This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json) Hash identifier: ykrRHOluQqDX8mijYsxzv0evNX8oDfyTaiuCe4hdv50= Subject key identifier: 0D:AE:BA:16:82:A8:27:E5:68:67:80:78:BD:49:0F:DE:14:02:2A:7A Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1 Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1 Certificate serial: 019AF31C289B3A058FC5B19402C8855D3244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: FAGkf+eyZzQxZKsEQRWcYCa8Svmp4qXAHpWEnG79r+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:28:9b:3a:05:8f:c5:b1:94:02:c8:85:5d:32:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1 Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=0daeba1682a827e568678078bd490fde14022a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:a8:9b:83:1c:50:a7:20:99:69:b3:35:60: 9d:26:05:ac:bd:67:78:74:4e:1e:51:ba:7a:4c:2c: f2:34:32:d9:37:c2:7d:83:41:1b:66:bd:e8:f8:b9: c6:00:0a:e5:20:30:5d:01:53:ba:b4:ba:b7:b5:8e: a7:fc:88:22:ae:e1:4c:cf:af:4f:f0:90:1e:3b:eb: 77:3d:af:08:35:79:d9:c4:37:3d:5e:94:35:2d:db: 42:c2:7f:15:b6:9c:2b:14:aa:cc:e4:45:c8:6c:c8: d0:41:81:34:d8:d3:63:14:9d:fb:da:c6:e1:bf:d0: 13:80:3e:77:e6:33:93:ec:f2:7d:3c:b5:45:5a:31: 2d:2c:31:11:8f:0a:c4:0a:d7:63:69:9b:88:af:3f: c9:52:95:34:4f:11:e8:e3:f6:e1:52:0d:09:a7:9a: f1:5b:e7:ad:25:e6:70:3d:5d:93:0e:5d:a1:f8:e5: 2b:0f:ef:ab:62:c3:a9:ad:ab:54:55:ef:e2:e2:7c: 92:85:d7:a1:27:7c:32:aa:7d:23:cf:63:41:ca:f6: 19:61:5d:97:52:6f:01:6a:c4:f9:10:27:b4:6d:c6: 07:b5:57:de:9c:86:20:55:66:94:54:70:ce:d0:f9: 5b:7e:86:2b:c4:33:d8:47:9a:e4:4e:7b:9b:86:56: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:BA:16:82:A8:27:E5:68:67:80:78:BD:49:0F:DE:14:02:2A:7A X509v3 Authority Key Identifier: keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:6a:f4:a2:e9:07:f5:08:97:50:f5:3d:3a:87:8e:1e:96:0d: 26:eb:01:d5:32:68:08:5e:eb:7e:c7:cd:05:10:cc:57:f9:7f: 38:b9:58:d6:5c:0e:e6:19:b6:43:87:fd:30:c7:53:bb:33:62: 03:cf:d0:8a:93:05:c4:5a:cb:ed:eb:ac:4b:f4:37:8a:c0:3c: bd:de:5d:ac:79:26:06:b1:60:dc:dd:7b:b5:d4:52:a7:11:3f: 84:be:25:08:cc:d3:04:0a:25:ff:3f:6b:77:16:a3:75:a5:84: c9:bc:b6:53:ba:1e:72:33:b6:b4:14:46:66:42:5c:69:92:28: 48:f8:a7:ce:92:eb:1e:86:7f:6c:92:e2:c2:8b:ff:02:d0:c8: 13:ad:29:bf:1c:0d:0b:c6:71:7c:4f:a8:a4:df:e0:8e:72:72: 2c:f6:c7:17:ba:9b:50:41:fc:5c:2c:17:eb:97:33:00:61:01: a6:f6:24:d8:e2:e3:e3:15:aa:36:72:04:cb:76:d4:a3:74:05: 15:02:eb:4b:42:fe:7b:4e:f9:88:b8:bf:bb:43:f9:91:52:d9: 91:66:2d:54:23:bd:33:16:68:f5:01:d6:02:c2:24:16:32:71: 3f:77:e1:bf:ae:7d:88:a8:30:4d:10:30:49:36:e3:72:0b:92: 55:35:72:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCibOgWPxbGUAsiFXTJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzA1YmM5ZTc3M2RmYzhhNDliYjQzMDgyNWI5NzQ2ZGQ0 MWM0ZjEwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD EygwZGFlYmExNjgyYTgyN2U1Njg2NzgwNzhiZDQ5MGZkZTE0MDIyYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLOom4McUKcgmWmzNWCdJgWsvWd4 dE4eUbp6TCzyNDLZN8J9g0EbZr3o+LnGAArlIDBdAVO6tLq3tY6n/IgiruFMz69P 8JAeO+t3Pa8INXnZxDc9XpQ1LdtCwn8VtpwrFKrM5EXIbMjQQYE02NNjFJ372sbh v9ATgD535jOT7PJ9PLVFWjEtLDERjwrECtdjaZuIrz/JUpU0TxHo4/bhUg0Jp5rx W+etJeZwPV2TDl2h+OUrD++rYsOpratUVe/i4nyShdehJ3wyqn0jz2NByvYZYV2X Um8BasT5ECe0bcYHtVfenIYgVWaUVHDO0PlbfoYrxDPYR5rkTnubhlbDfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2uuhaCqCflaGeAeL1JD94UAip6MB8GA1UdIwQY MBaAFLzAW8nnc9/IpJu0MIJbl0bdQcTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kYTdmMjQtNDBkMC00YTRjLTg5MDEt NzIyZTJkZTM3ZjA2LzEvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kYTdmMjQtNDBkMC00YTRjLTg5MDEtNzIyZTJkZTM3ZjA2 LzEvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGr0oukH 9QiXUPU9OoeOHpYNJusB1TJoCF7rfsfNBRDMV/l/OLlY1lwO5hm2Q4f9MMdTuzNi A8/QipMFxFrL7eusS/Q3isA8vd5drHkmBrFg3N17tdRSpxE/hL4lCMzTBAol/z9r dxajdaWEyby2U7oecjO2tBRGZkJcaZIoSPinzpLrHoZ/bJLiwov/AtDIE60pvxwN C8ZxfE+opN/gjnJyLPbHF7qbUEH8XCwX65czAGEBpvYk2OLj4xWqNnIEy3bUo3QF FQLrS0L+e075iLi/u0P5kVLZkWYtVCO9MxZo9QHWAsIkFjJxP3fhv659iKgwTRAw STbjcguSVTVyZA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:32 2025 by rpki-client