This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft File: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json) Hash identifier: GZy44T/e2KlI13XOL9XeLt5IMtQPzwjVvSxrwqfib8Q= Subject key identifier: 9C:F6:F7:5B:2F:54:6B:75:26:CD:0A:B2:6C:BC:0E:BC:31:3A:BA:A5 Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6 Certificate issuer: /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6 Certificate serial: 019AF12E0EAF89DFD754BAE7EB33EA782FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:58 +0000 Manifest this update: Sat 06 Dec 2025 01:01:58 +0000 Manifest next update: Sun 07 Dec 2025 01:01:58 +0000 Files and hashes: 1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: X6Xw9Tabn8tkri8xv/BLA+kR86bK8h+5Ai4brwX7GWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0e:af:89:df:d7:54:ba:e7:eb:33:ea:78:2f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6 Validity Not Before: Dec 6 01:01:58 2025 GMT Not After : Dec 7 01:01:58 2025 GMT Subject: CN=9cf6f75b2f546b7526cd0ab26cbc0ebc313abaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:2a:6b:0b:1e:82:62:c0:11:b3:a6:4a:6e: 9b:72:ad:1a:83:e4:74:83:cc:4a:7e:41:81:79:71: 55:38:ee:99:40:38:12:69:13:01:80:98:e4:27:73: 96:67:b2:30:f3:56:6e:68:0f:0f:95:db:c3:e2:3b: 66:6b:87:a1:48:b8:96:ed:35:bb:91:5d:ed:4b:bd: 14:bb:82:00:53:c1:04:6e:e9:87:8f:8c:a6:52:ef: d9:b1:fe:e8:f4:69:6d:ca:27:1d:5d:60:e4:19:49: a9:46:56:7c:c0:f4:5a:66:4e:ca:32:db:8d:d2:61: f8:a4:25:f7:fc:bf:57:7b:a6:13:e7:00:4c:bf:a9: 18:91:f9:39:44:38:15:4b:cc:1a:06:81:b2:24:79: 3d:d3:f7:3d:4a:2d:b9:e6:68:ac:79:24:9f:61:2f: bd:1f:d3:71:e1:72:6e:38:6b:d6:60:7b:45:37:54: c0:1d:70:80:41:7c:17:e7:63:56:b4:ed:b0:1c:a8: 22:65:fe:71:ba:b6:5f:2f:0e:67:77:83:79:ae:b3: 60:9e:47:8c:42:b0:ed:2d:3f:2b:3c:22:5f:fb:c3: e4:d7:21:91:9f:0b:e3:31:c1:80:4a:06:f6:d1:54: a3:a4:f1:06:20:60:53:75:3a:73:c8:30:3d:2f:dd: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:F7:5B:2F:54:6B:75:26:CD:0A:B2:6C:BC:0E:BC:31:3A:BA:A5 X509v3 Authority Key Identifier: keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:67:5a:84:8e:28:86:cf:b4:4e:73:41:0b:6a:86:7a:47:ca: b6:42:3d:f6:d3:df:65:44:33:fa:e0:52:ca:bb:e0:61:24:5c: 37:56:67:16:89:a8:a6:95:18:aa:e1:31:c1:eb:0d:43:69:a1: 70:2b:2d:e2:1b:f1:cc:6b:e4:3f:06:0b:6b:c6:2d:cb:41:da: bf:d2:81:a6:43:71:ae:97:3a:27:5d:03:a5:b7:00:55:73:8a: ef:d5:ae:22:13:7e:9e:ee:1c:a9:8b:79:27:05:fe:e1:64:60: 2c:b4:30:b7:95:8f:19:ea:9a:23:e5:42:f8:98:d5:75:1c:d1: d8:eb:22:92:21:4d:c2:fd:54:96:81:39:0c:6a:fc:88:9b:2a: 57:64:0c:07:5e:ff:96:82:b8:e3:6c:54:6b:8f:ca:d5:b8:2b: bf:ea:9b:99:a2:e9:6c:92:6c:60:0a:57:49:95:55:e1:2e:c6: 5c:bd:eb:88:41:4a:7d:6b:a9:c0:89:50:fe:cf:11:48:ce:c1: 4d:db:18:ea:be:24:98:6f:1f:3c:56:0f:8d:42:e8:a7:aa:b3: 6c:8a:2c:97:30:fa:8d:d8:1b:fa:39:81:bf:51:90:fc:17:e6: 82:c1:0b:40:20:9c:3e:e6:11:1b:59:0c:2e:e4:5c:2b:82:95: a6:d6:0c:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLg6vid/XVLrn6zPqeC+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWY1YWFlOWEzNzY3NmVlMGE3NzEyZmYzMTBkZDBiMGE2 ZjIyYzYwHhcNMjUxMjA2MDEwMTU4WhcNMjUxMjA3MDEwMTU4WjAzMTEwLwYDVQQD Eyg5Y2Y2Zjc1YjJmNTQ2Yjc1MjZjZDBhYjI2Y2JjMGViYzMxM2FiYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9gqawsegmLAEbOmSm6bcq0ag+R0 g8xKfkGBeXFVOO6ZQDgSaRMBgJjkJ3OWZ7Iw81ZuaA8PldvD4jtma4ehSLiW7TW7 kV3tS70Uu4IAU8EEbumHj4ymUu/Zsf7o9GltyicdXWDkGUmpRlZ8wPRaZk7KMtuN 0mH4pCX3/L9Xe6YT5wBMv6kYkfk5RDgVS8waBoGyJHk90/c9Si255miseSSfYS+9 H9Nx4XJuOGvWYHtFN1TAHXCAQXwX52NWtO2wHKgiZf5xurZfLw5nd4N5rrNgnkeM QrDtLT8rPCJf+8Pk1yGRnwvjMcGASgb20VSjpPEGIGBTdTpzyDA9L93bmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz291svVGt1Js0Ksmy8DrwxOrqlMB8GA1UdIwQY MBaAFLyfWq6aN2du4KdxL/MQ3QsKbyLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUt OWM0Y2IzYmQ5MjVlLzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUtOWM0Y2IzYmQ5MjVl LzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGdahI4o hs+0TnNBC2qGekfKtkI99tPfZUQz+uBSyrvgYSRcN1ZnFomoppUYquExwesNQ2mh cCst4hvxzGvkPwYLa8Yty0Hav9KBpkNxrpc6J10DpbcAVXOK79WuIhN+nu4cqYt5 JwX+4WRgLLQwt5WPGeqaI+VC+JjVdRzR2OsikiFNwv1UloE5DGr8iJsqV2QMB17/ loK442xUa4/K1bgrv+qbmaLpbJJsYApXSZVV4S7GXL3riEFKfWupwIlQ/s8RSM7B TdsY6r4kmG8fPFYPjULop6qzbIoslzD6jdgb+jmBv1GQ/BfmgsELQCCcPuYRG1kM LuRcK4KVptYMfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:08 2025 by rpki-client