This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json) Hash identifier: iiHFpbCz8m9cE3t9T5IWd5AJW08eK4X0hCPBBlFSjRA= Subject key identifier: C5:BC:58:C0:4E:1B:D8:CE:A2:1F:7A:F7:54:BC:73:C3:24:77:46:64 Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Certificate serial: 019AF389AA0A90C4769BE4FD6FF39D32E140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft Manifest number: 10E1 Signing time: Sat 06 Dec 2025 12:01:16 +0000 Manifest this update: Sat 06 Dec 2025 12:01:16 +0000 Manifest next update: Sun 07 Dec 2025 12:01:16 +0000 Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=) 2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: 1Biyc0jf/tnwKZs0dC3SPZeDwAH6pbT//DLXp+UWwNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:aa:0a:90:c4:76:9b:e4:fd:6f:f3:9d:32:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Validity Not Before: Dec 6 12:01:16 2025 GMT Not After : Dec 7 12:01:16 2025 GMT Subject: CN=c5bc58c04e1bd8cea21f7af754bc73c324774664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:8a:42:d6:43:23:be:08:39:9d:2e:a9:0f: f7:d3:79:ef:9d:43:0a:0a:6e:b8:d1:a4:46:39:b6: 43:cb:9d:f0:90:90:71:dd:ce:e6:f0:21:0e:cf:31: 35:4c:de:26:62:dc:b1:36:cf:d0:2f:6b:00:fe:11: 01:e8:eb:66:72:c4:b6:0f:d0:b3:4c:13:02:7f:e9: 04:2a:58:18:80:b6:3f:bd:bb:32:57:98:2f:6d:db: 36:77:e3:43:50:8c:59:31:90:83:90:91:ed:09:d8: ec:7d:37:01:4c:b3:b8:69:ec:db:cf:3c:86:36:71: 71:d1:6e:e1:e9:78:17:f6:88:2a:98:aa:b1:2a:b0: 6c:51:ce:12:23:0b:d2:3f:0b:ff:94:9f:a0:30:66: 36:2d:8b:cd:70:99:43:d1:80:90:15:ad:32:18:46: 5e:41:42:09:48:9e:c4:a1:37:b2:35:79:50:b4:25: 77:94:f0:61:51:44:ba:32:aa:f5:e3:33:8c:3a:c2: da:b9:8b:e1:f8:4e:83:89:77:73:29:c8:fd:f5:c2: e6:90:dd:f7:fa:ca:fc:2c:29:33:98:24:e7:7e:1a: b2:99:04:3f:ff:36:c9:da:c9:cb:57:63:d7:e0:fe: ec:df:d4:ca:cc:e0:c5:8f:e2:fa:b2:64:1c:5e:4d: e4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:58:C0:4E:1B:D8:CE:A2:1F:7A:F7:54:BC:73:C3:24:77:46:64 X509v3 Authority Key Identifier: keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7a:fc:90:1c:47:4c:0e:29:7f:92:fa:c1:4a:f3:73:b6:b5: 08:d9:c5:f9:89:61:d2:33:79:e0:17:9f:f1:be:b7:e3:b5:50: 5c:20:c2:75:1e:d2:5b:93:fd:52:94:67:0d:4d:42:69:be:48: 34:ca:45:f8:9a:5e:87:9f:1d:91:e8:f0:5f:8c:23:28:03:4e: 66:21:81:c2:19:de:1c:98:84:65:c7:98:81:48:ef:85:59:db: 23:bb:d8:3f:42:9c:cb:fa:cc:86:10:2f:f5:db:c4:89:1f:22: 6a:0c:3c:b1:b8:b9:27:53:01:53:0f:46:84:f1:09:dd:93:89: df:1c:85:dd:cb:d1:1a:ca:69:ad:45:fd:c5:0b:23:05:36:21: 7f:87:44:b7:2f:1b:d5:78:45:56:f9:2b:0f:26:7c:d8:8a:0a: b8:3e:4f:0c:cb:64:8f:d3:cd:a2:6a:17:c5:a8:a9:3c:19:f3: 13:fc:31:09:5a:ce:fb:36:88:4a:b0:98:46:41:78:6c:cd:e6: 03:cc:30:df:56:4c:d2:c7:3f:36:7a:a7:00:b7:20:dd:fa:b1: 32:1c:44:55:34:06:49:1d:7c:aa:6a:e9:56:07:b7:54:1f:e8: 47:53:74:e6:3d:9b:17:64:16:b4:15:2d:a0:3d:ac:63:5c:43: e0:20:87:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaoKkMR2m+T9b/OdMuFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5 ZTU1Y2EwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD EyhjNWJjNThjMDRlMWJkOGNlYTIxZjdhZjc1NGJjNzNjMzI0Nzc0NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqCKQtZDI74IOZ0uqQ/303nvnUMK Cm640aRGObZDy53wkJBx3c7m8CEOzzE1TN4mYtyxNs/QL2sA/hEB6OtmcsS2D9Cz TBMCf+kEKlgYgLY/vbsyV5gvbds2d+NDUIxZMZCDkJHtCdjsfTcBTLO4aezbzzyG NnFx0W7h6XgX9ogqmKqxKrBsUc4SIwvSPwv/lJ+gMGY2LYvNcJlD0YCQFa0yGEZe QUIJSJ7EoTeyNXlQtCV3lPBhUUS6Mqr14zOMOsLauYvh+E6DiXdzKcj99cLmkN33 +sr8LCkzmCTnfhqymQQ//zbJ2snLV2PX4P7s39TKzODFj+L6smQcXk3kzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW8WMBOG9jOoh9691S8c8Mkd0ZkMB8GA1UdIwQY MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt NjBlN2U0NTM5OWU2LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2 LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHr8kBxH TA4pf5L6wUrzc7a1CNnF+Ylh0jN54Bef8b6347VQXCDCdR7SW5P9UpRnDU1Cab5I NMpF+Jpeh58dkejwX4wjKANOZiGBwhneHJiEZceYgUjvhVnbI7vYP0Kcy/rMhhAv 9dvEiR8iagw8sbi5J1MBUw9GhPEJ3ZOJ3xyF3cvRGspprUX9xQsjBTYhf4dEty8b 1XhFVvkrDyZ82IoKuD5PDMtkj9PNomoXxaipPBnzE/wxCVrO+zaISrCYRkF4bM3m A8ww31ZM0sc/NnqnALcg3fqxMhxEVTQGSR18qmrpVge3VB/oR1N05j2bF2QWtBUt oD2sY1xD4CCHcg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:19 2025 by rpki-client