This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft File: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft (raw, json) Hash identifier: XdUYCIKFvn2VVIhU9mXoBzEk07GE8l1I5u80RhF13aU= Subject key identifier: 35:FA:76:13:C2:6E:3D:AA:8C:E4:FD:68:2D:D2:9D:C5:92:1A:F9:30 Authority key identifier: BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B Certificate issuer: /CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b Certificate serial: 019AF12E55E9E9B27308A2A632796344D1F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft Manifest number: 0C3B Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl (hash: x9QhKivZEjM03olOAPqav2Ph1M3ZELqKvdbERdcI7Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:55:e9:e9:b2:73:08:a2:a6:32:79:63:44:d1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=35fa7613c26e3daa8ce4fd682dd29dc5921af930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:f3:c6:cc:0d:09:28:32:ac:00:dd:3b:f7: 54:64:9d:53:7c:fb:0b:fd:00:25:f6:9c:87:07:2c: 4b:bf:c3:9d:5e:8c:24:b0:55:96:63:54:c9:7e:c2: d8:e5:bd:b2:d8:0e:79:e5:af:66:d0:d7:5a:95:14: 9d:25:0c:e0:f6:68:76:3d:52:87:84:6e:1b:9b:9f: d8:e2:12:43:51:7a:0a:38:ce:25:60:c2:b9:74:e5: a9:e5:3a:8f:51:39:06:08:ba:a3:53:df:c6:20:0c: e4:3d:ad:3f:34:25:ae:ad:0e:12:40:0d:e7:45:1b: ad:27:1c:1b:31:bc:f6:20:5d:f9:b3:d4:02:c0:ed: 45:ee:40:08:05:2b:ff:a8:36:4c:f5:85:f5:82:3c: 0f:e3:9b:3e:d7:82:48:fd:b5:46:3d:d6:1d:9b:31: c8:5d:d9:f7:61:15:95:1c:90:ff:ec:83:30:4b:13: ae:8a:d7:3b:dc:93:b6:8a:f3:2a:99:9c:d8:64:bf: 0e:3b:5f:c8:2d:89:ec:1f:40:06:51:50:3d:dc:3a: fd:75:6d:89:8a:1a:71:d5:ff:f1:59:28:aa:5c:81: a8:2a:e7:6a:84:a0:ce:14:50:ee:7f:20:76:42:57: 2a:46:6e:c7:e1:7f:74:b8:59:b4:28:74:d0:39:49: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FA:76:13:C2:6E:3D:AA:8C:E4:FD:68:2D:D2:9D:C5:92:1A:F9:30 X509v3 Authority Key Identifier: keyid:BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:41:bd:5b:59:b4:93:39:07:32:ac:b1:82:48:b2:fd:fa:77: 75:e9:f7:2e:4a:25:a2:da:e1:36:79:f8:10:b1:e7:06:31:58: be:2c:7b:3a:24:b2:6f:62:30:6c:35:b7:73:9a:ae:b4:b7:64: 84:1e:df:22:ac:fa:04:4a:45:df:08:75:24:72:d9:bc:a2:e7: 53:63:23:32:4c:2d:c1:e4:01:11:f8:35:9b:9c:c9:bb:ea:34: fd:22:ea:3b:7c:1f:76:6f:73:66:a7:d8:00:20:49:07:9c:99: 44:3d:85:e2:d0:0b:18:5d:8e:d4:0e:c4:1e:aa:f0:1f:d0:43: 4f:c1:e9:8e:21:90:08:19:c1:86:85:bd:9f:0f:e9:56:0f:73: b8:2d:02:bc:83:e4:50:ae:82:0f:2a:17:06:a9:7a:7c:bc:e8: 55:d5:37:a5:6d:88:dd:df:79:43:2e:ec:7b:7c:04:c4:26:51: 14:85:ac:a4:ca:46:9b:18:f2:e6:2e:87:60:36:9a:70:f6:79: e7:99:79:33:2f:f8:0d:8a:c7:9f:c9:ae:ed:ee:6c:5a:95:99: 4f:dc:39:f4:5e:4e:81:e2:94:2c:26:0e:87:b8:96:a6:2b:d7: c7:1a:dc:d5:d7:3e:bb:de:09:5d:b7:9d:21:48:c8:78:f5:ab: 2c:74:a8:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlXp6bJzCKKmMnljRNHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDY0MTA1YTE5ZGNkNWM2NzVjMGEzZjk4ZWU4YzYwNGU4 MDhmMWIwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD EygzNWZhNzYxM2MyNmUzZGFhOGNlNGZkNjgyZGQyOWRjNTkyMWFmOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrLzxswNCSgyrADdO/dUZJ1TfPsL /QAl9pyHByxLv8OdXowksFWWY1TJfsLY5b2y2A555a9m0NdalRSdJQzg9mh2PVKH hG4bm5/Y4hJDUXoKOM4lYMK5dOWp5TqPUTkGCLqjU9/GIAzkPa0/NCWurQ4SQA3n RRutJxwbMbz2IF35s9QCwO1F7kAIBSv/qDZM9YX1gjwP45s+14JI/bVGPdYdmzHI Xdn3YRWVHJD/7IMwSxOuitc73JO2ivMqmZzYZL8OO1/ILYnsH0AGUVA93Dr9dW2J ihpx1f/xWSiqXIGoKudqhKDOFFDufyB2QlcqRm7H4X90uFm0KHTQOUkqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX6dhPCbj2qjOT9aC3SncWSGvkwMB8GA1UdIwQY MBaAFL3WQQWhnc1cZ1wKP5jujGBOgI8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRaQkJhR2R6VnhuWEFvX21PNk1ZRTZBanhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMTg0YmQtYjVkMi00YjljLTkxNmIt ZDA0NTZmNzI5ODczLzEvdmRaQkJhR2R6VnhuWEFvX21PNk1ZRTZBanhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMTg0YmQtYjVkMi00YjljLTkxNmItZDA0NTZmNzI5ODcz LzEvdmRaQkJhR2R6VnhuWEFvX21PNk1ZRTZBanhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakG9W1m0 kzkHMqyxgkiy/fp3den3LkolotrhNnn4ELHnBjFYvix7OiSyb2IwbDW3c5qutLdk hB7fIqz6BEpF3wh1JHLZvKLnU2MjMkwtweQBEfg1m5zJu+o0/SLqO3wfdm9zZqfY ACBJB5yZRD2F4tALGF2O1A7EHqrwH9BDT8HpjiGQCBnBhoW9nw/pVg9zuC0CvIPk UK6CDyoXBql6fLzoVdU3pW2I3d95Qy7se3wExCZRFIWspMpGmxjy5i6HYDaacPZ5 55l5My/4DYrHn8mu7e5sWpWZT9w59F5OgeKULCYOh7iWpivXxxrc1dc+u94JXbed IUjIePWrLHSokQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:17 2025 by rpki-client