This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json) Hash identifier: p7T1LFOOvQSFLmWq3Ve17Fi3XIdbhPf9i+rAtYcMWrA= Subject key identifier: 2F:D6:B4:B6:9F:56:38:F9:91:FB:35:A9:23:67:4F:75:AA:74:39:CA Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c Certificate serial: 019B35699434D7F600CB667D87001B1E9448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft Manifest number: 1794 Signing time: Fri 19 Dec 2025 07:01:10 +0000 Manifest this update: Fri 19 Dec 2025 07:01:10 +0000 Manifest next update: Sat 20 Dec 2025 07:01:10 +0000 Files and hashes: 1: 0PxrjgmZQbJVDcH4mMDl7gGNKZc.roa (hash: bjnIOfIl4+9c19F8Gpi8S4s/MfRm6ysLGSGly8bkYvk=) 2: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (hash: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=) 3: fHkoAZxOrb4jS9uptQ9di3MomH4.roa (hash: OuL9G7DUjjtpe04g3KNS/iW0YgxTMwqsjJxCgrATRoE=) 4: gA1d2jY3nghc_kTFDgqzR_V4tPo.roa (hash: MVElriob5MX1tbQ4YiwNJ86SZ2jP9GGb5E+1TagXoxo=) 5: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: oZHDZ1br+JHXN1udYPMqJE7+EjxzeZujjL7lSWHyiSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:94:34:d7:f6:00:cb:66:7d:87:00:1b:1e:94:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c Validity Not Before: Dec 19 07:01:10 2025 GMT Not After : Dec 20 07:01:10 2025 GMT Subject: CN=2fd6b4b69f5638f991fb35a923674f75aa7439ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:b7:e1:4b:3f:f5:dc:c3:22:40:28:da:d0: 6d:d0:1a:52:a0:3d:d4:3d:12:63:0d:7f:8a:82:77: 00:b5:e8:3b:89:71:f5:30:9f:bd:e2:52:f9:97:70: 01:90:62:4e:c0:ce:71:db:32:3e:cf:98:8c:50:0c: 44:a6:99:89:28:63:35:d0:cd:12:c1:0a:32:42:ea: 17:21:ca:50:7c:21:7d:d7:55:69:08:93:e0:28:2b: 83:41:68:81:90:ff:1c:91:71:8c:f3:eb:f4:e6:49: e5:e1:46:0d:0c:32:9e:c9:4e:1d:9e:72:35:43:6a: 78:68:19:cd:83:69:05:17:69:95:6a:98:a7:1c:f8: 32:04:46:93:93:44:08:3d:29:95:70:ea:b9:3a:d0: 5e:52:a8:d2:d7:23:04:e6:78:31:b3:50:30:cd:cd: e3:a6:df:2e:13:87:52:69:7b:0b:1d:2a:e8:8e:9e: 96:4d:74:11:64:1c:ce:6e:ab:5b:91:ff:55:35:f5: 91:93:a2:93:81:81:cc:f4:63:2f:9d:ab:90:bd:f1: da:09:94:4d:2f:29:b7:a1:1b:f4:43:10:ac:86:4c: c9:2c:ec:8e:7f:ab:9b:5e:5d:35:ef:bd:75:5d:fc: db:99:82:b3:8c:8d:c9:b8:96:5e:c3:19:cc:07:9f: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:B4:B6:9F:56:38:F9:91:FB:35:A9:23:67:4F:75:AA:74:39:CA X509v3 Authority Key Identifier: keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:01:47:a4:47:c1:cb:af:1d:bc:4b:1f:02:52:93:38:2c:bf: ae:16:38:fa:5f:72:e5:18:d8:ff:de:cb:41:fe:ad:31:cf:11: 32:45:7f:b7:a2:cb:70:3c:f4:90:bf:39:9c:42:21:bd:82:28: 69:74:72:07:35:29:d2:6e:d9:e6:f6:fe:b9:10:ad:bd:45:5a: c3:c3:b4:bc:77:ef:a6:2a:b2:5b:82:e7:3f:f8:25:ed:c4:29: f8:e4:9f:a6:8d:09:75:ae:c1:a2:65:91:9e:ae:9f:3a:0c:b2: bb:da:63:bb:bf:4d:9e:66:ab:1b:ed:99:18:ba:a1:d8:3f:0e: d8:41:c6:2e:cf:54:84:4c:21:91:2f:c2:a0:95:4e:69:d1:6e: 77:ce:56:71:d7:14:91:7e:fa:fe:f1:d0:25:72:24:af:b3:50: c5:e9:5c:ae:f3:16:ae:ce:49:5e:9c:58:73:46:0a:60:d2:b1: ec:b0:dc:83:00:9a:fa:22:c4:17:f8:4f:1d:f9:5a:bd:43:7b: 84:a7:c7:f9:0d:20:20:88:db:ce:29:f8:e5:01:f9:03:d8:ef: 2b:ad:62:fe:9a:05:9d:d0:a5:f2:4d:dc:2d:f0:4f:04:3c:19: 78:6b:04:ed:ac:bf:86:94:17:08:6c:54:39:d2:c2:9d:b5:ac: f5:bf:5a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aZQ01/YAy2Z9hwAbHpRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh NzQzMWMwHhcNMjUxMjE5MDcwMTEwWhcNMjUxMjIwMDcwMTEwWjAzMTEwLwYDVQQD EygyZmQ2YjRiNjlmNTYzOGY5OTFmYjM1YTkyMzY3NGY3NWFhNzQzOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3S34Us/9dzDIkAo2tBt0BpSoD3U PRJjDX+KgncAteg7iXH1MJ+94lL5l3ABkGJOwM5x2zI+z5iMUAxEppmJKGM10M0S wQoyQuoXIcpQfCF911VpCJPgKCuDQWiBkP8ckXGM8+v05knl4UYNDDKeyU4dnnI1 Q2p4aBnNg2kFF2mVapinHPgyBEaTk0QIPSmVcOq5OtBeUqjS1yME5ngxs1Awzc3j pt8uE4dSaXsLHSrojp6WTXQRZBzObqtbkf9VNfWRk6KTgYHM9GMvnauQvfHaCZRN Lym3oRv0QxCshkzJLOyOf6ubXl017711XfzbmYKzjI3JuJZewxnMB5+3OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/WtLafVjj5kfs1qSNnT3WqdDnKMB8GA1UdIwQY MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt NjE1YWNhNTFlMmY2LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2 LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAFHpEfB y68dvEsfAlKTOCy/rhY4+l9y5RjY/97LQf6tMc8RMkV/t6LLcDz0kL85nEIhvYIo aXRyBzUp0m7Z5vb+uRCtvUVaw8O0vHfvpiqyW4LnP/gl7cQp+OSfpo0Jda7BomWR nq6fOgyyu9pju79NnmarG+2ZGLqh2D8O2EHGLs9UhEwhkS/CoJVOadFud85WcdcU kX76/vHQJXIkr7NQxelcrvMWrs5JXpxYc0YKYNKx7LDcgwCa+iLEF/hPHflavUN7 hKfH+Q0gIIjbzin45QH5A9jvK61i/poFndCl8k3cLfBPBDwZeGsE7ay/hpQXCGxU OdLCnbWs9b9atg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:29 2025 by rpki-client