This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft File: V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json) Hash identifier: o5yIepbJ9gJiduTfUBTJEWPSAX829JRpG5jezF45NF8= Subject key identifier: 0D:51:3A:FC:EF:B6:0B:D9:03:47:44:D0:A0:09:32:5A:05:8A:25:4C Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0 Certificate issuer: /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0 Certificate serial: 019B21ABCC264D74BB8E92AE89547A134E74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 11:01:05 +0000 Manifest this update: Mon 15 Dec 2025 11:01:05 +0000 Manifest next update: Tue 16 Dec 2025 11:01:05 +0000 Files and hashes: 1: LO_AdzfatF4C9sIs1o52EbzmDNE.roa (hash: bUjCYFRihUcJ3W4Hnr4B5vT5UkBAyoxGKHKJzbwXNm0=) 2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: begOU5cB9ZzkNFGJkhbw3rv+Tfz6V59Q2TyVB2HRXio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:cc:26:4d:74:bb:8e:92:ae:89:54:7a:13:4e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0 Validity Not Before: Dec 15 11:01:05 2025 GMT Not After : Dec 16 11:01:05 2025 GMT Subject: CN=0d513afcefb60bd9034744d0a009325a058a254c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:f8:19:a6:95:ff:b2:2e:f9:53:b7:e7:99: d9:e3:3c:12:cc:d8:59:fb:d6:d9:f5:06:88:0f:99: 29:63:ff:99:62:3b:cc:8d:86:96:08:e9:09:99:46: 43:07:ce:ee:1d:62:e8:fe:fd:5f:03:8c:f3:c3:83: 31:d7:18:8a:fb:c6:15:14:df:28:3c:74:5b:57:56: b7:f4:0b:5b:e4:dd:2e:e1:be:b9:64:b5:bd:5e:fc: 38:36:72:a6:2d:3d:70:77:8b:8d:23:1b:f2:40:da: b6:56:f5:1a:3d:d1:48:e9:0a:69:7f:ca:10:8b:6b: 21:b2:d0:77:e0:e6:b0:7c:59:6d:7a:a9:cb:02:f1: 51:da:72:4a:3b:15:7b:2d:d4:a6:fb:d4:f6:10:a8: b6:96:9c:87:2c:b6:5e:95:9e:ac:3c:e7:22:05:ba: 1e:70:90:d9:3e:bd:22:1d:2e:fd:55:91:f8:0a:89: ad:eb:f0:29:fb:02:e6:78:51:29:12:b9:52:6a:06: 8c:1b:4e:9b:70:7a:9c:be:77:d2:30:a5:53:14:bc: df:ea:82:0a:97:22:52:e2:1d:75:85:99:6e:6c:c5: 74:dd:08:fa:f3:23:ec:65:fb:45:70:c1:e7:53:5d: 17:1d:e4:e3:9b:b9:67:11:d0:53:b6:61:fb:ec:dc: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:51:3A:FC:EF:B6:0B:D9:03:47:44:D0:A0:09:32:5A:05:8A:25:4C X509v3 Authority Key Identifier: keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8c:aa:95:35:e4:6a:c2:72:e2:28:32:49:43:0e:0a:d9:ae: 39:19:4b:dd:d2:80:86:63:3c:46:21:b8:33:da:d5:62:5b:46: 97:e7:86:81:d4:6f:cb:0f:b2:14:d5:5b:4c:cd:61:6e:ea:55: cc:e4:4c:0a:61:03:6a:13:ec:bb:12:4d:49:bf:e7:7a:00:0f: 93:ab:73:42:14:b8:fc:b5:fa:49:76:fb:3d:54:82:fe:72:5f: aa:51:a9:81:a8:b5:9a:86:2c:ea:9d:e7:93:f0:95:27:6f:84: 63:31:06:03:f2:6b:1d:77:35:89:d5:ad:b3:45:23:55:18:9e: 00:a7:8b:c3:00:ba:07:91:de:7c:c5:c3:b2:6d:96:6e:c9:77: 0b:75:53:e6:0e:a1:46:01:97:b8:5d:d0:02:dc:53:55:e2:c0: b0:57:17:02:78:e6:4c:db:18:f3:3b:56:c8:98:dc:d4:11:98: 02:00:b0:b7:52:bd:6e:97:82:0f:f1:a7:6a:46:df:61:28:38: a0:40:b2:d8:59:f3:64:4e:a2:f2:e0:4f:2b:06:47:74:5b:13: 21:ab:a3:df:41:95:5e:58:0a:fb:ed:97:e8:bc:9a:90:00:57: 3c:1e:6d:1f:28:54:d5:60:e4:93:e6:a3:35:43:58:aa:1c:7f: 12:11:b4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq8wmTXS7jpKuiVR6E050MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTA0YTRlZmQ1MWRjOTU4NDdjMTU2ZjRhMzZkYmZlNTU4 M2MyYjAwHhcNMjUxMjE1MTEwMTA1WhcNMjUxMjE2MTEwMTA1WjAzMTEwLwYDVQQD EygwZDUxM2FmY2VmYjYwYmQ5MDM0NzQ0ZDBhMDA5MzI1YTA1OGEyNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtD4GaaV/7Iu+VO355nZ4zwSzNhZ +9bZ9QaID5kpY/+ZYjvMjYaWCOkJmUZDB87uHWLo/v1fA4zzw4Mx1xiK+8YVFN8o PHRbV1a39Atb5N0u4b65ZLW9Xvw4NnKmLT1wd4uNIxvyQNq2VvUaPdFI6Qppf8oQ i2shstB34OawfFlteqnLAvFR2nJKOxV7LdSm+9T2EKi2lpyHLLZelZ6sPOciBboe cJDZPr0iHS79VZH4Comt6/Ap+wLmeFEpErlSagaMG06bcHqcvnfSMKVTFLzf6oIK lyJS4h11hZlubMV03Qj68yPsZftFcMHnU10XHeTjm7lnEdBTtmH77NxtZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1ROvzvtgvZA0dE0KAJMloFiiVMMB8GA1UdIwQY MBaAFFdQSk79UdyVhHwVb0o22/5Vg8KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFCS1R2MVIzSldFZkJWdlNqYmJfbFdEd3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMjI2MDYtNGZhYS00ZTk5LWJlMjkt OTYzNDgwZTliZTc5LzEvVjFCS1R2MVIzSldFZkJWdlNqYmJfbFdEd3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wMjI2MDYtNGZhYS00ZTk5LWJlMjktOTYzNDgwZTliZTc5 LzEvVjFCS1R2MVIzSldFZkJWdlNqYmJfbFdEd3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4yqlTXk asJy4igySUMOCtmuORlL3dKAhmM8RiG4M9rVYltGl+eGgdRvyw+yFNVbTM1hbupV zORMCmEDahPsuxJNSb/negAPk6tzQhS4/LX6SXb7PVSC/nJfqlGpgai1moYs6p3n k/CVJ2+EYzEGA/JrHXc1idWts0UjVRieAKeLwwC6B5HefMXDsm2Wbsl3C3VT5g6h RgGXuF3QAtxTVeLAsFcXAnjmTNsY8ztWyJjc1BGYAgCwt1K9bpeCD/GnakbfYSg4 oECy2FnzZE6i8uBPKwZHdFsTIauj30GVXlgK++2X6LyakABXPB5tHyhU1WDkk+aj NUNYqhx/EhG0IQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:23:24 2025 by rpki-client