This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json) Hash identifier: L7R1aAurfV9qG/l7IipK6c5ByTDzhjZyA+/RxM+M7nc= Subject key identifier: AC:23:32:1C:86:43:08:0F:6C:D9:5C:01:A8:3E:30:E7:0E:FF:9E:0D Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Certificate serial: 019B3456AA54F8029DE387A0A86D6A533DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 02:00:53 +0000 Manifest this update: Fri 19 Dec 2025 02:00:53 +0000 Manifest next update: Sat 20 Dec 2025 02:00:53 +0000 Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=) 2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: VwmonD59XW0OAR+5jhTe1F8JGCdCpwCJEPXJR0abboI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:aa:54:f8:02:9d:e3:87:a0:a8:6d:6a:53:3d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Validity Not Before: Dec 19 02:00:53 2025 GMT Not After : Dec 20 02:00:53 2025 GMT Subject: CN=ac23321c8643080f6cd95c01a83e30e70eff9e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:96:58:98:1a:2a:a0:da:55:83:3e:21:d4: 23:47:a2:09:de:e5:aa:5e:86:3d:63:61:42:c6:b6: 19:67:87:21:4d:87:e8:10:c7:77:5e:ea:c4:ca:63: 07:d0:3b:5c:d0:c2:b6:4b:d8:08:49:fb:e1:58:32: 65:a9:f2:65:8c:b5:d2:90:a4:1b:d2:b7:a3:83:7d: 65:71:80:5c:f3:48:96:ac:8b:61:ac:62:ac:50:e0: 06:60:a9:30:6e:c2:fc:04:d6:a1:79:26:eb:e4:2d: 57:4e:94:78:f5:a1:4e:50:75:95:3a:9a:2c:4b:e0: 44:9c:d5:8b:25:2d:55:d5:b0:50:06:98:3d:6b:71: 90:3c:0d:58:d8:00:d2:62:83:67:94:cd:cf:69:c6: e0:41:0e:b6:51:8c:1d:2a:82:3c:23:5e:57:f1:9d: cf:93:5b:d5:8f:fc:52:ef:98:da:28:18:ed:53:94: 0e:d1:09:ac:dd:ec:7a:f6:dc:e5:ac:6e:ba:18:61: 03:db:ad:7a:87:37:e7:ef:b7:73:3f:4a:e7:96:86: 56:c1:e9:d0:1b:bd:07:75:42:f1:51:1e:ee:df:6a: 51:70:7b:ac:f5:5c:09:17:5d:3e:a2:f2:cb:c9:11: c2:83:6a:61:60:ac:2e:79:ec:f9:e1:00:25:dd:81: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:23:32:1C:86:43:08:0F:6C:D9:5C:01:A8:3E:30:E7:0E:FF:9E:0D X509v3 Authority Key Identifier: keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a7:86:11:86:69:1d:ac:51:2d:88:4f:60:b1:c2:fa:e9:d2: 86:12:57:79:40:ab:b8:e6:78:8c:57:ca:72:a4:11:9c:61:b9: d2:91:3a:b1:ba:01:12:63:59:03:83:29:f6:6c:25:af:51:a2: de:b2:af:d0:c7:7c:36:a1:3b:21:c8:22:5c:f3:83:28:ae:c9: 7b:99:c9:4c:d9:9f:41:87:48:6f:a3:03:e3:1b:ed:ea:75:4f: c8:9b:43:ae:c7:8b:25:97:10:b8:a7:8c:74:05:2f:30:4e:61: 74:b7:58:0d:95:f2:b5:4b:7e:ed:aa:d1:5a:10:2d:a0:34:4d: 73:4c:49:11:f2:36:86:38:74:69:cc:b4:76:d4:46:6c:ce:33: 34:00:cf:55:22:50:26:ec:c9:b6:f8:ce:69:1f:e2:ee:95:88: 4a:65:89:62:83:91:1d:cf:b2:df:8d:d6:29:52:8f:8c:99:3f: dc:7e:05:84:64:8b:80:81:22:1b:24:02:dd:9e:1b:0a:04:b1: 33:a3:30:69:4c:9e:af:57:4d:eb:c8:88:fd:61:42:64:99:ca: 4b:3f:a8:af:a6:41:e9:da:d4:f2:18:28:04:a9:4b:ec:78:06: f1:db:59:2e:b9:1c:d7:c9:8e:4a:08:92:8b:7d:bc:64:5b:b2: 35:4d:bc:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VqpU+AKd44egqG1qUz2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl YzIxNDkwHhcNMjUxMjE5MDIwMDUzWhcNMjUxMjIwMDIwMDUzWjAzMTEwLwYDVQQD EyhhYzIzMzIxYzg2NDMwODBmNmNkOTVjMDFhODNlMzBlNzBlZmY5ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAiWWJgaKqDaVYM+IdQjR6IJ3uWq XoY9Y2FCxrYZZ4chTYfoEMd3XurEymMH0Dtc0MK2S9gISfvhWDJlqfJljLXSkKQb 0rejg31lcYBc80iWrIthrGKsUOAGYKkwbsL8BNaheSbr5C1XTpR49aFOUHWVOpos S+BEnNWLJS1V1bBQBpg9a3GQPA1Y2ADSYoNnlM3PacbgQQ62UYwdKoI8I15X8Z3P k1vVj/xS75jaKBjtU5QO0Qms3ex69tzlrG66GGED2616hzfn77dzP0rnloZWwenQ G70HdULxUR7u32pRcHus9VwJF10+ovLLyRHCg2phYKwueez54QAl3YHVlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwjMhyGQwgPbNlcAag+MOcO/54NMB8GA1UdIwQY MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqeGEYZp HaxRLYhPYLHC+unShhJXeUCruOZ4jFfKcqQRnGG50pE6sboBEmNZA4Mp9mwlr1Gi 3rKv0Md8NqE7IcgiXPODKK7Je5nJTNmfQYdIb6MD4xvt6nVPyJtDrseLJZcQuKeM dAUvME5hdLdYDZXytUt+7arRWhAtoDRNc0xJEfI2hjh0acy0dtRGbM4zNADPVSJQ JuzJtvjOaR/i7pWISmWJYoORHc+y343WKVKPjJk/3H4FhGSLgIEiGyQC3Z4bCgSx M6MwaUyer1dN68iI/WFCZJnKSz+or6ZB6drU8hgoBKlL7HgG8dtZLrkc18mOSgiS i328ZFuyNU28Aw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:59:29 2025 by rpki-client