This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json) Hash identifier: dZAFtP6e5CqRt5WkTDdgGlFApM7NJexJMn5vZOJv9Os= Subject key identifier: 29:71:0B:55:6A:33:BA:DC:55:11:CD:1E:3C:C2:F0:57:87:96:6E:A2 Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1 Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1 Certificate serial: 019AF31CAEF5199E31791309AFBC4C755815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 10:02:14 +0000 Manifest this update: Sat 06 Dec 2025 10:02:14 +0000 Manifest next update: Sun 07 Dec 2025 10:02:14 +0000 Files and hashes: 1: SbG-TfF_crHX7bjktc6Jm6Mw08k.roa (hash: cILCavbni7VMAY2NB/vg63OOb75/V8DMaIDv6gy9of0=) 2: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: h1NI7IMRZl29XmFpsktGmLXS624nA6x93Mic34bVig0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ae:f5:19:9e:31:79:13:09:af:bc:4c:75:58:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1 Validity Not Before: Dec 6 10:02:14 2025 GMT Not After : Dec 7 10:02:14 2025 GMT Subject: CN=29710b556a33badc5511cd1e3cc2f05787966ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:2f:8b:90:b3:b0:20:d3:d2:26:99:25:82: d1:1e:ec:29:30:04:25:b6:ab:91:b4:d5:f5:00:c3: 13:73:65:c9:2a:bf:77:9f:66:4e:46:a1:f7:f6:97: e5:00:d9:98:b5:b8:5c:08:1e:72:ad:fd:8e:f7:cf: 81:6d:5a:7b:b6:4a:79:b0:a3:80:ae:9d:35:7a:7f: 85:cc:29:9e:08:f0:2e:39:8e:35:ef:58:77:07:75: a0:c1:34:d5:23:b2:02:8e:05:26:87:dc:de:3a:87: a4:96:cb:16:b4:30:1c:56:c5:d3:b3:d7:f9:41:6e: 6c:f5:74:ff:1c:69:62:3b:01:1c:8b:8d:36:01:07: 98:8e:4e:aa:3d:40:36:1a:36:d2:bd:b3:f4:b4:f7: 51:ca:4e:86:8d:a2:78:43:23:4c:0f:1b:32:ea:35: 69:d8:4c:87:f9:1e:e5:9b:26:24:e8:98:ed:d5:88: dc:c4:0b:d0:12:85:84:bb:3f:75:25:42:5c:ea:41: 10:53:fc:d6:b2:8c:43:ab:0c:60:b8:41:95:5a:a6: c5:4c:36:8f:e8:6b:1f:69:df:4a:26:c7:92:33:99: df:36:64:09:77:2a:7c:56:c1:4d:af:b8:5b:93:44: 94:2c:81:a5:4a:32:ed:88:16:d4:1d:66:15:a1:ee: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:71:0B:55:6A:33:BA:DC:55:11:CD:1E:3C:C2:F0:57:87:96:6E:A2 X509v3 Authority Key Identifier: keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:30:d0:b0:09:75:59:49:f6:f0:38:5c:fd:0a:29:7b:10:e9: 97:f2:6c:f1:a0:39:9b:3d:95:c9:80:86:5c:68:09:8e:be:87: 68:a9:1f:d4:76:b6:15:1b:b5:4e:77:a1:91:8d:d8:77:b3:09: 96:9e:04:c1:34:34:94:d5:08:e6:31:05:b1:95:6a:01:64:76: a5:c1:b1:11:96:d3:c6:c2:45:9f:27:aa:05:16:6d:bc:eb:07: 93:53:5e:41:3b:80:e3:b1:2b:78:99:b5:e5:b3:4e:35:7c:91: 69:34:98:f7:e8:d2:32:e1:d4:5a:94:f3:25:8d:9b:00:ab:cb: 6b:53:a4:c0:d5:f0:75:8e:47:fe:3c:34:49:3f:b6:fd:33:ca: 1c:98:95:01:4a:bb:c0:a5:2c:26:4f:83:98:4a:2e:c1:62:70: a4:67:ab:bd:63:26:68:f8:a2:64:ab:32:7a:9d:6f:32:18:0f: 3c:30:31:a2:80:d3:59:ce:f5:06:68:ad:0d:2a:db:99:db:16: 8f:84:59:6b:1c:83:0c:66:e1:6b:f5:34:71:51:dc:2e:67:93: 01:fb:da:12:dd:de:2a:84:40:6a:44:41:7d:b2:30:8e:8a:85: c5:0a:2d:bc:57:1b:7e:cc:e2:97:d0:3a:31:fc:74:0f:60:8e: ea:55:9d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHK71GZ4xeRMJr7xMdVgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDgyNjA3NjNhMTFlNzdiMGI1ZDdkZDIwMmJhNGNjMzAw NTM4YjEwHhcNMjUxMjA2MTAwMjE0WhcNMjUxMjA3MTAwMjE0WjAzMTEwLwYDVQQD EygyOTcxMGI1NTZhMzNiYWRjNTUxMWNkMWUzY2MyZjA1Nzg3OTY2ZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Mvi5CzsCDT0iaZJYLRHuwpMAQl tquRtNX1AMMTc2XJKr93n2ZORqH39pflANmYtbhcCB5yrf2O98+BbVp7tkp5sKOA rp01en+FzCmeCPAuOY4171h3B3WgwTTVI7ICjgUmh9zeOoeklssWtDAcVsXTs9f5 QW5s9XT/HGliOwEci402AQeYjk6qPUA2GjbSvbP0tPdRyk6GjaJ4QyNMDxsy6jVp 2EyH+R7lmyYk6Jjt1YjcxAvQEoWEuz91JUJc6kEQU/zWsoxDqwxguEGVWqbFTDaP 6Gsfad9KJseSM5nfNmQJdyp8VsFNr7hbk0SULIGlSjLtiBbUHWYVoe7bmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClxC1VqM7rcVRHNHjzC8FeHlm6iMB8GA1UdIwQY MBaAFLxIJgdjoR53sLXX3SArpMwwBTixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQt OWFiNTc2NWQ1YmI2LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQtOWFiNTc2NWQ1YmI2 LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDDQsAl1 WUn28Dhc/QopexDpl/Js8aA5mz2VyYCGXGgJjr6HaKkf1Ha2FRu1TnehkY3Yd7MJ lp4EwTQ0lNUI5jEFsZVqAWR2pcGxEZbTxsJFnyeqBRZtvOsHk1NeQTuA47EreJm1 5bNONXyRaTSY9+jSMuHUWpTzJY2bAKvLa1OkwNXwdY5H/jw0ST+2/TPKHJiVAUq7 wKUsJk+DmEouwWJwpGervWMmaPiiZKsyep1vMhgPPDAxooDTWc71BmitDSrbmdsW j4RZaxyDDGbha/U0cVHcLmeTAfvaEt3eKoRAakRBfbIwjoqFxQotvFcbfszil9A6 Mfx0D2CO6lWdcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:30 2025 by rpki-client