This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json) Hash identifier: 1NjJlFrizo6o1kyc0Br0FikyIWAGpoY2mc6UodBkOpo= Subject key identifier: E9:34:08:FF:AC:9E:86:75:0B:23:FB:3E:AA:50:AC:DA:D7:AE:BC:25 Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Certificate serial: 019AF12EDC1D2F0226599F111E314D4B2446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:50 +0000 Manifest this update: Sat 06 Dec 2025 01:02:50 +0000 Manifest next update: Sun 07 Dec 2025 01:02:50 +0000 Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=) 2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: qSNXFFkmFbeiU9ud7ArIKDC/z20vi7nniNaQYEhGszI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:dc:1d:2f:02:26:59:9f:11:1e:31:4d:4b:24:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Validity Not Before: Dec 6 01:02:50 2025 GMT Not After : Dec 7 01:02:50 2025 GMT Subject: CN=e93408ffac9e86750b23fb3eaa50acdad7aebc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:4a:0f:b3:99:67:7c:d0:f9:f0:38:1c:d7: d6:1d:3f:2e:3f:61:15:58:e1:c9:58:69:e5:72:2e: 35:41:91:eb:34:64:3f:bc:4a:9e:c3:32:54:fc:d0: bd:82:28:55:0e:bd:99:91:0e:ae:34:8f:d8:db:d2: ae:a1:8a:2e:01:07:aa:71:da:ba:18:c6:b6:62:6e: 23:f4:2f:ad:02:c3:1e:f9:c1:9e:87:29:9e:97:3b: 43:ce:8b:19:3a:18:ff:cc:4d:10:f9:4e:1c:db:f1: a5:12:00:29:af:84:50:49:fe:b5:36:4a:a9:28:1b: cd:73:aa:e4:d2:a9:d3:5a:c5:e1:53:35:ef:23:1b: 7c:e9:1f:ed:56:06:82:4f:b6:e7:d1:03:e4:13:7a: ce:2b:bc:90:05:27:cd:43:ad:31:92:26:9b:00:7a: e1:59:1a:3c:d3:af:37:ed:da:f8:4e:a7:14:a0:b6: 2c:7b:30:c3:3d:d8:a8:35:34:b7:1a:7f:1b:e5:ab: 8f:82:35:2c:65:57:5a:e5:d7:a8:b2:ef:3c:aa:6d: a4:69:b1:ca:f4:0f:a1:e9:ee:53:0a:e4:2f:4b:47: 1d:43:d3:fd:f6:91:9f:d6:67:9e:17:46:b3:46:ff: d5:29:7d:67:31:c0:2a:26:05:52:52:c4:55:63:a4: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:08:FF:AC:9E:86:75:0B:23:FB:3E:AA:50:AC:DA:D7:AE:BC:25 X509v3 Authority Key Identifier: keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:77:8e:10:7d:6e:03:ad:c2:ee:bc:c5:ae:1c:e7:86:68:e2: 21:d5:1a:65:86:12:07:d4:c9:db:0d:b4:ab:0f:3c:d9:44:3d: 8e:38:35:50:fe:29:51:a5:ef:ed:be:b8:95:c5:82:a7:bb:9f: 6b:d1:74:e1:8b:d1:15:79:12:95:e2:9d:84:6b:f2:87:4d:78: 8f:79:d1:7d:0b:ca:ed:1c:f1:aa:a6:f7:60:5a:44:bc:19:c3: 6a:85:40:6a:0c:89:e0:46:5d:fd:86:cd:d9:3f:ee:1c:b3:0a: 3b:09:f6:1c:e4:22:5f:c8:80:7e:e9:0f:76:22:4c:a0:ee:1c: 6a:35:c8:44:bc:76:bd:0d:b7:ce:56:9a:54:ab:ed:01:a5:5d: f1:8b:67:ff:b9:45:40:e3:f5:0a:b9:5c:e1:38:d0:52:e5:7d: 99:66:36:9b:9b:63:06:f4:ff:28:f9:a5:d7:9f:ea:03:ac:f2: d5:20:20:38:57:7e:68:41:de:49:80:ef:1f:9a:3a:9a:ea:ef: 8f:20:42:8c:f3:3e:19:90:26:40:14:b3:5a:32:cd:2a:db:60: 55:c0:1e:82:5a:86:53:15:98:82:e0:0d:a9:2a:42:d2:d8:ea: 4f:da:b4:25:77:87:a9:bb:8e:0a:1d:24:1f:ae:a2:ed:42:7e: a6:de:fa:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtwdLwImWZ8RHjFNSyRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjlmMGIwOTQ3MzhjNTI4MmZiZjRiMzA2NzBlYzVmZGNi NTg5ZGYwHhcNMjUxMjA2MDEwMjUwWhcNMjUxMjA3MDEwMjUwWjAzMTEwLwYDVQQD EyhlOTM0MDhmZmFjOWU4Njc1MGIyM2ZiM2VhYTUwYWNkYWQ3YWViYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoJKD7OZZ3zQ+fA4HNfWHT8uP2EV WOHJWGnlci41QZHrNGQ/vEqewzJU/NC9gihVDr2ZkQ6uNI/Y29KuoYouAQeqcdq6 GMa2Ym4j9C+tAsMe+cGehymelztDzosZOhj/zE0Q+U4c2/GlEgApr4RQSf61Nkqp KBvNc6rk0qnTWsXhUzXvIxt86R/tVgaCT7bn0QPkE3rOK7yQBSfNQ60xkiabAHrh WRo806837dr4TqcUoLYsezDDPdioNTS3Gn8b5auPgjUsZVda5deosu88qm2kabHK 9A+h6e5TCuQvS0cdQ9P99pGf1meeF0azRv/VKX1nMcAqJgVSUsRVY6QpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk0CP+snoZ1CyP7PqpQrNrXrrwlMB8GA1UdIwQY MBaAFLz58LCUc4xSgvv0swZw7F/ctYnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTct ZTVjYTY3YzExNTMzLzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTctZTVjYTY3YzExNTMz LzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3eOEH1u A63C7rzFrhznhmjiIdUaZYYSB9TJ2w20qw882UQ9jjg1UP4pUaXv7b64lcWCp7uf a9F04YvRFXkSleKdhGvyh014j3nRfQvK7Rzxqqb3YFpEvBnDaoVAagyJ4EZd/YbN 2T/uHLMKOwn2HOQiX8iAfukPdiJMoO4cajXIRLx2vQ23zlaaVKvtAaVd8Ytn/7lF QOP1Crlc4TjQUuV9mWY2m5tjBvT/KPml15/qA6zy1SAgOFd+aEHeSYDvH5o6murv jyBCjPM+GZAmQBSzWjLNKttgVcAeglqGUxWYguANqSpC0tjqT9q0JXeHqbuOCh0k H66i7UJ+pt76IQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:22 2025 by rpki-client