This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json) Hash identifier: YjSFtto5wuQOQNg+nZozhK9sg8/8hQjkR+N/nKjxpIU= Subject key identifier: 5A:52:A3:95:0C:28:4D:F9:C5:C2:47:89:77:B0:51:7D:7D:6F:BB:C2 Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Certificate serial: 019B0E929AA89383B5315315F962ECB3B2E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 18:00:47 +0000 Manifest this update: Thu 11 Dec 2025 18:00:47 +0000 Manifest next update: Fri 12 Dec 2025 18:00:47 +0000 Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=) 2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=) 3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=) 4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=) 5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: bGHYLDx8HTbSpnHgHemxLt5/9pRii7luZhpKUExjMnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:9a:a8:93:83:b5:31:53:15:f9:62:ec:b3:b2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Validity Not Before: Dec 11 18:00:47 2025 GMT Not After : Dec 12 18:00:47 2025 GMT Subject: CN=5a52a3950c284df9c5c2478977b0517d7d6fbbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:a4:49:48:ee:0b:f1:ca:84:7f:6a:86:2c: ad:ea:15:e0:8d:70:7d:63:e8:2c:c5:3a:c9:bc:9c: 8b:f1:4b:33:48:48:f9:88:2a:69:e7:25:57:f2:d4: 65:31:f1:8a:be:96:b8:5c:be:df:56:74:ba:2c:d3: f4:b6:5c:6a:89:12:b8:fd:0f:45:ff:dd:04:40:86: 11:5a:7e:37:86:82:3f:05:a2:91:30:95:ad:0a:2c: d6:94:9d:6c:83:59:a2:75:f3:f3:af:9a:8d:a1:7d: 99:a6:ae:cd:79:31:5b:21:c3:c2:28:e8:3a:ad:17: 74:36:25:75:a4:4b:c5:90:91:bf:e9:cb:a4:dd:cb: 63:3e:cc:79:0f:17:42:a0:b3:90:8c:0e:f7:d7:9d: a0:e6:23:e0:6f:d5:e6:da:4a:b7:53:77:7b:42:6e: 72:58:78:ae:c0:95:d0:dc:39:9f:c6:b0:d7:67:7a: a1:3e:47:57:a2:b7:dd:ee:29:22:f1:45:7b:e3:eb: 50:7e:67:7c:c3:4c:b6:85:0f:38:b5:38:ba:1f:dd: f2:d0:75:ff:09:42:9a:60:56:37:c0:21:60:e4:ef: 53:79:ce:79:d0:40:d9:32:46:b7:e8:0c:65:62:c0: e1:14:cb:ea:22:7f:3f:4a:4e:c3:d4:69:ac:a7:35: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:A3:95:0C:28:4D:F9:C5:C2:47:89:77:B0:51:7D:7D:6F:BB:C2 X509v3 Authority Key Identifier: keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0f:a8:26:76:a2:a7:91:d5:7a:54:a4:ac:d6:75:71:19:56: c8:b5:2d:ca:ea:f2:3b:67:29:4e:b3:6e:94:43:ac:ab:67:ec: 9a:47:1f:9b:01:42:05:a8:a8:9c:6c:ae:ce:74:f3:53:4c:17: f4:ce:b9:a2:da:61:d6:e4:30:00:22:18:cf:b6:c2:60:f6:60: 78:e8:f6:27:35:99:ae:6d:60:d1:e2:47:42:4d:ba:d9:99:80: 60:fa:61:28:b6:3d:ca:6f:52:14:f6:b0:8b:91:74:2f:45:c7: 61:27:a7:60:c6:bd:79:85:3a:3d:f2:43:83:75:92:3d:c9:06: 98:ac:3c:89:b0:22:71:bc:86:17:49:df:b9:71:5b:21:8b:61: 84:25:9d:2e:43:92:d5:a9:66:71:2d:3d:70:30:20:af:a8:6d: 58:ba:8b:42:6c:c6:d2:c0:8b:9a:8d:26:b7:03:9c:60:b3:ee: d2:18:f2:40:17:7d:73:32:3e:b2:67:9e:ee:40:cd:49:65:31: f0:a8:77:21:dc:f6:a1:63:18:c0:c4:19:50:8a:bb:b6:66:97: 2b:b2:6c:c9:b7:9a:de:50:b6:8c:74:16:ac:b7:95:ad:21:10: e2:79:fc:ca:5a:a4:b2:98:71:c8:ff:c4:c1:52:dc:bb:82:60: be:29:b0:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpqok4O1MVMV+WLss7LiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl ZDFhZDUwHhcNMjUxMjExMTgwMDQ3WhcNMjUxMjEyMTgwMDQ3WjAzMTEwLwYDVQQD Eyg1YTUyYTM5NTBjMjg0ZGY5YzVjMjQ3ODk3N2IwNTE3ZDdkNmZiYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb2kSUjuC/HKhH9qhiyt6hXgjXB9 Y+gsxTrJvJyL8UszSEj5iCpp5yVX8tRlMfGKvpa4XL7fVnS6LNP0tlxqiRK4/Q9F /90EQIYRWn43hoI/BaKRMJWtCizWlJ1sg1midfPzr5qNoX2Zpq7NeTFbIcPCKOg6 rRd0NiV1pEvFkJG/6cuk3ctjPsx5DxdCoLOQjA73152g5iPgb9Xm2kq3U3d7Qm5y WHiuwJXQ3DmfxrDXZ3qhPkdXorfd7iki8UV74+tQfmd8w0y2hQ84tTi6H93y0HX/ CUKaYFY3wCFg5O9Tec550EDZMka36AxlYsDhFMvqIn8/Sk7D1GmspzWi5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpSo5UMKE35xcJHiXewUX19b7vCMB8GA1UdIwQY MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt NzE1ZjA5ODE3MzQxLzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg+oJnai p5HVelSkrNZ1cRlWyLUtyuryO2cpTrNulEOsq2fsmkcfmwFCBaionGyuznTzU0wX 9M65otph1uQwACIYz7bCYPZgeOj2JzWZrm1g0eJHQk262ZmAYPphKLY9ym9SFPaw i5F0L0XHYSenYMa9eYU6PfJDg3WSPckGmKw8ibAicbyGF0nfuXFbIYthhCWdLkOS 1almcS09cDAgr6htWLqLQmzG0sCLmo0mtwOcYLPu0hjyQBd9czI+smee7kDNSWUx 8Kh3Idz2oWMYwMQZUIq7tmaXK7Jsybea3lC2jHQWrLeVrSEQ4nn8ylqksphxyP/E wVLcu4Jgvimwjg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:51 2025 by rpki-client