This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json) Hash identifier: BXMMxjzlo27pD5YCNWbr5kM0JHXOUp6RJ4dzdtSQ8DI= Subject key identifier: 09:DE:E1:43:CC:BF:37:4E:07:1A:2D:BD:DD:C5:C0:D5:6F:78:21:70 Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61 Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061 Certificate serial: 019AF12CD1D0719E64D220FDA3E33AD21E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft Manifest number: 0FC6 Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: NFbMsfXeQsR0AjTDtRfCWd1RQfscCMPHsrMKwd06gtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d1:d0:71:9e:64:d2:20:fd:a3:e3:3a:d2:1e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061 Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=09dee143ccbf374e071a2dbdddc5c0d56f782170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:fd:66:16:8c:b1:0d:06:6d:98:0d:e9:42: 84:fc:fe:5c:ac:ee:58:cc:06:cb:79:ce:21:f2:30: 75:1d:3c:19:d8:2a:df:fc:10:f5:7f:31:5f:29:66: 8a:29:31:5a:bc:0f:0b:91:4e:51:b8:3c:5c:40:41: 97:a0:d3:72:38:d6:87:94:3d:7b:d4:92:d4:b0:4a: 77:4b:b2:9b:92:88:a6:ac:2f:f1:1d:87:69:9c:3c: da:a8:52:42:0a:02:06:a0:20:b1:15:7f:36:df:86: be:cd:07:79:a6:dc:e3:de:b5:74:24:67:82:0a:d5: cf:17:9f:9d:6d:92:b9:99:2d:4f:d1:b7:1a:7f:6c: 7c:0b:18:ed:da:e6:ea:47:0b:67:98:f9:e4:bd:93: f5:5d:25:dc:ab:35:b0:ff:dc:bc:fc:61:7e:02:3a: ef:96:ac:02:8c:31:eb:3a:cf:1b:61:29:ee:fc:dd: 56:58:57:b8:47:63:34:d0:80:d9:f7:67:fb:14:a1: 9f:c2:71:a0:69:bc:b1:53:49:e2:2b:14:ad:cc:c8: 5a:45:01:e6:60:3e:5c:6c:56:f0:fb:b0:51:d0:03: 1b:40:88:80:55:52:32:60:54:9d:9c:b6:6c:b0:b8: 37:b3:54:bd:ae:c9:54:35:0d:d4:c8:7b:57:87:4f: d6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DE:E1:43:CC:BF:37:4E:07:1A:2D:BD:DD:C5:C0:D5:6F:78:21:70 X509v3 Authority Key Identifier: keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e9:81:75:8e:a8:4f:37:b6:91:34:22:ba:87:62:ed:95:ea: 82:96:ad:fa:89:f1:49:a1:0f:03:91:a0:09:f5:f9:95:30:85: 21:79:22:b6:5a:5b:e7:f4:72:1e:0f:22:0c:35:21:3e:9a:06: 94:b6:c5:70:cc:d0:af:32:21:4f:34:9d:a7:9b:e1:93:5a:2f: 1a:71:4a:7e:c7:6f:ae:5d:bf:50:66:29:7c:71:f3:58:bd:52: 54:fb:7a:d0:22:6a:56:e9:0d:e6:b6:2a:ea:13:03:d3:40:2c: 8d:35:13:72:96:31:4e:a5:8b:58:8e:ac:13:5b:de:9c:3d:d8: 70:98:45:bf:38:bb:60:9c:df:38:0a:a3:1c:82:79:1c:db:5e: 5f:a7:7b:1c:62:39:b1:e7:a4:97:f2:98:73:fe:a7:a4:21:19: ab:b1:73:89:c6:5f:33:72:d2:d7:f3:52:dd:59:b9:75:d2:30: ad:15:58:5b:cf:2f:04:99:cc:67:3c:f6:f1:d9:7a:af:44:75: e4:cc:fa:63:29:44:0d:ac:aa:ef:b9:d6:ec:2b:7d:b3:ed:bb: 3f:2c:99:16:11:14:e0:02:16:2a:32:48:af:02:7e:ec:06:31: 52:27:d6:98:dc:8c:18:cb:16:25:6b:58:d7:d8:78:46:b5:c4: f1:ea:b0:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNHQcZ5k0iD9o+M60h5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzc1MTlkNjI4ODJlZjQ2NzJmYTIxMjc2NjI1NzI3YTJm YmUwNjEwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD EygwOWRlZTE0M2NjYmYzNzRlMDcxYTJkYmRkZGM1YzBkNTZmNzgyMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg/9ZhaMsQ0GbZgN6UKE/P5crO5Y zAbLec4h8jB1HTwZ2Crf/BD1fzFfKWaKKTFavA8LkU5RuDxcQEGXoNNyONaHlD17 1JLUsEp3S7KbkoimrC/xHYdpnDzaqFJCCgIGoCCxFX8234a+zQd5ptzj3rV0JGeC CtXPF5+dbZK5mS1P0bcaf2x8Cxjt2ubqRwtnmPnkvZP1XSXcqzWw/9y8/GF+Ajrv lqwCjDHrOs8bYSnu/N1WWFe4R2M00IDZ92f7FKGfwnGgabyxU0niKxStzMhaRQHm YD5cbFbw+7BR0AMbQIiAVVIyYFSdnLZssLg3s1S9rslUNQ3UyHtXh0/WQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAne4UPMvzdOBxotvd3FwNVveCFwMB8GA1UdIwQY MBaAFLzHUZ1iiC70Zy+iEnZiVyei++BhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMt MmJmMGM2Nzg3ZmJiLzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMtMmJmMGM2Nzg3ZmJi LzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+mBdY6o Tze2kTQiuodi7ZXqgpat+onxSaEPA5GgCfX5lTCFIXkitlpb5/RyHg8iDDUhPpoG lLbFcMzQrzIhTzSdp5vhk1ovGnFKfsdvrl2/UGYpfHHzWL1SVPt60CJqVukN5rYq 6hMD00AsjTUTcpYxTqWLWI6sE1venD3YcJhFvzi7YJzfOAqjHIJ5HNteX6d7HGI5 seekl/KYc/6npCEZq7FzicZfM3LS1/NS3Vm5ddIwrRVYW88vBJnMZzz28dl6r0R1 5Mz6YylEDayq77nW7Ct9s+27PyyZFhEU4AIWKjJIrwJ+7AYxUifWmNyMGMsWJWtY 19h4RrXE8eqw2A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:30 2025 by rpki-client