This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft File: vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json) Hash identifier: ctFb6v7RA8lEyIPyBBI1qumErz6kQJzbrRRXStVdKtM= Subject key identifier: 9F:1F:7D:53:A9:C9:53:56:B7:C1:9F:B5:CB:B9:41:80:DE:EC:F9:EE Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401 Certificate serial: 019AF1D21874CA8F45B1E6F9145C4F08F475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft Manifest number: 0D70 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=) 2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=) 3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=) 4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: ow+ihb1gvq0WWjviggCtiRvx4KOYWHre6NrD2sXy6E0=) 5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:18:74:ca:8f:45:b1:e6:f9:14:5c:4f:08:f4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=9f1f7d53a9c95356b7c19fb5cbb94180deecf9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:24:62:d8:4d:38:31:b1:ba:90:1b:2a:5a: 05:f5:f8:54:16:00:70:75:97:85:74:a2:ed:2c:f9: bd:7c:ec:88:63:7a:fd:79:3c:ff:77:35:90:a5:ad: 2a:77:03:27:fd:e7:00:55:32:8f:7c:05:36:e2:65: be:2e:c2:90:92:4f:e5:7a:75:d7:a9:00:8b:ed:bd: 31:34:44:4b:a6:f9:5b:5b:da:4f:25:67:6f:d1:79: e2:c2:48:e0:79:24:8e:cc:69:85:1b:68:80:9f:04: 42:fc:88:0e:ed:83:a4:b9:e4:0e:b4:3b:ef:0e:32: 95:76:34:67:a9:12:fb:77:35:b0:c8:e7:9c:14:dd: db:90:95:31:29:1f:81:e1:e6:01:45:c3:a9:26:11: 6f:ee:08:f4:b2:fd:85:2b:b0:6f:74:a4:ab:66:b5: f8:49:73:76:7a:2f:9e:12:dc:42:79:9a:7f:40:d7: 9b:04:ee:39:82:eb:20:93:60:b3:33:94:51:ec:72: 70:34:b9:7e:dd:f5:56:42:a0:4e:b0:ce:fb:8e:d5: 4a:88:97:37:9c:f5:05:dd:de:7d:d7:be:07:b1:47: cc:c5:85:09:84:f5:03:9a:81:95:82:45:ec:ff:ba: d7:e2:34:03:43:3c:a0:f4:f4:19:2c:a4:9d:69:5d: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1F:7D:53:A9:C9:53:56:B7:C1:9F:B5:CB:B9:41:80:DE:EC:F9:EE X509v3 Authority Key Identifier: keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4e:50:46:a4:4a:20:7b:b2:3a:82:d9:dd:a5:8f:02:66:51: 0e:c8:d1:af:ca:ad:09:af:de:5a:6a:36:a4:4d:ef:e0:e1:84: 7b:48:b5:fe:4a:35:c8:3b:ca:2c:b4:9a:68:85:9f:4e:6d:d7: ed:2b:be:e9:51:73:c4:60:e0:4d:e8:65:a0:ff:07:c2:9d:a9: 03:9f:cd:d8:e5:d6:fb:ea:6c:cf:10:89:db:24:9d:29:40:12: 93:4a:06:ab:cd:4e:39:1b:e5:b1:75:ae:26:bf:5c:e6:f6:62: de:ee:5f:08:47:0c:13:e1:db:dc:ea:32:e7:8a:bf:44:16:21: eb:ff:69:42:1a:6c:cc:21:5f:7f:ca:db:cb:10:32:e0:50:0e: 1e:4f:1d:a4:53:19:dd:fb:c7:35:b8:55:6a:63:d6:30:7c:61: 82:38:20:c8:74:fd:bb:44:65:bb:64:1f:4b:17:4f:01:d1:27: 7d:ad:91:2a:83:52:47:92:50:5a:c4:53:ac:9b:a7:22:56:80: 19:e7:29:d7:09:0b:b8:3e:1b:f3:d4:d7:3b:33:da:7e:8b:8f: 07:a0:35:60:be:67:e3:27:da:bc:a7:8d:cb:28:b7:1a:27:be: 50:28:81:8c:9a:40:5f:42:48:06:40:35:0a:20:9d:33:86:7c: 72:ec:a9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hh0yo9Fseb5FFxPCPR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2Q1MmE2YTdmOTU3MTcxYjE1ZjdiZTVlMjA5MTY0Mjgz Njk0MDEwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD Eyg5ZjFmN2Q1M2E5Yzk1MzU2YjdjMTlmYjVjYmI5NDE4MGRlZWNmOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlugkYthNODGxupAbKloF9fhUFgBw dZeFdKLtLPm9fOyIY3r9eTz/dzWQpa0qdwMn/ecAVTKPfAU24mW+LsKQkk/lenXX qQCL7b0xNERLpvlbW9pPJWdv0XniwkjgeSSOzGmFG2iAnwRC/IgO7YOkueQOtDvv DjKVdjRnqRL7dzWwyOecFN3bkJUxKR+B4eYBRcOpJhFv7gj0sv2FK7BvdKSrZrX4 SXN2ei+eEtxCeZp/QNebBO45gusgk2CzM5RR7HJwNLl+3fVWQqBOsM77jtVKiJc3 nPUF3d59174HsUfMxYUJhPUDmoGVgkXs/7rX4jQDQzyg9PQZLKSdaV03fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8ffVOpyVNWt8Gftcu5QYDe7PnuMB8GA1UdIwQY MBaAFLzNUqan+VcXGxX3vl4gkWQoNpQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUt ZTgyM2UxN2JiNWNjLzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9lZWFiOWEtZDIwNy00YjJlLWE1MjUtZTgyM2UxN2JiNWNj LzEvdk0xU3BxZjVWeGNiRmZlLVhpQ1JaQ2cybEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjU5QRqRK IHuyOoLZ3aWPAmZRDsjRr8qtCa/eWmo2pE3v4OGEe0i1/ko1yDvKLLSaaIWfTm3X 7Su+6VFzxGDgTehloP8Hwp2pA5/N2OXW++pszxCJ2ySdKUASk0oGq81OORvlsXWu Jr9c5vZi3u5fCEcME+Hb3Ooy54q/RBYh6/9pQhpszCFff8rbyxAy4FAOHk8dpFMZ 3fvHNbhVamPWMHxhgjggyHT9u0Rlu2QfSxdPAdEnfa2RKoNSR5JQWsRTrJunIlaA Gecp1wkLuD4b89TXOzPafouPB6A1YL5n4yfavKeNyyi3Gie+UCiBjJpAX0JIBkA1 CiCdM4Z8cuypqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:15 2025 by rpki-client