This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json) Hash identifier: T050GpLsS8TYagl3j/lhDXb4FTsPI1+WvqQddoS2wyM= Subject key identifier: 12:2A:8C:AF:CB:AE:D9:CB:2D:E6:14:39:A1:D9:95:27:C2:DD:EB:7D Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Certificate serial: 019B2FD53F455E1E229BB90B7F44EDE957BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft Manifest number: 064E Signing time: Thu 18 Dec 2025 05:01:03 +0000 Manifest this update: Thu 18 Dec 2025 05:01:03 +0000 Manifest next update: Fri 19 Dec 2025 05:01:03 +0000 Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=) 2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=) 3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: oIpvOvN5D17symVIly4bTEwv//mgQzZMqBNMUGLJaZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:3f:45:5e:1e:22:9b:b9:0b:7f:44:ed:e9:57:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Validity Not Before: Dec 18 05:01:03 2025 GMT Not After : Dec 19 05:01:03 2025 GMT Subject: CN=122a8cafcbaed9cb2de61439a1d99527c2ddeb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9f:86:2d:19:ad:d5:ea:32:ea:b7:3c:be:38: 55:ed:94:89:1a:d2:69:2d:09:19:5c:be:3f:ad:78: a1:47:c9:92:02:b1:bd:44:28:32:77:b3:24:d4:01: b4:78:04:fd:9d:b3:d4:26:6a:57:6e:01:76:33:8d: a1:9a:4a:c1:26:93:67:fe:6b:81:2a:f0:d5:e0:54: 73:b5:74:9d:ff:e4:89:fe:31:3b:a4:e9:7e:f5:e4: fb:d2:3e:7a:6a:c7:57:7a:6c:13:04:9d:48:c0:3f: 6a:29:53:e0:e1:c9:1d:01:2b:1b:c9:18:f8:5c:8a: 21:62:43:37:7c:c9:7d:90:12:5f:43:99:85:2e:b9: 80:a3:b7:0e:a2:2a:68:a1:ea:79:f1:51:ea:bb:fc: 48:db:2b:10:60:21:e6:8b:79:94:c6:04:6d:93:2c: 66:48:10:bd:f2:da:53:bd:91:99:b5:14:b8:96:5e: 7e:32:5a:6a:17:ba:cb:46:ca:2a:ac:89:c7:fd:91: 6a:6c:71:a1:a3:da:6b:7a:e4:29:c4:ec:3f:32:11: fd:8c:ca:20:e3:53:bc:15:74:42:f2:54:9e:3e:78: 87:83:1c:56:ce:08:10:89:ec:1f:7b:a1:8b:ca:93: 95:3e:34:b6:ef:97:08:1b:b0:e8:c6:15:1f:3a:33: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:8C:AF:CB:AE:D9:CB:2D:E6:14:39:A1:D9:95:27:C2:DD:EB:7D X509v3 Authority Key Identifier: keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8b:e5:e0:06:c3:db:6f:35:55:eb:ac:ee:e1:8f:d0:f9:51: a1:9f:ff:76:a9:84:39:63:42:4e:b5:ed:16:94:6e:cd:a1:4a: 40:23:5e:95:49:cf:05:b8:de:7d:f2:d3:21:51:b8:13:3b:f1: ef:4a:0a:0e:26:3f:ff:e1:95:c8:7b:b6:45:56:8b:19:8e:ca: c1:7f:76:dc:9a:e9:1e:f6:2d:67:6a:87:1f:f3:b7:fa:cd:ac: e8:a3:0b:eb:03:37:1d:f6:53:80:6c:b1:de:08:fa:d1:8f:66: 74:7e:b5:51:42:1a:a2:0c:92:60:bd:e3:b7:97:ba:06:2b:29: 74:14:b7:8d:61:09:c4:75:e2:ec:e4:7c:da:0d:72:f2:d3:7a: 08:84:3a:07:52:f5:2d:f1:f9:9a:b7:20:40:e1:44:46:e6:b8: 75:75:e6:67:4c:b1:f5:c8:02:4f:8b:2e:29:d1:06:27:56:f4: 02:a5:c3:ea:5d:a7:e7:80:1d:97:25:ea:68:84:6f:0a:db:08: a2:ab:ed:74:8c:21:96:e8:9f:4f:69:de:16:10:9f:11:71:0a: 7b:69:39:80:d9:e3:4b:c2:39:41:5f:fb:7d:0d:49:dc:37:9e: 90:18:4d:08:16:5a:e4:d2:62:43:0d:de:e8:dc:5f:20:20:51: b0:b6:b6:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1T9FXh4im7kLf0Tt6Ve6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0 MjNkNjgwHhcNMjUxMjE4MDUwMTAzWhcNMjUxMjE5MDUwMTAzWjAzMTEwLwYDVQQD EygxMjJhOGNhZmNiYWVkOWNiMmRlNjE0MzlhMWQ5OTUyN2MyZGRlYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp+GLRmt1eoy6rc8vjhV7ZSJGtJp LQkZXL4/rXihR8mSArG9RCgyd7Mk1AG0eAT9nbPUJmpXbgF2M42hmkrBJpNn/muB KvDV4FRztXSd/+SJ/jE7pOl+9eT70j56asdXemwTBJ1IwD9qKVPg4ckdASsbyRj4 XIohYkM3fMl9kBJfQ5mFLrmAo7cOoipooep58VHqu/xI2ysQYCHmi3mUxgRtkyxm SBC98tpTvZGZtRS4ll5+MlpqF7rLRsoqrInH/ZFqbHGho9preuQpxOw/MhH9jMog 41O8FXRC8lSePniHgxxWzggQiewfe6GLypOVPjS275cIG7DoxhUfOjPNPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIqjK/LrtnLLeYUOaHZlSfC3et9MB8GA1UdIwQY MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4vl4AbD 2281Veus7uGP0PlRoZ//dqmEOWNCTrXtFpRuzaFKQCNelUnPBbjeffLTIVG4Ezvx 70oKDiY//+GVyHu2RVaLGY7KwX923JrpHvYtZ2qHH/O3+s2s6KML6wM3HfZTgGyx 3gj60Y9mdH61UUIaogySYL3jt5e6BispdBS3jWEJxHXi7OR82g1y8tN6CIQ6B1L1 LfH5mrcgQOFERua4dXXmZ0yx9cgCT4suKdEGJ1b0AqXD6l2n54AdlyXqaIRvCtsI oqvtdIwhluifT2neFhCfEXEKe2k5gNnjS8I5QV/7fQ1J3DeekBhNCBZa5NJiQw3e 6NxfICBRsLa2LA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:49 2025 by rpki-client