This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json) Hash identifier: crT/i4U3jvDlMMzcTix/J4ZjRH62MKzrOAxLt8C0ERw= Subject key identifier: EF:0A:25:CE:44:2B:D6:08:A1:87:76:0E:35:2D:EB:36:F7:D3:46:DE Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7 Certificate serial: 019B30E836611CA6697BDF19BF277C8118FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:01:23 +0000 Manifest this update: Thu 18 Dec 2025 10:01:23 +0000 Manifest next update: Fri 19 Dec 2025 10:01:23 +0000 Files and hashes: 1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=) 2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: fQGjCYVZiHrG7s5otvtFNQwUc+ESgyHQXlxZTySSc7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:36:61:1c:a6:69:7b:df:19:bf:27:7c:81:18:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7 Validity Not Before: Dec 18 10:01:23 2025 GMT Not After : Dec 19 10:01:23 2025 GMT Subject: CN=ef0a25ce442bd608a187760e352deb36f7d346de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:b6:a4:f3:db:4c:7d:f9:e9:9f:da:5c:f0: d6:3e:71:69:59:d3:35:66:bd:67:65:fc:bb:74:b5: 2e:49:1f:26:a9:f1:3e:91:cb:f7:90:f2:bf:74:0f: df:dc:4c:23:4d:62:7e:f4:8f:c0:6a:57:81:88:51: f6:a7:3e:cc:16:da:8d:52:1b:21:85:90:5a:34:95: e2:fd:d7:89:d9:0d:46:67:61:ad:21:56:49:4b:09: a3:ee:a6:49:6e:66:ef:64:6b:33:35:e4:49:0a:8e: fb:b7:7e:75:ca:ce:b6:d9:5a:3e:ec:0c:4b:07:77: 6f:97:89:c9:f0:aa:ec:c2:1e:66:85:e5:8c:62:32: 00:f4:b7:b1:9c:96:84:c8:83:25:71:48:40:39:5e: 62:82:b4:ce:be:3f:c7:c5:3a:9b:1e:28:e8:10:6b: 0c:e1:ca:e1:09:52:32:f2:3a:ac:3d:9e:e0:33:9e: be:d8:ec:3d:b0:3a:bf:7e:91:ea:86:60:61:c6:2a: 9d:de:2b:cb:58:0d:76:e3:06:63:3f:20:51:c8:9a: d9:36:5b:f6:66:91:16:2c:7c:0e:9d:83:73:67:4a: 8c:32:88:1d:ec:b2:36:f9:94:8e:0c:6b:ea:ab:f7: f8:87:af:e9:4b:4e:15:bb:cf:e9:bf:13:3e:80:6b: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0A:25:CE:44:2B:D6:08:A1:87:76:0E:35:2D:EB:36:F7:D3:46:DE X509v3 Authority Key Identifier: keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4d:7c:6b:e6:a4:65:c7:07:44:cb:71:23:c5:7b:73:6b:64: 8c:7d:ee:7c:19:6e:b7:2f:f8:2f:da:5b:26:8c:53:39:e4:c2: 7f:4b:73:0f:b9:71:86:6f:32:d5:d2:7b:21:7f:88:a9:e5:f2: 7c:f5:eb:43:bc:de:1a:1a:8a:4a:6b:6e:ab:8f:88:16:b3:f5: 84:e1:f9:3d:02:f9:53:a7:87:7b:3a:bd:15:39:40:0a:a0:53: 4c:b7:d9:95:71:73:f3:2b:b2:2d:d9:3a:8d:81:38:01:6c:96: a7:c2:a5:c0:45:ce:a9:0e:5c:ed:37:d9:5e:37:1e:4a:65:37: 08:12:4f:a6:e1:57:5c:b0:1a:bf:67:59:e1:0c:18:1d:f5:93: 8d:01:5f:ee:7d:1d:ea:08:1d:d1:90:a0:2f:4a:23:4f:0f:73: 9a:c8:c9:02:53:4f:fd:61:39:d0:67:09:7a:5b:db:11:19:fa: 4e:7d:9e:ae:28:ec:43:62:ae:25:00:55:48:5f:26:b1:97:22: 6d:ec:ee:f5:2e:5b:76:f1:2b:1a:b1:64:2e:db:0a:e6:58:43: 54:53:37:98:c5:e1:b5:64:92:ef:98:09:a5:7a:e9:12:31:c4: 0c:e6:52:e6:ed:7a:c5:02:70:c0:9b:3f:46:11:ea:cf:ad:44: 1d:9f:22:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6DZhHKZpe98Zvyd8gRj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5 NDVhZTcwHhcNMjUxMjE4MTAwMTIzWhcNMjUxMjE5MTAwMTIzWjAzMTEwLwYDVQQD EyhlZjBhMjVjZTQ0MmJkNjA4YTE4Nzc2MGUzNTJkZWIzNmY3ZDM0NmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzm2pPPbTH356Z/aXPDWPnFpWdM1 Zr1nZfy7dLUuSR8mqfE+kcv3kPK/dA/f3EwjTWJ+9I/AaleBiFH2pz7MFtqNUhsh hZBaNJXi/deJ2Q1GZ2GtIVZJSwmj7qZJbmbvZGszNeRJCo77t351ys622Vo+7AxL B3dvl4nJ8Krswh5mheWMYjIA9LexnJaEyIMlcUhAOV5igrTOvj/HxTqbHijoEGsM 4crhCVIy8jqsPZ7gM56+2Ow9sDq/fpHqhmBhxiqd3ivLWA124wZjPyBRyJrZNlv2 ZpEWLHwOnYNzZ0qMMogd7LI2+ZSODGvqq/f4h6/pS04Vu8/pvxM+gGuYTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8KJc5EK9YIoYd2DjUt6zb300beMB8GA1UdIwQY MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU18a+ak ZccHRMtxI8V7c2tkjH3ufBluty/4L9pbJoxTOeTCf0tzD7lxhm8y1dJ7IX+IqeXy fPXrQ7zeGhqKSmtuq4+IFrP1hOH5PQL5U6eHezq9FTlACqBTTLfZlXFz8yuyLdk6 jYE4AWyWp8KlwEXOqQ5c7TfZXjceSmU3CBJPpuFXXLAav2dZ4QwYHfWTjQFf7n0d 6ggd0ZCgL0ojTw9zmsjJAlNP/WE50GcJelvbERn6Tn2erijsQ2KuJQBVSF8msZci bezu9S5bdvErGrFkLtsK5lhDVFM3mMXhtWSS75gJpXrpEjHEDOZS5u16xQJwwJs/ RhHqz61EHZ8iOA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:08:58 2025 by rpki-client