This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft File: vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft (raw, json) Hash identifier: +Z9pivhmK6oSFMThRQZRIsJz6mI5gWMx6kKkw3/W0Nk= Subject key identifier: B0:92:7B:2C:6D:16:02:83:2B:ED:43:80:AD:43:58:64:3A:5A:F3:04 Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63 Certificate issuer: /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63 Certificate serial: 019B416D25065778ED4554BE8F2DF28F5DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft Manifest number: 0A06 Signing time: Sun 21 Dec 2025 15:00:30 +0000 Manifest this update: Sun 21 Dec 2025 15:00:30 +0000 Manifest next update: Mon 22 Dec 2025 15:00:30 +0000 Files and hashes: 1: 2ea_Ght-OBVvtgKuaEhUjFGnCIo.roa (hash: dArjpyisxrgvkT5h9NbQ4Zg16ShXRNvAx7t0mMervEs=) 2: vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl (hash: cMDUqbx5/iq++/Xzu+GB92YvjOJsMWGBrUg4+132A74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:25:06:57:78:ed:45:54:be:8f:2d:f2:8f:5d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63 Validity Not Before: Dec 21 15:00:30 2025 GMT Not After : Dec 22 15:00:30 2025 GMT Subject: CN=b0927b2c6d1602832bed4380ad4358643a5af304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:1c:69:bf:73:23:d2:7c:2c:2d:2f:9c:38: cc:73:ba:a8:c7:17:9f:6d:05:a3:78:d8:8c:d5:bd: be:a1:02:47:45:79:99:8e:86:94:56:e6:ab:83:89: e2:8d:df:c3:e4:ee:45:26:82:c8:56:89:8c:24:30: 5a:06:b8:dc:ec:95:a9:ae:62:48:e7:51:3c:28:d6: f3:06:a4:f0:09:bf:f6:08:23:ed:8d:78:a2:7f:da: 20:fd:24:ad:e7:37:a5:a8:4d:65:55:a0:e0:9a:65: a5:cf:cc:90:a1:ff:e2:56:bb:63:cb:0a:fb:7d:f9: 42:2d:92:87:d2:43:17:e8:7e:84:72:d1:12:b2:92: b8:55:5c:f5:5c:ca:9d:b2:1c:f6:10:8f:31:1b:d0: d8:3c:6c:49:b4:a2:4e:22:85:87:77:08:25:50:a5: bc:db:d5:ed:de:04:5c:93:d3:9e:05:5a:e1:7c:da: ca:7e:94:9f:02:61:11:4d:2e:00:df:28:4a:ce:6f: d2:c4:2a:cd:38:3f:5c:a9:4f:e2:0b:2c:29:9b:b2: 58:15:b7:f4:ee:d0:ff:fb:f1:64:49:d9:0e:e5:17: 6d:7b:23:5b:fc:09:56:1f:27:b2:c0:49:33:16:0f: 6e:17:a6:f0:52:69:5d:07:86:8f:98:6e:9e:e4:83: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:92:7B:2C:6D:16:02:83:2B:ED:43:80:AD:43:58:64:3A:5A:F3:04 X509v3 Authority Key Identifier: keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a1:fa:d0:28:e0:40:31:3c:34:8f:a1:1e:6c:bf:a2:56:2a: 8f:b2:1b:53:e0:38:d0:3a:e9:f3:d8:30:20:04:34:7c:bb:a6: 5f:9c:c1:5f:48:af:7c:a5:4b:58:04:69:0c:db:c5:73:47:42: b9:f3:09:cc:21:d5:6b:f4:d5:d5:3f:b8:c8:62:4e:c3:2c:06: 6e:8a:1a:0f:36:72:5d:69:9f:9b:4a:e8:fb:f3:e0:de:45:8a: 9a:82:79:61:f1:5f:5e:8f:2b:41:dc:35:be:53:01:61:bf:2f: 8f:db:e2:a9:e0:2a:37:a9:e4:fb:be:a7:ca:cb:89:42:20:11: af:1c:3a:e2:93:d2:60:dd:87:7a:c6:54:71:3a:ee:e1:5b:e7: a1:42:b6:de:dc:99:c9:ed:43:89:af:c1:47:3e:dc:72:e7:e7: 47:49:b8:a1:97:77:23:3c:f1:13:56:56:f9:35:4e:31:26:c9: cd:a3:77:fe:3a:61:0f:a9:83:7b:12:e5:8b:3a:ba:ae:1c:d7: 90:2c:37:f3:ef:0d:40:f8:81:15:bc:f6:a6:61:9e:68:04:3b: 0a:5a:e2:25:ea:6c:d1:c5:14:02:06:4d:22:e6:1a:a4:02:5e: 87:f9:8d:3d:dc:46:e0:9f:81:8f:be:d3:a7:82:a2:5d:2c:88: 55:98:14:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbSUGV3jtRVS+jy3yj13eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMGRjMTQ0OTMxNmI2NTY3YzNlMWUzNzRiODJlZDg5MmI1 ZDBmNjMwHhcNMjUxMjIxMTUwMDMwWhcNMjUxMjIyMTUwMDMwWjAzMTEwLwYDVQQD EyhiMDkyN2IyYzZkMTYwMjgzMmJlZDQzODBhZDQzNTg2NDNhNWFmMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuocab9zI9J8LC0vnDjMc7qoxxef bQWjeNiM1b2+oQJHRXmZjoaUVuarg4nijd/D5O5FJoLIVomMJDBaBrjc7JWprmJI 51E8KNbzBqTwCb/2CCPtjXiif9og/SSt5zelqE1lVaDgmmWlz8yQof/iVrtjywr7 fflCLZKH0kMX6H6EctESspK4VVz1XMqdshz2EI8xG9DYPGxJtKJOIoWHdwglUKW8 29Xt3gRck9OeBVrhfNrKfpSfAmERTS4A3yhKzm/SxCrNOD9cqU/iCywpm7JYFbf0 7tD/+/FkSdkO5RdteyNb/AlWHyeywEkzFg9uF6bwUmldB4aPmG6e5IMyUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCSeyxtFgKDK+1DgK1DWGQ6WvMEMB8GA1UdIwQY MBaAFL8NwUSTFrZWfD4eN0uC7YkrXQ9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMt NTc1NWIyZjEwNDE4LzEvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMtNTc1NWIyZjEwNDE4 LzEvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKH60Cjg QDE8NI+hHmy/olYqj7IbU+A40Drp89gwIAQ0fLumX5zBX0ivfKVLWARpDNvFc0dC ufMJzCHVa/TV1T+4yGJOwywGbooaDzZyXWmfm0ro+/Pg3kWKmoJ5YfFfXo8rQdw1 vlMBYb8vj9viqeAqN6nk+76nysuJQiARrxw64pPSYN2HesZUcTru4VvnoUK23tyZ ye1Dia/BRz7ccufnR0m4oZd3IzzxE1ZW+TVOMSbJzaN3/jphD6mDexLlizq6rhzX kCw38+8NQPiBFbz2pmGeaAQ7ClriJeps0cUUAgZNIuYapAJeh/mNPdxG4J+Bj77T p4KiXSyIVZgUSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:29:49 2025 by rpki-client