This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft File: vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json) Hash identifier: ex2lGFcmlwRqiKgtRd6A+Ikj68cqLn+NtC3vZboNdTc= Subject key identifier: 72:07:33:24:9B:64:B3:2D:DD:B8:0A:E9:30:9E:0D:84:0A:EC:93:53 Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 Certificate issuer: /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Certificate serial: 019AF5E5C3EA54CD29BE25218D344FD2D642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft Manifest number: 0FE8 Signing time: Sat 06 Dec 2025 23:01:07 +0000 Manifest this update: Sat 06 Dec 2025 23:01:07 +0000 Manifest next update: Sun 07 Dec 2025 23:01:07 +0000 Files and hashes: 1: h4LBRXlaL-oC3DBkosImeYIzlhM.roa (hash: fcJ0091j9gyLpmNM62v9sM4sdOjqt1S8YmfKAgde0r4=) 2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: jKG/kaE1IlR8/ZKY6MQb7VY6ApYCmnKLVSVSM8ceMgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c3:ea:54:cd:29:be:25:21:8d:34:4f:d2:d6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335 Validity Not Before: Dec 6 23:01:07 2025 GMT Not After : Dec 7 23:01:07 2025 GMT Subject: CN=720733249b64b32dddb80ae9309e0d840aec9353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:c4:72:9d:89:7c:ec:ef:2f:4f:b8:d5:f1: 66:9f:b2:a1:5a:12:24:5a:98:4e:f0:57:90:f9:b8: b7:fc:6b:71:e5:c3:1c:a4:d4:01:fc:fe:7f:bb:92: 47:6a:f8:1d:81:6c:28:39:c7:4e:5c:e0:85:9a:58: 72:db:8e:c9:9e:22:d0:75:5b:2a:c9:5b:4c:e4:73: 3f:3e:ba:1f:64:9e:41:e6:ed:bd:89:c4:91:8c:e5: e1:b3:17:99:ec:f3:2c:9b:05:eb:6e:f1:3a:36:8f: c1:dd:ff:61:80:2e:18:12:32:81:91:d6:c3:be:d0: ac:56:b2:55:a5:31:35:00:27:2a:13:d1:cd:0d:f7: 1a:cd:fb:d2:ca:44:a2:97:53:ae:02:0a:5d:15:79: 66:62:48:1d:3b:47:85:3d:d8:41:e4:bf:28:cf:37: 40:67:27:63:6e:83:52:f4:07:63:31:f5:ce:65:67: a2:02:5d:d8:60:24:84:4b:38:17:c7:7c:ea:02:cf: 49:fe:03:0f:76:6e:ea:5b:fa:40:7a:e5:8c:6c:13: 32:ad:d4:72:bc:ff:7e:bb:34:f0:d3:3c:98:03:d0: 12:0c:2e:dc:80:3e:c8:29:13:6d:a4:9e:3d:b8:84: e4:72:56:49:96:b8:16:88:49:be:12:29:c8:df:f6: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:33:24:9B:64:B3:2D:DD:B8:0A:E9:30:9E:0D:84:0A:EC:93:53 X509v3 Authority Key Identifier: keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c3:4f:8b:ed:62:89:f7:e9:51:ea:f2:67:68:f7:96:48:2e: 2a:f6:51:c9:2c:7d:c6:dc:3a:3b:2e:7e:0c:87:45:1e:c0:3a: 84:7e:c5:93:0b:b0:2e:28:a6:64:a8:d7:75:62:05:5c:b9:c1: 1e:42:4d:78:eb:6c:79:78:e6:8d:1a:58:a2:3c:41:2d:8d:1f: c1:87:f9:0c:7a:b9:ca:6a:5b:48:34:ab:4e:26:a3:a3:de:ee: 24:67:d8:b5:51:de:01:34:99:9c:14:60:c7:46:7b:d8:34:bf: 5f:a0:9b:e0:a9:34:31:a0:da:21:5b:9f:d1:4d:dd:76:1e:68: 1e:56:03:b7:a2:b2:b1:dd:99:a9:a4:6a:3d:c6:ba:b6:3c:59: 81:e6:59:ea:31:03:22:21:c5:31:3f:6c:45:99:43:8b:44:52: 86:a0:a7:42:c6:ee:59:90:5e:f9:e3:f4:ce:2f:7b:df:cf:c1: c9:c0:59:ab:e8:d3:87:d5:4d:e1:a3:1d:dd:ee:e2:7a:10:94: be:bd:55:5e:59:7d:53:db:b1:f7:da:83:55:dd:27:69:60:71: f5:35:12:c1:bd:fd:ce:86:93:99:3a:e1:14:cc:52:c4:5c:3d: 10:ff:48:ea:65:60:f5:27:be:87:fb:99:ea:86:65:bd:3b:da: d2:b0:a2:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cPqVM0pviUhjTRP0tZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWMxNmY1YmUzN2ZmNmM1ZDQyMDVmMmFiYTI1ZmNlMzU4 OTAzMzUwHhcNMjUxMjA2MjMwMTA3WhcNMjUxMjA3MjMwMTA3WjAzMTEwLwYDVQQD Eyg3MjA3MzMyNDliNjRiMzJkZGRiODBhZTkzMDllMGQ4NDBhZWM5MzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O/Ecp2JfOzvL0+41fFmn7KhWhIk WphO8FeQ+bi3/Gtx5cMcpNQB/P5/u5JHavgdgWwoOcdOXOCFmlhy247JniLQdVsq yVtM5HM/ProfZJ5B5u29icSRjOXhsxeZ7PMsmwXrbvE6No/B3f9hgC4YEjKBkdbD vtCsVrJVpTE1ACcqE9HNDfcazfvSykSil1OuAgpdFXlmYkgdO0eFPdhB5L8ozzdA ZydjboNS9AdjMfXOZWeiAl3YYCSESzgXx3zqAs9J/gMPdm7qW/pAeuWMbBMyrdRy vP9+uzTw0zyYA9ASDC7cgD7IKRNtpJ49uITkclZJlrgWiEm+EinI3/YubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIHMySbZLMt3bgK6TCeDYQK7JNTMB8GA1UdIwQY MBaAFLwcFvW+N/9sXUIF8quiX841iQM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYt YWJkNmYyYjM0MTBiLzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mODI2YTUtOGU5NS00NTEzLWI3MjYtYWJkNmYyYjM0MTBi LzEvdkJ3VzliNDNfMnhkUWdYeXE2SmZ6aldKQXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsNPi+1i iffpUeryZ2j3lkguKvZRySx9xtw6Oy5+DIdFHsA6hH7FkwuwLiimZKjXdWIFXLnB HkJNeOtseXjmjRpYojxBLY0fwYf5DHq5ympbSDSrTiajo97uJGfYtVHeATSZnBRg x0Z72DS/X6Cb4Kk0MaDaIVuf0U3ddh5oHlYDt6Kysd2ZqaRqPca6tjxZgeZZ6jED IiHFMT9sRZlDi0RShqCnQsbuWZBe+eP0zi9738/BycBZq+jTh9VN4aMd3e7iehCU vr1VXll9U9ux99qDVd0naWBx9TUSwb39zoaTmTrhFMxSxFw9EP9I6mVg9Se+h/uZ 6oZlvTva0rCifQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:24 2025 by rpki-client