This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json) Hash identifier: QcEgEUTitviLugobtSJ1IH1LzrGgXyM8GIn0BBvYEi8= Subject key identifier: 3C:4E:D5:0A:07:47:51:C0:85:47:A0:92:62:45:3C:9F:56:21:5C:2F Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Certificate serial: 019AF1D19E4D2F64A0854A7D088B79DE682A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: hUtEUlySTzMESuhBxc7Ydr+Ixg9h9ux8Hr5EZcvo14U=) 2: zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa (hash: R0waJ/l+tfmJv5LfjnRTw8gnCOj1Af2T9Z4QZDnplrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9e:4d:2f:64:a0:85:4a:7d:08:8b:79:de:68:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=3c4ed50a074751c08547a09262453c9f56215c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:50:55:c4:5a:bf:da:6b:13:89:a1:96:da:30: 2f:5f:ee:2b:46:e2:35:72:56:24:f4:9b:f0:c7:e7: ba:12:87:29:3d:2c:37:3d:cf:a2:a9:33:c3:ab:9e: 4a:32:ea:97:f9:5a:0e:a9:d8:00:dd:ff:d9:7d:1d: bb:93:6c:3d:eb:7b:b2:63:28:96:8d:78:da:61:f0: d1:5f:26:3b:b6:66:a5:2d:29:69:9b:cc:47:0b:6a: 9f:a4:79:f9:f0:e8:bb:86:fc:2a:ac:64:e7:ac:c1: d8:0b:b0:cc:07:0c:e0:c1:9a:fe:ec:c4:65:e8:aa: 76:89:97:4e:9f:d2:cb:43:05:89:72:5c:b2:3f:b9: 69:e1:22:46:8b:3c:01:ae:75:e3:3f:97:f3:3d:5c: 94:94:2a:a8:8d:38:04:1e:d6:a4:79:11:75:bb:3e: e1:c0:d2:3c:1b:84:fc:e6:82:49:cc:87:43:af:16: 71:3d:ce:d5:13:e1:ad:53:dc:33:00:6f:ee:38:1d: 3e:d4:d8:a8:c6:34:35:3a:17:13:24:f7:35:bf:0f: cd:03:ca:ef:24:f3:28:4f:20:73:ce:dd:b3:f4:11: bd:63:d6:d1:3b:df:8f:e8:7d:30:57:45:39:6e:4d: 66:55:9f:18:1c:fa:6b:b9:da:00:47:87:fb:6e:bb: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4E:D5:0A:07:47:51:C0:85:47:A0:92:62:45:3C:9F:56:21:5C:2F X509v3 Authority Key Identifier: keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:55:d4:11:73:c5:30:da:96:db:fe:91:5e:95:71:38:8d:50: da:04:b9:03:1d:71:fd:3b:8c:99:b7:3d:7b:35:27:7e:14:7d: be:d6:ad:d2:c6:6d:d9:ca:90:e7:ad:e1:e8:31:58:01:3b:2d: b3:cc:6d:9d:8f:c9:7c:03:58:c0:73:7f:7f:ab:4d:e2:bf:fd: 7f:b2:e5:90:53:23:38:86:ae:f8:2c:26:b1:de:1b:78:1a:97: 4b:7e:5a:b5:6c:1e:31:44:25:88:64:15:df:a5:2f:c2:42:04: 0a:fe:19:33:53:17:3a:41:b4:ee:e0:26:8a:c3:59:9f:d0:39: 0a:42:b9:35:f6:1c:e7:0b:40:e1:f3:d9:8f:a0:d7:cc:82:91: 45:d0:04:fe:7e:b3:1a:b4:25:a9:a0:48:d7:ad:8e:ce:9a:ff: f0:91:a0:69:cb:cf:6d:ce:bb:57:52:6a:f6:f1:31:3a:4c:20: fc:9e:43:66:a5:50:98:cb:75:12:27:f4:f5:5f:08:0d:ab:5a: fb:7f:49:d4:e2:75:03:ff:b0:0f:07:60:27:11:8a:53:28:5c: c6:f5:4a:28:5f:34:c0:23:43:ec:16:37:c7:1c:ab:af:51:9a: 26:b5:1b:08:a7:cf:55:f4:19:24:ce:83:b0:64:64:42:ea:9f: 7b:7a:63:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z5NL2SghUp9CIt53mgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx OGEwM2UwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EygzYzRlZDUwYTA3NDc1MWMwODU0N2EwOTI2MjQ1M2M5ZjU2MjE1YzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFBVxFq/2msTiaGW2jAvX+4rRuI1 clYk9Jvwx+e6EocpPSw3Pc+iqTPDq55KMuqX+VoOqdgA3f/ZfR27k2w963uyYyiW jXjaYfDRXyY7tmalLSlpm8xHC2qfpHn58Oi7hvwqrGTnrMHYC7DMBwzgwZr+7MRl 6Kp2iZdOn9LLQwWJclyyP7lp4SJGizwBrnXjP5fzPVyUlCqojTgEHtakeRF1uz7h wNI8G4T85oJJzIdDrxZxPc7VE+GtU9wzAG/uOB0+1NioxjQ1OhcTJPc1vw/NA8rv JPMoTyBzzt2z9BG9Y9bRO9+P6H0wV0U5bk1mVZ8YHPprudoAR4f7brskOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxO1QoHR1HAhUegkmJFPJ9WIVwvMB8GA1UdIwQY MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt MDVkN2JkNGE3NDFkLzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlXUEXPF MNqW2/6RXpVxOI1Q2gS5Ax1x/TuMmbc9ezUnfhR9vtat0sZt2cqQ563h6DFYATst s8xtnY/JfANYwHN/f6tN4r/9f7LlkFMjOIau+Cwmsd4beBqXS35atWweMUQliGQV 36UvwkIECv4ZM1MXOkG07uAmisNZn9A5CkK5NfYc5wtA4fPZj6DXzIKRRdAE/n6z GrQlqaBI162Ozpr/8JGgacvPbc67V1Jq9vExOkwg/J5DZqVQmMt1Eif09V8IData +39J1OJ1A/+wDwdgJxGKUyhcxvVKKF80wCND7BY3xxyrr1GaJrUbCKfPVfQZJM6D sGRkQuqfe3pjFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:22 2025 by rpki-client