This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft File: vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft (raw, json) Hash identifier: CkMXXVtxDM0mI3k/GcWzohK2ecps0hsPggME+QsmqbM= Subject key identifier: C1:E1:51:5E:93:EB:47:9E:EF:58:DC:4C:78:02:6B:3D:69:A6:27:B1 Authority key identifier: BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D Certificate issuer: /CN=bcc860d954974dca91d5b347b63b22653667da6d Certificate serial: 019AF1645E01FB458D304FDBCBC3FB9C5BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft Manifest number: 0136 Signing time: Sat 06 Dec 2025 02:01:17 +0000 Manifest this update: Sat 06 Dec 2025 02:01:17 +0000 Manifest next update: Sun 07 Dec 2025 02:01:17 +0000 Files and hashes: 1: jytXleuPSXKJn3uQWWaoGaj4Xmc.roa (hash: cKu9EW77Y32V8IP1VFJqq3q2CTjtGGwu/+qIVswSU0A=) 2: vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl (hash: KHdcnL338kV+Ky8fzDP033axRSyOHacJ3wbizUEsNMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5e:01:fb:45:8d:30:4f:db:cb:c3:fb:9c:5b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc860d954974dca91d5b347b63b22653667da6d Validity Not Before: Dec 6 02:01:17 2025 GMT Not After : Dec 7 02:01:17 2025 GMT Subject: CN=c1e1515e93eb479eef58dc4c78026b3d69a627b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:47:85:fd:16:97:bf:e6:c1:c4:8b:9c:75: 92:ea:36:f9:60:b6:6a:a0:74:02:c1:3c:c9:41:e1: 83:11:65:fe:e2:76:8c:2d:a3:44:b0:7f:e5:f5:3a: 6d:e7:81:98:e8:d4:61:6d:bb:7b:1f:c3:7f:28:e7: d8:3b:9d:77:1f:2b:a3:5f:da:ae:f3:3d:52:0c:2c: 15:c5:21:c9:1e:41:d8:e1:5c:9d:d0:fd:50:c0:57: ce:0a:c4:e5:c7:46:02:fe:9a:08:7c:5e:e0:9e:f2: 6e:f9:ca:3e:7d:9f:a8:e3:21:ef:24:d3:ba:b9:d8: 87:70:8c:53:c8:57:fa:d2:5d:76:a7:26:4d:57:1d: f2:6e:54:d7:e9:9f:4a:30:36:36:8d:6f:4a:04:67: 85:69:55:86:10:bf:ec:f4:5b:e4:3c:94:66:4e:ba: ff:da:76:b4:e1:94:3f:13:34:24:b1:43:d0:5b:fd: cb:48:bf:a7:76:f6:47:2a:29:48:bb:8d:a8:a8:be: eb:0d:5b:4e:c8:e1:3b:22:12:97:db:be:02:fe:53: ee:82:37:4a:39:42:6b:d4:38:d1:de:21:5e:66:80: 11:b3:ae:39:6a:52:1e:b9:ff:04:bd:80:1e:59:63: a8:65:51:59:c4:4c:59:eb:93:8f:87:81:0f:3d:a4: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E1:51:5E:93:EB:47:9E:EF:58:DC:4C:78:02:6B:3D:69:A6:27:B1 X509v3 Authority Key Identifier: keyid:BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1c:04:74:7b:a8:53:a4:60:89:9d:c6:cc:a3:d8:35:80:6c: 6f:7d:59:21:7f:59:bf:0c:44:f5:77:50:9f:cb:07:d6:ec:a6: 54:b9:ee:2e:15:30:5f:48:39:09:63:ed:7d:33:3c:cd:96:96: 6d:d5:25:61:b5:43:f3:be:ae:55:64:12:a2:de:44:7a:32:0b: 07:bc:13:3c:bc:f7:24:8a:85:62:e8:bf:13:fa:b9:18:a2:b4: 88:dd:9b:66:73:eb:d8:2a:2f:07:2c:44:6f:b9:df:1c:79:4d: 06:49:46:12:fa:dc:a7:e7:96:e6:ba:af:d1:a6:37:dc:34:20: 52:c4:99:06:82:d6:2b:2e:c8:84:9e:9f:1d:23:99:bb:6a:8e: 22:f9:9d:0e:3b:41:90:d4:99:8d:77:4e:69:29:2f:cd:fc:91: de:b9:c3:d9:89:04:fc:4a:73:63:f4:43:0f:8f:cd:d2:c7:dc: 25:4f:38:9a:b9:66:5c:ea:dd:b3:a0:01:65:bb:21:6b:31:9e: 14:4b:5d:db:5f:87:20:63:e9:61:3a:2c:54:00:ec:90:52:f2: eb:b8:a7:80:09:cc:d1:0c:11:bd:79:cb:36:b7:1a:3e:2f:5c: 98:f4:e7:a2:6a:15:e7:a5:a5:c7:82:23:a6:6e:26:b4:7d:b5: 44:6b:63:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZF4B+0WNME/by8P7nFuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzg2MGQ5NTQ5NzRkY2E5MWQ1YjM0N2I2M2IyMjY1MzY2 N2RhNmQwHhcNMjUxMjA2MDIwMTE3WhcNMjUxMjA3MDIwMTE3WjAzMTEwLwYDVQQD EyhjMWUxNTE1ZTkzZWI0NzllZWY1OGRjNGM3ODAyNmIzZDY5YTYyN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL1Hhf0Wl7/mwcSLnHWS6jb5YLZq oHQCwTzJQeGDEWX+4naMLaNEsH/l9Tpt54GY6NRhbbt7H8N/KOfYO513HyujX9qu 8z1SDCwVxSHJHkHY4Vyd0P1QwFfOCsTlx0YC/poIfF7gnvJu+co+fZ+o4yHvJNO6 udiHcIxTyFf60l12pyZNVx3yblTX6Z9KMDY2jW9KBGeFaVWGEL/s9FvkPJRmTrr/ 2na04ZQ/EzQksUPQW/3LSL+ndvZHKilIu42oqL7rDVtOyOE7IhKX274C/lPugjdK OUJr1DjR3iFeZoARs645alIeuf8EvYAeWWOoZVFZxExZ65OPh4EPPaTxTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHhUV6T60ee71jcTHgCaz1ppiexMB8GA1UdIwQY MBaAFLzIYNlUl03KkdWzR7Y7ImU2Z9ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMt ZjM3MGYwNDI2NWE1LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS80Mzk4NzgtNGE5NS00NDc4LTgxNjMtZjM3MGYwNDI2NWE1 LzEvdk1oZzJWU1hUY3FSMWJOSHRqc2laVFpuMm0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxwEdHuo U6RgiZ3GzKPYNYBsb31ZIX9ZvwxE9XdQn8sH1uymVLnuLhUwX0g5CWPtfTM8zZaW bdUlYbVD876uVWQSot5EejILB7wTPLz3JIqFYui/E/q5GKK0iN2bZnPr2CovByxE b7nfHHlNBklGEvrcp+eW5rqv0aY33DQgUsSZBoLWKy7IhJ6fHSOZu2qOIvmdDjtB kNSZjXdOaSkvzfyR3rnD2YkE/EpzY/RDD4/N0sfcJU84mrlmXOrds6ABZbshazGe FEtd21+HIGPpYTosVADskFLy67ingAnM0QwRvXnLNrcaPi9cmPTnomoV56Wlx4Ij pm4mtH21RGtjyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:26 2025 by rpki-client