This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft File: vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft (raw, json) Hash identifier: rl60FxiRkKTjsJ/edvpoFftsJ7h2a6EcrnwETHGPj9I= Subject key identifier: 7B:CD:F6:E9:AD:F6:9F:0F:67:04:A6:D4:37:75:1D:5D:E9:04:3E:FB Authority key identifier: BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A Certificate issuer: /CN=bcaa1146afd4f45f117095a15a7de0bbf978144a Certificate serial: 019AF12D75D9559562B8268A382434770F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft Manifest number: 02D3 Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: EkTaUypg_pd7rGnsbGXftVikPSk.roa (hash: sEhgMg8C+XnNqF8zClrkN2E7JsFwEbgtXl2it8CHZBU=) 2: vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl (hash: Wov8O3CUqO9oSsQbWovTroZ8OyONri8E6RKPqDE0UB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:75:d9:55:95:62:b8:26:8a:38:24:34:77:0f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcaa1146afd4f45f117095a15a7de0bbf978144a Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=7bcdf6e9adf69f0f6704a6d437751d5de9043efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:e7:64:be:c3:5b:50:1d:0c:70:7a:bb:8c: 31:b1:87:b5:dc:d6:70:0a:ce:66:14:fc:1f:7a:8a: b7:20:d7:f1:a9:02:28:fd:d5:d1:3a:83:63:d9:09: 8a:4a:71:0b:b3:59:3e:3b:f3:55:a8:be:10:d3:ea: a9:eb:ac:bc:39:8d:90:f4:0f:ca:c3:02:cb:7d:1d: 0d:50:f1:81:1d:e7:a4:1e:10:93:ce:58:c6:e1:c3: 43:87:0f:88:f2:73:9a:39:4c:84:48:2c:d8:ca:cf: 18:ec:45:6f:c5:80:78:41:1c:87:47:b5:fb:eb:5e: 79:97:fe:46:82:52:f8:e0:59:6b:3e:a2:ce:be:2f: 65:6d:16:e2:a8:e9:1b:f8:ee:08:58:03:65:06:3d: 6a:c9:7b:aa:9e:bd:37:c7:da:6e:7d:52:6c:0e:75: f8:84:03:3e:f7:7d:77:00:00:31:40:bf:66:86:4c: e9:ef:a6:f6:61:90:0b:70:37:70:24:de:6e:8f:c1: 60:20:7f:ba:a8:a9:2f:db:26:ca:2b:27:e7:b5:3d: b9:74:80:e4:30:12:50:b7:ea:df:f0:42:20:96:81: af:6f:95:35:d8:37:95:bb:fb:3e:b2:f6:15:98:c7: 92:94:c9:44:d2:26:ed:9b:4e:28:36:4c:d1:48:85: 04:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CD:F6:E9:AD:F6:9F:0F:67:04:A6:D4:37:75:1D:5D:E9:04:3E:FB X509v3 Authority Key Identifier: keyid:BC:AA:11:46:AF:D4:F4:5F:11:70:95:A1:5A:7D:E0:BB:F9:78:14:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKoRRq_U9F8RcJWhWn3gu_l4FEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/688e37-d942-486a-a932-5893bb7761cd/1/vKoRRq_U9F8RcJWhWn3gu_l4FEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:57:3d:b9:d2:c5:da:fc:9d:dc:7e:af:c3:c5:ab:66:4e:f9: 93:f4:cb:70:d5:1b:84:cc:43:fd:19:9b:08:6a:03:c0:3c:52: 3e:3b:13:99:6f:0e:e3:e4:41:98:7d:a4:5d:46:2b:35:ff:24: 06:93:14:bf:63:12:cd:e2:e8:6d:33:fe:6c:06:d3:b3:bf:d8: a2:f4:99:7e:4c:4b:04:44:8f:bd:48:2c:e6:f0:e6:ca:84:27: 4a:67:7d:03:e5:81:ec:f4:8b:04:da:77:31:29:20:3c:23:a6: dd:f1:5f:ab:3d:26:03:ce:35:d9:f5:01:75:94:f4:10:02:a0: 9b:b3:ae:98:85:b8:c9:27:f5:19:66:8a:78:2e:05:95:d2:9a: a6:04:b9:f2:8b:c5:1f:12:6c:4e:21:7a:76:e9:c4:aa:f9:34: e8:cb:af:d0:04:94:f9:76:06:5e:49:92:24:11:b4:38:ca:71: 92:3a:ac:df:a2:e1:d8:36:2c:16:ca:4c:2e:4e:53:4b:af:94: 69:27:36:d2:df:f2:17:6c:7f:42:11:56:14:e1:01:e3:57:03: 73:c7:f1:14:5c:76:75:84:9d:26:23:67:68:2a:ba:b1:70:47: b5:50:1f:cb:86:46:b8:15:ec:d0:79:13:04:55:5a:18:8d:4d: 57:fb:a5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXXZVZViuCaKOCQ0dw+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYWExMTQ2YWZkNGY0NWYxMTcwOTVhMTVhN2RlMGJiZjk3 ODE0NGEwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD Eyg3YmNkZjZlOWFkZjY5ZjBmNjcwNGE2ZDQzNzc1MWQ1ZGU5MDQzZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreznZL7DW1AdDHB6u4wxsYe13NZw Cs5mFPwfeoq3INfxqQIo/dXROoNj2QmKSnELs1k+O/NVqL4Q0+qp66y8OY2Q9A/K wwLLfR0NUPGBHeekHhCTzljG4cNDhw+I8nOaOUyESCzYys8Y7EVvxYB4QRyHR7X7 6155l/5GglL44FlrPqLOvi9lbRbiqOkb+O4IWANlBj1qyXuqnr03x9pufVJsDnX4 hAM+9313AAAxQL9mhkzp76b2YZALcDdwJN5uj8FgIH+6qKkv2ybKKyfntT25dIDk MBJQt+rf8EIgloGvb5U12DeVu/s+svYVmMeSlMlE0ibtm04oNkzRSIUEjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvN9umt9p8PZwSm1Dd1HV3pBD77MB8GA1UdIwQY MBaAFLyqEUav1PRfEXCVoVp94Lv5eBRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdktvUlJxX1U5RjhSY0pXaFduM2d1X2w0RkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82ODhlMzctZDk0Mi00ODZhLWE5MzIt NTg5M2JiNzc2MWNkLzEvdktvUlJxX1U5RjhSY0pXaFduM2d1X2w0RkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC82ODhlMzctZDk0Mi00ODZhLWE5MzItNTg5M2JiNzc2MWNk LzEvdktvUlJxX1U5RjhSY0pXaFduM2d1X2w0RkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlc9udLF 2vyd3H6vw8WrZk75k/TLcNUbhMxD/RmbCGoDwDxSPjsTmW8O4+RBmH2kXUYrNf8k BpMUv2MSzeLobTP+bAbTs7/YovSZfkxLBESPvUgs5vDmyoQnSmd9A+WB7PSLBNp3 MSkgPCOm3fFfqz0mA8412fUBdZT0EAKgm7OumIW4ySf1GWaKeC4FldKapgS58ovF HxJsTiF6dunEqvk06Muv0ASU+XYGXkmSJBG0OMpxkjqs36Lh2DYsFspMLk5TS6+U aSc20t/yF2x/QhFWFOEB41cDc8fxFFx2dYSdJiNnaCq6sXBHtVAfy4ZGuBXs0HkT BFVaGI1NV/ulzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:18 2025 by rpki-client