This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json) Hash identifier: Lerx8UFE6DHB2rOlwn0R9zPCyOu1AAr1rkUvIoGGme4= Subject key identifier: 1F:81:49:BB:42:5C:B0:81:7A:FA:DB:D2:FC:E2:5B:6C:49:0B:3D:A8 Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0 Certificate serial: 019B36E9FE674ABF0198350BB0FD26899081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft Manifest number: 0EFA Signing time: Fri 19 Dec 2025 14:01:03 +0000 Manifest this update: Fri 19 Dec 2025 14:01:03 +0000 Manifest next update: Sat 20 Dec 2025 14:01:03 +0000 Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=) 2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: ntgS7y5EPaROMsl0swR/obzf/WOiTjGc8FTOJSHChQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:fe:67:4a:bf:01:98:35:0b:b0:fd:26:89:90:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0 Validity Not Before: Dec 19 14:01:03 2025 GMT Not After : Dec 20 14:01:03 2025 GMT Subject: CN=1f8149bb425cb0817afadbd2fce25b6c490b3da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:8d:ef:30:36:cb:33:0a:3a:6f:34:bd:ca: 73:f5:a8:73:7e:53:94:00:3d:cd:bb:b6:c2:4d:32: 6a:e2:86:14:cf:a7:d7:ac:37:0b:6b:f3:c0:28:07: da:57:90:ec:ef:cc:27:3c:f4:dc:47:8e:5c:ae:f5: c1:41:88:5d:4e:82:e9:8f:1f:f0:17:0e:e8:87:06: 2c:13:f4:c0:5c:70:a6:f4:b0:43:19:f2:68:36:58: dc:98:d9:3d:b8:d7:1b:2b:eb:80:ea:52:f6:1d:d2: d9:75:a8:23:35:8e:e6:66:64:91:c9:0c:90:65:0f: 4a:e6:c9:6b:0a:ca:f4:1d:89:12:5e:fb:02:96:d5: 73:f1:8d:04:22:30:16:e5:53:11:6e:4c:a3:7b:de: 50:c5:96:88:5f:f4:a4:31:c8:78:4d:02:5a:5a:fe: 94:a0:75:2d:26:b5:da:bc:02:f9:06:40:4e:b6:e2: 61:2a:93:d6:31:bf:0e:d3:ab:9c:02:26:a3:f2:26: aa:74:f6:ac:fe:5c:66:5f:66:29:55:cc:85:1f:ab: 60:2a:be:d4:72:7a:6d:46:55:86:f2:6e:f4:79:f0: 94:64:4b:49:ab:73:19:40:22:78:a5:06:3e:98:83: 92:95:da:a2:15:5d:59:9f:8c:4c:d1:89:aa:50:0a: 80:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:81:49:BB:42:5C:B0:81:7A:FA:DB:D2:FC:E2:5B:6C:49:0B:3D:A8 X509v3 Authority Key Identifier: keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:89:66:01:45:16:a7:79:9a:06:82:fd:99:a0:11:b0:0c:99: 73:43:46:5f:95:ba:f6:78:37:e0:ba:0a:0a:20:9a:16:15:1a: 06:f9:43:96:d8:61:7b:77:c9:78:ad:3b:65:21:1d:fc:80:2f: 0c:f9:cc:a9:2b:21:ff:b1:ed:e1:16:7c:6c:64:03:c0:0a:9b: 21:1f:c7:ba:78:15:0b:e1:60:75:1f:16:98:9a:14:b0:e8:b6: 39:36:a8:3c:3d:07:b1:a1:b1:34:fe:89:8c:7b:99:3c:1f:e2: 96:12:4a:a3:6f:2e:fe:3d:f8:4e:d9:80:85:2f:51:e3:88:72: 3d:9e:a5:23:bd:d9:53:5a:88:19:3e:1e:c4:1f:18:d2:8f:62: e4:f3:63:79:79:dc:66:1a:1f:88:20:c9:c6:d0:2c:15:ec:4a: d0:62:80:c3:8c:1a:6e:73:cf:86:8d:c0:39:d1:b7:34:de:d6: e2:6e:df:89:a2:e3:c1:fb:37:e0:2b:16:9c:27:1a:60:b3:6a: 15:4a:14:2a:84:fb:20:bd:cd:ff:c1:03:a9:a4:b2:3e:f4:6d: 4d:a4:37:79:35:da:b7:0f:3c:c5:66:dc:1c:1c:67:44:84:7b: 03:ed:b2:34:2f:08:bc:f6:b9:0f:07:bd:49:c8:c9:69:1c:98: 53:5d:a8:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26f5nSr8BmDULsP0miZCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2FlMzY2OWY4NDdmYTI3YTY5YjE0YmI4N2Y4YzdiZmQ3 OTllZTAwHhcNMjUxMjE5MTQwMTAzWhcNMjUxMjIwMTQwMTAzWjAzMTEwLwYDVQQD EygxZjgxNDliYjQyNWNiMDgxN2FmYWRiZDJmY2UyNWI2YzQ5MGIzZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx+N7zA2yzMKOm80vcpz9ahzflOU AD3Nu7bCTTJq4oYUz6fXrDcLa/PAKAfaV5Ds78wnPPTcR45crvXBQYhdToLpjx/w Fw7ohwYsE/TAXHCm9LBDGfJoNljcmNk9uNcbK+uA6lL2HdLZdagjNY7mZmSRyQyQ ZQ9K5slrCsr0HYkSXvsCltVz8Y0EIjAW5VMRbkyje95QxZaIX/SkMch4TQJaWv6U oHUtJrXavAL5BkBOtuJhKpPWMb8O06ucAiaj8iaqdPas/lxmX2YpVcyFH6tgKr7U cnptRlWG8m70efCUZEtJq3MZQCJ4pQY+mIOSldqiFV1Zn4xM0YmqUAqAGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+BSbtCXLCBevrb0vziW2xJCz2oMB8GA1UdIwQY MBaAFL9642afhH+iemmxS7h/jHv9eZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYt ZGI4MDMwODc5ZjUxLzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYtZGI4MDMwODc5ZjUx LzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIlmAUUW p3maBoL9maARsAyZc0NGX5W69ng34LoKCiCaFhUaBvlDlthhe3fJeK07ZSEd/IAv DPnMqSsh/7Ht4RZ8bGQDwAqbIR/HungVC+FgdR8WmJoUsOi2OTaoPD0HsaGxNP6J jHuZPB/ilhJKo28u/j34TtmAhS9R44hyPZ6lI73ZU1qIGT4exB8Y0o9i5PNjeXnc ZhofiCDJxtAsFexK0GKAw4wabnPPho3AOdG3NN7W4m7fiaLjwfs34CsWnCcaYLNq FUoUKoT7IL3N/8EDqaSyPvRtTaQ3eTXatw88xWbcHBxnRIR7A+2yNC8IvPa5Dwe9 ScjJaRyYU12o8w== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:26 2025 by rpki-client