This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json) Hash identifier: 4xaU2ajAvq4yGoGASA9UTJjMn2Pzuh2Px+Rn12OzoMc= Subject key identifier: B4:EA:1E:82:A5:0F:CD:89:B1:54:79:92:C9:57:70:5A:20:5C:AB:11 Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea Certificate serial: 019B299BE72E550482F99572A6AE5D47B1CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 00:00:41 +0000 Manifest this update: Wed 17 Dec 2025 00:00:41 +0000 Manifest next update: Thu 18 Dec 2025 00:00:41 +0000 Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=) 2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=) 3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: vS68Se4V5++bOsl+KsiUUXmvrHHJRV7Zby9jsz/9S04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9b:e7:2e:55:04:82:f9:95:72:a6:ae:5d:47:b1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea Validity Not Before: Dec 17 00:00:41 2025 GMT Not After : Dec 18 00:00:41 2025 GMT Subject: CN=b4ea1e82a50fcd89b1547992c957705a205cab11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3c:4c:7b:3e:49:7b:18:66:aa:df:3c:82:dd: 7a:9d:f4:43:a5:e4:2e:90:58:31:39:38:f1:a2:55: 81:55:ed:59:d3:26:70:34:4e:9c:7a:fe:d6:8e:ab: 71:ac:58:22:61:03:ac:83:0d:44:56:98:79:75:55: 85:16:ba:3a:b1:f8:9c:4e:b1:a3:01:83:d9:32:46: 17:19:99:bb:8b:32:e2:1d:57:ee:33:92:2a:4d:e9: e1:d6:6e:12:49:22:33:19:c8:98:2e:9a:0f:5b:bf: 44:f6:27:b4:d8:2a:a2:a2:05:0b:71:54:02:20:36: d2:7d:39:14:82:63:3b:0c:a0:89:b3:7e:63:da:5f: 4a:a0:ee:3e:dd:ee:53:a3:a6:e9:05:03:64:ec:d7: 08:3d:ed:b9:47:4c:dd:e4:b2:ae:cb:d0:cd:ff:d1: c3:9f:70:97:83:fd:17:9b:26:ae:a3:03:b3:c5:f3: 87:e5:4f:df:2b:bb:0b:51:54:41:13:b9:33:6b:05: 7a:4a:9b:09:1e:ec:13:e4:05:b1:1b:0f:52:ec:6f: 87:4a:11:3a:c8:61:02:86:2a:58:84:98:04:35:13: 2c:e9:e5:28:0e:60:66:56:d8:a8:a3:5a:a6:8a:80: 0b:30:ff:1b:97:0a:dd:d7:3e:09:11:2e:5c:6d:14: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EA:1E:82:A5:0F:CD:89:B1:54:79:92:C9:57:70:5A:20:5C:AB:11 X509v3 Authority Key Identifier: keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:df:80:46:22:15:33:d3:03:fc:d9:81:06:ef:d7:4c:e8:df: 61:3a:08:ce:11:96:fa:b6:52:04:f5:c2:97:81:7d:8f:9f:3d: 34:f2:d2:eb:f8:83:ba:1a:dc:90:95:d5:b7:cc:ba:63:a3:fe: 7b:01:c5:e3:7a:7d:e2:fb:6b:f1:d3:08:cf:e0:5c:24:d3:84: bd:98:b6:6a:5f:46:8f:22:bf:23:0b:ed:c6:e3:47:53:7d:bc: 71:fc:ca:3f:8d:0e:32:02:29:70:27:23:6c:e3:69:5c:1f:1c: b4:67:cf:d2:1d:dd:8a:b9:71:b4:6e:ee:6f:b4:c1:14:56:33: 1a:f5:3b:71:d1:a9:6a:89:ed:f1:f3:0c:7f:f0:f1:a8:71:27: 26:7d:48:39:09:89:5b:b8:b3:ac:9f:be:b8:aa:be:59:2a:9a: be:e5:6c:d8:08:a8:e9:25:50:17:b6:d6:da:69:70:8f:c3:bd: 3b:62:ef:17:28:a3:96:de:7a:d5:dd:9a:10:9e:f9:14:ca:8d: 3e:43:6a:bc:41:95:ff:ee:08:d3:ef:9b:bb:30:e9:2b:72:f9: 22:64:cc:60:cc:32:f6:38:ef:85:60:39:c2:03:46:1f:16:d1: d8:3f:fd:09:37:c7:e9:6f:da:53:14:31:34:a6:97:a4:69:1b: b8:c3:fc:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspm+cuVQSC+ZVypq5dR7HMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTZmYzc2OGFkNDdiOTY4ZTBhMjU5ZmVjYzhhM2RhMzJm YWM1ZWEwHhcNMjUxMjE3MDAwMDQxWhcNMjUxMjE4MDAwMDQxWjAzMTEwLwYDVQQD EyhiNGVhMWU4MmE1MGZjZDg5YjE1NDc5OTJjOTU3NzA1YTIwNWNhYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjxMez5Jexhmqt88gt16nfRDpeQu kFgxOTjxolWBVe1Z0yZwNE6cev7WjqtxrFgiYQOsgw1EVph5dVWFFro6sficTrGj AYPZMkYXGZm7izLiHVfuM5IqTenh1m4SSSIzGciYLpoPW79E9ie02CqiogULcVQC IDbSfTkUgmM7DKCJs35j2l9KoO4+3e5To6bpBQNk7NcIPe25R0zd5LKuy9DN/9HD n3CXg/0XmyauowOzxfOH5U/fK7sLUVRBE7kzawV6SpsJHuwT5AWxGw9S7G+HShE6 yGEChipYhJgENRMs6eUoDmBmVtioo1qmioALMP8blwrd1z4JES5cbRS6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTqHoKlD82JsVR5kslXcFogXKsRMB8GA1UdIwQY MBaAFL/m/HaK1HuWjgoln+zIo9oy+sXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMt ZWE1N2NiZTM2ODExLzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMtZWE1N2NiZTM2ODEx LzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVN+ARiIV M9MD/NmBBu/XTOjfYToIzhGW+rZSBPXCl4F9j589NPLS6/iDuhrckJXVt8y6Y6P+ ewHF43p94vtr8dMIz+BcJNOEvZi2al9GjyK/IwvtxuNHU328cfzKP40OMgIpcCcj bONpXB8ctGfP0h3dirlxtG7ub7TBFFYzGvU7cdGpaont8fMMf/DxqHEnJn1IOQmJ W7izrJ++uKq+WSqavuVs2Aio6SVQF7bW2mlwj8O9O2LvFyijlt561d2aEJ75FMqN PkNqvEGV/+4I0++buzDpK3L5ImTMYMwy9jjvhWA5wgNGHxbR2D/9CTfH6W/aUxQx NKaXpGkbuMP8hA== -----END CERTIFICATE-----Generated at Wed Dec 17 03:57:23 2025 by rpki-client