This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json) Hash identifier: GGVyKzUL+4ly5Ooxltac67bF0IA0+YtrGAMOpNAJsqY= Subject key identifier: B9:E9:B1:F6:39:56:27:73:F3:3E:09:F9:69:06:A9:F4:B2:C8:2E:48 Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b Certificate serial: 019B334492116F875A116D53AF3900BF5CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft Manifest number: 0538 Signing time: Thu 18 Dec 2025 21:01:30 +0000 Manifest this update: Thu 18 Dec 2025 21:01:30 +0000 Manifest next update: Fri 19 Dec 2025 21:01:30 +0000 Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: vOdn3GqQ/iakiYI1Pcqpvp8qkGoQ9R+hQn7RSUGL0uA=) 2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:92:11:6f:87:5a:11:6d:53:af:39:00:bf:5c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b Validity Not Before: Dec 18 21:01:30 2025 GMT Not After : Dec 19 21:01:30 2025 GMT Subject: CN=b9e9b1f639562773f33e09f96906a9f4b2c82e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:7d:bb:37:da:f4:c5:73:3a:09:38:27:b9: 9c:dc:27:93:70:bf:ab:ab:d8:95:7a:61:31:74:06: cb:0c:31:d3:c7:43:2b:d1:79:3c:7d:60:c9:14:e7: fd:9e:33:00:13:9a:7c:11:92:79:03:68:34:17:56: c1:2c:1f:da:37:cf:89:a2:86:d4:e1:37:94:6b:89: b1:7e:cb:2f:bf:c8:76:3d:01:a5:4e:46:12:ba:7c: 73:e1:19:7f:52:65:0d:3e:08:07:f9:c0:c6:b0:7b: 8e:d1:b9:55:38:8d:fa:76:60:6e:14:80:50:44:82: db:b8:a6:37:af:03:2d:b5:10:0b:85:5f:30:75:5b: d1:af:cc:bc:0b:b3:6a:4a:3b:a9:ac:4f:29:49:a6: 44:3e:d9:78:f8:fa:ba:c6:b0:c8:0c:00:13:ec:62: 9b:10:fd:6e:ae:fd:ff:72:0b:d4:1c:3b:12:1e:0b: 00:cf:53:68:59:d9:31:30:ec:6f:cc:5a:c8:34:d2: 43:92:71:1b:56:5c:5a:3e:ad:69:c1:6d:c4:e6:0d: ba:3b:b9:97:de:36:10:41:87:0a:02:9c:dd:c7:df: dd:67:bc:3d:f9:bc:db:e5:5e:c7:de:03:ba:d4:f6: b7:d9:9f:a8:ba:75:8a:c2:0b:0a:04:8b:ab:ac:18: 07:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:B1:F6:39:56:27:73:F3:3E:09:F9:69:06:A9:F4:B2:C8:2E:48 X509v3 Authority Key Identifier: keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8e:8d:85:d3:d7:24:67:04:30:63:34:83:cf:d9:f3:ed:6d: 0a:1f:9f:a5:30:65:b0:c3:bd:65:de:1a:6f:07:74:c1:68:de: 86:c3:1e:94:25:fa:e0:d7:a0:89:0d:6c:d1:bf:aa:7a:33:5b: 05:d5:a7:f0:74:f2:97:ca:65:1b:3f:48:aa:c0:71:5f:0d:a4: 02:e5:af:9b:bb:bf:32:ad:80:a7:ce:89:b0:16:eb:38:28:d6: 22:86:c8:24:c2:b9:18:77:57:81:ef:b5:40:2e:ff:63:8a:a0: 53:0e:8d:ad:aa:4d:a1:88:90:9d:ee:1d:65:94:e2:95:e7:12: 34:23:90:20:bd:9b:50:00:c0:c2:a0:ff:01:45:67:b0:f1:da: 3c:7f:8e:05:f1:28:63:36:10:8e:df:8e:85:5f:ff:1f:61:8a: 2a:76:65:e6:fb:8a:cf:c2:76:c5:5a:1a:fe:4a:b1:b9:97:db: bc:dd:00:c9:94:a7:87:f1:42:fd:66:f2:ac:3a:d5:55:69:db: 53:5b:67:66:47:e5:9e:8c:a6:16:96:19:3b:8d:58:62:25:7b: a6:9f:d3:bb:69:4b:22:a8:11:cc:e4:21:de:a1:99:79:20:e0: 51:1a:fb:ee:97:a9:a0:a6:ca:69:1e:ca:97:ce:c1:53:57:57: ff:04:50:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRJIRb4daEW1TrzkAv1ypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOTk1ZDE1NTAyNzgwYWNkZjdiNmU2YTE4NjVlZGI1YTBl N2RjNGIwHhcNMjUxMjE4MjEwMTMwWhcNMjUxMjE5MjEwMTMwWjAzMTEwLwYDVQQD EyhiOWU5YjFmNjM5NTYyNzczZjMzZTA5Zjk2OTA2YTlmNGIyYzgyZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytd9uzfa9MVzOgk4J7mc3CeTcL+r q9iVemExdAbLDDHTx0Mr0Xk8fWDJFOf9njMAE5p8EZJ5A2g0F1bBLB/aN8+JoobU 4TeUa4mxfssvv8h2PQGlTkYSunxz4Rl/UmUNPggH+cDGsHuO0blVOI36dmBuFIBQ RILbuKY3rwMttRALhV8wdVvRr8y8C7NqSjuprE8pSaZEPtl4+Pq6xrDIDAAT7GKb EP1urv3/cgvUHDsSHgsAz1NoWdkxMOxvzFrINNJDknEbVlxaPq1pwW3E5g26O7mX 3jYQQYcKApzdx9/dZ7w9+bzb5V7H3gO61Pa32Z+ounWKwgsKBIurrBgHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnpsfY5Vidz8z4J+WkGqfSyyC5IMB8GA1UdIwQY MBaAFLyZXRVQJ4Cs33tuahhl7bWg59xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3Yzkt NTcyYzRlMTI5ZDMyLzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3YzktNTcyYzRlMTI5ZDMy LzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI6NhdPX JGcEMGM0g8/Z8+1tCh+fpTBlsMO9Zd4abwd0wWjehsMelCX64NegiQ1s0b+qejNb BdWn8HTyl8plGz9IqsBxXw2kAuWvm7u/Mq2Ap86JsBbrOCjWIobIJMK5GHdXge+1 QC7/Y4qgUw6NrapNoYiQne4dZZTilecSNCOQIL2bUADAwqD/AUVnsPHaPH+OBfEo YzYQjt+OhV//H2GKKnZl5vuKz8J2xVoa/kqxuZfbvN0AyZSnh/FC/WbyrDrVVWnb U1tnZkflnoymFpYZO41YYiV7pp/Tu2lLIqgRzOQh3qGZeSDgURr77pepoKbKaR7K l87BU1dX/wRQpA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:22:09 2025 by rpki-client