This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json) Hash identifier: NqESHVJ7JmmBpbWALbDrdpo3L/BfAoCeFnD2eAqp7RY= Subject key identifier: 0B:2E:B9:3B:89:0C:CE:B3:9A:A8:44:26:73:BD:34:D4:54:B3:DA:D5 Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0 Certificate serial: 019AF16457B88E7991823E2CA47B168B069E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft Manifest number: 0ED6 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=) 2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: 4MforwinLBBMTUYcTw7/k/x1KPtvJ+KadEJw+VrM3f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:57:b8:8e:79:91:82:3e:2c:a4:7b:16:8b:06:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0 Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=0b2eb93b890cceb39aa8442673bd34d454b3dad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:c9:0f:a7:4e:e3:bf:f6:67:94:12:78:8a: 7d:2c:c9:78:08:39:29:10:ca:cc:32:89:48:d5:b5: c0:da:81:3f:3c:ca:30:d5:a0:8b:58:8d:24:60:0f: 98:cb:9a:0f:6e:56:34:34:3d:88:30:ba:98:5e:ae: ac:fc:8f:dc:d6:fc:72:9e:38:39:09:28:75:d0:78: dd:5b:3d:fa:e3:c2:42:19:5d:74:3d:22:74:81:b3: 36:68:b0:90:f5:f6:cc:66:05:cb:db:89:5a:1d:fb: d5:33:bb:2a:3c:27:1b:a0:02:48:c2:c4:77:5c:cf: 9e:35:a1:d2:26:6c:96:fe:30:c0:88:ff:30:13:f7: 09:f8:29:aa:ba:58:06:cb:56:ee:7b:c9:8d:24:18: fe:cd:27:b0:67:7a:8b:75:9c:ac:44:1b:d1:c9:d1: f3:be:f3:c8:e6:37:e3:78:22:26:b2:40:ab:23:18: c5:a7:02:01:b0:9e:7d:7a:ef:20:21:bd:73:24:0f: bf:d1:27:23:47:4e:d2:f2:f1:24:fb:f5:89:14:30: e2:68:10:79:f4:b3:79:cf:3c:71:4b:3e:00:09:26: 27:1a:46:78:77:2c:66:da:61:b8:18:a2:fa:13:d3: 84:db:05:63:5b:2f:d1:04:f9:5e:97:17:bc:16:3f: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2E:B9:3B:89:0C:CE:B3:9A:A8:44:26:73:BD:34:D4:54:B3:DA:D5 X509v3 Authority Key Identifier: keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:df:b3:14:5c:c6:0a:42:ef:dd:69:68:8c:53:73:97:cb:c0: 1c:63:bd:87:bb:8a:dc:b5:fa:c2:f6:f2:70:2f:cc:dc:c8:e1: ad:eb:96:19:ac:3e:9c:85:99:a2:ed:1b:63:f2:b0:7b:2f:95: 36:ff:2d:77:cb:06:aa:3b:e3:65:2b:4c:ec:16:eb:b1:85:33: bd:7e:50:52:23:88:46:42:5e:98:65:57:80:a9:c2:5d:94:34: d3:7b:97:7e:55:a7:9c:4a:d6:7c:0c:19:45:72:a8:6e:7d:6d: 11:f3:11:81:bb:8b:04:d3:dc:36:e8:f3:1d:b6:a6:4e:19:18: 6e:2f:25:28:16:09:81:ee:8e:57:8a:19:0c:c9:2b:63:90:a1: bc:ba:fd:a6:d2:40:42:08:fe:1e:4c:1a:71:28:6e:65:5a:7b: 76:8f:51:58:ed:92:22:30:2a:88:0a:d1:f8:07:27:ac:0f:a4: 66:fb:79:d6:de:43:3f:7c:ac:65:36:b5:11:98:b6:52:47:63: 36:1d:94:b5:b1:13:45:fe:52:65:ee:41:a3:bc:6d:90:27:f1: a2:ca:d0:93:12:4b:c0:9d:7c:45:04:27:71:75:a8:f1:ef:ce: ae:07:ab:38:e1:af:13:27:de:29:30:72:ae:06:46:2f:02:4e: d4:6b:70:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFe4jnmRgj4spHsWiwaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2FlMzY2OWY4NDdmYTI3YTY5YjE0YmI4N2Y4YzdiZmQ3 OTllZTAwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EygwYjJlYjkzYjg5MGNjZWIzOWFhODQ0MjY3M2JkMzRkNDU0YjNkYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPJD6dO47/2Z5QSeIp9LMl4CDkp EMrMMolI1bXA2oE/PMow1aCLWI0kYA+Yy5oPblY0ND2IMLqYXq6s/I/c1vxynjg5 CSh10HjdWz3648JCGV10PSJ0gbM2aLCQ9fbMZgXL24laHfvVM7sqPCcboAJIwsR3 XM+eNaHSJmyW/jDAiP8wE/cJ+CmqulgGy1bue8mNJBj+zSewZ3qLdZysRBvRydHz vvPI5jfjeCImskCrIxjFpwIBsJ59eu8gIb1zJA+/0ScjR07S8vEk+/WJFDDiaBB5 9LN5zzxxSz4ACSYnGkZ4dyxm2mG4GKL6E9OE2wVjWy/RBPlelxe8Fj/3swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsuuTuJDM6zmqhEJnO9NNRUs9rVMB8GA1UdIwQY MBaAFL9642afhH+iemmxS7h/jHv9eZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYt ZGI4MDMwODc5ZjUxLzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYtZGI4MDMwODc5ZjUx LzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9+zFFzG CkLv3WlojFNzl8vAHGO9h7uK3LX6wvbycC/M3MjhreuWGaw+nIWZou0bY/Kwey+V Nv8td8sGqjvjZStM7BbrsYUzvX5QUiOIRkJemGVXgKnCXZQ003uXflWnnErWfAwZ RXKobn1tEfMRgbuLBNPcNujzHbamThkYbi8lKBYJge6OV4oZDMkrY5ChvLr9ptJA Qgj+HkwacShuZVp7do9RWO2SIjAqiArR+AcnrA+kZvt51t5DP3ysZTa1EZi2Ukdj Nh2UtbETRf5SZe5Bo7xtkCfxosrQkxJLwJ18RQQncXWo8e/OrgerOOGvEyfeKTBy rgZGLwJO1Gtwuw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:41 2025 by rpki-client