This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json) Hash identifier: +8Ib0+MuXEGgWhEYlDgmBRySj2fX55nFm1FRhJbAcsA= Subject key identifier: DB:44:4B:9E:78:BA:CD:75:26:6A:59:8F:19:AA:B3:76:DA:40:A9:C3 Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Certificate serial: 019AF50B8A1BA0DD2A3B17FCF28239E955CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft Manifest number: 1186 Signing time: Sat 06 Dec 2025 19:02:45 +0000 Manifest this update: Sat 06 Dec 2025 19:02:45 +0000 Manifest next update: Sun 07 Dec 2025 19:02:45 +0000 Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=) 2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: iy1F9L8/p7A54O3kCxD3/6qYilx46Gdpf8Mr8M3dnSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:8a:1b:a0:dd:2a:3b:17:fc:f2:82:39:e9:55:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Validity Not Before: Dec 6 19:02:45 2025 GMT Not After : Dec 7 19:02:45 2025 GMT Subject: CN=db444b9e78bacd75266a598f19aab376da40a9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:27:f1:41:0e:da:0d:fa:48:5b:70:04:ab: e1:9e:f1:ba:49:69:2e:87:a2:9e:f0:db:63:f9:53: 30:0d:83:14:68:28:1b:6e:85:d3:e7:b3:96:7f:1e: 93:cc:b5:68:c3:89:c6:c7:83:25:84:65:9b:9e:02: e7:53:07:36:f8:d7:1f:6f:50:ff:77:cc:ba:a5:f2: 5a:45:5c:a4:f4:f1:bd:5e:3a:1a:1e:be:56:55:55: e5:a9:73:aa:70:53:a8:82:c9:20:16:0e:3d:e3:a5: c5:91:3e:3f:ab:05:89:60:ab:f0:08:44:9b:a0:77: 2f:08:5e:0e:df:77:b7:8a:75:f4:8f:8c:6c:a6:58: 36:e9:d6:09:5d:c9:59:66:f4:41:51:99:0a:b7:fa: 0c:e2:f8:4b:93:be:1c:bb:8d:aa:1f:eb:d6:fc:63: 99:ce:fc:26:d6:4e:66:24:4f:67:e4:49:d0:6c:1e: e8:77:d4:65:70:b1:32:be:bd:f9:c3:9e:ec:e7:7b: 3f:08:47:aa:7b:33:19:e0:fd:d3:cb:25:2f:cf:bf: 80:94:20:7e:b4:88:0a:e7:cc:01:4a:32:54:fa:69: 76:86:32:48:50:67:b5:60:ea:85:9d:da:66:c0:88: 63:62:91:c7:b9:47:13:b6:e7:0e:55:be:54:7c:1f: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:4B:9E:78:BA:CD:75:26:6A:59:8F:19:AA:B3:76:DA:40:A9:C3 X509v3 Authority Key Identifier: keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f8:49:ce:ae:12:f9:b2:c7:1a:52:aa:47:5d:4c:68:7d:2a: b1:ab:9b:89:73:51:23:c5:a4:52:44:d0:db:8e:9f:1c:55:20: 44:09:31:68:b3:0d:6b:50:42:52:14:18:01:b2:ef:08:04:ec: a3:ed:0d:55:9d:62:6b:75:11:8a:5d:d6:ce:89:c9:50:6a:d0: 97:d3:63:99:7f:5e:0a:7e:33:4d:0c:14:07:29:0f:7a:4a:2a: 48:4b:5e:08:25:18:ab:e6:82:fb:52:40:ee:b2:8c:3d:9a:ec: e7:e2:cb:d6:f2:66:ef:fd:44:1e:8d:23:d0:ff:40:87:69:75: de:4b:a4:c9:00:61:29:cd:d9:c0:b0:3b:b9:80:16:1a:c6:dd: f1:43:37:00:db:5e:29:0f:8c:3e:55:ff:51:18:5c:68:a1:96: b9:47:08:4f:1f:73:df:8e:68:b0:b9:1b:8e:bc:4f:73:83:01: 8a:9d:5a:d3:3c:13:6d:3a:dd:d4:eb:a0:2c:ee:8c:8e:ed:53: 98:09:88:10:3b:9a:53:8a:8a:4b:dd:8f:4a:b3:02:7f:f6:f4: 6b:83:d3:9f:87:18:c1:e0:b9:ba:50:98:56:29:c1:5b:cf:cc: 6b:e9:19:2c:0d:87:31:c1:49:0e:9d:58:5f:9c:6d:97:7f:88: 2b:1e:6c:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C4oboN0qOxf88oI56VXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl MGI5MjUwHhcNMjUxMjA2MTkwMjQ1WhcNMjUxMjA3MTkwMjQ1WjAzMTEwLwYDVQQD EyhkYjQ0NGI5ZTc4YmFjZDc1MjY2YTU5OGYxOWFhYjM3NmRhNDBhOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fkn8UEO2g36SFtwBKvhnvG6SWku h6Ke8Ntj+VMwDYMUaCgbboXT57OWfx6TzLVow4nGx4MlhGWbngLnUwc2+Ncfb1D/ d8y6pfJaRVyk9PG9XjoaHr5WVVXlqXOqcFOogskgFg4946XFkT4/qwWJYKvwCESb oHcvCF4O33e3inX0j4xsplg26dYJXclZZvRBUZkKt/oM4vhLk74cu42qH+vW/GOZ zvwm1k5mJE9n5EnQbB7od9RlcLEyvr35w57s53s/CEeqezMZ4P3TyyUvz7+AlCB+ tIgK58wBSjJU+ml2hjJIUGe1YOqFndpmwIhjYpHHuUcTtucOVb5UfB/jaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtES554us11JmpZjxmqs3baQKnDMB8GA1UdIwQY MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt MDIxNWM0ZWFhN2MzLzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPhJzq4S +bLHGlKqR11MaH0qsaubiXNRI8WkUkTQ246fHFUgRAkxaLMNa1BCUhQYAbLvCATs o+0NVZ1ia3URil3WzonJUGrQl9NjmX9eCn4zTQwUBykPekoqSEteCCUYq+aC+1JA 7rKMPZrs5+LL1vJm7/1EHo0j0P9Ah2l13kukyQBhKc3ZwLA7uYAWGsbd8UM3ANte KQ+MPlX/URhcaKGWuUcITx9z345osLkbjrxPc4MBip1a0zwTbTrd1OugLO6Mju1T mAmIEDuaU4qKS92PSrMCf/b0a4PTn4cYweC5ulCYVinBW8/Ma+kZLA2HMcFJDp1Y X5xtl3+IKx5sJA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:46 2025 by rpki-client