This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json) Hash identifier: dXYsqP48tsQbHkK5B7wtQ5RWISlxb3cGjohK/yx7aGM= Subject key identifier: CC:B8:73:C8:05:09:F9:2D:43:63:DA:7F:00:46:7D:78:81:A5:E5:86 Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Certificate serial: 019B22BE6F6C4E0FBC2D8E518D5130C7B249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 16:01:04 +0000 Manifest this update: Mon 15 Dec 2025 16:01:04 +0000 Manifest next update: Tue 16 Dec 2025 16:01:04 +0000 Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=) 2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: RiyhcOwr5Zv0TMQAO5tByOrSMoS4a2y11W6mTRvwvEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:6f:6c:4e:0f:bc:2d:8e:51:8d:51:30:c7:b2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Validity Not Before: Dec 15 16:01:04 2025 GMT Not After : Dec 16 16:01:04 2025 GMT Subject: CN=ccb873c80509f92d4363da7f00467d7881a5e586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:95:7f:bf:63:a9:a8:6a:bc:8a:ec:7c:47: 38:63:94:5d:e4:fd:9c:da:bd:5c:07:31:79:39:3d: 23:17:d8:7e:bf:e1:a7:90:ae:a8:ac:22:7a:3b:59: fa:8f:5f:eb:ed:82:f2:91:95:a0:f4:85:88:43:c0: 02:df:99:53:04:5d:c7:5b:13:42:06:40:ed:74:2d: fc:8e:01:89:ef:be:8c:c0:ec:11:b0:7a:59:06:31: 95:05:54:75:89:4b:d8:fa:1d:46:07:31:38:87:cc: 81:be:b9:64:69:9a:d1:78:94:8b:a8:18:01:c3:bf: e5:9d:b3:68:c8:1c:f6:bc:d8:9d:42:88:b5:b6:0c: eb:10:f1:47:0a:a2:e7:06:9a:ec:c3:ca:4f:bc:82: a7:f6:ef:a6:07:18:f0:32:d3:0b:23:82:10:ad:3b: 5b:43:68:d4:06:49:41:66:71:f9:8b:b5:e6:88:68: e2:b3:4b:d7:45:ed:c3:94:29:5e:3b:21:f6:e6:80: 40:a7:d2:c3:48:a0:5f:a2:49:58:98:6a:7b:bf:ba: d1:91:20:b5:d3:72:4f:2d:16:bd:fa:39:2a:85:c8: e6:a5:11:28:2b:bb:dc:54:e8:ea:40:97:10:c2:d3: e8:df:f3:68:30:91:66:49:68:b6:0c:c4:ec:83:3e: a5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B8:73:C8:05:09:F9:2D:43:63:DA:7F:00:46:7D:78:81:A5:E5:86 X509v3 Authority Key Identifier: keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a1:da:ce:0c:5c:aa:d4:1a:ab:fc:40:0f:87:a5:3c:59:33: 31:5d:22:e2:0d:24:fb:f4:c4:b8:f8:2a:cb:70:35:95:e9:5c: 89:c4:df:c4:38:86:19:d0:ea:76:fe:35:0c:42:6c:b7:0f:07: f4:06:9d:7a:4b:cc:ee:7a:08:dd:5e:49:c9:9c:dd:37:75:59: b4:32:bf:3b:61:3d:7a:a9:94:e5:5f:cb:4b:5f:e5:ce:e9:68: c3:c6:33:3e:c4:48:1b:86:83:2f:5a:8d:2e:63:cd:95:ed:12: 4d:b5:53:4a:1e:74:a1:9d:16:47:e2:6f:ec:04:53:f0:70:95: b6:a2:77:73:0d:75:87:76:8c:b3:ec:22:69:b9:f5:36:2f:7f: c3:02:22:13:4d:d1:9a:34:eb:c6:97:e6:58:30:66:9d:37:f3: 1f:0c:dc:8c:50:b5:44:6f:20:d8:22:15:64:06:9d:e9:eb:ae: 04:67:80:d4:14:06:bb:68:1e:4f:53:d4:44:65:11:3b:d6:e8: 91:cb:3d:a6:57:9f:58:71:91:a8:bc:ce:27:51:5a:fc:66:2c: 8a:fa:79:d7:f9:0d:a3:0a:4d:c6:50:39:a0:a5:fe:38:db:b9: dc:e1:af:1c:1d:1e:15:9b:a5:70:47:eb:58:27:09:e0:57:3d: c3:33:6c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivm9sTg+8LY5RjVEwx7JJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy Y2UzYTkwHhcNMjUxMjE1MTYwMTA0WhcNMjUxMjE2MTYwMTA0WjAzMTEwLwYDVQQD EyhjY2I4NzNjODA1MDlmOTJkNDM2M2RhN2YwMDQ2N2Q3ODgxYTVlNTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4OVf79jqahqvIrsfEc4Y5Rd5P2c 2r1cBzF5OT0jF9h+v+GnkK6orCJ6O1n6j1/r7YLykZWg9IWIQ8AC35lTBF3HWxNC BkDtdC38jgGJ776MwOwRsHpZBjGVBVR1iUvY+h1GBzE4h8yBvrlkaZrReJSLqBgB w7/lnbNoyBz2vNidQoi1tgzrEPFHCqLnBprsw8pPvIKn9u+mBxjwMtMLI4IQrTtb Q2jUBklBZnH5i7XmiGjis0vXRe3DlCleOyH25oBAp9LDSKBfoklYmGp7v7rRkSC1 03JPLRa9+jkqhcjmpREoK7vcVOjqQJcQwtPo3/NoMJFmSWi2DMTsgz6lYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy4c8gFCfktQ2PafwBGfXiBpeWGMB8GA1UdIwQY MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaHazgxc qtQaq/xAD4elPFkzMV0i4g0k+/TEuPgqy3A1lelcicTfxDiGGdDqdv41DEJstw8H 9AadekvM7noI3V5JyZzdN3VZtDK/O2E9eqmU5V/LS1/lzulow8YzPsRIG4aDL1qN LmPNle0STbVTSh50oZ0WR+Jv7ART8HCVtqJ3cw11h3aMs+wiabn1Ni9/wwIiE03R mjTrxpfmWDBmnTfzHwzcjFC1RG8g2CIVZAad6euuBGeA1BQGu2geT1PURGURO9bo kcs9plefWHGRqLzOJ1Fa/GYsivp51/kNowpNxlA5oKX+ONu53OGvHB0eFZulcEfr WCcJ4Fc9wzNs/A== -----END CERTIFICATE-----Generated at Tue Dec 16 02:28:02 2025 by rpki-client