This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json) Hash identifier: 7WcDFQ+gRBtgr3pBYHCBCbdihJm+YXaoaw8e2aGU68g= Subject key identifier: CB:19:3A:48:03:E6:E6:65:07:9E:5E:50:4B:56:4F:2C:2A:1A:0F:44 Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25 Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025 Certificate serial: 019B2CD3C01C0E9916DAED17AC6C41083722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft Manifest number: 0D47 Signing time: Wed 17 Dec 2025 15:00:33 +0000 Manifest this update: Wed 17 Dec 2025 15:00:33 +0000 Manifest next update: Thu 18 Dec 2025 15:00:33 +0000 Files and hashes: 1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: phvCfHE0obbQnLkds8OQiJNqrEyCT+Ro69BscQIdnMo=) 2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:d3:c0:1c:0e:99:16:da:ed:17:ac:6c:41:08:37:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025 Validity Not Before: Dec 17 15:00:33 2025 GMT Not After : Dec 18 15:00:33 2025 GMT Subject: CN=cb193a4803e6e665079e5e504b564f2c2a1a0f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:91:40:99:02:22:04:5b:74:b0:8a:aa:e8: a4:45:9e:23:76:58:a4:82:ec:23:08:df:31:7d:2a: b1:d5:4e:0e:45:8a:e7:77:91:c1:cd:67:59:53:a9: ed:b2:29:2b:0b:e9:d2:28:4d:86:5e:02:54:3b:60: 42:5d:4e:b9:9e:54:89:5e:42:12:38:78:ed:93:10: 71:30:61:08:f4:8b:61:1b:20:e8:46:f6:53:56:da: 4c:91:84:b2:d8:17:9e:0f:84:41:23:e5:35:c8:02: 81:c7:f2:57:4d:47:e1:4a:b6:98:84:72:d2:0b:8a: 89:7b:2d:e4:38:dd:b7:df:8a:01:87:d0:ee:6a:9c: 2c:60:50:8b:27:4f:dc:f7:16:6f:35:c7:f0:78:de: 47:95:57:c4:92:f5:4d:f7:d8:f5:3e:a9:63:57:14: f6:2b:fa:49:05:ce:9d:42:6c:d4:6e:66:a7:71:2a: c1:03:11:8a:67:5d:11:89:0a:f7:ba:1b:fa:ab:b2: 2c:60:1c:da:34:09:ee:9a:dc:3d:0e:91:ca:94:3c: 2c:48:19:aa:d0:7e:7d:58:d6:27:e8:8c:9e:00:ff: c2:5a:0f:af:bc:83:a2:0e:68:49:cc:60:c1:f0:18: 0f:41:76:dd:f6:e0:6c:5a:9f:71:a5:db:04:7c:af: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:3A:48:03:E6:E6:65:07:9E:5E:50:4B:56:4F:2C:2A:1A:0F:44 X509v3 Authority Key Identifier: keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:51:a3:20:45:32:e2:68:b2:19:6d:0f:07:01:91:07:80:8a: 68:6b:84:39:fa:09:9e:c9:16:f8:44:40:0d:c1:57:cc:e4:0f: 86:33:6d:5f:cd:bc:9e:89:58:4f:bb:34:17:45:8a:e5:60:8e: 43:65:f1:a8:b5:61:c5:e7:7a:b5:3b:b5:0a:5e:11:b5:46:7b: 64:71:cc:1c:b6:04:cc:06:6c:66:57:54:5e:93:00:76:0c:8e: 5d:d1:9e:2d:95:b0:46:d9:ee:dd:7e:4e:95:74:70:9c:03:69: e0:68:20:38:2d:07:00:50:fd:11:53:7e:6f:e7:d9:e6:9a:96: 49:20:1d:31:b1:68:42:eb:51:48:1f:25:f1:7d:f2:7f:10:38: dc:2f:ed:4f:6f:95:8a:64:82:3d:79:b5:86:4f:7a:23:69:5f: fd:42:fb:06:6d:b9:99:93:09:a9:7c:e2:cb:39:d8:f2:4d:51: ab:43:3b:e7:f4:76:79:e8:34:75:d5:2b:ed:8a:fe:16:1b:67: 47:52:ae:3a:07:a3:d0:2b:95:6e:2a:a9:2d:3e:b8:6b:dc:94: bf:6b:7b:88:ae:88:38:d1:a9:01:a7:0e:82:e2:90:91:ba:9a: ec:46:6d:bd:5f:ae:ef:81:5e:3e:91:84:c4:e3:4e:25:18:c6: e4:cf:83:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZss08AcDpkW2u0XrGxBCDciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDI2MTY1NTQ2MzIzNTY0NTBiYzRiYjRiNmRhY2ZjNzlk ZjMwMjUwHhcNMjUxMjE3MTUwMDMzWhcNMjUxMjE4MTUwMDMzWjAzMTEwLwYDVQQD EyhjYjE5M2E0ODAzZTZlNjY1MDc5ZTVlNTA0YjU2NGYyYzJhMWEwZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQaRQJkCIgRbdLCKquikRZ4jdlik guwjCN8xfSqx1U4ORYrnd5HBzWdZU6ntsikrC+nSKE2GXgJUO2BCXU65nlSJXkIS OHjtkxBxMGEI9IthGyDoRvZTVtpMkYSy2BeeD4RBI+U1yAKBx/JXTUfhSraYhHLS C4qJey3kON2334oBh9DuapwsYFCLJ0/c9xZvNcfweN5HlVfEkvVN99j1PqljVxT2 K/pJBc6dQmzUbmancSrBAxGKZ10RiQr3uhv6q7IsYBzaNAnumtw9DpHKlDwsSBmq 0H59WNYn6IyeAP/CWg+vvIOiDmhJzGDB8BgPQXbd9uBsWp9xpdsEfK9mswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsZOkgD5uZlB55eUEtWTywqGg9EMB8GA1UdIwQY MBaAFL0CYWVUYyNWRQvEu0ttrPx53zAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUt OWUxOWQwOGNiNzFmLzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80YjYzZWEtZTRmMC00NGIwLWJkMmUtOWUxOWQwOGNiNzFm LzEvdlFKaFpWUmpJMVpGQzhTN1MyMnNfSG5mTUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVGjIEUy 4miyGW0PBwGRB4CKaGuEOfoJnskW+ERADcFXzOQPhjNtX828nolYT7s0F0WK5WCO Q2XxqLVhxed6tTu1Cl4RtUZ7ZHHMHLYEzAZsZldUXpMAdgyOXdGeLZWwRtnu3X5O lXRwnANp4GggOC0HAFD9EVN+b+fZ5pqWSSAdMbFoQutRSB8l8X3yfxA43C/tT2+V imSCPXm1hk96I2lf/UL7Bm25mZMJqXziyznY8k1Rq0M75/R2eeg0ddUr7Yr+Fhtn R1KuOgej0CuVbiqpLT64a9yUv2t7iK6IONGpAacOguKQkbqa7EZtvV+u74FePpGE xONOJRjG5M+D2Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:55:22 2025 by rpki-client