This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft File: vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json) Hash identifier: FQsIP5oyxFxEsZy1OhQvD0BdQL3nvisMfMZrJpgEx4g= Subject key identifier: E3:B3:F8:C7:AE:27:70:DE:2C:D9:CE:1B:AB:48:53:1F:18:B3:C2:F9 Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Certificate serial: 019B33B238E80C56D135C2E01FEB969CE0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft Manifest number: 1008 Signing time: Thu 18 Dec 2025 23:01:16 +0000 Manifest this update: Thu 18 Dec 2025 23:01:16 +0000 Manifest next update: Fri 19 Dec 2025 23:01:16 +0000 Files and hashes: 1: h4LBRXlaL-oC3DBkosImeYIzlhM.roa (hash: fcJ0091j9gyLpmNM62v9sM4sdOjqt1S8YmfKAgde0r4=) 2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: zQWpciM5Uc10YFf0Pt/rk/Bj7bruAcCvtt8C3GESXpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:38:e8:0c:56:d1:35:c2:e0:1f:eb:96:9c:e0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Validity Not Before: Dec 18 23:01:16 2025 GMT Not After : Dec 19 23:01:16 2025 GMT Subject: CN=e3b3f8c7ae2770de2cd9ce1bab48531f18b3c2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:b4:9f:00:a5:6c:b6:5f:55:b0:b9:78:be: fc:23:c4:a7:da:8c:68:2a:9a:7c:25:56:35:d4:4e: a6:23:56:2e:4b:48:73:95:73:14:df:19:6d:db:47: 1e:dd:6d:2f:7b:b6:7c:9d:4e:40:3b:7f:2f:59:b9: 24:aa:9b:61:6c:df:0e:4a:3f:f9:19:67:e2:aa:7e: 24:c7:79:36:59:ca:85:b7:e6:c1:ba:90:80:b7:f5: 71:05:b6:ab:ca:28:1b:ee:36:2d:01:c4:a6:82:c6: db:a8:2a:3b:aa:db:48:c0:bf:0f:69:cf:92:9e:29: 3e:57:b2:1a:60:eb:ee:c3:0c:c1:cb:10:ec:b5:28: cc:1e:2b:fe:d3:b3:d9:7a:8b:0a:16:c4:e8:4b:ef: 5b:5c:87:ec:56:19:6b:12:91:bb:cb:14:31:8a:28: 12:ad:36:41:9e:d7:c6:58:7a:d9:fe:7a:5e:8e:4f: 49:26:5c:7f:f8:d8:e3:b1:19:7b:a2:ed:5c:80:ba: 06:42:8d:a1:92:97:8b:20:dc:cf:ba:0f:c5:ed:89: 75:31:57:ec:ac:20:b5:23:eb:51:c6:98:03:82:9b: 16:33:f4:ae:29:e9:c7:e2:98:ef:c2:51:5e:a6:d1: 2b:40:ec:63:71:ab:23:ef:d7:f2:32:6f:1a:de:be: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B3:F8:C7:AE:27:70:DE:2C:D9:CE:1B:AB:48:53:1F:18:B3:C2:F9 X509v3 Authority Key Identifier: keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:0b:b3:94:c5:d1:93:80:12:88:eb:74:d7:32:ff:db:49:3b: 18:a5:18:25:7e:81:c3:00:d6:17:a2:1a:b7:80:13:9d:93:2b: 04:7a:6f:98:cf:4e:8e:f2:02:da:b0:5f:42:d7:5c:7c:84:9a: 45:bf:05:d5:49:c7:20:1a:2e:e5:ad:93:9a:7e:c4:7f:4c:78: 99:59:c1:33:47:02:3d:90:68:af:c6:72:4b:ae:57:ab:8d:76: 49:5c:bc:9e:3a:f0:80:25:9e:61:d1:c0:47:c1:15:30:2b:74: b3:db:d5:23:af:d8:8e:b5:1e:5d:62:a8:0a:bb:67:7f:fd:72: 3b:91:67:36:80:64:c8:78:e9:9c:94:00:06:b0:c3:43:bc:55: 4e:b2:a6:eb:64:4a:62:86:14:b6:c2:10:6b:84:92:cc:dc:e8: 75:5f:66:24:1e:ab:08:e1:93:e8:93:39:0d:07:f1:73:b1:db: 1f:51:ed:c0:7b:65:f9:35:5b:68:c6:5f:40:66:3c:94:66:ff: 4f:eb:d5:c4:a1:80:db:2c:97:ec:9f:1f:a3:05:de:0a:da:2f: fe:db:1e:c7:ce:59:ea:56:e9:2a:4e:68:e3:e6:d2:c0:a6:96: 7d:fd:40:ac:be:8e:a5:2b:ae:19:7b:91:9a:37:2d:ab:cb:47: 59:c4:e3:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsjjoDFbRNcLgH+uWnODHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWMxNmY1YmUzN2ZmNmM1ZDQyMDVmMmFiYTI1ZmNlMzU4 OTAzMzUwHhcNMjUxMjE4MjMwMTE2WhcNMjUxMjE5MjMwMTE2WjAzMTEwLwYDVQQD EyhlM2IzZjhjN2FlMjc3MGRlMmNkOWNlMWJhYjQ4NTMxZjE4YjNjMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA60nwClbLZfVbC5eL78I8Sn2oxo Kpp8JVY11E6mI1YuS0hzlXMU3xlt20ce3W0ve7Z8nU5AO38vWbkkqpthbN8OSj/5 GWfiqn4kx3k2WcqFt+bBupCAt/VxBbaryigb7jYtAcSmgsbbqCo7qttIwL8Pac+S nik+V7IaYOvuwwzByxDstSjMHiv+07PZeosKFsToS+9bXIfsVhlrEpG7yxQxiigS rTZBntfGWHrZ/npejk9JJlx/+NjjsRl7ou1cgLoGQo2hkpeLINzPug/F7Yl1MVfs rCC1I+tRxpgDgpsWM/SuKenH4pjvwlFeptErQOxjcasj79fyMm8a3r6KjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOz+MeuJ3DeLNnOG6tIUx8Ys8L5MB8GA1UdIwQY MBaAFLwcFvW+N/9sXUIF8quiX841iQM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYt YWJkNmYyYjM0MTBiLzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYtYWJkNmYyYjM0MTBi LzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5wuzlMXR k4ASiOt01zL/20k7GKUYJX6BwwDWF6Iat4ATnZMrBHpvmM9OjvIC2rBfQtdcfISa Rb8F1UnHIBou5a2Tmn7Ef0x4mVnBM0cCPZBor8ZyS65Xq412SVy8njrwgCWeYdHA R8EVMCt0s9vVI6/YjrUeXWKoCrtnf/1yO5FnNoBkyHjpnJQABrDDQ7xVTrKm62RK YoYUtsIQa4SSzNzodV9mJB6rCOGT6JM5DQfxc7HbH1HtwHtl+TVbaMZfQGY8lGb/ T+vVxKGA2yyX7J8fowXeCtov/tsex85Z6lbpKk5o4+bSwKaWff1ArL6OpSuuGXuR mjctq8tHWcTjOA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:55:13 2025 by rpki-client