This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json) Hash identifier: GPTXjp3UJbJs2DIIgRw1WxbFoOW5ljQduCAxBGZ4YfE= Subject key identifier: 9C:25:15:25:21:20:A1:D9:ED:E8:8D:F3:16:15:89:E5:75:D0:0A:43 Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Certificate serial: 019AF19B79B879813AC4A2736054189AA97F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=) 2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: A2/2iyKgRCv/rXMDjWlVZPDqh3+fRPvscg76HmsJmx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:79:b8:79:81:3a:c4:a2:73:60:54:18:9a:a9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=9c2515252120a1d9ede88df3161589e575d00a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:a4:85:d8:45:4a:32:aa:4a:9c:7b:d5:27: 58:da:39:de:2a:4a:5f:8d:2a:a0:32:cf:89:25:88: 8c:17:9b:b4:cb:c3:5c:8a:64:c0:c6:5e:c8:05:50: b0:dc:36:bb:45:32:fa:a3:f3:2b:29:33:07:34:78: 20:20:88:44:aa:2d:ed:fd:27:69:53:26:81:60:3b: 6c:92:d5:cf:15:cd:a7:94:48:1f:1d:9b:75:12:73: c3:7c:d5:81:89:f2:c3:c7:40:72:18:f7:9d:cf:6f: 9b:a1:39:41:e6:47:af:e9:6e:a6:7a:39:46:7e:c3: 30:7f:e2:91:04:e5:bc:74:c0:be:f5:68:0c:57:77: 18:80:bc:db:28:5f:1e:62:b1:3a:81:d9:e1:c2:ed: d0:ee:05:aa:82:65:18:65:00:2f:9a:df:40:95:0c: a2:ae:2f:3e:f1:3d:be:57:3f:f7:0f:9e:19:e0:36: 90:05:a0:e8:67:6e:1a:32:1c:70:04:22:3b:6b:b8: d1:7a:64:c8:1c:76:b2:52:c4:81:2c:36:d3:35:e3: 07:e6:1b:cd:c7:3a:3b:c7:f5:a5:92:0f:ef:28:2c: 46:b5:3b:d7:52:74:5a:4f:be:ef:4d:3d:b3:7a:4a: c9:fd:33:23:56:d3:4e:84:6b:8d:3d:51:83:72:ce: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:25:15:25:21:20:A1:D9:ED:E8:8D:F3:16:15:89:E5:75:D0:0A:43 X509v3 Authority Key Identifier: keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:36:5a:cf:9b:e6:ea:e1:bc:4c:10:7e:91:cc:91:40:c7:f0: 05:29:40:75:fe:94:97:29:b9:eb:b3:55:4b:10:33:c0:5d:b2: 50:17:8a:3d:1e:96:84:7f:30:8a:b4:cc:41:3a:55:58:75:ac: c7:f1:8d:e2:e5:d0:72:b9:9c:d0:6c:8d:99:23:76:57:51:f2: 0f:48:38:87:0e:75:c1:79:79:99:3f:33:7f:da:c8:59:44:a0: 67:05:bf:40:4d:76:2a:6f:54:73:a6:d0:b4:20:da:c1:ab:83: ba:32:55:1f:f7:94:88:ea:a3:a9:fe:d0:7d:1e:86:38:f1:7c: 4c:90:e9:ee:2b:79:ba:ee:1e:6c:01:4c:f1:a3:8f:1b:96:9d: ff:f7:47:34:ac:2a:32:13:04:36:10:07:33:10:66:29:1a:67: ba:78:be:d9:f5:3b:36:1e:da:c6:32:79:da:c5:d1:1b:00:1c: 71:37:b6:dd:ba:70:04:d5:23:93:56:2b:b6:7d:c2:c1:92:b9: 85:55:71:cd:a9:53:32:5d:5b:02:78:d3:af:ca:ce:4c:e2:a5: 2d:96:c0:a6:16:54:39:a1:5d:12:02:df:09:11:ac:66:c3:c9: 36:79:47:45:c4:70:08:04:b1:9b:70:d2:3c:c8:3c:9a:d2:26: 6c:2b:07:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3m4eYE6xKJzYFQYmql/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1 OTcxYjUwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD Eyg5YzI1MTUyNTIxMjBhMWQ5ZWRlODhkZjMxNjE1ODllNTc1ZDAwYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9OkhdhFSjKqSpx71SdY2jneKkpf jSqgMs+JJYiMF5u0y8NcimTAxl7IBVCw3Da7RTL6o/MrKTMHNHggIIhEqi3t/Sdp UyaBYDtsktXPFc2nlEgfHZt1EnPDfNWBifLDx0ByGPedz2+boTlB5kev6W6mejlG fsMwf+KRBOW8dMC+9WgMV3cYgLzbKF8eYrE6gdnhwu3Q7gWqgmUYZQAvmt9AlQyi ri8+8T2+Vz/3D54Z4DaQBaDoZ24aMhxwBCI7a7jRemTIHHayUsSBLDbTNeMH5hvN xzo7x/Wlkg/vKCxGtTvXUnRaT77vTT2zekrJ/TMjVtNOhGuNPVGDcs6FSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwlFSUhIKHZ7eiN8xYVieV10ApDMB8GA1UdIwQY MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDZaz5vm 6uG8TBB+kcyRQMfwBSlAdf6Ulym567NVSxAzwF2yUBeKPR6WhH8wirTMQTpVWHWs x/GN4uXQcrmc0GyNmSN2V1HyD0g4hw51wXl5mT8zf9rIWUSgZwW/QE12Km9Uc6bQ tCDawauDujJVH/eUiOqjqf7QfR6GOPF8TJDp7it5uu4ebAFM8aOPG5ad//dHNKwq MhMENhAHMxBmKRpnuni+2fU7Nh7axjJ52sXRGwAccTe23bpwBNUjk1Yrtn3CwZK5 hVVxzalTMl1bAnjTr8rOTOKlLZbAphZUOaFdEgLfCRGsZsPJNnlHRcRwCASxm3DS PMg8mtImbCsHXA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:44 2025 by rpki-client