This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json) Hash identifier: QilPnQocSnr37w3kKfgIrSQDnQ9jYVwuZHuCF7Uaxr8= Subject key identifier: DB:AD:6E:64:61:08:DF:FB:B2:23:0B:37:F0:28:11:4E:C6:DF:84:31 Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f Certificate serial: 019B3079F1B2E0E5A03EE45796CAC6F6F22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 08:00:56 +0000 Manifest this update: Thu 18 Dec 2025 08:00:56 +0000 Manifest next update: Fri 19 Dec 2025 08:00:56 +0000 Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=) 2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: YSpM4dxXFoki722dI7I4QQ1HrDTbEdfJuo6iETYrPz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:f1:b2:e0:e5:a0:3e:e4:57:96:ca:c6:f6:f2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f Validity Not Before: Dec 18 08:00:56 2025 GMT Not After : Dec 19 08:00:56 2025 GMT Subject: CN=dbad6e646108dffbb2230b37f028114ec6df8431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:81:51:25:ba:c5:4a:ce:71:90:58:d9:78: 11:c3:ac:d0:f8:0e:8f:33:4d:c9:48:53:a1:09:31: 3e:25:7f:b2:fc:b7:fe:ad:14:0e:bb:41:3b:15:5d: 9d:ca:ae:7a:31:70:3b:34:19:aa:e5:7b:a8:f6:7e: 17:2d:d6:31:27:be:9c:ea:07:06:c5:ca:4a:0a:40: 5b:5c:00:77:ff:92:a3:df:1c:a6:5e:19:61:6d:f7: d4:c2:7d:27:2c:c8:83:07:d2:1b:3d:bb:99:2d:7c: c2:c3:90:8f:54:31:ef:b7:17:44:ac:08:c5:75:88: 9b:48:bf:36:d9:ff:6f:c2:39:36:ad:ea:7a:18:4e: d0:3a:f4:e6:a3:e3:05:e6:3e:44:ef:34:8a:3b:fe: 3d:03:3e:96:d1:8f:db:86:62:39:7b:55:03:91:e6: 47:18:21:37:78:e3:86:7e:a3:06:8d:50:56:ab:02: 4f:80:f6:f6:b7:d5:e3:ef:09:31:87:5c:b6:3c:99: d0:45:45:09:08:3b:2c:1a:38:82:3b:77:7b:32:d6: 2a:cb:ba:81:f3:5b:c6:e4:fd:af:9c:c9:29:d1:19: 49:1c:1e:12:32:03:23:54:d0:c5:df:0d:64:e7:bc: db:f6:bd:2a:09:da:cf:86:79:97:45:1c:6c:1e:b3: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:6E:64:61:08:DF:FB:B2:23:0B:37:F0:28:11:4E:C6:DF:84:31 X509v3 Authority Key Identifier: keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c1:27:e5:7a:64:fc:cf:f3:82:7c:71:e7:8e:56:fd:66:21: 81:f9:d9:93:95:58:00:53:b8:fb:f0:b3:db:9e:33:b2:94:a4: 9f:21:1a:56:72:d1:67:4c:e2:18:a6:78:86:03:95:96:78:1d: b9:95:52:9e:f4:71:96:44:43:fc:89:30:d6:b6:d1:f7:0c:04: cf:54:40:c1:94:fa:e0:e8:ef:69:81:d0:ca:55:54:be:84:89: e2:06:46:15:7c:0b:f2:c6:2b:e6:66:88:da:34:64:7c:67:cc: bb:1b:21:02:78:01:30:ff:50:77:38:6e:7b:fd:a2:fd:d6:cd: 87:84:19:5a:37:f1:c8:4f:08:d7:95:77:0c:70:61:9a:7c:57: 12:4c:16:b5:0d:db:4f:70:86:94:d6:18:7d:82:0b:4b:b3:57: 58:3f:ef:51:31:57:a9:e4:26:58:5f:ac:87:f4:e1:63:84:84: 35:96:4b:ec:0f:39:a7:3f:9d:4e:3d:24:46:6a:a8:d6:fa:aa: c5:18:c6:b4:95:55:a4:84:ef:db:c3:95:45:97:15:32:64:0a: e9:cf:5a:c8:4b:ec:b0:39:d9:a3:22:5e:4b:92:75:57:c9:ba: c4:b4:d6:cc:02:c1:4f:06:1d:c1:d4:1b:34:4b:11:27:83:7e: 7d:68:b6:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswefGy4OWgPuRXlsrG9vIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWQyMDkzNjYyNmI1NTc0M2M2NTk0NTEyZGU0MmVmOWY4 ZTkwNWYwHhcNMjUxMjE4MDgwMDU2WhcNMjUxMjE5MDgwMDU2WjAzMTEwLwYDVQQD EyhkYmFkNmU2NDYxMDhkZmZiYjIyMzBiMzdmMDI4MTE0ZWM2ZGY4NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UeBUSW6xUrOcZBY2XgRw6zQ+A6P M03JSFOhCTE+JX+y/Lf+rRQOu0E7FV2dyq56MXA7NBmq5Xuo9n4XLdYxJ76c6gcG xcpKCkBbXAB3/5Kj3xymXhlhbffUwn0nLMiDB9IbPbuZLXzCw5CPVDHvtxdErAjF dYibSL822f9vwjk2rep6GE7QOvTmo+MF5j5E7zSKO/49Az6W0Y/bhmI5e1UDkeZH GCE3eOOGfqMGjVBWqwJPgPb2t9Xj7wkxh1y2PJnQRUUJCDssGjiCO3d7MtYqy7qB 81vG5P2vnMkp0RlJHB4SMgMjVNDF3w1k57zb9r0qCdrPhnmXRRxsHrPFWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNutbmRhCN/7siMLN/AoEU7G34QxMB8GA1UdIwQY MBaAFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgt MWYxZGM1MmJiYjk4LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgtMWYxZGM1MmJiYjk4 LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscEn5Xpk /M/zgnxx545W/WYhgfnZk5VYAFO4+/Cz254zspSknyEaVnLRZ0ziGKZ4hgOVlngd uZVSnvRxlkRD/Ikw1rbR9wwEz1RAwZT64OjvaYHQylVUvoSJ4gZGFXwL8sYr5maI 2jRkfGfMuxshAngBMP9Qdzhue/2i/dbNh4QZWjfxyE8I15V3DHBhmnxXEkwWtQ3b T3CGlNYYfYILS7NXWD/vUTFXqeQmWF+sh/ThY4SENZZL7A85pz+dTj0kRmqo1vqq xRjGtJVVpITv28OVRZcVMmQK6c9ayEvssDnZoyJeS5J1V8m6xLTWzALBTwYdwdQb NEsRJ4N+fWi2aw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:27:23 2025 by rpki-client