This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json) Hash identifier: rOnsV1GIxnARnnr+OyzD2U9Sa03KJXaTKEOH3lwfaZg= Subject key identifier: 31:85:4B:75:8B:52:D6:F7:1B:51:A4:9C:72:7E:E2:62:86:D2:86:1B Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b Certificate serial: 019AF19BAE1D27D241844F7EEC68A20BD1F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft Manifest number: 0516 Signing time: Sat 06 Dec 2025 03:01:42 +0000 Manifest this update: Sat 06 Dec 2025 03:01:42 +0000 Manifest next update: Sun 07 Dec 2025 03:01:42 +0000 Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: CTSZlvn16iBb+E62av4LuKP9ZJWVwbXEsxxFlMvsbIQ=) 2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ae:1d:27:d2:41:84:4f:7e:ec:68:a2:0b:d1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b Validity Not Before: Dec 6 03:01:42 2025 GMT Not After : Dec 7 03:01:42 2025 GMT Subject: CN=31854b758b52d6f71b51a49c727ee26286d2861b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:98:c0:24:57:19:67:60:26:b7:15:ce:c5: da:51:6f:0b:a5:d1:10:90:37:f1:b2:e6:9b:bb:e4: 22:91:6b:3d:53:9a:88:7f:42:c6:3e:3e:d7:47:22: 97:1a:70:a1:6a:92:76:29:16:d0:8c:d2:7e:4c:7d: 22:ae:14:81:30:8e:6d:cb:2f:28:e4:8b:c4:49:c5: 24:34:89:5c:45:ca:d2:72:d6:10:f6:0a:72:3d:1b: 7b:01:ab:68:1c:58:37:4d:fb:1b:c5:f5:c5:c3:9a: 7b:5f:38:b0:ac:79:12:a6:59:6e:1e:6e:82:b4:de: 5b:68:a0:dd:86:ba:ad:5d:86:65:a8:b1:d8:19:c8: 6a:49:91:12:0f:30:8b:ca:ed:14:3b:a0:3e:0d:13: 51:89:58:8e:d0:ad:e7:1f:47:88:b9:43:74:7e:07: 0e:62:68:0a:10:8a:64:3c:2a:80:d5:bd:30:06:c1: fb:71:69:8d:79:2f:56:d7:b5:f8:06:21:0e:ab:3d: c5:5d:90:c7:93:09:f8:60:17:6b:3c:ac:a7:47:44: 6f:84:0e:4c:86:fc:70:3c:77:8c:65:c3:f8:ff:32: 06:86:ce:64:1b:50:be:85:8a:eb:65:9f:8c:62:e9: a3:3f:1c:c6:23:b5:5d:c7:8e:bf:b7:cd:4e:bc:e3: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:85:4B:75:8B:52:D6:F7:1B:51:A4:9C:72:7E:E2:62:86:D2:86:1B X509v3 Authority Key Identifier: keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:00:1c:58:df:78:86:82:93:b5:e2:47:ff:89:e5:52:c6:05: b5:c0:aa:04:85:c0:f7:03:26:ea:c4:2f:dd:c9:29:54:1a:0c: 16:25:f4:fe:d8:bc:69:23:c7:eb:0b:e7:39:d4:b7:83:19:b5: 6f:b6:5b:c2:15:86:06:00:9a:04:e5:b8:40:2b:a7:40:82:53: 78:4b:9d:44:6a:21:bc:3b:bf:ca:37:e8:f1:9f:27:67:b2:7c: 54:92:2b:86:d6:14:4c:7a:68:18:fd:d3:91:01:84:26:8b:89: 74:27:92:8f:1c:02:ef:09:03:dc:04:66:32:c0:2f:15:09:a6: 07:76:86:01:58:73:e4:d8:d8:4b:2d:8c:2b:07:68:3f:31:54: 54:be:80:d5:0e:ce:dc:40:90:88:df:2b:7b:d2:49:fb:24:92: 89:e9:7b:34:57:69:c1:e4:78:c3:c6:68:6f:80:2d:d0:2a:33: 2e:00:3e:31:bd:60:c9:ee:30:23:c2:49:c9:ef:4f:38:28:0f: 39:b4:47:c2:30:99:7f:43:10:cc:4c:e3:7c:ba:ce:1f:4f:66: 03:a0:56:26:82:bb:a4:ff:3c:64:e9:d0:e9:c5:10:84:b2:44: bc:cd:32:13:ea:c3:4d:91:a6:2d:41:7d:54:6c:29:7a:53:0c: 4d:db:7a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm64dJ9JBhE9+7GiiC9H1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOTk1ZDE1NTAyNzgwYWNkZjdiNmU2YTE4NjVlZGI1YTBl N2RjNGIwHhcNMjUxMjA2MDMwMTQyWhcNMjUxMjA3MDMwMTQyWjAzMTEwLwYDVQQD EygzMTg1NGI3NThiNTJkNmY3MWI1MWE0OWM3MjdlZTI2Mjg2ZDI4NjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSiYwCRXGWdgJrcVzsXaUW8LpdEQ kDfxsuabu+QikWs9U5qIf0LGPj7XRyKXGnChapJ2KRbQjNJ+TH0irhSBMI5tyy8o 5IvEScUkNIlcRcrSctYQ9gpyPRt7AatoHFg3TfsbxfXFw5p7XziwrHkSplluHm6C tN5baKDdhrqtXYZlqLHYGchqSZESDzCLyu0UO6A+DRNRiViO0K3nH0eIuUN0fgcO YmgKEIpkPCqA1b0wBsH7cWmNeS9W17X4BiEOqz3FXZDHkwn4YBdrPKynR0RvhA5M hvxwPHeMZcP4/zIGhs5kG1C+hYrrZZ+MYumjPxzGI7Vdx46/t81OvOPcsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGFS3WLUtb3G1GknHJ+4mKG0oYbMB8GA1UdIwQY MBaAFLyZXRVQJ4Cs33tuahhl7bWg59xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3Yzkt NTcyYzRlMTI5ZDMyLzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3YzktNTcyYzRlMTI5ZDMy LzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAAcWN94 hoKTteJH/4nlUsYFtcCqBIXA9wMm6sQv3ckpVBoMFiX0/ti8aSPH6wvnOdS3gxm1 b7ZbwhWGBgCaBOW4QCunQIJTeEudRGohvDu/yjfo8Z8nZ7J8VJIrhtYUTHpoGP3T kQGEJouJdCeSjxwC7wkD3ARmMsAvFQmmB3aGAVhz5NjYSy2MKwdoPzFUVL6A1Q7O 3ECQiN8re9JJ+ySSiel7NFdpweR4w8Zob4At0CozLgA+Mb1gye4wI8JJye9POCgP ObRHwjCZf0MQzEzjfLrOH09mA6BWJoK7pP88ZOnQ6cUQhLJEvM0yE+rDTZGmLUF9 VGwpelMMTdt6vw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:23 2025 by rpki-client