This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json) Hash identifier: ZNGM/UUfzPxy1VJFqxB9Pn0yBSdNaOm5HTmP4UkGx2k= Subject key identifier: E0:B8:DA:F7:06:CC:8B:B2:A3:EB:9E:14:41:A6:9B:C2:44:F3:26:BC Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Certificate serial: 019AF209695966F103EFA81B32673CC5089E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft Manifest number: 09AB Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: C7WJZ0MSGTSK11o8aWAlEWJl0j8.roa (hash: hyEq8bFB3KSRXz3GQOFcsFfK3xFehxlIq2TZp5r0/CA=) 2: IuSi6E2OqyGC8JrvU9bBDewGhB8.roa (hash: xhr1WJNVnuwtRBZVPH3Muk8E3trcpTvU2YyXMkQE9XE=) 3: str3-7dKKBXkTaCco2AxqojW1YQ.roa (hash: fMmpOIsyT53t9MRkb+zMzEyMIqFRw0lRg1YQpIT+8WI=) 4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: N59/BPmcT+MV5hLg9v+UAfoi/P8qbvP9hE6sXX2EaKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:69:59:66:f1:03:ef:a8:1b:32:67:3c:c5:08:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=e0b8daf706cc8bb2a3eb9e1441a69bc244f326bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:ac:50:3b:d2:ca:69:2e:9a:ff:69:d5:7f: 4b:db:1c:0c:17:43:87:78:f0:21:de:99:7c:b6:74: 73:b5:5b:9b:33:84:60:c5:d6:75:9b:6b:e6:a8:6d: a5:55:fc:ab:ae:19:b7:ab:4b:bd:d4:a9:b8:df:f9: 68:1a:57:0f:e0:3b:fc:29:89:e4:6b:14:1e:d6:1c: 62:3e:6e:3f:7d:56:df:42:8e:46:39:d1:db:cf:c0: e3:d1:33:93:2c:c1:0b:9d:97:d3:1f:3e:59:84:3b: f1:ef:d5:65:74:7b:8f:4c:e3:1a:e6:67:88:9e:38: ba:30:ad:1d:53:cf:94:94:7c:8f:4b:27:a2:89:b9: 73:c2:a0:11:c2:a8:7a:a4:50:c9:e0:6b:9a:82:0a: 32:3f:77:63:82:98:51:3a:b4:bf:17:db:b5:19:e5: fe:6d:84:2c:d1:1c:38:69:9e:ed:f5:13:d1:4e:f6: 0e:c4:1d:0b:af:cc:d9:f3:ad:7b:2d:4f:b0:27:c1: 1c:e2:d0:64:6e:dd:d0:cb:79:02:e1:49:fa:bd:c3: 63:4c:e4:d2:e0:95:96:73:f5:9f:49:57:79:b3:87: f9:d9:de:fe:bf:8b:5e:bf:52:b7:3d:f4:32:01:f2: 53:dd:cf:01:16:48:3a:58:20:3b:5e:b5:d4:a1:71: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B8:DA:F7:06:CC:8B:B2:A3:EB:9E:14:41:A6:9B:C2:44:F3:26:BC X509v3 Authority Key Identifier: keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:74:8f:45:cb:fb:35:c4:f0:a9:60:6b:2c:2c:dd:85:a4:56: 91:31:52:be:6e:77:f4:d2:d4:30:eb:dc:c0:af:32:17:07:85: 0b:23:35:f4:3d:20:0a:f3:50:49:28:18:50:13:d7:b5:6a:30: 98:d5:22:f6:14:67:57:dc:93:4f:a7:44:64:28:c7:9f:b3:d8: 3b:8a:60:ef:7c:d5:b0:b0:e6:e1:00:88:72:6d:d5:e7:69:b9: 00:f0:9b:17:2c:cb:9c:f8:90:67:3b:3b:29:76:dd:24:2e:88: 51:dc:19:8b:df:66:01:9c:82:75:0e:a8:be:34:a4:3e:20:7e: cf:eb:f0:b4:ff:0a:57:2f:27:1a:db:b5:1c:e0:3a:06:c1:0f: 6e:00:3f:c5:e4:65:4e:6a:0e:6d:3d:34:01:14:05:30:fc:6c: 80:37:15:b3:20:2b:1a:76:99:26:20:2d:5f:d4:8a:e7:d6:3d: d9:58:73:6b:3a:87:cd:43:64:66:82:13:e9:49:c5:88:8a:d3: b9:9e:b3:7f:d3:e6:5f:c9:ff:e0:1d:9d:bc:52:c9:a5:01:f0: c4:95:50:ff:86:47:e5:33:2c:ed:da:73:e8:97:9e:ad:ad:2b: 7a:68:3f:03:8a:43:1a:91:2f:ea:bc:e0:dd:cf:db:55:3b:2c: 07:56:2d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWlZZvED76gbMmc8xQieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh NjRkNWEwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EyhlMGI4ZGFmNzA2Y2M4YmIyYTNlYjllMTQ0MWE2OWJjMjQ0ZjMyNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27esUDvSymkumv9p1X9L2xwMF0OH ePAh3pl8tnRztVubM4RgxdZ1m2vmqG2lVfyrrhm3q0u91Km43/loGlcP4Dv8KYnk axQe1hxiPm4/fVbfQo5GOdHbz8Dj0TOTLMELnZfTHz5ZhDvx79VldHuPTOMa5meI nji6MK0dU8+UlHyPSyeiiblzwqARwqh6pFDJ4GuaggoyP3djgphROrS/F9u1GeX+ bYQs0Rw4aZ7t9RPRTvYOxB0Lr8zZ8617LU+wJ8Ec4tBkbt3Qy3kC4Un6vcNjTOTS 4JWWc/WfSVd5s4f52d7+v4tev1K3PfQyAfJT3c8BFkg6WCA7XrXUoXGGWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOC42vcGzIuyo+ueFEGmm8JE8ya8MB8GA1UdIwQY MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3 LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3SPRcv7 NcTwqWBrLCzdhaRWkTFSvm539NLUMOvcwK8yFweFCyM19D0gCvNQSSgYUBPXtWow mNUi9hRnV9yTT6dEZCjHn7PYO4pg73zVsLDm4QCIcm3V52m5APCbFyzLnPiQZzs7 KXbdJC6IUdwZi99mAZyCdQ6ovjSkPiB+z+vwtP8KVy8nGtu1HOA6BsEPbgA/xeRl TmoObT00ARQFMPxsgDcVsyArGnaZJiAtX9SK59Y92VhzazqHzUNkZoIT6UnFiIrT uZ6zf9PmX8n/4B2dvFLJpQHwxJVQ/4ZH5TMs7dpz6Jeera0remg/A4pDGpEv6rzg 3c/bVTssB1Yt9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:24 2025 by rpki-client