This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json) Hash identifier: nAnbDCF+rc5AKcVhloufe7DMwhevlRLw3jVmGn/EMk0= Subject key identifier: 1C:D2:1D:C1:83:54:D4:49:02:FD:24:64:BD:53:56:48:3B:26:09:A2 Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f Certificate serial: 019AF49C18175D879716E48BECF9AE3BDE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:01:01 +0000 Manifest this update: Sat 06 Dec 2025 17:01:01 +0000 Manifest next update: Sun 07 Dec 2025 17:01:01 +0000 Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=) 2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: 7+jhEAe5PDD5qx0uB4V5axU6JCRNupvMghsIVLjA45U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:18:17:5d:87:97:16:e4:8b:ec:f9:ae:3b:de:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f Validity Not Before: Dec 6 17:01:01 2025 GMT Not After : Dec 7 17:01:01 2025 GMT Subject: CN=1cd21dc18354d44902fd2464bd5356483b2609a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:77:16:c2:15:71:24:c5:3c:a4:15:3c:d1: 61:58:22:a6:85:bb:62:c2:0b:c5:dc:f8:aa:31:63: 77:d1:85:56:06:7a:dd:2a:18:8e:da:7a:ed:02:36: e8:6c:dd:e0:ea:08:e1:34:e6:27:a6:06:30:cb:5d: d4:91:45:30:20:e4:6d:aa:5b:d8:12:b5:d3:8a:5e: 67:6e:ad:04:7e:d4:60:6a:c8:ee:34:d0:0f:8c:92: 2b:3a:4c:3e:7d:2e:c8:09:5d:08:65:d7:cb:d9:31: c9:56:d2:32:f3:1b:3f:9c:b7:cc:a8:5a:0c:4e:a4: dd:49:9c:02:0a:0d:cc:b9:a8:18:d5:48:37:ff:13: 05:39:bd:5a:87:91:1c:3e:b6:2a:6e:95:52:b9:e0: ce:29:0b:44:7b:8f:13:ce:85:19:0a:c3:e8:23:44: 1c:c8:af:40:89:45:4d:59:ee:8b:65:dc:78:7e:15: 8c:78:2c:69:76:61:84:5f:11:27:7b:11:28:0e:80: 74:0f:03:c3:b2:71:66:8e:0f:92:d1:1d:01:89:86: 3e:8f:26:1e:ba:10:54:6d:86:cc:0a:67:1f:bb:90: e6:27:f6:fd:2e:eb:cb:32:cc:97:d3:ff:43:26:ab: 90:82:e2:1b:c2:08:29:dc:d1:aa:71:ee:2e:63:c5: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D2:1D:C1:83:54:D4:49:02:FD:24:64:BD:53:56:48:3B:26:09:A2 X509v3 Authority Key Identifier: keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f9:e5:c5:7f:5f:8c:c7:5a:01:47:be:a0:9c:70:2d:3a:58: de:f0:fb:b2:06:35:50:b2:92:65:1a:f6:2c:2d:6d:96:8a:6a: 4e:f7:25:0f:39:1e:bf:49:fa:2d:9e:ac:01:81:97:24:a1:fb: 00:82:89:d7:55:05:dc:5a:6f:67:77:dd:15:57:c2:c2:96:f1: a5:4e:bd:db:ec:99:c5:fc:01:4a:93:bb:6a:c6:9a:6c:47:c2: 50:45:c2:59:9c:a7:61:f6:60:ac:af:be:ff:6f:ef:4a:7a:1e: 8b:d4:4d:1f:ff:f5:e9:46:1f:2a:1d:76:8c:b0:fa:68:bc:f6: 4d:b8:98:68:c5:9c:d7:a0:1f:ef:40:88:2b:cf:1e:b4:04:24: ef:f9:11:44:b6:66:ef:1f:d6:13:8a:28:31:0c:15:93:c8:e4: 1a:4f:27:33:24:1d:61:c4:1e:32:37:43:ca:9f:05:62:82:6e: 8b:24:d3:3c:15:75:11:1d:b6:fa:86:ac:34:35:7e:08:56:0d: a3:69:f2:95:46:9d:2c:cc:0a:e8:66:69:1a:b9:63:76:e5:09: 11:79:71:21:f6:34:1b:18:1b:92:e8:e7:95:7e:09:16:d4:b3: f5:db:9b:1e:1f:7b:61:c4:78:48:3f:78:b1:77:64:1d:6b:6a: bb:8e:6f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBgXXYeXFuSL7PmuO96EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWQyMDkzNjYyNmI1NTc0M2M2NTk0NTEyZGU0MmVmOWY4 ZTkwNWYwHhcNMjUxMjA2MTcwMTAxWhcNMjUxMjA3MTcwMTAxWjAzMTEwLwYDVQQD EygxY2QyMWRjMTgzNTRkNDQ5MDJmZDI0NjRiZDUzNTY0ODNiMjYwOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIl3FsIVcSTFPKQVPNFhWCKmhbti wgvF3PiqMWN30YVWBnrdKhiO2nrtAjbobN3g6gjhNOYnpgYwy13UkUUwIORtqlvY ErXTil5nbq0EftRgasjuNNAPjJIrOkw+fS7ICV0IZdfL2THJVtIy8xs/nLfMqFoM TqTdSZwCCg3MuagY1Ug3/xMFOb1ah5EcPrYqbpVSueDOKQtEe48TzoUZCsPoI0Qc yK9AiUVNWe6LZdx4fhWMeCxpdmGEXxEnexEoDoB0DwPDsnFmjg+S0R0BiYY+jyYe uhBUbYbMCmcfu5DmJ/b9LuvLMsyX0/9DJquQguIbwggp3NGqce4uY8WWQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzSHcGDVNRJAv0kZL1TVkg7JgmiMB8GA1UdIwQY MBaAFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgt MWYxZGM1MmJiYjk4LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgtMWYxZGM1MmJiYjk4 LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvnlxX9f jMdaAUe+oJxwLTpY3vD7sgY1ULKSZRr2LC1tlopqTvclDzkev0n6LZ6sAYGXJKH7 AIKJ11UF3FpvZ3fdFVfCwpbxpU692+yZxfwBSpO7asaabEfCUEXCWZynYfZgrK++ /2/vSnoei9RNH//16UYfKh12jLD6aLz2TbiYaMWc16Af70CIK88etAQk7/kRRLZm 7x/WE4ooMQwVk8jkGk8nMyQdYcQeMjdDyp8FYoJuiyTTPBV1ER22+oasNDV+CFYN o2nylUadLMwK6GZpGrljduUJEXlxIfY0GxgbkujnlX4JFtSz9dubHh97YcR4SD94 sXdkHWtqu45vyg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:05 2025 by rpki-client