This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json) Hash identifier: XnDLNN6LepV4mVe7K0zDsxq/U7io+0kuTZNKn75mhto= Subject key identifier: 9B:B2:79:F4:80:6B:95:3A:C7:C2:42:70:C3:1B:51:03:AF:A4:80:00 Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332 Certificate serial: 019B3D597147BBBC3D3508F8B4B791EEC3D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft Manifest number: 0B82 Signing time: Sat 20 Dec 2025 20:00:30 +0000 Manifest this update: Sat 20 Dec 2025 20:00:30 +0000 Manifest next update: Sun 21 Dec 2025 20:00:30 +0000 Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=) 2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: MWrZz4w9UR27+EogpZbXbBYIvAQxRb8vVfBXOLpydiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:71:47:bb:bc:3d:35:08:f8:b4:b7:91:ee:c3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332 Validity Not Before: Dec 20 20:00:30 2025 GMT Not After : Dec 21 20:00:30 2025 GMT Subject: CN=9bb279f4806b953ac7c24270c31b5103afa48000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:65:5b:0b:e0:d3:76:51:08:85:64:2d:cd:9f: d7:6b:c0:55:c5:fb:4f:f5:4f:94:cf:c0:49:81:bc: c1:0d:cc:e2:21:f5:79:86:b1:de:f5:9a:f0:1d:6d: 48:75:43:1e:8d:99:20:90:7a:db:91:74:df:ec:8d: 7c:50:5c:c3:a1:2d:18:68:43:5c:2f:b5:48:fd:fe: 8c:7a:86:04:96:1a:6a:46:e0:88:f6:b7:df:d3:a9: 8f:e8:74:84:b6:f5:c1:4f:60:e4:f0:e0:2c:8a:10: a2:3c:57:d3:e8:8b:31:0e:91:7d:68:ed:20:89:5c: 2c:64:67:2b:e5:6a:df:97:34:ff:57:e9:83:cf:05: ae:07:fc:83:d2:c9:06:7b:8d:ea:f3:bd:91:67:dd: d7:40:d6:bb:d5:0a:cc:70:63:38:8e:5d:8a:59:c2: 3b:a6:15:17:43:55:52:79:7c:4e:19:c1:0a:4c:1b: 73:73:5f:23:ae:a8:3c:a0:f3:1b:03:71:e1:66:53: 40:19:65:f7:ec:6a:fc:24:6e:b5:7d:9a:e7:fc:b6: 6d:f0:65:a0:b6:59:5b:de:38:0c:4a:1b:e5:4f:7f: 78:74:07:73:c8:2c:ea:b2:bd:f0:51:59:20:8a:f1: 46:bc:44:aa:ec:5e:47:f1:d2:33:2c:4e:6e:9c:0e: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:79:F4:80:6B:95:3A:C7:C2:42:70:C3:1B:51:03:AF:A4:80:00 X509v3 Authority Key Identifier: keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3c:5b:8a:f2:ba:17:c2:47:6a:26:4c:30:94:ae:bb:b7:c2: c2:11:21:86:ff:36:78:c3:9e:7d:1e:28:e5:1c:41:3a:1a:a3: 9d:f2:68:d6:99:21:77:40:4e:ca:b0:49:a4:db:a1:de:32:16: a9:a5:2d:27:1a:4a:b6:6a:7a:98:42:00:15:e5:b8:81:6d:bf: a8:11:69:c2:c4:46:8b:e9:fd:32:d5:03:cf:f9:3e:7a:b5:38: af:93:f8:52:47:40:d7:10:13:1c:e3:41:ea:90:ad:4c:87:f7: 18:ba:63:eb:61:44:38:47:b0:1d:5e:d6:ab:c1:bd:76:85:1f: 56:34:46:27:23:97:b3:b1:14:ee:19:3a:9f:40:9b:ef:2c:f3: 8a:46:ef:96:c9:00:f7:ca:8b:07:7d:b5:e6:f4:7c:63:5a:f9: d9:c0:eb:f9:d1:e0:05:dd:a7:73:25:e1:96:af:20:8b:03:4b: 72:d9:99:11:5b:dc:5a:78:b6:b3:b1:05:7c:00:6a:28:40:91: 6f:49:e3:c4:dd:3a:b5:74:4b:b8:d3:09:60:b5:84:db:ba:b6: de:0d:04:7d:f2:20:ef:f4:8c:a2:35:38:fa:ef:90:63:0e:15: 7f:11:7d:1f:6d:26:a7:30:8e:a0:77:60:89:1c:f6:2b:b4:0f: 46:75:88:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WXFHu7w9NQj4tLeR7sPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODg4ZjA1MzA5OWZhYzNhNTU5ODY0NDdjYjNiMTAzODQ5 NWYzMzIwHhcNMjUxMjIwMjAwMDMwWhcNMjUxMjIxMjAwMDMwWjAzMTEwLwYDVQQD Eyg5YmIyNzlmNDgwNmI5NTNhYzdjMjQyNzBjMzFiNTEwM2FmYTQ4MDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GVbC+DTdlEIhWQtzZ/Xa8BVxftP 9U+Uz8BJgbzBDcziIfV5hrHe9ZrwHW1IdUMejZkgkHrbkXTf7I18UFzDoS0YaENc L7VI/f6MeoYElhpqRuCI9rff06mP6HSEtvXBT2Dk8OAsihCiPFfT6IsxDpF9aO0g iVwsZGcr5WrflzT/V+mDzwWuB/yD0skGe43q872RZ93XQNa71QrMcGM4jl2KWcI7 phUXQ1VSeXxOGcEKTBtzc18jrqg8oPMbA3HhZlNAGWX37Gr8JG61fZrn/LZt8GWg tllb3jgMShvlT394dAdzyCzqsr3wUVkgivFGvESq7F5H8dIzLE5unA75ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuyefSAa5U6x8JCcMMbUQOvpIAAMB8GA1UdIwQY MBaAFLyIjwUwmfrDpVmGRHyzsQOElfMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEt YzdlMzM4ZmYzYjU5LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEtYzdlMzM4ZmYzYjU5 LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTxbivK6 F8JHaiZMMJSuu7fCwhEhhv82eMOefR4o5RxBOhqjnfJo1pkhd0BOyrBJpNuh3jIW qaUtJxpKtmp6mEIAFeW4gW2/qBFpwsRGi+n9MtUDz/k+erU4r5P4UkdA1xATHONB 6pCtTIf3GLpj62FEOEewHV7Wq8G9doUfVjRGJyOXs7EU7hk6n0Cb7yzzikbvlskA 98qLB3215vR8Y1r52cDr+dHgBd2ncyXhlq8giwNLctmZEVvcWni2s7EFfABqKECR b0njxN06tXRLuNMJYLWE27q23g0EffIg7/SMojU4+u+QYw4VfxF9H20mpzCOoHdg iRz2K7QPRnWI4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:23 2025 by rpki-client