This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json) Hash identifier: mujzD45oHppxremhU0P+1VmCqyVyLQmEWJh2asFRdU0= Subject key identifier: 56:BB:43:18:D4:54:B6:AD:B3:D5:29:2E:BC:40:6E:F4:93:F7:90:AD Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98 Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098 Certificate serial: 019B484B655BA76A0C301F716DD7DAF3D7D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft Manifest number: 0809 Signing time: Mon 22 Dec 2025 23:00:59 +0000 Manifest this update: Mon 22 Dec 2025 23:00:59 +0000 Manifest next update: Tue 23 Dec 2025 23:00:59 +0000 Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=) 2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=) 3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: MsWpkbc9IGEmR/ppZ34XIT1Tj4h/u6OTwEQRg78GWQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:65:5b:a7:6a:0c:30:1f:71:6d:d7:da:f3:d7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098 Validity Not Before: Dec 22 23:00:59 2025 GMT Not After : Dec 23 23:00:59 2025 GMT Subject: CN=56bb4318d454b6adb3d5292ebc406ef493f790ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:bb:19:2b:04:6f:d8:4b:02:a9:8a:0a:ca: ce:c8:6b:5f:48:f8:3a:51:2b:b9:74:95:c7:bc:10: 79:f8:74:53:32:48:e1:b5:95:08:09:9f:b8:89:e6: d8:52:74:50:19:96:94:68:34:73:93:c2:26:c8:04: 01:11:52:76:76:4e:74:57:a0:73:bf:74:9c:2a:ab: 6d:9d:f0:20:0c:7b:6a:c2:87:66:70:37:5c:f8:30: 8a:6f:df:52:0e:0d:3d:ab:91:69:d6:98:fd:a4:ee: 38:dd:8d:a1:fe:29:2a:f9:b1:c0:95:f2:ff:ff:23: 65:4a:1c:e1:95:69:28:02:04:1d:7a:a7:76:26:b6: 4b:ea:45:81:f4:17:3a:1b:dd:6a:b4:c7:9c:0c:be: 9b:cf:a7:ed:6a:a2:57:2d:22:63:30:32:65:4d:0f: 4d:96:07:0f:64:36:9f:a2:f6:f2:5a:1d:fb:6d:55: 1b:ca:b9:2e:11:d2:f7:cd:b6:fb:a4:d5:cb:b2:8f: a8:92:35:bd:c3:a0:2a:b5:23:0d:81:70:ae:5b:dd: cd:72:37:b0:b0:82:0b:d7:05:14:63:a7:7d:69:5c: 45:c1:aa:86:f8:f7:54:51:52:b1:3d:3b:41:50:76: 70:f6:be:14:3d:05:b6:31:44:c4:4e:09:d9:f3:a5: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BB:43:18:D4:54:B6:AD:B3:D5:29:2E:BC:40:6E:F4:93:F7:90:AD X509v3 Authority Key Identifier: keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:77:96:84:9c:41:9f:bc:dd:3e:28:85:b2:63:2a:ae:8b:74: c2:e7:8b:f2:f3:ef:e8:6d:9b:f4:fd:54:a7:b9:0d:06:ea:f5: 32:60:7f:de:4e:6a:eb:3b:7e:ba:42:f5:b9:89:13:72:56:1e: b7:8f:36:43:8d:a3:ae:c4:5f:70:d7:4e:0a:cc:cc:ac:60:e0: f8:6a:fe:9e:a3:56:fe:f0:d7:8f:33:6d:50:5e:f3:05:17:b8: 4a:d3:e5:e6:86:51:c9:79:64:06:d1:ac:a8:ca:d2:30:cb:46: d1:b8:18:78:1b:a2:a5:cf:57:ff:49:73:dc:ce:b5:32:78:6f: 1b:09:e8:bc:4d:35:d6:2d:0a:9f:0f:b1:34:93:ac:da:37:81: 22:34:d3:4d:96:24:ae:8e:22:6d:78:ff:af:69:ed:a4:f4:ca: ab:fc:0c:fe:2a:df:fd:f0:65:aa:ab:c4:0a:5d:0a:6d:50:e6: 69:7e:d5:86:22:4c:8b:30:06:43:39:5d:6c:8b:d0:e5:9b:fe: c3:e1:81:85:32:4e:5f:10:dc:03:66:d3:cf:1b:84:bb:57:e5: 54:e5:2c:cf:35:f4:2d:a5:a7:c0:b1:44:be:54:c9:55:98:77: 2b:6c:7a:2a:1b:5b:33:53:41:3c:4d:eb:15:44:c8:5d:8b:26: 57:e5:b7:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS2Vbp2oMMB9xbdfa89fSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTI3ODY0Y2Q0MzA0ODU1MGVkMTY5OWM1ODRiNWMxNGQ4 MGUwOTgwHhcNMjUxMjIyMjMwMDU5WhcNMjUxMjIzMjMwMDU5WjAzMTEwLwYDVQQD Eyg1NmJiNDMxOGQ0NTRiNmFkYjNkNTI5MmViYzQwNmVmNDkzZjc5MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYi7GSsEb9hLAqmKCsrOyGtfSPg6 USu5dJXHvBB5+HRTMkjhtZUICZ+4iebYUnRQGZaUaDRzk8ImyAQBEVJ2dk50V6Bz v3ScKqttnfAgDHtqwodmcDdc+DCKb99SDg09q5Fp1pj9pO443Y2h/ikq+bHAlfL/ /yNlShzhlWkoAgQdeqd2JrZL6kWB9Bc6G91qtMecDL6bz6ftaqJXLSJjMDJlTQ9N lgcPZDafovbyWh37bVUbyrkuEdL3zbb7pNXLso+okjW9w6AqtSMNgXCuW93Ncjew sIIL1wUUY6d9aVxFwaqG+PdUUVKxPTtBUHZw9r4UPQW2MUTETgnZ86V9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa7QxjUVLats9UpLrxAbvST95CtMB8GA1UdIwQY MBaAFLwSeGTNQwSFUO0WmcWEtcFNgOCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgt MDMxZjQwN2IzMjYzLzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgtMDMxZjQwN2IzMjYz LzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3eWhJxB n7zdPiiFsmMqrot0wueL8vPv6G2b9P1Up7kNBur1MmB/3k5q6zt+ukL1uYkTclYe t482Q42jrsRfcNdOCszMrGDg+Gr+nqNW/vDXjzNtUF7zBRe4StPl5oZRyXlkBtGs qMrSMMtG0bgYeBuipc9X/0lz3M61MnhvGwnovE011i0Knw+xNJOs2jeBIjTTTZYk ro4ibXj/r2ntpPTKq/wM/irf/fBlqqvECl0KbVDmaX7VhiJMizAGQzldbIvQ5Zv+ w+GBhTJOXxDcA2bTzxuEu1flVOUszzX0LaWnwLFEvlTJVZh3K2x6KhtbM1NBPE3r FUTIXYsmV+W3Rg== -----END CERTIFICATE-----Generated at Tue Dec 23 01:54:43 2025 by rpki-client