This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json) Hash identifier: DZSXxgmZWtnE2LAdbumm9he4P+tpxLNWqt8Xsd/NjEg= Subject key identifier: 15:8D:92:46:FF:8C:B0:CD:CA:F1:DE:6A:46:AF:B1:94:B6:41:38:EA Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b Certificate serial: 019B5A521BDAC9B5B47CD4B5AD554125C5FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft Manifest number: 19 Signing time: Fri 26 Dec 2025 11:01:28 +0000 Manifest this update: Fri 26 Dec 2025 11:01:28 +0000 Manifest next update: Sat 27 Dec 2025 11:01:28 +0000 Files and hashes: 1: rANm87WqORmafEWHghrrK-0l72M.asa (hash: Fgz6vPciEn1J0Q0dP4IkhgZ0dZebnzwKhwY9olb/BWo=) 2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: Jk1GzKrQ76AAVHSidR1Rw0CfKSOsR2kk4uJw0ZDCbxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:1b:da:c9:b5:b4:7c:d4:b5:ad:55:41:25:c5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b Validity Not Before: Dec 26 11:01:28 2025 GMT Not After : Dec 27 11:01:28 2025 GMT Subject: CN=158d9246ff8cb0cdcaf1de6a46afb194b64138ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:67:d4:89:09:e5:e3:d4:9c:c1:fc:82:9b: 96:50:bd:b4:79:9b:e4:66:df:af:9e:2b:d1:99:d9: 67:2a:81:3d:1e:a5:a2:2a:e9:96:06:75:04:10:e5: c1:5a:dd:be:28:78:93:af:27:23:dd:10:57:df:89: 4f:b5:ee:32:26:f6:4f:b9:34:d9:39:3e:06:c2:b0: 77:4b:3e:16:d4:6d:6a:5e:58:3e:5c:2e:20:42:ef: 88:98:db:8b:2c:80:02:45:9c:c3:c3:72:ed:e0:47: 5d:48:43:02:b5:36:77:f0:e0:d6:d1:46:76:b6:4b: 9e:eb:eb:2d:a0:d4:aa:60:e8:9d:fa:73:94:0a:c5: 4d:e9:bb:e3:43:f3:de:56:c6:1f:bb:d1:d0:b2:89: 9d:37:89:fa:5d:44:5f:85:24:a0:75:bc:8e:e7:7f: 8f:a9:4e:dc:75:37:4f:72:77:14:ec:a6:c5:96:41: 27:31:01:f3:47:15:64:4d:43:ce:39:bd:23:1e:9c: 52:38:0f:56:05:90:18:7c:b0:c4:21:9d:3f:ac:8a: 0f:38:10:2d:51:d5:33:45:e5:32:2a:5c:7b:99:51: ef:1e:3b:a1:06:a9:fd:b6:57:ae:97:8e:4c:3b:2e: 26:ec:c2:3b:dc:e0:52:80:8f:0e:ea:4b:1c:db:4c: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8D:92:46:FF:8C:B0:CD:CA:F1:DE:6A:46:AF:B1:94:B6:41:38:EA X509v3 Authority Key Identifier: keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fd:29:47:2a:8d:e0:7b:24:e3:70:1b:d0:d7:f7:73:f2:12: 87:6e:ee:ad:6e:fe:90:7c:be:59:08:4d:f8:11:09:0a:7d:ca: 4d:36:36:3a:12:21:02:f0:46:e4:38:29:9a:91:84:1c:ba:b1: bc:af:d4:19:6d:11:81:b6:2b:7d:74:1b:f6:65:75:21:cc:84: a6:e8:6d:5d:29:9d:11:e8:57:cf:6f:75:d7:97:f7:0f:bc:9f: ba:3d:9f:69:f5:29:f3:9f:9f:c8:57:a1:57:65:c9:d0:87:26: a7:b3:b9:19:bd:01:c3:1d:5b:0b:68:f9:07:a0:e5:b7:51:77: ad:68:0a:70:d2:b5:9c:09:1a:71:6e:49:19:8e:a6:ad:4f:ae: d0:54:42:a2:c9:94:49:e2:42:a4:f8:3c:af:44:86:be:3f:bd: 3c:bf:54:be:13:ae:d8:8c:a9:52:ad:ce:51:90:79:e1:bf:fb: ad:bb:ef:2a:95:b1:8b:ea:00:c2:40:0e:ce:ad:df:49:cd:e1: 88:5d:13:a7:48:d5:04:d6:d3:74:6e:e3:18:ee:7e:b2:ee:85: 2c:ab:a3:ba:91:43:51:7f:e2:3d:a1:1b:ee:dc:4f:29:d3:17: 11:75:fd:b1:e3:d3:f0:a4:1f:e7:e9:c0:10:32:54:b6:10:a8: ee:07:19:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUhvaybW0fNS1rVVBJcX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDlkZjU3N2YwZWU0NDMxODhjMDI5MzIzNDU3YmJjNWEw ZWFkM2IwHhcNMjUxMjI2MTEwMTI4WhcNMjUxMjI3MTEwMTI4WjAzMTEwLwYDVQQD EygxNThkOTI0NmZmOGNiMGNkY2FmMWRlNmE0NmFmYjE5NGI2NDEzOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllFn1IkJ5ePUnMH8gpuWUL20eZvk Zt+vnivRmdlnKoE9HqWiKumWBnUEEOXBWt2+KHiTrycj3RBX34lPte4yJvZPuTTZ OT4GwrB3Sz4W1G1qXlg+XC4gQu+ImNuLLIACRZzDw3Lt4EddSEMCtTZ38ODW0UZ2 tkue6+stoNSqYOid+nOUCsVN6bvjQ/PeVsYfu9HQsomdN4n6XURfhSSgdbyO53+P qU7cdTdPcncU7KbFlkEnMQHzRxVkTUPOOb0jHpxSOA9WBZAYfLDEIZ0/rIoPOBAt UdUzReUyKlx7mVHvHjuhBqn9tleul45MOy4m7MI73OBSgI8O6ksc20yjHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWNkkb/jLDNyvHeakavsZS2QTjqMB8GA1UdIwQY MBaAFL9J31d/DuRDGIwCkyNFe7xaDq07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMt OThjMmEzYzU3Yjg4LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMtOThjMmEzYzU3Yjg4 LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/0pRyqN 4Hsk43Ab0Nf3c/ISh27urW7+kHy+WQhN+BEJCn3KTTY2OhIhAvBG5DgpmpGEHLqx vK/UGW0RgbYrfXQb9mV1IcyEpuhtXSmdEehXz29115f3D7yfuj2fafUp85+fyFeh V2XJ0Icmp7O5Gb0Bwx1bC2j5B6Dlt1F3rWgKcNK1nAkacW5JGY6mrU+u0FRCosmU SeJCpPg8r0SGvj+9PL9UvhOu2IypUq3OUZB54b/7rbvvKpWxi+oAwkAOzq3fSc3h iF0Tp0jVBNbTdG7jGO5+su6FLKujupFDUX/iPaEb7txPKdMXEXX9sePT8KQf5+nA EDJUthCo7gcZBg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:11 2025 by rpki-client