This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json) Hash identifier: 2kVoYRgcNG6SGPwLyBzB6ECxQQsyLwQfvSExStdbIlY= Subject key identifier: B4:76:F9:32:A1:A6:84:5C:84:23:A2:58:19:16:29:31:ED:BB:3F:BD Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2 Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2 Certificate serial: 019B383395F77643053E4BE7CC658A114FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft Manifest number: 15CC Signing time: Fri 19 Dec 2025 20:01:03 +0000 Manifest this update: Fri 19 Dec 2025 20:01:03 +0000 Manifest next update: Sat 20 Dec 2025 20:01:03 +0000 Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=) 2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: IL+8IyjOP4u9C23ZLzb6EuGnNjcKAYoAj3tOU5CH8WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:95:f7:76:43:05:3e:4b:e7:cc:65:8a:11:4f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2 Validity Not Before: Dec 19 20:01:03 2025 GMT Not After : Dec 20 20:01:03 2025 GMT Subject: CN=b476f932a1a6845c8423a25819162931edbb3fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f6:5d:d9:1f:ad:19:97:f1:41:1f:a6:94:c2: ee:45:66:17:f5:ed:70:c9:5b:dc:ae:1c:b9:38:4a: af:f1:7d:ee:64:34:4b:67:21:1c:36:6a:d1:7e:f4: c3:48:d6:d8:f8:55:41:66:e9:d5:0a:62:69:9d:09: 8c:8b:95:22:33:8e:d2:d3:62:42:bd:f4:5f:a3:51: 16:9c:46:f0:c3:b5:ef:fc:8d:52:53:b6:68:50:4b: c0:9c:ee:a7:ff:ed:16:f8:da:cb:dc:d5:cb:24:fe: 2e:30:22:db:1b:6a:39:b9:fc:62:b8:bb:85:79:ca: 28:53:ad:ef:20:b1:59:5e:ae:bd:37:5e:a8:6e:86: 66:5b:dd:68:4d:3f:04:4b:55:f8:0f:db:9b:a7:f7: 1c:8f:82:26:b5:54:03:4c:aa:c9:fb:5c:88:f5:84: 63:69:cd:e6:c8:83:59:0e:fb:15:4e:34:53:1d:9d: 2b:44:d6:9b:ab:96:12:36:77:28:0a:a8:15:43:ad: dd:57:6c:4a:90:72:e9:0e:f6:0c:90:d0:f1:9a:75: c7:4c:bc:b7:f0:8c:79:1f:78:43:2f:20:69:ad:f2: cb:6a:00:9d:f5:06:78:09:e5:81:2d:6b:ad:eb:ca: 00:b9:1b:d1:5e:28:1c:c1:57:dd:74:b3:d9:d9:14: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:76:F9:32:A1:A6:84:5C:84:23:A2:58:19:16:29:31:ED:BB:3F:BD X509v3 Authority Key Identifier: keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:f9:c9:26:e5:7f:b5:40:e5:f9:b2:c2:c1:45:b5:bf:cf:0f: 20:49:36:13:bd:2a:2f:f7:c3:a4:ac:08:1e:e5:80:12:01:a2: 65:1e:e5:22:1f:5f:d4:eb:d4:91:a4:52:70:c8:8c:b4:4c:aa: 83:a3:cc:9f:7e:94:de:8f:55:50:43:0f:62:6f:bf:2a:be:f4: b9:4d:0d:53:8e:1e:55:fb:3d:6a:e9:88:0a:18:6d:c8:60:4f: d4:00:2c:99:b2:30:20:54:0f:2d:bf:62:e6:4c:b8:2f:74:ba: f6:d5:c2:a7:71:40:70:6d:23:1b:c6:0e:49:f3:e3:4d:90:10: 4a:47:ed:f3:7f:79:5c:4a:85:b9:4c:0e:e6:ed:62:40:a9:f8: f5:a1:88:72:b4:41:d1:2f:08:2e:c7:2f:6f:89:ab:d2:f9:61: 2e:61:4a:36:b6:97:d3:c7:5f:91:66:f0:71:89:bb:8d:66:a0: e4:d7:19:9a:c1:ae:c4:ca:f8:9b:1b:72:b9:9e:68:28:af:5d: 8d:55:e0:ec:d2:21:49:7e:38:e6:d9:7f:6c:40:33:f0:0d:6f: 63:ee:01:40:ed:4d:99:00:94:44:34:65:cc:e6:08:ff:2b:73: 64:24:b6:b6:95:95:23:25:1c:1b:c5:98:63:4d:9b:1f:6d:33: 66:1e:53:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5X3dkMFPkvnzGWKEU/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzdlNjc0NjY1NDQwZjZlNmI4MGU2ZmYxNTVhYWQ2YTg5 Y2IzZjIwHhcNMjUxMjE5MjAwMTAzWhcNMjUxMjIwMjAwMTAzWjAzMTEwLwYDVQQD EyhiNDc2ZjkzMmExYTY4NDVjODQyM2EyNTgxOTE2MjkzMWVkYmIzZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvZd2R+tGZfxQR+mlMLuRWYX9e1w yVvcrhy5OEqv8X3uZDRLZyEcNmrRfvTDSNbY+FVBZunVCmJpnQmMi5UiM47S02JC vfRfo1EWnEbww7Xv/I1SU7ZoUEvAnO6n/+0W+NrL3NXLJP4uMCLbG2o5ufxiuLuF ecooU63vILFZXq69N16oboZmW91oTT8ES1X4D9ubp/ccj4ImtVQDTKrJ+1yI9YRj ac3myINZDvsVTjRTHZ0rRNabq5YSNncoCqgVQ63dV2xKkHLpDvYMkNDxmnXHTLy3 8Ix5H3hDLyBprfLLagCd9QZ4CeWBLWut68oAuRvRXigcwVfddLPZ2RS7BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR2+TKhpoRchCOiWBkWKTHtuz+9MB8GA1UdIwQY MBaAFLzH5nRmVED25rgOb/FVqtaonLPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEt ZWY2Y2NlMTQ1ZDgyLzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEtZWY2Y2NlMTQ1ZDgy LzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfnJJuV/ tUDl+bLCwUW1v88PIEk2E70qL/fDpKwIHuWAEgGiZR7lIh9f1OvUkaRScMiMtEyq g6PMn36U3o9VUEMPYm+/Kr70uU0NU44eVfs9aumIChhtyGBP1AAsmbIwIFQPLb9i 5ky4L3S69tXCp3FAcG0jG8YOSfPjTZAQSkft8395XEqFuUwO5u1iQKn49aGIcrRB 0S8ILscvb4mr0vlhLmFKNraX08dfkWbwcYm7jWag5NcZmsGuxMr4mxtyuZ5oKK9d jVXg7NIhSX445tl/bEAz8A1vY+4BQO1NmQCURDRlzOYI/ytzZCS2tpWVIyUcG8WY Y02bH20zZh5T6w== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:15 2025 by rpki-client