This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json) Hash identifier: 07LIhZ5lzGjPHfsDrsvWQoBMCkiUQyPImPCejAKlHnM= Subject key identifier: F2:FA:D5:5F:21:BF:92:F6:CF:E4:FD:34:63:FD:96:E3:7E:4E:19:AE Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Certificate serial: 019AF12EE649CC498F930FA81F023F2246F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=) 2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: mQqISl/vwW039kI7tMCF4dHNwxTsgUzlQhwD/uYCWmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e6:49:cc:49:8f:93:0f:a8:1f:02:3f:22:46:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=f2fad55f21bf92f6cfe4fd3463fd96e37e4e19ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:3e:13:de:3f:af:34:d6:e1:0f:37:29:79: f5:20:b5:98:f6:ac:73:bf:88:09:42:1c:d1:cc:13: 17:09:03:4c:12:e3:47:cd:ea:40:8c:1d:52:e2:f8: 2c:2b:c3:b7:70:7c:ad:60:38:ff:df:2f:08:31:47: 19:47:59:48:d2:e0:39:4e:ba:b5:3b:e9:68:2a:2b: ff:44:27:c4:5c:46:c4:ac:63:6b:fb:1d:03:4f:07: cf:70:01:0f:a2:3f:84:24:24:0c:70:f3:79:e6:88: d1:dc:4a:23:4b:94:a6:2c:9b:04:49:6a:3d:5b:e7: 06:21:69:fd:bc:33:b2:68:ce:23:e4:5d:bb:a4:d0: 77:68:fe:7a:e6:ee:49:02:0f:b5:13:35:a4:96:36: 54:f0:0a:e3:fb:ef:d0:aa:b5:a7:f4:79:9e:b1:f1: 49:c6:e7:0b:ca:e6:a3:9c:23:6b:1d:f5:96:26:72: 34:b0:ed:53:20:36:2b:c2:f3:8c:b7:21:af:bf:0b: ba:ef:e8:c5:01:cd:9c:65:bb:4a:3a:03:0c:e6:5b: 19:20:77:f2:81:a1:9c:11:fb:4a:3a:8c:8d:1a:93: a8:1b:5f:b5:38:c2:a1:cb:04:74:22:36:4a:76:c5: 6d:fd:3a:95:b3:a2:b4:c9:ba:86:4d:33:f8:5b:1b: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FA:D5:5F:21:BF:92:F6:CF:E4:FD:34:63:FD:96:E3:7E:4E:19:AE X509v3 Authority Key Identifier: keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0a:9d:dd:a0:6c:62:f3:75:9f:80:ca:49:fb:4b:85:f3:b2: 88:3c:aa:a9:75:d1:df:30:59:15:8a:ab:09:1a:4c:b6:cf:d2: a1:89:c1:7a:f8:f5:eb:2f:a5:60:45:ec:88:ec:bc:f9:9a:ed: e1:fa:a3:81:eb:bb:27:ff:31:d4:e8:7f:4c:cd:76:c3:ff:7c: 3e:75:96:d0:2e:a0:81:d4:1d:27:0c:13:72:a1:48:38:c8:9c: 99:c3:fb:a7:ac:61:3c:59:e5:fa:44:82:0e:88:2f:0f:b4:ec: fb:b2:fe:c7:74:4a:b0:f5:f7:bd:9c:5c:e3:99:21:78:a0:66: ce:df:2e:d3:09:12:29:47:06:47:2b:65:83:78:60:fa:b5:0e: 5b:e2:b8:22:68:e3:6b:c5:cb:12:0e:5b:2a:2a:f8:e0:2c:ff: 25:27:40:9b:39:a2:71:99:2c:95:44:fc:0b:05:cf:ab:75:92: 1a:f7:ff:a6:69:a4:b1:7c:1b:23:a9:d3:94:ee:e2:7d:1f:d2: 6e:cb:c5:cb:e9:3e:47:74:fd:4f:e2:30:ac:39:2c:60:f1:2d: 61:72:25:39:f7:74:63:29:94:2e:8f:e9:fe:b3:ba:68:2a:88: 06:da:5d:37:2e:06:69:ee:10:88:0f:29:22:65:5c:fd:f2:b6: 97:20:6d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuZJzEmPkw+oHwI/Ikb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZWM4YzczMmFhNDNlZjBiMzliZDM0ZDE0MGZkZDNhNzNh ZWRiNzkwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EyhmMmZhZDU1ZjIxYmY5MmY2Y2ZlNGZkMzQ2M2ZkOTZlMzdlNGUxOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9o+E94/rzTW4Q83KXn1ILWY9qxz v4gJQhzRzBMXCQNMEuNHzepAjB1S4vgsK8O3cHytYDj/3y8IMUcZR1lI0uA5Trq1 O+loKiv/RCfEXEbErGNr+x0DTwfPcAEPoj+EJCQMcPN55ojR3EojS5SmLJsESWo9 W+cGIWn9vDOyaM4j5F27pNB3aP565u5JAg+1EzWkljZU8Arj++/QqrWn9HmesfFJ xucLyuajnCNrHfWWJnI0sO1TIDYrwvOMtyGvvwu67+jFAc2cZbtKOgMM5lsZIHfy gaGcEftKOoyNGpOoG1+1OMKhywR0IjZKdsVt/TqVs6K0ybqGTTP4WxuFRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL61V8hv5L2z+T9NGP9luN+ThmuMB8GA1UdIwQY MBaAFLzsjHMqpD7ws5vTTRQP3Tpzrtt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYt YzQwYzBkYmUxZGUwLzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYtYzQwYzBkYmUxZGUw LzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwqd3aBs YvN1n4DKSftLhfOyiDyqqXXR3zBZFYqrCRpMts/SoYnBevj16y+lYEXsiOy8+Zrt 4fqjgeu7J/8x1Oh/TM12w/98PnWW0C6ggdQdJwwTcqFIOMicmcP7p6xhPFnl+kSC DogvD7Ts+7L+x3RKsPX3vZxc45kheKBmzt8u0wkSKUcGRytlg3hg+rUOW+K4Imjj a8XLEg5bKir44Cz/JSdAmzmicZkslUT8CwXPq3WSGvf/pmmksXwbI6nTlO7ifR/S bsvFy+k+R3T9T+IwrDksYPEtYXIlOfd0YymULo/p/rO6aCqIBtpdNy4Gae4QiA8p ImVc/fK2lyBtRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:56 2025 by rpki-client