This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json) Hash identifier: TLE62BQMtvBQVVpn75EQWYdnMN7BscCpt0BDXd8n6q0= Subject key identifier: CD:A2:EC:91:74:76:49:44:08:72:95:D3:03:23:74:E2:30:98:92:78 Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af Certificate serial: 019AF31BF530F878588411561C09864AEA79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft Manifest number: 0CAE Signing time: Sat 06 Dec 2025 10:01:26 +0000 Manifest this update: Sat 06 Dec 2025 10:01:26 +0000 Manifest next update: Sun 07 Dec 2025 10:01:26 +0000 Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: cHDkh4ru2o85TaGQNW/s9c4XnS84oPkDLAzvoWG2Z3A=) 2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f5:30:f8:78:58:84:11:56:1c:09:86:4a:ea:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af Validity Not Before: Dec 6 10:01:26 2025 GMT Not After : Dec 7 10:01:26 2025 GMT Subject: CN=cda2ec9174764944087295d3032374e230989278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:a5:66:ff:e3:52:13:be:86:a2:ff:51:ba: d4:e6:b5:cd:1e:9c:10:ff:39:12:1a:44:d0:a5:9b: ce:39:54:bf:a3:79:14:8a:74:93:da:1d:d9:ab:1d: c4:cb:bd:47:40:2f:73:e2:6b:cc:47:4a:98:97:8f: fe:83:7c:80:dd:04:98:71:89:dd:8e:59:e7:6e:e9: 02:a5:14:f7:24:7f:fa:af:52:28:0b:6e:60:33:6c: 59:27:51:54:00:f1:16:c1:c1:0d:81:6d:58:37:bb: f4:e8:6e:25:d7:3c:16:ad:d6:12:9c:1b:3d:60:ca: d0:1c:01:b2:fd:d5:30:88:7f:95:c6:43:da:53:29: 84:d9:82:b7:4c:aa:8c:58:d5:51:51:53:a7:ef:09: 6b:ab:ba:69:01:9d:61:06:28:65:8d:30:98:61:17: dd:c0:ec:a7:d2:83:13:69:9d:ff:0a:86:9d:52:25: 39:00:f0:23:b0:6d:45:16:e4:0e:ae:05:79:58:9d: 5a:5a:f1:17:c4:10:08:0f:a5:94:7f:e7:79:64:d3: 26:6e:bd:5b:0b:2e:05:92:42:8f:4b:64:73:72:b9: eb:d6:fc:03:65:77:d5:ca:23:2e:35:93:68:9b:56: fd:ba:e1:80:6e:a9:17:c6:54:3c:b5:ae:7b:f0:b9: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A2:EC:91:74:76:49:44:08:72:95:D3:03:23:74:E2:30:98:92:78 X509v3 Authority Key Identifier: keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:16:5c:bc:75:cd:7b:2a:b4:ef:4d:bf:e1:8b:3b:dc:8f: 68:8d:4b:6d:92:a4:44:05:34:02:ca:89:c0:ea:af:85:d9:0c: ff:df:6e:59:f5:72:98:a6:fb:cb:39:25:06:2c:8f:a2:97:c7: bf:93:bf:7a:cc:e7:0f:8a:a3:e8:6c:68:33:c3:8a:3c:b4:da: 90:6f:ce:3c:cb:a6:fe:91:d1:3e:03:f4:a7:86:07:d6:f1:af: a5:b4:d1:4f:44:c6:b7:68:f8:73:5c:99:2f:32:9e:02:ad:65: 31:89:00:e7:6b:47:37:7b:14:24:cb:d1:75:ba:3a:6f:7d:83: 27:e5:2b:4d:5f:e6:50:27:84:c4:3d:8d:ef:47:72:c1:a4:20: 7a:87:00:62:02:43:97:fa:9d:17:49:2a:4c:66:d8:3d:55:f4: 93:78:45:d1:e8:60:63:0c:ea:5e:dc:83:e7:2d:10:86:74:1e: 75:eb:f8:6c:9d:77:ad:10:23:a2:f9:e1:75:ff:35:ab:71:a0: 78:32:ac:f6:f2:52:ff:61:ed:26:1a:3b:6d:03:56:0f:af:70: 2f:10:d4:7c:a7:b7:dd:5c:b4:ad:62:b5:15:a7:d7:5d:c3:ef: f9:9f:5a:3a:13:72:63:b9:b9:fc:90:12:eb:1b:f9:62:32:cb: 17:07:6c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/Uw+HhYhBFWHAmGSup5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWVjOGRiNTk3MjYwNzVlZTI5ZjVlZmM5MGI2MWU3M2Mw N2Y3YWYwHhcNMjUxMjA2MTAwMTI2WhcNMjUxMjA3MTAwMTI2WjAzMTEwLwYDVQQD EyhjZGEyZWM5MTc0NzY0OTQ0MDg3Mjk1ZDMwMzIzNzRlMjMwOTg5Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7KlZv/jUhO+hqL/UbrU5rXNHpwQ /zkSGkTQpZvOOVS/o3kUinST2h3Zqx3Ey71HQC9z4mvMR0qYl4/+g3yA3QSYcYnd jlnnbukCpRT3JH/6r1IoC25gM2xZJ1FUAPEWwcENgW1YN7v06G4l1zwWrdYSnBs9 YMrQHAGy/dUwiH+VxkPaUymE2YK3TKqMWNVRUVOn7wlrq7ppAZ1hBihljTCYYRfd wOyn0oMTaZ3/CoadUiU5APAjsG1FFuQOrgV5WJ1aWvEXxBAID6WUf+d5ZNMmbr1b Cy4FkkKPS2Rzcrnr1vwDZXfVyiMuNZNom1b9uuGAbqkXxlQ8ta578LlIWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2i7JF0dklECHKV0wMjdOIwmJJ4MB8GA1UdIwQY MBaAFLyeyNtZcmB17in178kLYec8B/evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjIt ZTU3ZmJkYWU1OTAzLzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjItZTU3ZmJkYWU1OTAz LzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8wWXLx1 zXsqtO9Nv+GLO9yPaI1LbZKkRAU0AsqJwOqvhdkM/99uWfVymKb7yzklBiyPopfH v5O/esznD4qj6GxoM8OKPLTakG/OPMum/pHRPgP0p4YH1vGvpbTRT0TGt2j4c1yZ LzKeAq1lMYkA52tHN3sUJMvRdbo6b32DJ+UrTV/mUCeExD2N70dywaQgeocAYgJD l/qdF0kqTGbYPVX0k3hF0ehgYwzqXtyD5y0QhnQedev4bJ13rRAjovnhdf81q3Gg eDKs9vJS/2HtJho7bQNWD69wLxDUfKe33Vy0rWK1FafXXcPv+Z9aOhNyY7m5/JAS 6xv5YjLLFwdsAA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:44 2025 by rpki-client