This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft File: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json) Hash identifier: a4xbH3trnFZtSpDKMsTLwOu9210KCYCzaxbd7rTLWTs= Subject key identifier: 42:79:06:50:B7:3E:AC:5B:F5:6D:B3:22:52:B1:EB:56:0A:C5:99:3C Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6 Certificate issuer: /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6 Certificate serial: 019B32D748A1762695CE2E025832545E785F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:02:08 +0000 Manifest this update: Thu 18 Dec 2025 19:02:08 +0000 Manifest next update: Fri 19 Dec 2025 19:02:08 +0000 Files and hashes: 1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: wLi5AoHq4VKH84zLkEMbFoP0qyCH+x4bUvQOkl4mdzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:48:a1:76:26:95:ce:2e:02:58:32:54:5e:78:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6 Validity Not Before: Dec 18 19:02:08 2025 GMT Not After : Dec 19 19:02:08 2025 GMT Subject: CN=42790650b73eac5bf56db32252b1eb560ac5993c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:15:eb:61:55:72:d2:27:3b:d7:cd:3a:43: 08:98:5c:7a:0b:12:57:de:47:b9:db:bf:ba:5f:fa: f7:a2:b8:8d:d7:e9:52:00:c7:ab:97:5c:58:be:66: f0:a7:05:ca:fe:f7:49:68:cd:77:df:20:f3:9f:6c: c4:dc:1c:d4:9d:af:9e:74:4b:07:a4:d7:4b:8e:c6: 68:a8:43:f6:65:b8:a8:3d:2a:9d:95:5a:70:68:f7: 26:e3:91:4b:17:7d:fc:b9:0e:7e:ce:01:c1:01:13: ef:eb:a0:e7:28:44:12:dd:ef:2b:40:2b:4c:b3:f0: 81:51:60:41:ac:86:1e:9d:93:2d:27:b9:e7:cd:11: a0:ba:1c:8a:a6:ba:dc:3c:44:0b:ad:b9:81:fd:9e: 80:59:6e:21:f6:8b:3c:dc:65:48:a0:a0:71:69:38: 6f:d9:d4:02:55:52:9d:98:5b:1b:b7:fa:89:4f:31: fb:75:68:50:cf:d7:9f:95:43:db:41:82:cb:90:08: 18:6c:6a:e4:3b:c8:e2:12:12:f7:8f:71:9d:ab:2d: 16:ba:dd:ed:89:c7:41:d5:b4:bb:b8:8d:36:36:9b: d6:79:5f:e6:a7:43:b2:3a:7f:3b:44:aa:c3:9e:02: 15:3d:62:e6:bf:41:77:a5:6a:aa:92:77:5e:b3:36: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:06:50:B7:3E:AC:5B:F5:6D:B3:22:52:B1:EB:56:0A:C5:99:3C X509v3 Authority Key Identifier: keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3b:69:aa:c2:0b:46:d0:46:07:25:af:60:4c:3b:d6:4f:c4: 21:53:68:05:62:a4:d2:28:38:05:72:58:33:26:9c:e2:56:58: 6b:22:33:5e:87:e6:f5:55:99:ca:82:99:a8:d4:09:81:50:b0: 72:51:26:23:e8:52:bb:77:a9:f5:2b:26:97:6c:61:7d:df:1c: f0:ca:04:96:59:8f:3a:4d:d7:54:6b:a1:5c:01:9a:e0:68:59: c2:a2:6c:9c:c7:c3:36:85:d7:74:62:a3:c7:22:29:cc:5b:1e: 70:b7:f3:93:98:5e:b1:76:0f:f4:0d:e3:d4:2d:c5:31:22:bf: 2e:9a:c6:33:ec:ef:5b:28:3a:0e:d9:92:dc:1e:99:7f:f4:7d: c1:14:29:63:49:09:3c:30:31:2b:4d:a9:bd:ea:d5:9f:0a:ef: b1:a4:b3:1f:d2:c1:a8:e1:fa:18:6a:b0:6c:12:33:b5:33:63: 09:4f:45:b3:d0:f8:05:01:b8:7d:27:83:a4:ea:33:8e:5e:81: 00:04:43:ce:0a:4c:38:b5:94:16:f6:48:35:6d:5c:c8:59:c8: 64:1d:e0:97:74:62:e5:94:7b:18:83:47:da:e8:10:d7:8e:51: e7:31:c6:7d:4f:5e:54:74:64:29:d6:7c:f8:2f:44:22:a0:e0: 05:15:ad:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy10ihdiaVzi4CWDJUXnhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWY1YWFlOWEzNzY3NmVlMGE3NzEyZmYzMTBkZDBiMGE2 ZjIyYzYwHhcNMjUxMjE4MTkwMjA4WhcNMjUxMjE5MTkwMjA4WjAzMTEwLwYDVQQD Eyg0Mjc5MDY1MGI3M2VhYzViZjU2ZGIzMjI1MmIxZWI1NjBhYzU5OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrIV62FVctInO9fNOkMImFx6CxJX 3ke527+6X/r3oriN1+lSAMerl1xYvmbwpwXK/vdJaM133yDzn2zE3BzUna+edEsH pNdLjsZoqEP2ZbioPSqdlVpwaPcm45FLF338uQ5+zgHBARPv66DnKEQS3e8rQCtM s/CBUWBBrIYenZMtJ7nnzRGguhyKprrcPEQLrbmB/Z6AWW4h9os83GVIoKBxaThv 2dQCVVKdmFsbt/qJTzH7dWhQz9eflUPbQYLLkAgYbGrkO8jiEhL3j3Gdqy0Wut3t icdB1bS7uI02NpvWeV/mp0OyOn87RKrDngIVPWLmv0F3pWqqkndeszb2yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ5BlC3Pqxb9W2zIlKx61YKxZk8MB8GA1UdIwQY MBaAFLyfWq6aN2du4KdxL/MQ3QsKbyLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUt OWM0Y2IzYmQ5MjVlLzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUtOWM0Y2IzYmQ5MjVl LzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDtpqsIL RtBGByWvYEw71k/EIVNoBWKk0ig4BXJYMyac4lZYayIzXofm9VWZyoKZqNQJgVCw clEmI+hSu3ep9Ssml2xhfd8c8MoEllmPOk3XVGuhXAGa4GhZwqJsnMfDNoXXdGKj xyIpzFsecLfzk5hesXYP9A3j1C3FMSK/LprGM+zvWyg6DtmS3B6Zf/R9wRQpY0kJ PDAxK02pverVnwrvsaSzH9LBqOH6GGqwbBIztTNjCU9Fs9D4BQG4fSeDpOozjl6B AARDzgpMOLWUFvZINW1cyFnIZB3gl3Ri5ZR7GINH2ugQ145R5zHGfU9eVHRkKdZ8 +C9EIqDgBRWtxw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:21:53 2025 by rpki-client