: ae:bb:c0:1f:70:3f:f7:43:3a:bb:2a:ae:1d:6e:35:04:ea:85: 29:32:08:f9:8e:fe:0e:07:5d:83:3d:a6:25:eb:35:84:dd:8e: 61:ab:d5:b9:a7:af:e8:74:39:dd:cb:1b:64:f4:9f:f2:80:1c: a0:fb:64:4d:26:ab:ad:9c:f4:56:f4:e8:af:ec:0f:5c:2e:ba: 0f:f1:95:4f:fc:2e:0d:16:99:3c:e9:85:91:d4:b9:f3:97:13: 2e:e9:0d:81:2d:f0:38:ad:99:be:13:1c:b8:75:46:a2:45:a8: e5:1a:e3:0e:0a:3e:e0:37:9f:86:e8:9f:c5:8f:2f:b9:4a:02: 92:6f:08:50:96:c4:82:8d:49:96:0f:4c:27:2b:3c:09:ed:85: f0:f5:52:3c:c0:bb:a9:dc:9f:09:fd:99:b3:73:6e:63:28:ca: af:2e:44:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4kCi8aFz3XkIbBXprNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZjg3NGQwMTU0MDcwZTk2MmEzYzg3MTk4MjFmZGI5Y2Ix MDE2ZTEwHhcNMjUxMjA2MjEwMDQyWhcNMjUxMjA3MjEwMDQyWjAzMTEwLwYDVQQD Eyg5OWIzMTI4NzM2OTViOWRhMWJmZWMwMzRlNjUwMjgyZGY0ODQ1MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+JwKoUdLNrEIY96eJkIpks/Wrqb rU2KlkwSA5UTC4qJwyaM5cippfCl8tFWaRzb6SyBeWQTNJ81Pkt/rNhNNyeBFoEZ GHkJkwrHH8llOfD2D5/8dveOEcof1q5jtSzv649fJ/Ws/+djAJ1IyygOc6PQio50 CJOVcfvi5EP0dp78fyu9HxwQfEMURawlMth/gvVZ4z8FcHOv7hvo/SoVU8D3mB/K rYTTPfQzOiipNn7qvdfqs/4X3M71nHwqCVaEA7K+AnO+RORpBwzUVZqbw1q6sdLy 3Q41drLWIjN/NtZbkNowvQdDVjd/zQSJuJ4grqLoufj6bdJFG9JKPS+hrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmzEoc2lbnaG/7ANOZQKC30hFOeMB8GA1UdIwQY MBaAFL/4dNAVQHDpYqPIcZgh/bnLEBbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQt OWIyMWYzMzRkMDI4LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQtOWIyMWYzMzRkMDI4 LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGk9iILO+ k2FKHBjSC/hiaG8mz2CSrCDiXmiyK9ugDUZtitsad2day4RxOwSa/gGQIVTmqh/+ op5hTZtdTUzJTpW/eTFXLgl9YyxX23PCqzJp+fP4DWwFwvc2rrvAH3A/90M6uyqu HW41BOqFKTII+Y7+Dgddgz2mJes1hN2OYavVuaev6HQ53csbZPSf8oAcoPtkTSar rZz0VvTor+wPXC66D/GVT/wuDRaZPOmFkdS585cTLukNgS3wOK2ZvhMcuHVGokWo 5RrjDgo+4DefhuifxY8vuUoCkm8IUJbEgo1Jlg9MJys8Ce2F8PVSPMC7qdyfCf2Z s3NuYyjKry5Eog== -----END CERTIFICATE-----Generated at Sun Dec 7 01:19:42 2025 by rpki-client