This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json) Hash identifier: O1UKyysryvC9YXphPpVGBsrBTQIVx8hFZCuKh1qsJKw= Subject key identifier: A5:81:6F:B2:29:13:D8:95:54:93:7E:02:09:DD:33:42:3F:3F:8D:4D Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2 Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2 Certificate serial: 019B36458D7E90B416A799648B8C927290A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft Manifest number: 15CB Signing time: Fri 19 Dec 2025 11:01:26 +0000 Manifest this update: Fri 19 Dec 2025 11:01:26 +0000 Manifest next update: Sat 20 Dec 2025 11:01:26 +0000 Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=) 2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: InB0u4HjplSVjOOVCSOUgxs3piCXmBm61YtJN0PXqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:8d:7e:90:b4:16:a7:99:64:8b:8c:92:72:90:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2 Validity Not Before: Dec 19 11:01:26 2025 GMT Not After : Dec 20 11:01:26 2025 GMT Subject: CN=a5816fb22913d89554937e0209dd33423f3f8d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:2e:b2:06:40:a9:a0:e2:86:af:c4:3d:0e: ef:35:03:09:50:b9:8e:1d:2a:c6:c1:cd:68:ef:87: 94:c3:8f:c5:24:b5:eb:36:47:b7:1d:7a:00:14:e2: da:39:3d:8d:da:1d:46:6d:90:3a:30:08:9a:42:00: 66:64:4b:ef:7a:56:8d:3b:f8:0b:fb:1f:2e:74:29: bd:ff:75:c4:75:b6:e7:3e:51:7c:39:1a:70:47:a4: 56:db:2d:0f:3a:62:c2:b8:ba:a5:b2:68:5a:d4:81: 65:fe:02:bb:cc:ae:e1:64:46:49:c7:cb:27:32:76: 72:2a:42:19:62:ef:e6:80:80:3a:02:c8:d8:bd:7a: de:80:72:fe:0a:bc:7f:d5:d5:91:82:64:aa:fa:74: 20:29:f2:a6:b6:e0:06:85:4d:12:be:e0:ef:53:92: 9a:e1:68:85:e4:31:c0:87:df:d3:40:0b:2b:17:a2: e6:1b:f1:2c:73:96:88:9e:42:99:4b:38:9b:0c:4f: d7:ca:27:ed:18:b8:2b:a6:dc:6c:b7:f3:f6:de:e3: ea:53:32:88:02:3f:d7:c1:a2:1e:cd:60:a0:a2:de: 41:77:4e:22:bc:52:09:fc:13:11:e9:cb:79:36:81: 85:17:41:75:35:63:e2:7b:8b:df:8c:9a:b6:eb:8d: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:81:6F:B2:29:13:D8:95:54:93:7E:02:09:DD:33:42:3F:3F:8D:4D X509v3 Authority Key Identifier: keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f1:f6:e8:23:a1:7b:ab:df:10:fb:bb:05:f0:85:44:3f:19: 23:c6:86:a9:80:62:7a:eb:d5:3e:ae:11:bc:cb:44:c7:3d:14: f9:ce:21:b1:48:a9:f4:9d:21:3b:70:52:24:eb:91:2f:23:e3: 13:59:7b:5a:eb:3a:4c:9a:22:3f:1e:70:1d:5e:7b:df:32:eb: 52:45:72:ce:65:f0:28:2e:92:7b:c5:95:44:29:7f:5f:05:10: be:a0:2d:ef:25:69:d6:35:e0:bc:20:49:43:93:97:e4:12:cf: 6d:bc:b1:e7:90:9e:28:c1:ee:fc:be:67:f6:c9:1f:78:12:10: cf:f7:1e:5a:e5:44:f2:43:81:93:fb:60:19:f0:e1:2b:0a:aa: ad:ba:91:fa:40:d9:59:29:e5:44:17:d5:bf:61:88:3a:d1:9e: bc:fa:33:a3:45:99:70:ad:46:c0:4a:fb:da:1f:96:cf:cb:1c: 08:67:6f:f5:c5:9f:9a:53:14:f8:0e:c9:3e:f4:3e:f7:fa:72: cd:4b:90:40:30:c0:a2:cf:2e:27:53:d5:2d:2b:57:49:c2:d9: f7:7f:25:a1:c9:fb:c9:43:1c:07:60:32:af:32:d4:37:69:77: f7:eb:84:9f:e5:77:e5:0d:cb:a5:80:6b:f3:4f:2a:81:b7:ea: e1:5b:b1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RY1+kLQWp5lki4yScpCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzdlNjc0NjY1NDQwZjZlNmI4MGU2ZmYxNTVhYWQ2YTg5 Y2IzZjIwHhcNMjUxMjE5MTEwMTI2WhcNMjUxMjIwMTEwMTI2WjAzMTEwLwYDVQQD EyhhNTgxNmZiMjI5MTNkODk1NTQ5MzdlMDIwOWRkMzM0MjNmM2Y4ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJMusgZAqaDihq/EPQ7vNQMJULmO HSrGwc1o74eUw4/FJLXrNke3HXoAFOLaOT2N2h1GbZA6MAiaQgBmZEvvelaNO/gL +x8udCm9/3XEdbbnPlF8ORpwR6RW2y0POmLCuLqlsmha1IFl/gK7zK7hZEZJx8sn MnZyKkIZYu/mgIA6AsjYvXregHL+Crx/1dWRgmSq+nQgKfKmtuAGhU0SvuDvU5Ka 4WiF5DHAh9/TQAsrF6LmG/Esc5aInkKZSzibDE/XyiftGLgrptxst/P23uPqUzKI Aj/XwaIezWCgot5Bd04ivFIJ/BMR6ct5NoGFF0F1NWPie4vfjJq2640ZfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWBb7IpE9iVVJN+AgndM0I/P41NMB8GA1UdIwQY MBaAFLzH5nRmVED25rgOb/FVqtaonLPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEt ZWY2Y2NlMTQ1ZDgyLzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEtZWY2Y2NlMTQ1ZDgy LzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPH26COh e6vfEPu7BfCFRD8ZI8aGqYBieuvVPq4RvMtExz0U+c4hsUip9J0hO3BSJOuRLyPj E1l7Wus6TJoiPx5wHV573zLrUkVyzmXwKC6Se8WVRCl/XwUQvqAt7yVp1jXgvCBJ Q5OX5BLPbbyx55CeKMHu/L5n9skfeBIQz/ceWuVE8kOBk/tgGfDhKwqqrbqR+kDZ WSnlRBfVv2GIOtGevPozo0WZcK1GwEr72h+Wz8scCGdv9cWfmlMU+A7JPvQ+9/py zUuQQDDAos8uJ1PVLStXScLZ938locn7yUMcB2AyrzLUN2l39+uEn+V35Q3LpYBr 808qgbfq4VuxGg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:13:19 2025 by rpki-client