This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft File: v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json) Hash identifier: rGY0BjF7JwEbpZDGOxJ5/5z+PmSNNhUP4xCdieE+WZE= Subject key identifier: 30:08:F6:DF:B0:0F:16:5C:67:84:CF:26:40:4B:01:17:C4:2D:AD:77 Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA Certificate issuer: /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da Certificate serial: 019B2098EE6E76FA97651976588C3F59930A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft Manifest number: 1417 Signing time: Mon 15 Dec 2025 06:00:52 +0000 Manifest this update: Mon 15 Dec 2025 06:00:52 +0000 Manifest next update: Tue 16 Dec 2025 06:00:52 +0000 Files and hashes: 1: Li-Y8dn1F69FZoMGQvQz_fZ7l4Y.roa (hash: caOJpFofpginvCZ1ci6afUcY092BORN7MXA50NlfY8Y=) 2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: MATLit9SDvtYNMa3IXwuNEdbUrr7BLWGG1SVLjiQAos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:ee:6e:76:fa:97:65:19:76:58:8c:3f:59:93:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da Validity Not Before: Dec 15 06:00:52 2025 GMT Not After : Dec 16 06:00:52 2025 GMT Subject: CN=3008f6dfb00f165c6784cf26404b0117c42dad77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:ab:ba:a3:14:ec:be:63:41:ac:c3:c0:49: d9:ff:d5:0b:3a:c5:c9:a4:8e:90:ac:cc:3a:ee:3c: 76:7b:cd:58:d3:a3:05:e3:01:b1:14:c8:07:ba:1b: a4:81:ac:6e:84:54:3c:19:3f:32:e9:42:87:09:42: 09:33:b1:97:ca:22:a2:f7:71:8a:56:81:d4:71:f8: 15:de:af:ca:28:36:03:6f:32:6c:5e:2b:26:d0:bf: 29:7c:eb:b7:a8:c1:75:a9:9d:30:dd:f0:46:3b:9b: 19:15:ef:6d:98:b5:e0:56:dd:bb:fa:52:eb:d9:fa: 2f:c1:ea:28:95:8c:f9:10:85:a1:56:86:d7:24:53: 0a:4b:26:30:59:48:1d:59:7c:26:65:21:d4:1d:45: af:32:d3:11:63:3e:f5:fe:b5:2f:1a:b1:3c:08:7e: 23:2a:2c:80:7d:d0:ca:b7:2b:00:8d:ef:ef:82:60: 1d:48:e4:18:5b:65:7d:70:c3:bd:46:df:90:10:d5: e5:44:cc:bd:b2:b5:48:72:7f:af:ec:9e:98:1c:6f: bf:db:22:78:93:0e:31:c2:ff:5f:40:d3:68:f3:f7: a9:ec:c1:3e:a8:29:c3:34:ca:db:72:69:e2:70:53: 7b:88:1f:49:cd:c1:0c:bb:34:99:47:64:92:68:61: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:08:F6:DF:B0:0F:16:5C:67:84:CF:26:40:4B:01:17:C4:2D:AD:77 X509v3 Authority Key Identifier: keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:3e:67:99:2b:dd:8a:e6:6f:8d:b9:df:5b:8c:24:82:5b: 7a:b5:1c:96:a5:78:50:ae:73:82:fb:95:27:f3:d0:34:f0:a6: 2b:0a:96:2e:f1:71:d7:55:bb:9d:df:30:44:e8:14:b3:55:63: 39:12:af:9b:eb:95:20:2d:54:92:7f:7c:0a:02:1b:e2:42:b7: de:ff:86:d6:e2:27:54:1d:02:05:07:35:45:91:ba:a4:af:62: 96:1f:a8:0d:1a:6b:d4:4f:e7:1d:37:5b:10:f1:ff:12:15:08: 76:ef:9c:46:03:63:5b:6f:8c:37:e9:47:91:c8:46:19:89:1c: 2e:04:2d:a9:51:8f:4d:5b:ac:93:b1:34:b9:fa:57:49:7a:a9: 33:ff:af:e7:64:f3:60:7c:46:36:68:ca:b0:70:91:c9:40:9f: b6:a7:8a:8b:fa:b9:e4:6e:e8:d9:90:05:53:5d:23:d8:91:a0: 6c:51:3a:4e:e6:61:26:5a:7d:84:8f:a2:fd:2a:91:4e:74:e8: a7:bd:8a:80:85:3c:79:2d:b3:8f:2d:28:b0:c2:91:ef:38:f7: 0f:e2:62:3c:a4:2b:0f:13:27:05:3f:9d:d1:f4:af:e6:71:6d: 8a:da:59:66:a4:2d:d9:86:8b:92:d5:48:57:95:8b:89:4d:d3: 0c:d3:b3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmO5udvqXZRl2WIw/WZMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZWFhYjFiYTY4ZTg3YzlmN2FiMGQ5MDUwYmZmOWYyMGE2 MjY3ZGEwHhcNMjUxMjE1MDYwMDUyWhcNMjUxMjE2MDYwMDUyWjAzMTEwLwYDVQQD EygzMDA4ZjZkZmIwMGYxNjVjNjc4NGNmMjY0MDRiMDExN2M0MmRhZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7WruqMU7L5jQazDwEnZ/9ULOsXJ pI6QrMw67jx2e81Y06MF4wGxFMgHuhukgaxuhFQ8GT8y6UKHCUIJM7GXyiKi93GK VoHUcfgV3q/KKDYDbzJsXism0L8pfOu3qMF1qZ0w3fBGO5sZFe9tmLXgVt27+lLr 2fovweoolYz5EIWhVobXJFMKSyYwWUgdWXwmZSHUHUWvMtMRYz71/rUvGrE8CH4j KiyAfdDKtysAje/vgmAdSOQYW2V9cMO9Rt+QENXlRMy9srVIcn+v7J6YHG+/2yJ4 kw4xwv9fQNNo8/ep7ME+qCnDNMrbcmnicFN7iB9JzcEMuzSZR2SSaGESewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAI9t+wDxZcZ4TPJkBLARfELa13MB8GA1UdIwQY MBaAFL/qqxumjofJ96sNkFC/+fIKYmfaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYt ZjMzNzQxMjk1MTAxLzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYtZjMzNzQxMjk1MTAx LzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSk+Z5kr 3Yrmb42531uMJIJberUclqV4UK5zgvuVJ/PQNPCmKwqWLvFx11W7nd8wROgUs1Vj ORKvm+uVIC1Ukn98CgIb4kK33v+G1uInVB0CBQc1RZG6pK9ilh+oDRpr1E/nHTdb EPH/EhUIdu+cRgNjW2+MN+lHkchGGYkcLgQtqVGPTVusk7E0ufpXSXqpM/+v52Tz YHxGNmjKsHCRyUCftqeKi/q55G7o2ZAFU10j2JGgbFE6TuZhJlp9hI+i/SqRTnTo p72KgIU8eS2zjy0osMKR7zj3D+JiPKQrDxMnBT+d0fSv5nFtitpZZqQt2YaLktVI V5WLiU3TDNOzaA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:58 2025 by rpki-client