This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft File: vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json) Hash identifier: 5KEdi4320A3xrpmucxrsKiaOZsE3szUByzdZT8S0y2U= Subject key identifier: 85:8A:B3:39:3D:65:C3:C2:D2:5A:24:A8:00:EB:5B:87:17:1A:FD:23 Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401 Certificate serial: 019B2DAFEB3A1D8160A6EF8F4E4D577D5B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft Manifest number: 0D8F Signing time: Wed 17 Dec 2025 19:01:02 +0000 Manifest this update: Wed 17 Dec 2025 19:01:02 +0000 Manifest next update: Thu 18 Dec 2025 19:01:02 +0000 Files and hashes: 1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=) 2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=) 3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=) 4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: dBXX4K8wjJa0SiHiKlJT2fq6T1XyG3tMMfN+DQ+hRYU=) 5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:af:eb:3a:1d:81:60:a6:ef:8f:4e:4d:57:7d:5b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401 Validity Not Before: Dec 17 19:01:02 2025 GMT Not After : Dec 18 19:01:02 2025 GMT Subject: CN=858ab3393d65c3c2d25a24a800eb5b87171afd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:3b:1e:1e:f8:f3:e3:bc:ce:4f:0d:d1:a6: 87:5c:8d:96:9d:43:d3:90:5c:55:91:1b:5b:77:e5: 78:f5:31:a3:16:e4:c4:98:6c:04:dc:dd:99:31:3c: e4:b3:fa:6a:f1:1e:f3:e1:df:ff:f4:6d:65:d6:4a: 05:6b:bf:99:04:31:cd:34:0a:25:5e:7b:2c:ed:4a: 9d:1b:e9:73:15:e0:ed:88:2e:36:6c:78:65:0e:c1: e0:31:74:c1:7e:67:98:21:c6:7c:9e:68:23:d4:98: 57:64:3f:33:25:8e:f7:ff:11:ed:ba:23:cf:3b:b7: 46:d6:4c:fd:a8:b4:d8:ef:ec:3e:c3:4d:bd:4c:09: ec:be:bd:9f:3b:72:2f:ae:53:34:8e:f4:6e:a7:4c: 6f:df:60:bf:17:cb:aa:c8:cd:66:04:65:ed:af:20: a0:42:ff:e5:ec:9a:d6:94:07:33:61:0c:61:c0:8b: 4c:56:ce:7d:01:f3:d5:6f:67:dc:4a:2d:8d:4d:b8: 3e:2a:cf:0e:90:58:fa:8d:90:69:c1:e8:e0:64:1e: 34:b5:bf:16:ac:ad:97:41:ed:e6:3e:1d:b0:c5:c7: d9:86:41:c3:f0:1d:fd:e9:81:28:26:f2:1b:04:ee: 4f:64:a6:42:0a:b2:45:8c:4a:06:39:d0:18:d7:17: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:B3:39:3D:65:C3:C2:D2:5A:24:A8:00:EB:5B:87:17:1A:FD:23 X509v3 Authority Key Identifier: keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ec:f5:d0:bd:27:45:e3:f8:81:ca:4d:2a:18:cf:40:50:2a: 16:17:59:fc:14:49:6a:1b:fa:27:df:70:4f:44:5b:e4:32:4d: 70:1f:fe:ef:34:22:36:f4:7e:7f:2d:06:15:bd:be:75:f1:33: a3:7b:b0:68:3c:f8:65:93:a9:0a:05:2e:db:c7:b8:fb:61:01: ec:8c:66:7c:f3:14:c4:d9:9d:69:16:0a:f0:89:07:bd:db:20: 9c:12:b4:03:c6:b3:c5:81:14:24:fa:bf:04:fb:c8:cb:9b:7d: 10:9e:fd:f4:e0:bd:ee:1e:e0:cf:1b:37:bb:dd:9b:d3:a2:ca: 8c:22:6f:3b:6d:b0:94:8a:11:9a:9b:bb:5a:3e:31:7f:a0:46: da:09:21:81:63:7c:70:e6:62:cb:17:35:b5:bf:f4:d7:b9:f9: 74:ff:cf:90:db:11:56:6f:05:e0:99:ca:20:86:1b:8d:69:2a: 39:e0:e4:9e:40:76:c7:22:e6:3f:0c:f2:02:a2:bf:27:de:9d: dd:3b:86:7b:4b:ee:cf:3c:3e:e1:96:bf:cd:6a:fe:2a:4c:df: 2f:16:88:62:2e:7e:cc:4d:b8:31:54:8f:69:ca:f7:3f:b3:84: 25:5a:56:67:51:c7:1a:ff:a1:46:32:84:a9:14:84:08:fb:af: 12:d2:a3:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstr+s6HYFgpu+PTk1XfVsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2Q1MmE2YTdmOTU3MTcxYjE1ZjdiZTVlMjA5MTY0Mjgz Njk0MDEwHhcNMjUxMjE3MTkwMTAyWhcNMjUxMjE4MTkwMTAyWjAzMTEwLwYDVQQD Eyg4NThhYjMzOTNkNjVjM2MyZDI1YTI0YTgwMGViNWI4NzE3MWFmZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJU7Hh748+O8zk8N0aaHXI2WnUPT kFxVkRtbd+V49TGjFuTEmGwE3N2ZMTzks/pq8R7z4d//9G1l1koFa7+ZBDHNNAol Xnss7UqdG+lzFeDtiC42bHhlDsHgMXTBfmeYIcZ8nmgj1JhXZD8zJY73/xHtuiPP O7dG1kz9qLTY7+w+w029TAnsvr2fO3IvrlM0jvRup0xv32C/F8uqyM1mBGXtryCg Qv/l7JrWlAczYQxhwItMVs59AfPVb2fcSi2NTbg+Ks8OkFj6jZBpwejgZB40tb8W rK2XQe3mPh2wxcfZhkHD8B396YEoJvIbBO5PZKZCCrJFjEoGOdAY1xdBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWKszk9ZcPC0lokqADrW4cXGv0jMB8GA1UdIwQY MBaAFLzNUqan+VcXGxX3vl4gkWQoNpQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUt ZTgyM2UxN2JiNWNjLzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUtZTgyM2UxN2JiNWNj LzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOz10L0n ReP4gcpNKhjPQFAqFhdZ/BRJahv6J99wT0Rb5DJNcB/+7zQiNvR+fy0GFb2+dfEz o3uwaDz4ZZOpCgUu28e4+2EB7IxmfPMUxNmdaRYK8IkHvdsgnBK0A8azxYEUJPq/ BPvIy5t9EJ799OC97h7gzxs3u92b06LKjCJvO22wlIoRmpu7Wj4xf6BG2gkhgWN8 cOZiyxc1tb/017n5dP/PkNsRVm8F4JnKIIYbjWkqOeDknkB2xyLmPwzyAqK/J96d 3TuGe0vuzzw+4Za/zWr+KkzfLxaIYi5+zE24MVSPacr3P7OEJVpWZ1HHGv+hRjKE qRSECPuvEtKjJQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:35 2025 by rpki-client