This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json) Hash identifier: MtT8cihCsyWxJhzLJERwU8wyw1vBLC6qlM8VoBKV7O8= Subject key identifier: 60:E2:FF:4A:6A:FA:C3:A6:7E:FB:5D:C7:EE:0A:D5:4B:4B:72:E1:14 Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b Certificate serial: 019AF12DA091FE136A09AE9F0DF20FE909D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft Manifest number: 3B Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: 4_S-VpcaJ-dsPDdYImdSZM32e8U.roa (hash: 1hjmdXa5Q0sUuajrWvcZ3QxX+b+38dKLCgIK//YJGng=) 2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: kL348xrUdTdRZeViBKN6BTckFEPpNnXAbwLPTwdFqCc=) 3: vliKZaSIov7ra7oMtOXo3pmSa_0.roa (hash: AlmCVWWv9Xl539mX2jpyekktTbSaEDqWKWKYo9HGa3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a0:91:fe:13:6a:09:ae:9f:0d:f2:0f:e9:09:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=60e2ff4a6afac3a67efb5dc7ee0ad54b4b72e114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:92:ad:36:e9:d2:ce:28:bf:af:06:a0:ee: 90:42:1c:2d:ef:7f:da:06:f2:c9:08:0e:d0:fd:b0: eb:f0:ab:7f:06:49:72:ab:ee:e5:be:86:37:fb:3c: d6:2a:86:29:c4:32:fc:ce:67:5e:d3:0f:bf:50:68: e2:00:c7:4f:0c:0c:cc:56:22:53:9d:0c:c4:9c:a6: d9:0b:00:e8:cf:af:f7:12:ef:8d:7c:28:e5:cd:23: 3b:45:bf:2c:5d:39:f3:1d:2f:56:0f:40:05:ee:9a: b6:0a:24:64:cd:eb:a2:e4:21:da:69:74:99:93:8d: 43:74:62:2d:c8:14:2d:5b:ac:01:c7:ba:4f:96:3e: 14:94:74:ff:ac:52:fb:93:cb:f8:3a:8e:68:1c:2d: 81:d9:ab:1e:9b:fb:02:33:c9:a8:5a:97:ff:52:03: 2b:f7:9d:3f:ae:e4:53:c3:78:ac:4c:d4:08:db:5e: be:0d:8c:92:03:23:a5:07:05:5d:26:5e:b5:98:10: 3c:90:dd:8b:1e:3e:4e:09:9d:5a:32:ec:03:67:80: d8:9b:66:f7:85:7a:86:fe:0b:40:34:69:6a:aa:e4: 7d:fd:20:c8:92:4c:4a:f5:68:df:1b:05:1a:a9:fc: 84:2e:e9:97:61:2c:68:ed:54:fc:77:20:4f:8b:ee: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E2:FF:4A:6A:FA:C3:A6:7E:FB:5D:C7:EE:0A:D5:4B:4B:72:E1:14 X509v3 Authority Key Identifier: keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c3:77:11:d3:2f:e3:ab:e5:ee:9a:f7:7d:18:e7:d2:10:07: c9:6d:1c:af:8b:d0:fd:59:a8:19:1e:df:3f:5d:42:32:6f:a7: 0c:ce:ee:0e:11:e6:0d:4c:f1:ce:ae:19:59:47:a1:ac:ff:5c: be:26:3c:45:92:3c:aa:df:23:dd:3b:b1:a6:f2:db:2e:ae:22: 22:fd:d5:39:c5:9e:ac:3d:2f:e5:68:c9:60:3e:8d:f7:65:89: a7:73:7e:d7:5a:6a:a3:aa:96:4e:9c:11:31:72:dd:f1:cf:34: a9:17:21:1d:ec:75:d4:cd:ef:bc:c9:17:4e:42:8e:3d:f4:47: db:9f:02:1a:a0:69:41:99:cd:6a:1d:1b:50:c7:d6:86:68:12: 87:34:1f:25:98:19:3d:e3:bd:da:26:37:fc:46:7c:3b:05:15: 7c:b9:cd:64:71:f0:e5:3b:85:96:ff:4a:09:37:f5:28:ee:20: fd:07:48:79:bb:d9:9e:e8:0d:69:0a:d1:47:06:24:f1:ce:76: 05:56:a4:a6:50:92:83:07:c4:71:c7:3f:76:24:57:d0:d8:a4: 23:24:9b:ae:4e:0d:8f:8a:e7:2b:00:98:5b:d2:9e:ad:11:c2: c6:b2:fe:f5:fb:60:2a:3d:ed:a7:b9:45:6b:e8:d6:30:fd:9d: 82:74:3c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaCR/hNqCa6fDfIP6QnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy MGMzNWIwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD Eyg2MGUyZmY0YTZhZmFjM2E2N2VmYjVkYzdlZTBhZDU0YjRiNzJlMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2qSrTbp0s4ov68GoO6QQhwt73/a BvLJCA7Q/bDr8Kt/Bklyq+7lvoY3+zzWKoYpxDL8zmde0w+/UGjiAMdPDAzMViJT nQzEnKbZCwDoz6/3Eu+NfCjlzSM7Rb8sXTnzHS9WD0AF7pq2CiRkzeui5CHaaXSZ k41DdGItyBQtW6wBx7pPlj4UlHT/rFL7k8v4Oo5oHC2B2asem/sCM8moWpf/UgMr 950/ruRTw3isTNQI216+DYySAyOlBwVdJl61mBA8kN2LHj5OCZ1aMuwDZ4DYm2b3 hXqG/gtANGlqquR9/SDIkkxK9WjfGwUaqfyELumXYSxo7VT8dyBPi+7orwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDi/0pq+sOmfvtdx+4K1UtLcuEUMB8GA1UdIwQY MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct MDY5NjA2NDQxNTE0LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0 LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMN3EdMv 46vl7pr3fRjn0hAHyW0cr4vQ/VmoGR7fP11CMm+nDM7uDhHmDUzxzq4ZWUehrP9c viY8RZI8qt8j3TuxpvLbLq4iIv3VOcWerD0v5WjJYD6N92WJp3N+11pqo6qWTpwR MXLd8c80qRchHex11M3vvMkXTkKOPfRH258CGqBpQZnNah0bUMfWhmgShzQfJZgZ PeO92iY3/EZ8OwUVfLnNZHHw5TuFlv9KCTf1KO4g/QdIebvZnugNaQrRRwYk8c52 BVakplCSgwfEccc/diRX0NikIySbrk4Nj4rnKwCYW9KerRHCxrL+9ftgKj3tp7lF a+jWMP2dgnQ81w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:26 2025 by rpki-client