This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json) Hash identifier: p0x9LhKiUGC2FceK/mnw2ywpeRp6T0JeQ+y8OlYj268= Subject key identifier: A4:96:D5:AD:47:32:AA:66:B8:53:DF:CD:FA:57:44:A1:D8:10:59:EF Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Certificate serial: 019B42B6EB81E29E39005088A6F293B37F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 21:00:42 +0000 Manifest this update: Sun 21 Dec 2025 21:00:42 +0000 Manifest next update: Mon 22 Dec 2025 21:00:42 +0000 Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=) 2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: EiTl3fPaSTPI41VkNTCQi1Cp5ddPZaqEkbktx9rlaWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:eb:81:e2:9e:39:00:50:88:a6:f2:93:b3:7f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Validity Not Before: Dec 21 21:00:42 2025 GMT Not After : Dec 22 21:00:42 2025 GMT Subject: CN=a496d5ad4732aa66b853dfcdfa5744a1d81059ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6d:32:bb:17:e6:a4:36:99:8c:59:d7:62:5b: 39:f1:81:38:ba:80:df:42:8c:15:53:e9:a5:40:a7: 55:0f:ee:61:ab:c7:05:51:4a:d8:09:01:25:a9:85: 0d:94:51:20:39:aa:b6:67:ad:18:70:ad:63:f2:a8: d4:87:50:8c:ed:47:c4:8d:fd:04:77:c9:31:f8:70: fa:8a:28:e7:2e:2e:7d:6f:5c:95:01:61:2e:25:29: 33:bd:2c:99:bb:8a:cf:f1:72:c8:4b:34:0c:3e:31: 9e:ea:48:b1:bc:ed:a4:82:51:ba:0d:dc:b4:16:e6: 5a:08:15:b2:e9:b1:42:9e:bd:cd:65:e2:5e:5e:bb: 97:60:53:55:b0:9d:f6:25:29:29:6a:1e:0a:1b:99: 69:a3:e0:01:8c:00:9f:bb:c6:8f:66:51:bb:32:77: 69:4d:f9:06:c2:d9:3b:cc:bd:0e:7b:4e:4c:d6:6e: a4:b5:66:08:1a:f7:07:69:1a:79:23:d7:3f:a1:4b: dc:06:41:f5:a9:06:89:fb:c3:36:2c:3d:03:80:d8: 9c:10:a5:a5:53:8a:3d:a2:bc:1d:9a:09:97:e9:0b: c8:ab:3d:e5:64:1d:17:61:ce:32:ca:3a:66:98:4f: 8f:4d:10:fe:83:27:c4:41:7a:0f:be:45:bd:66:c2: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:96:D5:AD:47:32:AA:66:B8:53:DF:CD:FA:57:44:A1:D8:10:59:EF X509v3 Authority Key Identifier: keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:da:56:b6:e8:4d:b9:7a:7e:10:65:8e:0e:2e:f8:fd:f4:6a: 02:e2:ec:9b:94:1d:f0:48:ac:2f:ce:cb:4b:5e:1a:23:19:13: e7:f3:1f:7b:e4:73:aa:c7:31:32:90:7f:81:cc:5a:74:34:5a: 59:0f:10:47:3f:f4:de:27:8e:60:00:f8:fd:dd:71:07:18:75: ea:4d:2e:84:1d:99:85:24:2f:76:ed:f8:ce:f1:92:d6:be:6c: 66:c4:fc:fe:67:d2:84:d6:ef:55:cd:2d:b0:86:0c:4e:c5:f2: f7:7c:ed:50:ed:6c:8d:55:8c:a8:ff:6a:54:b9:2f:99:46:96: 71:4b:1c:9a:11:85:57:8e:bc:55:a9:35:09:7c:ce:c9:17:8d: 6c:82:06:24:ff:ca:da:bb:ff:f7:59:88:1b:45:8d:da:18:e2: 45:4f:f7:ed:0b:ef:e4:c1:2a:d5:05:ad:e2:2e:c1:d0:41:ad: b7:d7:f8:4b:c9:47:04:25:1c:5b:07:09:63:6f:e5:4c:5b:79: b1:df:66:5f:d5:7a:a5:03:e4:53:4f:bc:4b:04:22:29:ad:c0: 8c:18:d3:7a:91:47:6b:c1:b8:f3:9d:ab:d4:bc:15:c9:60:56: 1f:0f:2e:84:0a:ae:80:30:db:31:b9:66:31:e3:25:7e:c8:db: ce:5f:4e:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtuuB4p45AFCIpvKTs3+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWJkYzQxMDZhZGRlODllMWNlOWMzMmI4MDdiMjA4MmVi Yjk5NDQwHhcNMjUxMjIxMjEwMDQyWhcNMjUxMjIyMjEwMDQyWjAzMTEwLwYDVQQD EyhhNDk2ZDVhZDQ3MzJhYTY2Yjg1M2RmY2RmYTU3NDRhMWQ4MTA1OWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA620yuxfmpDaZjFnXYls58YE4uoDf QowVU+mlQKdVD+5hq8cFUUrYCQElqYUNlFEgOaq2Z60YcK1j8qjUh1CM7UfEjf0E d8kx+HD6iijnLi59b1yVAWEuJSkzvSyZu4rP8XLISzQMPjGe6kixvO2kglG6Ddy0 FuZaCBWy6bFCnr3NZeJeXruXYFNVsJ32JSkpah4KG5lpo+ABjACfu8aPZlG7Mndp TfkGwtk7zL0Oe05M1m6ktWYIGvcHaRp5I9c/oUvcBkH1qQaJ+8M2LD0DgNicEKWl U4o9orwdmgmX6QvIqz3lZB0XYc4yyjpmmE+PTRD+gyfEQXoPvkW9ZsIgPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSW1a1HMqpmuFPfzfpXRKHYEFnvMB8GA1UdIwQY MBaAFL9b3EEGrd6J4c6cMrgHsgguu5lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMt YmVkYWMxMGFhY2RjLzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMtYmVkYWMxMGFhY2Rj LzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtpWtuhN uXp+EGWODi74/fRqAuLsm5Qd8EisL87LS14aIxkT5/Mfe+RzqscxMpB/gcxadDRa WQ8QRz/03ieOYAD4/d1xBxh16k0uhB2ZhSQvdu34zvGS1r5sZsT8/mfShNbvVc0t sIYMTsXy93ztUO1sjVWMqP9qVLkvmUaWcUscmhGFV468Vak1CXzOyReNbIIGJP/K 2rv/91mIG0WN2hjiRU/37Qvv5MEq1QWt4i7B0EGtt9f4S8lHBCUcWwcJY2/lTFt5 sd9mX9V6pQPkU0+8SwQiKa3AjBjTepFHa8G4852r1LwVyWBWHw8uhAqugDDbMblm MeMlfsjbzl9OLw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:37 2025 by rpki-client