This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft File: v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json) Hash identifier: uzYARcHkKvH2Qzgm4KNluyRbE+v9ISg9HTvp6vxq/PA= Subject key identifier: 89:7C:34:B8:5A:1A:1E:27:76:A0:E1:F6:6E:BB:26:E0:B7:64:09:BC Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA Certificate issuer: /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da Certificate serial: 019B2C2F42035248D4710695D2F698F7360C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft Manifest number: 141D Signing time: Wed 17 Dec 2025 12:00:53 +0000 Manifest this update: Wed 17 Dec 2025 12:00:53 +0000 Manifest next update: Thu 18 Dec 2025 12:00:53 +0000 Files and hashes: 1: Li-Y8dn1F69FZoMGQvQz_fZ7l4Y.roa (hash: caOJpFofpginvCZ1ci6afUcY092BORN7MXA50NlfY8Y=) 2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: +LihuYlw399luVsnKTDeeLfJybtsly+IxpmHn9HIRlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:42:03:52:48:d4:71:06:95:d2:f6:98:f7:36:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da Validity Not Before: Dec 17 12:00:53 2025 GMT Not After : Dec 18 12:00:53 2025 GMT Subject: CN=897c34b85a1a1e2776a0e1f66ebb26e0b76409bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:dd:e1:ec:20:8a:c4:d3:0b:29:4d:5f:8b: 24:cf:c3:6e:d0:a8:ab:5c:c4:e7:90:7d:0b:1f:72: cf:ff:79:4e:11:93:ad:8d:ec:cb:0c:9c:a3:7a:95: f2:f4:8f:f7:33:05:d6:33:75:13:3e:f9:c1:56:18: c2:0d:16:c3:1c:76:7d:31:37:7e:09:1e:54:1e:ce: 23:b5:7b:ac:a1:42:1f:88:ac:35:d6:e6:5f:2e:ff: de:6f:fa:ea:54:48:d5:48:25:2b:49:6d:c9:c8:96: 45:ee:14:18:2b:78:b4:cb:67:3f:4e:7e:34:5a:e6: 04:8e:6a:30:5b:4d:37:d2:f7:a5:e1:9f:1a:7c:b9: 3c:22:09:db:00:76:94:71:50:c6:bf:1e:fe:f3:27: a5:8d:6c:a8:70:5b:b4:22:a4:67:78:bc:00:fe:47: ec:5a:b3:e4:26:05:a1:c1:ed:3b:66:ca:ca:99:89: d0:0b:be:88:fb:30:e5:e8:14:81:1a:1b:ed:6f:78: 9b:e5:51:8a:96:c1:2d:d9:06:78:96:6b:11:4b:c1: 13:9a:e0:45:02:77:85:64:10:55:6f:e0:eb:a6:5d: e0:68:87:e2:c0:1f:c7:85:99:72:0f:9e:4f:9f:8b: c1:8f:ab:b1:8a:53:e3:f1:e8:65:c0:d2:ca:15:51: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:34:B8:5A:1A:1E:27:76:A0:E1:F6:6E:BB:26:E0:B7:64:09:BC X509v3 Authority Key Identifier: keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6d:1b:bd:a0:de:78:0f:08:b8:82:ad:cd:cf:d9:03:06:01: 51:bc:96:fb:47:74:3f:d5:bc:3a:72:4e:6c:3b:48:e7:41:2d: dd:43:af:7e:44:57:24:9d:c5:8f:69:8b:ec:be:41:ed:76:24: af:1a:82:01:85:aa:55:34:c7:7a:0c:3f:45:55:45:10:12:60: da:96:1b:b0:cf:72:5b:fd:8f:a2:e7:d5:59:1b:83:80:1b:6b: 1c:09:68:c9:ad:81:ce:da:ee:b9:7a:ce:8e:c7:19:0d:b3:63: 13:9a:0f:3d:8a:b2:cb:d6:73:4a:25:33:e7:d0:d2:d3:8d:a8: 64:f6:21:c7:53:eb:2b:04:da:b7:db:f1:be:c5:cd:14:23:5a: f0:78:2b:8f:25:78:a5:aa:40:9d:af:f3:a1:d7:dd:32:da:a4: ef:27:52:aa:af:41:4e:0a:1d:d7:e1:aa:18:b6:72:7a:0a:a9: f2:44:54:f8:1d:38:9a:aa:71:1c:62:26:53:cf:b3:16:84:42: fe:63:f9:b6:e2:97:80:b8:e1:7c:f6:a2:a4:21:36:b3:58:da: 30:45:1d:d6:5b:19:33:9f:e4:fe:c7:2c:64:ab:e9:8d:7e:1d: 28:18:a3:fa:03:d2:b7:30:e3:f5:7b:f1:d7:27:72:73:8b:cd: 8f:3c:17:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL0IDUkjUcQaV0vaY9zYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZWFhYjFiYTY4ZTg3YzlmN2FiMGQ5MDUwYmZmOWYyMGE2 MjY3ZGEwHhcNMjUxMjE3MTIwMDUzWhcNMjUxMjE4MTIwMDUzWjAzMTEwLwYDVQQD Eyg4OTdjMzRiODVhMWExZTI3NzZhMGUxZjY2ZWJiMjZlMGI3NjQwOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Dd4ewgisTTCylNX4skz8Nu0Kir XMTnkH0LH3LP/3lOEZOtjezLDJyjepXy9I/3MwXWM3UTPvnBVhjCDRbDHHZ9MTd+ CR5UHs4jtXusoUIfiKw11uZfLv/eb/rqVEjVSCUrSW3JyJZF7hQYK3i0y2c/Tn40 WuYEjmowW0030vel4Z8afLk8IgnbAHaUcVDGvx7+8yeljWyocFu0IqRneLwA/kfs WrPkJgWhwe07ZsrKmYnQC76I+zDl6BSBGhvtb3ib5VGKlsEt2QZ4lmsRS8ETmuBF AneFZBBVb+Drpl3gaIfiwB/HhZlyD55Pn4vBj6uxilPj8ehlwNLKFVFoOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl8NLhaGh4ndqDh9m67JuC3ZAm8MB8GA1UdIwQY MBaAFL/qqxumjofJ96sNkFC/+fIKYmfaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYt ZjMzNzQxMjk1MTAxLzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYtZjMzNzQxMjk1MTAx LzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIW0bvaDe eA8IuIKtzc/ZAwYBUbyW+0d0P9W8OnJObDtI50Et3UOvfkRXJJ3Fj2mL7L5B7XYk rxqCAYWqVTTHegw/RVVFEBJg2pYbsM9yW/2PoufVWRuDgBtrHAloya2BztruuXrO jscZDbNjE5oPPYqyy9ZzSiUz59DS042oZPYhx1PrKwTat9vxvsXNFCNa8HgrjyV4 papAna/zodfdMtqk7ydSqq9BTgod1+GqGLZyegqp8kRU+B04mqpxHGImU8+zFoRC /mP5tuKXgLjhfPaipCE2s1jaMEUd1lsZM5/k/scsZKvpjX4dKBij+gPStzDj9Xvx 1ydyc4vNjzwXsg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:39 2025 by rpki-client