This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json) Hash identifier: tjLaF8R/KbogLkXjZVMT3upnotl29h04vALjcxZxfok= Subject key identifier: 11:7E:20:E1:37:39:65:C7:70:6D:AF:B4:56:4A:47:60:C9:E2:81:F7 Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332 Certificate serial: 019AF3F794A5C7D36101513651B06D6251F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft Manifest number: 0B5C Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=) 2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: Dxw2zcNSrVof9JIBq/JhupOIY3hQWwRwSO0TRY1Kpv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:94:a5:c7:d3:61:01:51:36:51:b0:6d:62:51:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=117e20e1373965c7706dafb4564a4760c9e281f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:b3:98:ef:27:4d:e0:15:55:cf:d9:f4:ad: ac:08:0c:ef:fc:17:44:03:a7:c7:ba:0a:be:11:cb: 03:da:1a:c1:b5:d5:5a:96:08:33:98:f4:84:e7:7e: ef:a7:13:3b:ff:24:fa:4c:b8:65:98:8d:b3:7c:e6: 0d:c2:73:1f:52:11:01:3d:c7:7f:3f:88:fa:89:6c: 24:c0:5c:67:b0:42:47:89:8c:16:aa:3d:88:b4:fa: 99:82:ef:14:8a:ab:69:75:a3:77:c3:ab:31:c6:4e: fc:a7:74:90:df:e1:7c:e6:31:60:41:55:34:75:b6: af:04:9b:5c:80:75:f4:a8:e7:2f:93:59:28:c8:5e: fa:10:c4:1b:9d:2f:6d:26:65:76:02:84:29:c5:dc: 28:02:9e:1e:d1:25:73:e1:a1:67:7d:1a:20:00:7a: 55:80:ff:57:ad:26:72:e3:f6:0d:6d:7a:cc:29:68: 3f:c5:a5:2a:b9:3d:1d:7d:b2:a9:92:a8:ae:a9:6c: 7c:9c:19:e4:bb:bb:9b:61:dc:67:16:91:b2:11:f9: 18:19:17:d2:31:eb:9f:0c:ae:40:21:17:5e:8d:50: 8f:09:cf:d2:bd:67:12:20:0d:61:36:a4:3d:38:bd: 54:5a:98:81:c8:04:35:c4:53:73:88:c6:58:c8:df: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7E:20:E1:37:39:65:C7:70:6D:AF:B4:56:4A:47:60:C9:E2:81:F7 X509v3 Authority Key Identifier: keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:eb:65:1c:ca:fa:41:56:83:e6:63:7b:a1:8a:2f:c6:b3:af: 12:6a:fa:d3:28:1b:77:ce:1a:62:bd:ca:22:eb:e1:1c:ed:8e: 94:0c:9d:a1:d4:87:26:c6:18:bd:fd:fa:ed:6e:f2:b3:8b:6f: c3:5d:c8:90:78:fb:17:48:f4:5b:95:ef:d7:e3:9b:38:a2:4f: ae:02:a9:39:17:8c:6d:af:66:64:26:7b:2a:b5:a8:f2:ac:6c: 93:40:5a:1f:42:4c:8f:6c:cf:d3:05:e1:56:0b:88:3f:2a:f7: 2d:74:bb:66:1f:29:8f:32:db:9e:1f:3e:b5:b3:02:b1:93:41: 51:5d:a3:d8:fa:73:59:ef:1a:7a:ec:e4:2c:e4:52:38:38:94: fe:90:17:dd:30:f5:96:3b:f5:65:35:1e:d7:d2:bc:d6:a3:d9: 20:de:4a:e5:6a:69:4e:ee:22:34:ee:eb:35:23:78:8f:a6:8b: 3f:73:f4:eb:16:40:78:8f:c3:63:8a:e4:08:48:fe:f1:96:eb: e5:34:83:69:d6:df:71:ab:14:a0:be:34:1e:c2:d2:11:07:d8: ea:fd:69:a2:2c:f1:99:23:47:f2:e5:43:8f:00:cf:4d:27:a6: 88:6f:6f:14:30:cc:1c:37:ff:ff:a5:f9:f6:81:57:b6:b9:b7: 38:5e:7f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95Slx9NhAVE2UbBtYlH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODg4ZjA1MzA5OWZhYzNhNTU5ODY0NDdjYjNiMTAzODQ5 NWYzMzIwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EygxMTdlMjBlMTM3Mzk2NWM3NzA2ZGFmYjQ1NjRhNDc2MGM5ZTI4MWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V+zmO8nTeAVVc/Z9K2sCAzv/BdE A6fHugq+EcsD2hrBtdValggzmPSE537vpxM7/yT6TLhlmI2zfOYNwnMfUhEBPcd/ P4j6iWwkwFxnsEJHiYwWqj2ItPqZgu8UiqtpdaN3w6sxxk78p3SQ3+F85jFgQVU0 dbavBJtcgHX0qOcvk1koyF76EMQbnS9tJmV2AoQpxdwoAp4e0SVz4aFnfRogAHpV gP9XrSZy4/YNbXrMKWg/xaUquT0dfbKpkqiuqWx8nBnku7ubYdxnFpGyEfkYGRfS MeufDK5AIRdejVCPCc/SvWcSIA1hNqQ9OL1UWpiByAQ1xFNziMZYyN//BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF+IOE3OWXHcG2vtFZKR2DJ4oH3MB8GA1UdIwQY MBaAFLyIjwUwmfrDpVmGRHyzsQOElfMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEt YzdlMzM4ZmYzYjU5LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYWJiNWYtMzM3OS00ZWQ2LTk0YzEtYzdlMzM4ZmYzYjU5 LzEvdklpUEJUQ1otc09sV1laRWZMT3hBNFNWOHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+tlHMr6 QVaD5mN7oYovxrOvEmr60ygbd84aYr3KIuvhHO2OlAydodSHJsYYvf367W7ys4tv w13IkHj7F0j0W5Xv1+ObOKJPrgKpOReMba9mZCZ7KrWo8qxsk0BaH0JMj2zP0wXh VguIPyr3LXS7Zh8pjzLbnh8+tbMCsZNBUV2j2PpzWe8aeuzkLORSODiU/pAX3TD1 ljv1ZTUe19K81qPZIN5K5WppTu4iNO7rNSN4j6aLP3P06xZAeI/DY4rkCEj+8Zbr 5TSDadbfcasUoL40HsLSEQfY6v1poizxmSNH8uVDjwDPTSemiG9vFDDMHDf//6X5 9oFXtrm3OF5/qg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:28 2025 by rpki-client