This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft File: vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json) Hash identifier: cZW1GtkCSC4uzx+MXLtEJDAHnkeQ2gvftAzRO3CKHFs= Subject key identifier: 13:25:C4:3B:3D:39:17:C1:B4:8D:17:52:6B:A9:E8:96:60:85:AE:09 Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1 Certificate issuer: /CN=bc3a4697447d190308644a58bceaa124c074b7e1 Certificate serial: 019AF088B981133C2B56C2BC9EDD02CB6236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:01:23 +0000 Manifest this update: Fri 05 Dec 2025 22:01:23 +0000 Manifest next update: Sat 06 Dec 2025 22:01:23 +0000 Files and hashes: 1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=) 2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: 27tHUlJRldTMfkZK8fKJKlNkMY30kAFSUG3br1niXeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b9:81:13:3c:2b:56:c2:bc:9e:dd:02:cb:62:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1 Validity Not Before: Dec 5 22:01:23 2025 GMT Not After : Dec 6 22:01:23 2025 GMT Subject: CN=1325c43b3d3917c1b48d17526ba9e8966085ae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:1d:ef:45:07:46:93:b0:83:0c:a0:72:72: 83:f1:a9:3c:12:b7:10:d6:b9:f9:af:ca:f7:d2:76: de:7c:81:37:3a:58:20:3d:f1:29:14:0f:7f:c3:c5: e2:b4:74:52:b2:c8:58:4e:f8:c0:0c:97:06:7f:ae: c4:7b:21:73:4b:3e:ad:d2:92:8e:77:e0:eb:1f:82: e1:30:05:7d:cf:a7:29:9b:12:17:ae:2d:ee:0e:4c: 2c:66:64:51:46:1b:ad:58:27:28:21:35:3d:a7:1a: b3:dc:35:2b:a7:7d:38:78:1f:2c:f4:46:de:fa:f8: 6d:49:1c:cf:57:70:54:d6:5d:a4:81:18:a7:50:9a: 5b:cc:c4:94:59:21:d8:56:dd:a4:15:b1:be:62:b7: 07:f9:04:3c:27:7e:43:fe:7e:96:39:4f:ce:0e:22: f5:ba:d9:f7:1d:49:55:16:8a:16:35:1f:23:15:40: 2f:88:25:66:2d:8e:b4:16:df:ba:0a:31:f4:dd:3a: 34:4e:c3:16:5f:c0:65:db:ca:71:75:89:e4:71:3b: cf:2a:ab:9e:8a:82:9b:38:68:bc:c8:2a:e2:29:ab: 24:67:eb:c8:81:a6:fc:77:8e:3d:c4:9d:fb:98:e0: ab:76:a7:44:3f:94:68:45:17:5c:ae:85:c9:61:45: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:25:C4:3B:3D:39:17:C1:B4:8D:17:52:6B:A9:E8:96:60:85:AE:09 X509v3 Authority Key Identifier: keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ca:17:cf:ba:e1:9e:ba:9e:9a:4a:c0:d2:6c:1c:0d:b2:64: 4b:a4:01:73:39:ab:d2:6c:c0:b0:0e:76:40:d2:d7:4a:32:cb: 80:25:49:51:b8:8f:92:06:1b:47:99:f0:bf:b8:2b:ba:07:73: 0f:ed:fa:ee:35:ae:0a:b6:87:4d:d8:7d:b8:e4:c0:c2:e2:ec: 82:65:91:f3:a4:37:67:f4:7d:18:6d:a3:0a:82:cc:53:9a:82: 81:a9:98:3a:f9:df:f1:ad:0d:5f:8c:b1:40:7e:58:34:3d:54: d6:d2:cf:c2:49:cd:c2:1c:01:85:c3:d9:f1:69:11:e1:0c:f2: d1:51:41:34:69:43:86:02:99:07:46:b6:c0:f5:8b:c0:54:85: d1:d5:5e:42:0b:01:e5:d9:a8:5c:2d:c7:f2:28:d6:71:c7:08: 52:9f:66:ac:15:43:ab:14:06:2d:b3:0f:db:1b:f0:78:e1:ac: 2e:fb:c1:c5:af:75:ac:6b:a8:65:2e:9e:82:c9:3b:1d:f9:62: 85:c0:07:7d:ea:99:de:48:34:70:fd:a4:4d:2e:c3:f5:2a:fa: 9a:12:4f:97:2b:33:2e:4c:47:f7:f3:a8:cc:3f:93:00:f7:45: af:ff:16:f5:cc:a9:33:4c:5a:74:df:55:0a:f4:37:77:d1:fd: 31:a7:ba:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLmBEzwrVsK8nt0Cy2I2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjM2E0Njk3NDQ3ZDE5MDMwODY0NGE1OGJjZWFhMTI0YzA3 NGI3ZTEwHhcNMjUxMjA1MjIwMTIzWhcNMjUxMjA2MjIwMTIzWjAzMTEwLwYDVQQD EygxMzI1YzQzYjNkMzkxN2MxYjQ4ZDE3NTI2YmE5ZTg5NjYwODVhZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4gd70UHRpOwgwygcnKD8ak8ErcQ 1rn5r8r30nbefIE3OlggPfEpFA9/w8XitHRSsshYTvjADJcGf67EeyFzSz6t0pKO d+DrH4LhMAV9z6cpmxIXri3uDkwsZmRRRhutWCcoITU9pxqz3DUrp304eB8s9Ebe +vhtSRzPV3BU1l2kgRinUJpbzMSUWSHYVt2kFbG+YrcH+QQ8J35D/n6WOU/ODiL1 utn3HUlVFooWNR8jFUAviCVmLY60Ft+6CjH03To0TsMWX8Bl28pxdYnkcTvPKque ioKbOGi8yCriKaskZ+vIgab8d449xJ37mOCrdqdEP5RoRRdcroXJYUWiBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMlxDs9ORfBtI0XUmup6JZgha4JMB8GA1UdIwQY MBaAFLw6RpdEfRkDCGRKWLzqoSTAdLfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81YWE2MTktZGNjYS00OWQ1LTkwMWYt YTVhYjdiNjQxNTVmLzEvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi81YWE2MTktZGNjYS00OWQ1LTkwMWYtYTVhYjdiNjQxNTVm LzEvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMoXz7rh nrqemkrA0mwcDbJkS6QBczmr0mzAsA52QNLXSjLLgCVJUbiPkgYbR5nwv7grugdz D+367jWuCraHTdh9uOTAwuLsgmWR86Q3Z/R9GG2jCoLMU5qCgamYOvnf8a0NX4yx QH5YND1U1tLPwknNwhwBhcPZ8WkR4Qzy0VFBNGlDhgKZB0a2wPWLwFSF0dVeQgsB 5dmoXC3H8ijWcccIUp9mrBVDqxQGLbMP2xvweOGsLvvBxa91rGuoZS6egsk7Hfli hcAHfeqZ3kg0cP2kTS7D9Sr6mhJPlyszLkxH9/OozD+TAPdFr/8W9cypM0xadN9V CvQ3d9H9Mae6zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:06 2025 by rpki-client