This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft File: vPI0wEREFriFL7NHh4rTdtCBjWQ.mft (raw, json) Hash identifier: MADCoT49zlspeCpxToJCncGDL7Hnf3IsO9YEeyLHqC4= Subject key identifier: B4:F5:C0:F8:54:D0:7C:94:79:45:B2:A9:4A:17:DD:97:54:1C:47:F9 Authority key identifier: BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64 Certificate issuer: /CN=bcf234c0444416b8852fb347878ad376d0818d64 Certificate serial: 019AF46531B91D1B8E4BD74A7CAFF67628AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft Manifest number: 0AED Signing time: Sat 06 Dec 2025 16:01:03 +0000 Manifest this update: Sat 06 Dec 2025 16:01:03 +0000 Manifest next update: Sun 07 Dec 2025 16:01:03 +0000 Files and hashes: 1: vPI0wEREFriFL7NHh4rTdtCBjWQ.crl (hash: CekKz2qnUc+I7dPmfrg2B7HHN60X8puLdDGg48LaOfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:31:b9:1d:1b:8e:4b:d7:4a:7c:af:f6:76:28:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf234c0444416b8852fb347878ad376d0818d64 Validity Not Before: Dec 6 16:01:03 2025 GMT Not After : Dec 7 16:01:03 2025 GMT Subject: CN=b4f5c0f854d07c947945b2a94a17dd97541c47f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:a8:39:ab:6d:26:61:5e:68:14:55:aa:ba: 1c:ee:14:df:6b:f0:77:39:16:e9:e8:95:c8:f9:9b: 0c:8c:87:c2:0b:52:82:c3:6a:ee:be:be:79:f4:f4: 7a:15:16:8f:cb:46:4c:50:21:fd:21:82:d7:2f:87: 90:50:7b:0f:60:9e:af:5a:3f:b3:56:c3:ca:3c:1a: e3:12:73:16:f1:7f:7b:11:25:d9:7a:2c:03:08:1a: ea:d1:a6:ca:52:37:b5:78:62:10:21:5c:b2:3c:77: d1:bb:d8:a3:27:8c:20:cc:b4:92:69:3b:d7:64:fe: 31:96:a7:54:9a:0d:d4:cb:d7:7e:67:77:34:67:94: 61:b6:d9:97:bf:40:38:58:9d:3b:fc:5a:65:6d:89: 1b:39:2b:37:c5:2b:da:dc:ed:70:62:fd:85:c8:59: 23:aa:86:8f:2e:2d:af:de:ec:9b:aa:34:16:5e:04: 9a:3c:4f:1f:3c:2b:5f:6f:f3:40:3c:ff:99:d0:e6: 7b:55:82:4b:29:4e:2c:65:9c:0f:47:05:3d:e0:51: 52:3b:80:00:25:6b:15:61:41:8b:6a:8d:d6:cf:60: 7e:67:86:9e:20:27:5c:d1:cd:38:75:84:3e:d6:1e: 6d:6c:b0:2d:5d:3f:78:ea:74:fe:36:89:bc:fd:d4: 5e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F5:C0:F8:54:D0:7C:94:79:45:B2:A9:4A:17:DD:97:54:1C:47:F9 X509v3 Authority Key Identifier: keyid:BC:F2:34:C0:44:44:16:B8:85:2F:B3:47:87:8A:D3:76:D0:81:8D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPI0wEREFriFL7NHh4rTdtCBjWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb7a7a-303f-4234-82a1-9aca7bd8ec0f/1/vPI0wEREFriFL7NHh4rTdtCBjWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b3:ad:7f:7d:28:10:16:7f:25:37:c2:f7:62:8c:22:a5:ed: 6e:ff:0b:76:c7:61:7d:01:73:f6:ce:82:02:c2:69:d8:77:6d: eb:72:b8:e5:13:61:cb:eb:ff:87:33:3a:0f:7e:2a:cf:4d:ca: d1:87:6f:7b:65:15:f2:ab:38:7d:a6:a6:ae:e8:47:5e:10:76: bc:1b:93:4f:92:25:2d:7f:48:6f:93:9f:2f:ef:6b:73:c6:fd: ad:01:d9:1e:1f:d4:ee:a2:4b:63:8d:f0:db:fa:a0:63:e3:fa: 0c:ff:45:9e:58:0d:5b:d7:b6:6b:b3:bc:1f:f0:20:66:5d:3f: 15:6b:b0:22:8a:63:f6:75:8b:a5:6c:2c:ba:f5:81:7c:e3:76: 01:89:54:d9:71:33:a1:b4:83:74:e6:db:9b:06:f6:78:ef:88: 12:4a:76:3b:7f:0d:39:a9:92:63:55:f5:ef:16:46:e7:9d:80: f0:48:33:fb:06:ef:01:81:c6:bd:c1:7c:ab:8d:b0:73:95:96: 3f:0f:0d:eb:87:e1:20:89:e1:cc:bd:71:30:0c:4e:e9:21:9c: ba:16:fa:d2:de:42:e7:82:ca:f0:79:94:3d:c1:8a:a1:ac:f7: f3:04:f4:8b:5c:cc:a9:89:43:cf:ec:46:b2:30:ea:a3:ee:47: fd:c6:52:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTG5HRuOS9dKfK/2diivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjIzNGMwNDQ0NDE2Yjg4NTJmYjM0Nzg3OGFkMzc2ZDA4 MThkNjQwHhcNMjUxMjA2MTYwMTAzWhcNMjUxMjA3MTYwMTAzWjAzMTEwLwYDVQQD EyhiNGY1YzBmODU0ZDA3Yzk0Nzk0NWIyYTk0YTE3ZGQ5NzU0MWM0N2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKmoOattJmFeaBRVqroc7hTfa/B3 ORbp6JXI+ZsMjIfCC1KCw2ruvr559PR6FRaPy0ZMUCH9IYLXL4eQUHsPYJ6vWj+z VsPKPBrjEnMW8X97ESXZeiwDCBrq0abKUje1eGIQIVyyPHfRu9ijJ4wgzLSSaTvX ZP4xlqdUmg3Uy9d+Z3c0Z5RhttmXv0A4WJ07/FplbYkbOSs3xSva3O1wYv2FyFkj qoaPLi2v3uybqjQWXgSaPE8fPCtfb/NAPP+Z0OZ7VYJLKU4sZZwPRwU94FFSO4AA JWsVYUGLao3Wz2B+Z4aeICdc0c04dYQ+1h5tbLAtXT946nT+Nom8/dRezQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT1wPhU0HyUeUWyqUoX3ZdUHEf5MB8GA1UdIwQY MBaAFLzyNMBERBa4hS+zR4eK03bQgY1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjdhN2EtMzAzZi00MjM0LTgyYTEt OWFjYTdiZDhlYzBmLzEvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iYjdhN2EtMzAzZi00MjM0LTgyYTEtOWFjYTdiZDhlYzBm LzEvdlBJMHdFUkVGcmlGTDdOSGg0clRkdENCaldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbOtf30o EBZ/JTfC92KMIqXtbv8LdsdhfQFz9s6CAsJp2Hdt63K45RNhy+v/hzM6D34qz03K 0Ydve2UV8qs4faamruhHXhB2vBuTT5IlLX9Ib5OfL+9rc8b9rQHZHh/U7qJLY43w 2/qgY+P6DP9FnlgNW9e2a7O8H/AgZl0/FWuwIopj9nWLpWwsuvWBfON2AYlU2XEz obSDdObbmwb2eO+IEkp2O38NOamSY1X17xZG552A8Egz+wbvAYHGvcF8q42wc5WW Pw8N64fhIInhzL1xMAxO6SGcuhb60t5C54LK8HmUPcGKoaz38wT0i1zMqYlDz+xG sjDqo+5H/cZSBg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:21:00 2025 by rpki-client