This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft File: vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json) Hash identifier: QcAABepqNrzr4NKe5H3PkMlIs+iuMR0KZN9OiGqu+9o= Subject key identifier: D7:7E:20:50:B5:19:CF:3A:97:11:88:6B:B0:AD:5A:BC:6E:AF:BC:EF Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Certificate serial: 019B378F045B03E0379A8C2973B1C3ACF65E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft Manifest number: 100A Signing time: Fri 19 Dec 2025 17:01:18 +0000 Manifest this update: Fri 19 Dec 2025 17:01:18 +0000 Manifest next update: Sat 20 Dec 2025 17:01:18 +0000 Files and hashes: 1: h4LBRXlaL-oC3DBkosImeYIzlhM.roa (hash: fcJ0091j9gyLpmNM62v9sM4sdOjqt1S8YmfKAgde0r4=) 2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: hCeO24VGCAOsX+nYgdaPTQNGFJxV/R7eRiPKOFNkoOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:04:5b:03:e0:37:9a:8c:29:73:b1:c3:ac:f6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Validity Not Before: Dec 19 17:01:18 2025 GMT Not After : Dec 20 17:01:18 2025 GMT Subject: CN=d77e2050b519cf3a9711886bb0ad5abc6eafbcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:91:06:9c:98:08:e2:6f:47:ab:20:10:4a: 52:ae:2c:fc:f2:ea:b2:dd:7a:bf:33:ba:f5:20:ea: 47:fc:aa:97:c3:4d:f9:42:58:bf:12:8c:fe:57:c4: 43:b4:b8:08:9b:42:7c:42:3e:2c:2a:f6:10:0d:83: d1:26:96:85:50:6d:5c:d5:43:51:88:3b:4c:6a:79: 46:4c:0e:a9:66:1b:b2:92:6f:1c:9a:fc:a5:41:79: 52:c7:38:d3:fc:ba:c1:07:aa:c2:42:ba:d7:45:cb: e2:49:3e:2e:f1:d9:b0:fa:c7:ef:dc:e5:8c:56:47: 85:c5:04:7a:8c:62:1b:b1:60:14:13:3b:1d:22:f4: b4:93:a6:3e:b9:42:e1:49:a8:e1:15:b7:8a:a2:a5: 49:3f:4b:aa:90:e0:6d:25:d9:a9:c5:f3:7e:29:5b: 1b:00:e0:72:0e:b0:ba:e6:5c:59:f5:0b:95:2e:26: 04:75:2b:2f:b6:ba:da:d6:46:a5:fa:3d:7c:71:74: a1:03:bf:83:1d:2a:5d:37:f1:7b:6a:b9:00:c5:be: e8:83:af:0f:ec:4e:ce:cc:b3:0c:b8:c4:23:12:94: 35:9f:32:6a:98:3c:18:f6:71:66:f9:9d:1e:95:3e: b3:a1:37:86:b0:08:42:63:3c:d6:d8:45:12:65:43: 34:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:20:50:B5:19:CF:3A:97:11:88:6B:B0:AD:5A:BC:6E:AF:BC:EF X509v3 Authority Key Identifier: keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:41:93:26:20:83:ed:68:70:13:af:08:9b:de:d8:3c:a0:67: 32:dd:60:d5:f8:53:90:c6:3a:b0:38:08:f8:55:e0:ec:52:47: bb:94:69:33:5e:77:64:b0:49:c7:fc:b7:3b:bb:ae:21:d6:2a: 8a:99:43:ef:e0:09:c9:b5:02:83:c4:31:03:6d:7e:cb:d5:3f: 0a:83:34:12:0f:41:d7:60:8f:b5:1c:95:7d:e1:76:2f:e0:93: 92:f0:ef:44:c4:a6:d9:a4:2f:82:3a:de:72:be:12:31:54:09: 7f:64:dc:44:db:1c:45:ed:21:fb:8e:27:f4:01:bd:ab:d6:29: 31:16:0f:d4:63:f4:2c:68:4d:77:0e:ab:07:14:ea:7c:e8:d7: 70:40:4c:e8:37:e8:82:09:5c:77:1b:aa:f3:6b:ca:5a:bd:02: 23:c3:f5:b7:bd:30:52:c6:43:3d:17:81:e1:22:af:72:a2:3a: b5:d2:1c:c6:57:c4:11:a5:58:58:58:e7:9d:d4:8a:59:80:b2: 30:0f:26:28:55:23:8c:c9:8b:71:09:b6:a4:fb:be:80:8e:df: e5:ac:b2:c2:9e:71:0b:41:18:2d:b0:79:90:51:72:ce:00:af: f7:e4:6b:20:30:64:08:5f:24:e5:72:df:e7:5c:50:32:9f:be: a1:aa:a0:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jwRbA+A3mowpc7HDrPZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWMxNmY1YmUzN2ZmNmM1ZDQyMDVmMmFiYTI1ZmNlMzU4 OTAzMzUwHhcNMjUxMjE5MTcwMTE4WhcNMjUxMjIwMTcwMTE4WjAzMTEwLwYDVQQD EyhkNzdlMjA1MGI1MTljZjNhOTcxMTg4NmJiMGFkNWFiYzZlYWZiY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuiRBpyYCOJvR6sgEEpSriz88uqy 3Xq/M7r1IOpH/KqXw035Qli/Eoz+V8RDtLgIm0J8Qj4sKvYQDYPRJpaFUG1c1UNR iDtManlGTA6pZhuykm8cmvylQXlSxzjT/LrBB6rCQrrXRcviST4u8dmw+sfv3OWM VkeFxQR6jGIbsWAUEzsdIvS0k6Y+uULhSajhFbeKoqVJP0uqkOBtJdmpxfN+KVsb AOByDrC65lxZ9QuVLiYEdSsvtrra1kal+j18cXShA7+DHSpdN/F7arkAxb7og68P 7E7OzLMMuMQjEpQ1nzJqmDwY9nFm+Z0elT6zoTeGsAhCYzzW2EUSZUM0kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNd+IFC1Gc86lxGIa7CtWrxur7zvMB8GA1UdIwQY MBaAFLwcFvW+N/9sXUIF8quiX841iQM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYt YWJkNmYyYjM0MTBiLzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYtYWJkNmYyYjM0MTBi LzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1kGTJiCD 7WhwE68Im97YPKBnMt1g1fhTkMY6sDgI+FXg7FJHu5RpM153ZLBJx/y3O7uuIdYq iplD7+AJybUCg8QxA21+y9U/CoM0Eg9B12CPtRyVfeF2L+CTkvDvRMSm2aQvgjre cr4SMVQJf2TcRNscRe0h+44n9AG9q9YpMRYP1GP0LGhNdw6rBxTqfOjXcEBM6Dfo gglcdxuq82vKWr0CI8P1t70wUsZDPReB4SKvcqI6tdIcxlfEEaVYWFjnndSKWYCy MA8mKFUjjMmLcQm2pPu+gI7f5ayywp5xC0EYLbB5kFFyzgCv9+RrIDBkCF8k5XLf 51xQMp++oaqg1w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:10:31 2025 by rpki-client