This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json) Hash identifier: z/k49H9BhRJqZhE8RkndcPDqz36WeC6ukuU/mkNCXDc= Subject key identifier: 4B:AA:74:A3:23:C7:B5:BC:88:D2:E0:B9:74:E2:46:2B:F2:20:B3:B5 Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Certificate serial: 019B5A88884491AA25FAD8C4860787CD8CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 12:00:55 +0000 Manifest this update: Fri 26 Dec 2025 12:00:55 +0000 Manifest next update: Sat 27 Dec 2025 12:00:55 +0000 Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=) 2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=) 3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: w3EpPNGTDwlLx6mfZGf6d9x93nZrR+n3pgJEEKRqDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:88:44:91:aa:25:fa:d8:c4:86:07:87:cd:8c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Validity Not Before: Dec 26 12:00:55 2025 GMT Not After : Dec 27 12:00:55 2025 GMT Subject: CN=4baa74a323c7b5bc88d2e0b974e2462bf220b3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:87:c5:dc:fd:f6:ad:20:34:3c:b3:35:74: 72:22:12:2b:db:ec:0b:3f:f8:6f:8c:7d:12:52:4c: 08:b1:e5:b6:46:6e:85:70:84:bf:92:9b:75:39:58: 6e:af:2f:48:3b:22:b1:34:cc:bb:57:cb:dd:e8:08: f7:9f:00:ab:e3:8a:f4:47:b0:92:89:ed:e6:01:97: c0:b0:5e:ca:31:17:67:42:f7:00:4b:a0:37:14:d6: 12:40:f1:8d:6c:1a:02:b8:bf:41:0e:76:03:12:fa: c7:c8:70:2a:58:2a:75:9b:c4:00:c4:ea:95:4e:2c: 7d:ab:36:86:c2:d3:f7:a9:3b:97:ff:ae:fd:eb:24: 08:b7:ed:89:4f:74:0a:f4:26:a8:84:bf:a1:f9:6c: 6e:d7:c0:92:07:ef:7b:be:33:a3:dd:42:0e:70:e2: a6:0b:1a:6a:d0:3c:04:7d:9a:54:55:09:3c:59:ff: 2d:18:5f:cb:26:f0:62:75:b4:98:dd:63:b4:d9:23: b4:07:d2:5b:05:d3:74:67:1d:29:24:04:ee:35:c9: 45:3f:35:c2:75:ee:fa:58:c1:e8:69:19:44:bb:d4: cb:27:2c:a5:e1:0f:60:c2:71:85:94:b9:91:d5:7f: 07:e5:19:69:6f:02:ac:a7:09:10:69:4b:18:75:cd: 70:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:74:A3:23:C7:B5:BC:88:D2:E0:B9:74:E2:46:2B:F2:20:B3:B5 X509v3 Authority Key Identifier: keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cf:3e:42:b3:1e:1a:2d:be:32:42:aa:71:a4:18:d1:da:55: 71:9c:30:58:9e:a0:d2:03:bb:e9:03:5e:59:85:09:59:f8:9b: 73:dd:e2:8f:2c:f6:c6:1d:d7:1c:c7:42:49:b2:36:5b:21:c6: 7e:69:99:5a:77:e5:cc:eb:32:f4:1b:62:2e:19:29:e9:08:66: 5b:94:4a:db:25:0a:40:c9:a8:8b:6b:8f:bb:2f:7b:94:75:f6: 53:70:af:8b:a6:e8:08:c8:45:f9:21:f8:ab:66:e7:c8:22:fe: 6e:26:8a:3b:2c:b9:b7:86:a3:cd:65:06:43:54:dd:27:d6:bd: 6e:18:81:e5:82:5b:db:26:1b:1c:ea:12:29:30:0e:51:73:81: 80:f4:95:67:51:40:95:95:35:60:62:cc:30:47:82:3a:71:12: f6:3e:52:dc:e4:51:e8:46:ca:dd:75:77:66:ed:67:fe:25:93: 28:b8:89:b5:35:34:41:96:65:4b:50:40:eb:ef:96:d2:81:56: a9:58:e8:fa:11:ec:9a:6b:32:83:5a:fd:7c:20:db:1c:c3:85: a2:94:e0:4d:1f:c1:ff:fe:7f:e9:47:66:2a:3e:c6:89:48:31: 6f:6e:98:0f:ad:9e:50:a8:0b:1d:4d:44:9b:67:6e:37:e0:f9: 86:3f:64:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIhEkaol+tjEhgeHzYzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5 NjQ3ZGYwHhcNMjUxMjI2MTIwMDU1WhcNMjUxMjI3MTIwMDU1WjAzMTEwLwYDVQQD Eyg0YmFhNzRhMzIzYzdiNWJjODhkMmUwYjk3NGUyNDYyYmYyMjBiM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/OHxdz99q0gNDyzNXRyIhIr2+wL P/hvjH0SUkwIseW2Rm6FcIS/kpt1OVhury9IOyKxNMy7V8vd6Aj3nwCr44r0R7CS ie3mAZfAsF7KMRdnQvcAS6A3FNYSQPGNbBoCuL9BDnYDEvrHyHAqWCp1m8QAxOqV Tix9qzaGwtP3qTuX/6796yQIt+2JT3QK9CaohL+h+Wxu18CSB+97vjOj3UIOcOKm Cxpq0DwEfZpUVQk8Wf8tGF/LJvBidbSY3WO02SO0B9JbBdN0Zx0pJATuNclFPzXC de76WMHoaRlEu9TLJyyl4Q9gwnGFlLmR1X8H5RlpbwKspwkQaUsYdc1wiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuqdKMjx7W8iNLguXTiRivyILO1MB8GA1UdIwQY MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut OTVjODk0MmRmNzI0LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0 LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnc8+QrMe Gi2+MkKqcaQY0dpVcZwwWJ6g0gO76QNeWYUJWfibc93ijyz2xh3XHMdCSbI2WyHG fmmZWnflzOsy9BtiLhkp6QhmW5RK2yUKQMmoi2uPuy97lHX2U3Cvi6boCMhF+SH4 q2bnyCL+biaKOyy5t4ajzWUGQ1TdJ9a9bhiB5YJb2yYbHOoSKTAOUXOBgPSVZ1FA lZU1YGLMMEeCOnES9j5S3ORR6EbK3XV3Zu1n/iWTKLiJtTU0QZZlS1BA6++W0oFW qVjo+hHsmmsyg1r9fCDbHMOFopTgTR/B//5/6UdmKj7GiUgxb26YD62eUKgLHU1E m2duN+D5hj9kWw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:40 2025 by rpki-client