This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json) Hash identifier: jmjrIT6EJJKPTnBYSw5bDZ515tRZw8wCSDKco0Y/LnY= Subject key identifier: 80:21:36:56:80:F1:63:C3:CF:54:03:C7:E9:E1:33:08:1B:2E:02:7E Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Certificate serial: 019AF19B4DE242F5618B5EC03EB910563771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft Manifest number: 042F Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=) 2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: gtcK4ugwnvntPAuG188efIS7NdLR1PjhYDd81HiXRCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4d:e2:42:f5:61:8b:5e:c0:3e:b9:10:56:37:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=8021365680f163c3cf5403c7e9e133081b2e027e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:43:3d:59:b8:63:ed:f1:8f:e5:ef:f8:7f: 24:84:f7:86:8d:e9:da:ba:bf:53:97:3d:25:db:46: 53:3a:6b:85:c3:a0:81:c6:10:2f:ae:a2:1e:e3:cf: 13:0d:c9:16:a6:48:18:eb:c6:4a:9e:7f:5d:03:fe: 48:70:af:48:e4:f0:95:46:98:d0:ef:25:f8:9e:89: 8a:ca:e6:b9:74:ed:d3:a7:23:24:48:2a:ab:74:91: 85:e4:97:15:66:8f:03:8e:85:82:c8:8f:8f:a5:94: 57:dc:27:3c:ff:4b:b4:27:23:98:e2:a6:46:1e:b3: 78:d4:88:9d:d5:e9:fe:4a:74:a5:14:e4:8b:70:04: e6:c6:e5:61:ef:a6:86:77:52:67:99:7c:bd:9c:63: 67:56:75:ae:64:42:0f:d9:89:22:9f:24:2a:59:4b: 05:3e:11:11:5d:2a:5b:7e:26:71:77:f7:47:04:76: b8:1d:b1:b1:3d:0e:60:04:2e:1e:38:13:76:69:bd: 21:06:55:36:e8:31:f6:2d:37:05:a0:50:d6:f7:64: 69:96:27:1d:bd:0f:15:10:3c:2e:41:53:b3:46:a1: 53:5d:d7:ed:78:ce:b1:8c:9c:38:e8:4c:57:ca:cc: 0b:7f:4c:db:f5:cb:ea:fb:ff:b8:c2:af:22:d2:5e: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:21:36:56:80:F1:63:C3:CF:54:03:C7:E9:E1:33:08:1B:2E:02:7E X509v3 Authority Key Identifier: keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8d:85:6d:9e:8b:1d:ae:6a:67:fc:59:d8:c0:46:c2:7d:e4: 98:d6:49:57:d3:4d:7c:49:b9:64:12:bb:3e:fd:e7:35:12:9b: ac:67:57:b4:f8:fe:56:e4:93:79:4a:5c:a5:e3:4e:4a:9a:ea: f5:4c:26:90:32:c6:11:10:93:ce:af:36:42:7c:b5:6e:16:8f: de:7f:9e:c6:58:cf:8b:78:48:79:cd:b1:06:b9:95:2f:4c:e4: 6e:55:50:de:a4:5c:07:23:8e:da:d2:08:d0:62:28:0e:59:35: 55:b1:cf:f1:88:2a:b6:a3:25:bc:e3:68:96:76:b7:f2:57:16: 55:b6:e3:49:19:62:9d:0a:59:04:c2:06:42:a4:b8:ba:c5:6f: eb:7e:c8:cb:e2:3e:9f:73:a3:39:33:fd:ed:b5:b5:8f:83:c9: f0:73:a2:86:d4:5f:dc:7d:ba:9b:8f:51:cd:7d:c1:b7:f2:00: 48:4b:ba:ab:e2:18:cf:63:65:48:77:a2:6b:d0:c4:d1:35:5d: 7c:d1:b7:b3:6a:fb:40:89:81:d2:a1:52:01:b4:1e:49:96:7b: 49:f2:20:ea:ce:ae:2e:c5:ef:d4:dc:69:e8:fa:0f:77:70:62: 7d:6c:50:40:19:7f:cd:ad:47:84:74:2a:7b:86:94:94:d3:45: aa:7c:70:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm03iQvVhi17APrkQVjdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjI0ZGY0YTdjOWFhMjEzMWQ4NTc1MDNiOTNkNjBmN2Zi NTFiZDkwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD Eyg4MDIxMzY1NjgwZjE2M2MzY2Y1NDAzYzdlOWUxMzMwODFiMmUwMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZDPVm4Y+3xj+Xv+H8khPeGjena ur9Tlz0l20ZTOmuFw6CBxhAvrqIe488TDckWpkgY68ZKnn9dA/5IcK9I5PCVRpjQ 7yX4nomKyua5dO3TpyMkSCqrdJGF5JcVZo8DjoWCyI+PpZRX3Cc8/0u0JyOY4qZG HrN41Iid1en+SnSlFOSLcATmxuVh76aGd1JnmXy9nGNnVnWuZEIP2YkinyQqWUsF PhERXSpbfiZxd/dHBHa4HbGxPQ5gBC4eOBN2ab0hBlU26DH2LTcFoFDW92Rplicd vQ8VEDwuQVOzRqFTXdfteM6xjJw46ExXyswLf0zb9cvq+/+4wq8i0l4FXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAhNlaA8WPDz1QDx+nhMwgbLgJ+MB8GA1UdIwQY MBaAFL2yTfSnyaohMdhXUDuT1g9/tRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAt ZDMwYWViMWMyMGNhLzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAtZDMwYWViMWMyMGNh LzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK42FbZ6L Ha5qZ/xZ2MBGwn3kmNZJV9NNfEm5ZBK7Pv3nNRKbrGdXtPj+VuSTeUpcpeNOSprq 9UwmkDLGERCTzq82Qny1bhaP3n+exljPi3hIec2xBrmVL0zkblVQ3qRcByOO2tII 0GIoDlk1VbHP8YgqtqMlvONolna38lcWVbbjSRlinQpZBMIGQqS4usVv637Iy+I+ n3OjOTP97bW1j4PJ8HOihtRf3H26m49RzX3Bt/IASEu6q+IYz2NlSHeia9DE0TVd fNG3s2r7QImB0qFSAbQeSZZ7SfIg6s6uLsXv1Nxp6PoPd3BifWxQQBl/za1HhHQq e4aUlNNFqnxwag== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:57 2025 by rpki-client