This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft File: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft (raw, json) Hash identifier: cv70jDcq7hR+WLA30kwp8xeBY7ytXKWIH7KYghMK99w= Subject key identifier: 39:65:4B:11:03:96:4A:F2:4E:FC:5C:45:B6:34:F3:E8:1C:DB:4A:73 Authority key identifier: BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C Certificate issuer: /CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c Certificate serial: 019B2D0B73DAB971564A542D7BF6C50EB722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft Manifest number: 1692 Signing time: Wed 17 Dec 2025 16:01:23 +0000 Manifest this update: Wed 17 Dec 2025 16:01:23 +0000 Manifest next update: Thu 18 Dec 2025 16:01:23 +0000 Files and hashes: 1: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl (hash: Y8QAFSibfqV2HzfUVwLcu8O1MmZ0/ylH/5Rein6B7Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:73:da:b9:71:56:4a:54:2d:7b:f6:c5:0e:b7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c Validity Not Before: Dec 17 16:01:23 2025 GMT Not After : Dec 18 16:01:23 2025 GMT Subject: CN=39654b1103964af24efc5c45b634f3e81cdb4a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:18:d9:92:14:e9:8f:89:c8:8b:fa:55:5f: 21:a8:c2:1e:64:88:69:92:21:56:c3:b2:4a:2e:4e: d4:e6:ab:18:cd:65:41:28:ea:6b:50:ac:20:d6:f0: 94:50:be:9f:9e:ea:f5:b5:4e:fb:8d:ea:97:8e:8f: cd:5c:5d:25:db:20:0a:85:55:ac:d8:87:0d:69:d1: 9f:1e:90:99:68:54:61:c3:70:43:9e:42:75:87:ec: 6b:77:ad:97:60:cb:be:63:5b:4b:f6:bf:a8:85:d2: a5:5b:37:23:bb:e5:9f:5c:b3:9f:64:1e:b9:f0:5c: 46:b8:6e:cc:e5:c4:6a:c5:63:3b:2e:1e:18:0e:5d: a4:0c:54:5d:cb:26:8f:b5:9e:0b:bd:cc:6a:fa:d7: 3d:ce:25:2c:e6:48:15:06:96:a3:d5:c6:7d:e2:45: 1f:ea:a9:65:46:ad:80:4b:c5:49:58:48:38:eb:3a: f8:77:01:2f:4b:98:2b:8f:3d:4b:64:4b:22:bf:66: 79:13:73:83:e4:39:fa:81:cb:c1:bb:88:10:bb:bb: 71:b1:bf:36:91:37:5b:cc:9f:2f:7f:db:4d:9d:4c: e7:d2:f9:88:24:04:5e:4b:7e:0f:11:3e:83:28:98: f6:20:95:0a:63:f5:39:ec:cc:7c:d2:e5:63:7e:f7: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:4B:11:03:96:4A:F2:4E:FC:5C:45:B6:34:F3:E8:1C:DB:4A:73 X509v3 Authority Key Identifier: keyid:BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2a:2d:cb:e4:6a:16:0c:72:61:b0:51:83:a8:0b:31:04:c5: 00:3d:aa:fb:38:a3:99:f5:f4:e2:92:dd:21:3e:a3:18:27:d9: 60:b5:2a:97:8d:0e:4d:06:4c:6e:1d:c3:f7:60:6d:30:6d:d8: de:2b:c6:0e:46:21:fc:d9:43:53:fd:3b:8c:08:e1:e3:23:1d: 37:89:f2:f5:88:d0:d8:ec:cc:5e:1d:a4:65:92:68:69:47:e0: 54:90:ac:eb:93:0e:a2:c2:64:c9:40:58:4c:b5:ad:25:00:94: 2d:d2:18:7c:2c:74:aa:ad:95:c4:2c:6c:3c:29:58:05:a6:ad: 21:1e:15:dd:34:fd:97:0f:90:59:b5:09:bf:a9:f3:1d:47:4a: e4:87:65:25:50:a6:69:91:30:2d:a8:03:29:5e:19:6e:e8:75: 0c:80:23:15:ff:c5:f8:5a:a6:01:18:c6:19:32:47:5d:65:d7: 62:4b:40:05:0d:6e:b5:02:4b:63:f5:f4:91:00:a1:5a:b5:12: 7d:03:7e:d2:83:a9:6d:0e:f6:44:15:68:09:23:7a:4b:17:ef: 02:6d:32:6e:b1:92:a1:ec:06:33:28:34:9b:9a:8a:8e:ec:7e: ec:d5:36:7b:a8:93:f0:83:e3:51:8c:61:2e:69:9a:0b:b2:a7: c1:7b:3c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC3PauXFWSlQte/bFDrciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmM0ZjEyOGM0YzU2ODUxYjk3NTU0ZDI0YzY2YWQ1ZWUy M2ZjOWMwHhcNMjUxMjE3MTYwMTIzWhcNMjUxMjE4MTYwMTIzWjAzMTEwLwYDVQQD EygzOTY1NGIxMTAzOTY0YWYyNGVmYzVjNDViNjM0ZjNlODFjZGI0YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvakY2ZIU6Y+JyIv6VV8hqMIeZIhp kiFWw7JKLk7U5qsYzWVBKOprUKwg1vCUUL6fnur1tU77jeqXjo/NXF0l2yAKhVWs 2IcNadGfHpCZaFRhw3BDnkJ1h+xrd62XYMu+Y1tL9r+ohdKlWzcju+WfXLOfZB65 8FxGuG7M5cRqxWM7Lh4YDl2kDFRdyyaPtZ4Lvcxq+tc9ziUs5kgVBpaj1cZ94kUf 6qllRq2AS8VJWEg46zr4dwEvS5grjz1LZEsiv2Z5E3OD5Dn6gcvBu4gQu7txsb82 kTdbzJ8vf9tNnUzn0vmIJAReS34PET6DKJj2IJUKY/U57Mx80uVjfvcxOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDllSxEDlkryTvxcRbY08+gc20pzMB8GA1UdIwQY MBaAFLz8TxKMTFaFG5dVTSTGatXuI/ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My82ZjZmNzgtMWRlNy00NGU5LWJmMzkt MTI5ODRjYTdhN2EyLzEvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My82ZjZmNzgtMWRlNy00NGU5LWJmMzktMTI5ODRjYTdhN2Ey LzEvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyoty+Rq FgxyYbBRg6gLMQTFAD2q+zijmfX04pLdIT6jGCfZYLUql40OTQZMbh3D92BtMG3Y 3ivGDkYh/NlDU/07jAjh4yMdN4ny9YjQ2OzMXh2kZZJoaUfgVJCs65MOosJkyUBY TLWtJQCULdIYfCx0qq2VxCxsPClYBaatIR4V3TT9lw+QWbUJv6nzHUdK5IdlJVCm aZEwLagDKV4Zbuh1DIAjFf/F+FqmARjGGTJHXWXXYktABQ1utQJLY/X0kQChWrUS fQN+0oOpbQ72RBVoCSN6SxfvAm0ybrGSoewGMyg0m5qKjux+7NU2e6iT8IPjUYxh LmmaC7KnwXs8wQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:07 2025 by rpki-client