This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json) Hash identifier: eGPqVFUrRZS8zBVnfKcYr28bSgkofMmIow1Eq0mbR0c= Subject key identifier: 99:0D:AE:5D:80:A9:EC:63:19:2B:50:6C:D7:AC:35:9E:D2:B8:C4:15 Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E Certificate issuer: /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e Certificate serial: 019AF5E64E56AE5F33E537B2DA6F5887E409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 23:01:42 +0000 Manifest this update: Sat 06 Dec 2025 23:01:42 +0000 Manifest next update: Sun 07 Dec 2025 23:01:42 +0000 Files and hashes: 1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: ACwx0O178GKDMbL4vfkWPK2gn7MZwLejtjLZgckN3ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:4e:56:ae:5f:33:e5:37:b2:da:6f:58:87:e4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e Validity Not Before: Dec 6 23:01:42 2025 GMT Not After : Dec 7 23:01:42 2025 GMT Subject: CN=990dae5d80a9ec63192b506cd7ac359ed2b8c415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:9a:fa:dd:6a:fb:54:57:f8:62:c6:ef:cb: c1:c8:a9:46:78:a7:71:55:38:4e:b4:66:60:2a:24: b3:7d:b1:19:e3:0f:18:2b:4b:15:1c:f6:55:5b:c7: c1:73:e5:c6:67:e9:e5:03:f3:9e:bf:9a:7d:5d:30: 93:63:50:4b:44:fa:86:20:65:2c:b0:49:d4:7c:3c: 84:11:5f:ee:c6:67:d1:b2:98:b8:16:a4:3f:de:23: ff:1a:e2:c7:fb:94:98:90:b3:03:5a:09:ed:19:39: 88:e3:9c:55:78:4c:51:49:09:1f:0b:53:86:72:69: c6:d7:7a:51:c9:c0:83:ed:72:a5:2f:63:b2:37:47: 49:e8:0c:26:d6:82:7a:1a:28:d4:33:0a:aa:19:04: f9:eb:ed:2f:33:16:02:e0:97:3a:da:88:f6:04:d3: a4:84:6a:c7:d3:1d:81:e3:84:18:ff:a9:95:f8:ab: 48:79:ac:31:40:1a:d9:47:ee:ea:1a:e2:bc:66:67: e6:60:44:15:80:d2:77:52:8a:21:3b:01:87:40:0d: b4:66:92:d8:30:a3:58:57:c4:d8:2d:93:fc:63:5e: 54:e7:e9:4e:cd:1f:84:16:a7:82:e9:6d:7c:3f:38: 02:3f:21:b2:f2:fe:7d:a0:79:77:8a:57:6b:d3:8c: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:AE:5D:80:A9:EC:63:19:2B:50:6C:D7:AC:35:9E:D2:B8:C4:15 X509v3 Authority Key Identifier: keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:f1:e8:3d:52:13:b3:9c:db:1b:55:82:50:4d:e2:6b:a0: 08:b1:56:0f:4d:f0:1c:e5:67:7b:10:66:6e:f7:ad:1b:d9:a8: 39:5e:82:d8:a2:db:1b:39:7a:2e:20:eb:b7:8f:8d:87:f9:6a: 95:d6:34:25:15:c2:3f:e8:8d:27:82:65:5e:b6:f0:6d:4e:4d: 47:6e:c8:8b:6e:47:42:6b:f3:92:23:88:47:e2:63:71:c3:44: e1:a8:b7:4c:d1:a1:8b:02:ad:0d:9c:2d:1d:8f:f4:87:cf:14: 66:a5:6c:75:50:9a:d1:e5:2e:a3:60:24:af:12:e4:dd:a0:b0: 60:39:bd:43:58:e8:6a:04:1a:42:ae:be:78:25:1a:95:a8:0f: 78:fc:ec:50:bc:02:f9:6b:3b:9f:2e:8a:76:db:ff:2b:05:77: 23:7f:b0:94:90:d2:be:ab:89:80:05:4b:ee:c2:f5:00:4b:ef: b5:e6:65:0b:fb:44:11:b4:72:43:45:5f:51:a6:81:1c:69:c3: 90:2f:91:1e:58:51:73:d5:13:2e:e9:02:cb:57:2f:c7:6e:50: 0a:57:db:fa:a1:1c:34:b8:4f:74:f4:70:d3:6c:92:21:bc:50: 16:c8:dd:1c:74:7c:97:ed:1d:3e:2e:3b:4c:73:0e:95:68:8e: 96:01:56:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15k5Wrl8z5Tey2m9Yh+QJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTA2ZTRkODJmYmFlMzRjMTUyYTM1ZDQzZDBmZGY0OWQ1 NGJlOWUwHhcNMjUxMjA2MjMwMTQyWhcNMjUxMjA3MjMwMTQyWjAzMTEwLwYDVQQD Eyg5OTBkYWU1ZDgwYTllYzYzMTkyYjUwNmNkN2FjMzU5ZWQyYjhjNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zWa+t1q+1RX+GLG78vByKlGeKdx VThOtGZgKiSzfbEZ4w8YK0sVHPZVW8fBc+XGZ+nlA/Oev5p9XTCTY1BLRPqGIGUs sEnUfDyEEV/uxmfRspi4FqQ/3iP/GuLH+5SYkLMDWgntGTmI45xVeExRSQkfC1OG cmnG13pRycCD7XKlL2OyN0dJ6Awm1oJ6GijUMwqqGQT56+0vMxYC4Jc62oj2BNOk hGrH0x2B44QY/6mV+KtIeawxQBrZR+7qGuK8ZmfmYEQVgNJ3UoohOwGHQA20ZpLY MKNYV8TYLZP8Y15U5+lOzR+EFqeC6W18PzgCPyGy8v59oHl3ildr04yfXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkNrl2AqexjGStQbNesNZ7SuMQVMB8GA1UdIwQY MBaAFLwQbk2C+640wVKjXUPQ/fSdVL6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzct NjM0OWExN2FiYjQzLzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzctNjM0OWExN2FiYjQz LzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2bx6D1S E7Oc2xtVglBN4mugCLFWD03wHOVnexBmbvetG9moOV6C2KLbGzl6LiDrt4+Nh/lq ldY0JRXCP+iNJ4JlXrbwbU5NR27Ii25HQmvzkiOIR+JjccNE4ai3TNGhiwKtDZwt HY/0h88UZqVsdVCa0eUuo2AkrxLk3aCwYDm9Q1joagQaQq6+eCUalagPePzsULwC +Ws7ny6Kdtv/KwV3I3+wlJDSvquJgAVL7sL1AEvvteZlC/tEEbRyQ0VfUaaBHGnD kC+RHlhRc9UTLukCy1cvx25QClfb+qEcNLhPdPRw02ySIbxQFsjdHHR8l+0dPi47 THMOlWiOlgFWYQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:52:01 2025 by rpki-client