This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json) Hash identifier: 4BxtBg2DLQBnjYJ/7Btgo1HjF+rw/xvSK7WGFObiCPc= Subject key identifier: FA:04:2E:20:48:6C:C7:65:CC:31:FB:38:71:F8:DB:93:6A:25:99:C1 Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6 Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6 Certificate serial: 019B0F378BFE7660059F6D00F7597981CE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft Manifest number: 0BC2 Signing time: Thu 11 Dec 2025 21:00:57 +0000 Manifest this update: Thu 11 Dec 2025 21:00:57 +0000 Manifest next update: Fri 12 Dec 2025 21:00:57 +0000 Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=) 2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: gWVfPneptfc81vjj3XgtrRsyRdk+vt+u2XZazGhTPl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:8b:fe:76:60:05:9f:6d:00:f7:59:79:81:ce:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6 Validity Not Before: Dec 11 21:00:57 2025 GMT Not After : Dec 12 21:00:57 2025 GMT Subject: CN=fa042e20486cc765cc31fb3871f8db936a2599c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:4f:c6:cb:f0:f1:ac:10:c2:fa:e6:b7:1c: 49:99:1c:50:0a:31:4f:83:0c:8a:fb:53:29:c3:de: a4:64:51:6c:d9:85:11:99:d1:d5:7d:28:c7:ff:a5: 09:69:05:2a:e4:69:58:7d:16:ec:c7:05:53:47:42: ce:61:28:3a:c8:ba:bb:45:c7:d8:1a:4a:fb:6a:a2: cd:37:cb:bc:f2:e9:66:a4:ea:59:a6:c2:dd:ee:b9: 22:28:64:d5:a6:95:e1:a1:ce:d2:57:2d:25:d4:c6: 08:03:14:a0:ce:83:18:e2:01:9d:79:12:50:d9:2d: 1e:50:58:e2:f7:24:64:35:b0:75:3d:31:ea:e5:5e: c0:ee:5d:cd:34:ac:c3:6f:4c:15:29:70:b1:73:78: a2:90:3d:2d:b8:75:a8:fb:65:fa:fe:78:2a:44:1e: a1:97:e2:63:ce:7c:d9:04:69:5b:4c:75:53:bb:4f: 6a:f6:ca:50:75:4c:f9:5b:aa:68:a1:1b:2a:ad:25: 15:49:34:fd:14:2b:0d:d1:af:63:ac:a8:bd:13:11: b8:57:92:b5:76:06:ac:0f:d3:24:08:f1:35:69:00: 35:01:1f:1e:9d:39:f9:bf:7a:c6:f2:90:62:26:4d: 88:3c:2e:f0:3f:db:5d:a8:d7:a0:f6:83:1a:a7:89: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:04:2E:20:48:6C:C7:65:CC:31:FB:38:71:F8:DB:93:6A:25:99:C1 X509v3 Authority Key Identifier: keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:41:42:73:d4:94:e5:2c:64:87:1d:a7:f1:ea:45:4c:52:17: c7:f5:22:5b:c8:f5:86:58:38:be:06:d7:87:7f:01:ff:e7:e7: 26:25:7e:c3:84:78:78:f1:47:1d:15:16:36:62:db:63:d5:b7: c6:c2:f5:7f:b9:5e:f8:1c:74:c7:25:01:d8:02:ef:b7:11:78: 65:b3:26:b9:0b:e1:42:44:c6:09:d0:0c:91:e1:ac:a1:ec:83: 81:0a:a5:0f:f2:48:14:2b:e8:55:db:90:fd:31:7d:61:fa:0d: 69:8e:5d:c1:d1:11:45:f0:6b:61:14:71:34:25:b5:4c:53:3b: 87:c1:d3:ca:5e:3b:a0:1e:8b:c7:c6:dd:79:64:63:77:ab:19: a9:a5:42:0f:70:c7:64:57:6b:36:54:c1:ce:7a:01:3f:a1:0c: 6c:2b:3c:f5:03:3f:be:ab:5d:8e:35:ec:2c:ff:bd:a3:5c:16: 2a:56:cb:3d:eb:bd:e0:b9:92:03:32:8e:c1:bb:a9:6f:6b:4d: f8:1d:4e:32:01:08:73:62:1f:4b:fb:ff:1b:33:07:2a:e1:09: 0d:0a:6a:50:85:0d:19:ba:f2:40:81:72:b2:fc:49:a8:b5:c2: 9e:a5:db:f4:3b:b9:07:8b:4a:b3:84:b0:c6:5b:89:e8:aa:74: aa:69:d6:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN4v+dmAFn20A91l5gc5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj YzkzZTYwHhcNMjUxMjExMjEwMDU3WhcNMjUxMjEyMjEwMDU3WjAzMTEwLwYDVQQD EyhmYTA0MmUyMDQ4NmNjNzY1Y2MzMWZiMzg3MWY4ZGI5MzZhMjU5OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEZPxsvw8awQwvrmtxxJmRxQCjFP gwyK+1Mpw96kZFFs2YURmdHVfSjH/6UJaQUq5GlYfRbsxwVTR0LOYSg6yLq7RcfY Gkr7aqLNN8u88ulmpOpZpsLd7rkiKGTVppXhoc7SVy0l1MYIAxSgzoMY4gGdeRJQ 2S0eUFji9yRkNbB1PTHq5V7A7l3NNKzDb0wVKXCxc3iikD0tuHWo+2X6/ngqRB6h l+JjznzZBGlbTHVTu09q9spQdUz5W6pooRsqrSUVSTT9FCsN0a9jrKi9ExG4V5K1 dgasD9MkCPE1aQA1AR8enTn5v3rG8pBiJk2IPC7wP9tdqNeg9oMap4lMNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoELiBIbMdlzDH7OHH425NqJZnBMB8GA1UdIwQY MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1 LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0FCc9SU 5Sxkhx2n8epFTFIXx/UiW8j1hlg4vgbXh38B/+fnJiV+w4R4ePFHHRUWNmLbY9W3 xsL1f7le+Bx0xyUB2ALvtxF4ZbMmuQvhQkTGCdAMkeGsoeyDgQqlD/JIFCvoVduQ /TF9YfoNaY5dwdERRfBrYRRxNCW1TFM7h8HTyl47oB6Lx8bdeWRjd6sZqaVCD3DH ZFdrNlTBznoBP6EMbCs89QM/vqtdjjXsLP+9o1wWKlbLPeu94LmSAzKOwbupb2tN +B1OMgEIc2IfS/v/GzMHKuEJDQpqUIUNGbryQIFysvxJqLXCnqXb9Du5B4tKs4Sw xluJ6Kp0qmnWQw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:37 2025 by rpki-client