This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json) Hash identifier: Z8YeyEfekQ4N18XcvY6zUCfqHBtzkSmVPnDgB3SSa1Y= Subject key identifier: 51:AD:D6:07:ED:9B:B7:11:FD:DE:6D:7F:A6:70:64:C1:C8:53:52:93 Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4 Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4 Certificate serial: 019B22507D805445675CDCF66C9BB1D0940C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 14:00:58 +0000 Manifest this update: Mon 15 Dec 2025 14:00:58 +0000 Manifest next update: Tue 16 Dec 2025 14:00:58 +0000 Files and hashes: 1: 1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa (hash: 7aGZcVrrNLU0uixa8/gBU4YvCztU5V0t53AcHm6cX3E=) 2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: VMjgNjEn6DF/+iHiCnXeeRBrFhrLDxBhhZWCUk2i3ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:7d:80:54:45:67:5c:dc:f6:6c:9b:b1:d0:94:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4 Validity Not Before: Dec 15 14:00:58 2025 GMT Not After : Dec 16 14:00:58 2025 GMT Subject: CN=51add607ed9bb711fdde6d7fa67064c1c8535293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:1c:73:50:1e:b4:34:61:89:05:28:a7:a0: cb:5e:9c:4b:39:e0:cd:2a:9a:d2:39:68:b5:c9:85: be:03:f0:c8:7c:49:7a:ae:73:6e:f3:9b:07:84:cb: f5:fd:b5:94:f9:b4:4b:ee:86:2e:c6:40:05:6b:f0: f7:d7:9f:48:90:03:2b:00:e6:38:27:ad:6a:68:74: 54:16:9a:1e:0d:11:86:bb:c4:82:d4:da:1c:07:05: 9b:eb:76:bb:61:c5:4f:91:eb:d7:a1:78:7b:bd:f5: 0a:d4:e5:09:c4:f8:a3:7c:20:26:8b:fd:1a:81:d6: b0:94:ca:80:57:0c:99:75:c7:f3:e3:51:35:6a:d2: 60:0d:80:81:e3:fb:71:ad:05:a2:c5:7d:d3:3d:a1: db:83:b9:ca:1d:b6:87:2d:cd:52:e8:81:ab:11:df: 5a:34:3d:0b:60:75:dc:28:f9:98:65:00:64:85:f9: fb:22:0f:1c:9a:94:15:3d:30:60:92:b2:ea:a2:11: 0f:e2:fe:bb:ec:45:cc:c4:1f:7a:b4:f2:7b:fb:b6: 67:2c:46:f1:af:cc:66:ad:d0:6a:ff:12:28:b4:96: a1:81:35:f1:cf:8c:59:d4:7a:92:40:1a:3a:e9:7f: 26:6a:50:1e:24:42:f7:0e:1d:8c:7a:44:43:a7:02: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AD:D6:07:ED:9B:B7:11:FD:DE:6D:7F:A6:70:64:C1:C8:53:52:93 X509v3 Authority Key Identifier: keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:a7:43:a3:e5:7c:16:5d:c7:62:77:aa:88:ed:09:35:e2:df: 09:d6:e8:d1:09:46:eb:76:43:de:61:fe:f0:5d:5f:9e:f9:89: 2e:60:a3:27:61:5a:6d:d0:7b:d2:d1:e8:81:8e:59:5e:e8:21: 60:e6:4c:01:a4:f8:24:13:59:ef:af:2c:4c:45:18:82:2e:38: ce:1f:6d:b9:b1:d2:55:03:12:fc:80:1f:a7:84:2a:3a:44:be: f2:73:55:3c:29:97:3a:01:42:b6:82:2e:00:1b:63:33:09:f2: bc:9e:12:29:3e:c9:af:e7:96:8c:85:36:75:d2:99:97:7e:f8: eb:54:9e:a8:d6:9e:04:a5:cc:b9:ba:16:02:72:c5:11:01:0a: 95:38:a3:e9:72:28:19:c9:07:31:03:c6:54:bd:e2:78:0e:47: 01:fe:7f:8a:a5:da:bb:12:7b:57:87:25:bf:43:a5:42:3d:b2: a8:52:59:f9:9d:b3:fa:28:7f:0f:46:21:4d:76:d1:12:3c:c8: 1e:94:02:a2:55:23:49:59:92:6f:7f:ed:6e:f2:d2:0c:3a:fe: 1b:6e:28:d6:87:1f:e1:f0:b2:28:8c:e4:d8:33:68:8f:8e:8a: aa:11:31:43:05:52:4d:fb:6c:fa:c6:e8:6e:c8:27:b0:71:fd: 2f:0f:d1:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUH2AVEVnXNz2bJux0JQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzAzM2ExMDJiM2I3OTEyYTM2NjMyMGY0NDM1YzUzZmI5 NzczZjQwHhcNMjUxMjE1MTQwMDU4WhcNMjUxMjE2MTQwMDU4WjAzMTEwLwYDVQQD Eyg1MWFkZDYwN2VkOWJiNzExZmRkZTZkN2ZhNjcwNjRjMWM4NTM1MjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnscc1AetDRhiQUop6DLXpxLOeDN KprSOWi1yYW+A/DIfEl6rnNu85sHhMv1/bWU+bRL7oYuxkAFa/D3159IkAMrAOY4 J61qaHRUFpoeDRGGu8SC1NocBwWb63a7YcVPkevXoXh7vfUK1OUJxPijfCAmi/0a gdawlMqAVwyZdcfz41E1atJgDYCB4/txrQWixX3TPaHbg7nKHbaHLc1S6IGrEd9a ND0LYHXcKPmYZQBkhfn7Ig8cmpQVPTBgkrLqohEP4v677EXMxB96tPJ7+7ZnLEbx r8xmrdBq/xIotJahgTXxz4xZ1HqSQBo66X8malAeJEL3Dh2MekRDpwIx/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGt1gftm7cR/d5tf6ZwZMHIU1KTMB8GA1UdIwQY MBaAFLwwM6ECs7eRKjZjIPRDXFP7l3P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWIt ZjlhN2FjZDkxYmNjLzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWItZjlhN2FjZDkxYmNj LzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzqdDo+V8 Fl3HYneqiO0JNeLfCdbo0QlG63ZD3mH+8F1fnvmJLmCjJ2FabdB70tHogY5ZXugh YOZMAaT4JBNZ768sTEUYgi44zh9tubHSVQMS/IAfp4QqOkS+8nNVPCmXOgFCtoIu ABtjMwnyvJ4SKT7Jr+eWjIU2ddKZl37461SeqNaeBKXMuboWAnLFEQEKlTij6XIo GckHMQPGVL3ieA5HAf5/iqXauxJ7V4clv0OlQj2yqFJZ+Z2z+ih/D0YhTXbREjzI HpQColUjSVmSb3/tbvLSDDr+G24o1ocf4fCyKIzk2DNoj46KqhExQwVSTfts+sbo bsgnsHH9Lw/R5w== -----END CERTIFICATE-----Generated at Mon Dec 15 17:07:22 2025 by rpki-client