This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft File: vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json) Hash identifier: oHG0QvVqe26f/s6wHc0Lytkn9pWSvIv/qClFL7vfzLI= Subject key identifier: BA:63:41:7F:A3:C9:DD:3E:20:37:1C:F0:63:6D:99:DF:64:DF:52:DA Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63 Certificate issuer: /CN=bc83c2843c1649b0054c91124fee03114095e163 Certificate serial: 019AF31B4EC53799CFEAE7F0125A8F706188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:00:44 +0000 Manifest this update: Sat 06 Dec 2025 10:00:44 +0000 Manifest next update: Sun 07 Dec 2025 10:00:44 +0000 Files and hashes: 1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=) 2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: 7/q7eUt9YuBzsQ+QTo1HlgCwn1pGsfsmiRZapkcjgmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:4e:c5:37:99:cf:ea:e7:f0:12:5a:8f:70:61:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163 Validity Not Before: Dec 6 10:00:44 2025 GMT Not After : Dec 7 10:00:44 2025 GMT Subject: CN=ba63417fa3c9dd3e20371cf0636d99df64df52da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:f2:1a:96:91:f0:e7:25:7e:29:fd:d6:c9: 7e:ba:e0:cd:f4:86:14:8b:d6:74:70:88:4d:11:32: 88:3a:f4:02:ee:b0:42:fd:2c:e3:f9:78:b9:33:76: 0e:81:c4:86:2c:f0:6e:3a:38:a2:d3:f3:bd:95:89: 0f:25:1c:90:34:3b:23:65:86:06:0a:06:23:1f:aa: ea:a5:85:2d:37:2e:f8:d9:28:98:03:dd:d4:e6:50: eb:4c:2d:35:3e:ac:0c:39:2e:1f:17:fb:3c:a0:2c: 43:a7:db:75:b8:e0:06:41:b6:1c:09:7d:3e:d6:13: c6:81:2f:8b:d2:a8:a8:91:b2:69:9c:5b:b3:71:3a: a7:29:7d:da:c4:bc:bc:13:5a:3f:3f:b2:3a:ae:56: 36:78:8d:3a:4c:af:d0:5f:a6:5d:f8:dd:ac:80:1a: 30:e7:c0:11:6e:f0:da:3c:70:02:9a:49:45:16:ac: 15:90:45:52:77:f9:ef:2d:44:b0:bb:ce:be:3e:78: 68:da:88:08:94:f0:1e:d2:cc:b9:9b:1d:fa:ba:65: 5d:fc:22:7b:6a:f1:b0:2f:5b:4e:49:79:67:1d:4a: be:e7:6d:72:8f:40:27:b2:05:62:d3:19:f4:f7:90: 99:7d:b3:a5:d1:f0:bf:55:64:49:e2:4f:7b:c8:63: ff:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:63:41:7F:A3:C9:DD:3E:20:37:1C:F0:63:6D:99:DF:64:DF:52:DA X509v3 Authority Key Identifier: keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6b:8d:2d:d8:de:63:fb:a8:ad:58:e3:f8:db:2d:c2:9e:c5: a8:9e:bf:6a:ae:91:b1:78:29:49:a0:66:88:be:40:9c:b9:aa: 46:75:11:fd:c8:5e:18:0b:ed:fd:25:ba:cb:40:59:f7:7e:af: dd:62:1a:a9:aa:95:8d:3d:ed:89:b1:7b:c5:6c:42:9a:7c:26: 43:07:78:42:f6:c5:eb:56:41:af:21:1f:87:55:ef:f1:56:07: 99:25:db:e4:64:7d:58:fc:1d:0f:10:fb:99:04:f7:fd:65:02: e7:36:f7:c9:25:d0:d0:a2:17:c1:1f:e3:ae:c1:4c:19:f6:5f: 41:1e:14:2d:61:4c:b8:b6:33:46:f3:42:39:dd:15:bf:11:ea: aa:5b:a7:fe:12:46:a4:43:83:18:f5:33:14:d7:4f:64:07:54: 92:07:2b:49:c2:de:f0:67:d0:05:8a:4e:8b:66:4b:79:f6:71: 08:0a:2d:ef:75:cf:9a:24:ca:fb:df:e5:01:3d:8b:e4:0a:29: 59:c2:e6:3e:bc:ec:55:e5:8b:4b:a8:6c:82:d9:2e:59:b3:7e: a2:17:9f:a1:70:d1:39:98:f3:f2:be:70:99:a7:c7:05:6a:4f: dc:e8:55:74:33:28:af:54:44:bf:fa:3b:03:49:46:dd:38:6b: 3e:3f:84:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG07FN5nP6ufwElqPcGGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODNjMjg0M2MxNjQ5YjAwNTRjOTExMjRmZWUwMzExNDA5 NWUxNjMwHhcNMjUxMjA2MTAwMDQ0WhcNMjUxMjA3MTAwMDQ0WjAzMTEwLwYDVQQD EyhiYTYzNDE3ZmEzYzlkZDNlMjAzNzFjZjA2MzZkOTlkZjY0ZGY1MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxzyGpaR8Oclfin91sl+uuDN9IYU i9Z0cIhNETKIOvQC7rBC/Szj+Xi5M3YOgcSGLPBuOjii0/O9lYkPJRyQNDsjZYYG CgYjH6rqpYUtNy742SiYA93U5lDrTC01PqwMOS4fF/s8oCxDp9t1uOAGQbYcCX0+ 1hPGgS+L0qiokbJpnFuzcTqnKX3axLy8E1o/P7I6rlY2eI06TK/QX6Zd+N2sgBow 58ARbvDaPHACmklFFqwVkEVSd/nvLUSwu86+Pnho2ogIlPAe0sy5mx36umVd/CJ7 avGwL1tOSXlnHUq+521yj0AnsgVi0xn095CZfbOl0fC/VWRJ4k97yGP/+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpjQX+jyd0+IDcc8GNtmd9k31LaMB8GA1UdIwQY MBaAFLyDwoQ8FkmwBUyREk/uAxFAleFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUt NTI5NWY1YjNmMTliLzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hNzU5NDYtNTdiNC00MWViLWI2YjUtNTI5NWY1YjNmMTli LzEvdklQQ2hEd1dTYkFGVEpFU1QtNERFVUNWNFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmuNLdje Y/uorVjj+Nstwp7FqJ6/aq6RsXgpSaBmiL5AnLmqRnUR/cheGAvt/SW6y0BZ936v 3WIaqaqVjT3tibF7xWxCmnwmQwd4QvbF61ZBryEfh1Xv8VYHmSXb5GR9WPwdDxD7 mQT3/WUC5zb3ySXQ0KIXwR/jrsFMGfZfQR4ULWFMuLYzRvNCOd0VvxHqqlun/hJG pEODGPUzFNdPZAdUkgcrScLe8GfQBYpOi2ZLefZxCAot73XPmiTK+9/lAT2L5Aop WcLmPrzsVeWLS6hsgtkuWbN+ohefoXDROZjz8r5wmafHBWpP3OhVdDMor1REv/o7 A0lG3ThrPj+E2w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:10 2025 by rpki-client