This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft File: vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft (raw, json) Hash identifier: 1MYvZ1h3h6b8Qli410v2hj9+Ysa2bZkZXjKxtliHVZY= Subject key identifier: 3F:A6:23:4E:96:24:35:C8:EC:28:6B:3A:E0:F6:51:71:14:19:8E:98 Authority key identifier: BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A Certificate issuer: /CN=bc90a0c58f9129225e191924aab72c7c03b43c5a Certificate serial: 019AF31D13AD6A2EE040EEBCFFD4704D9412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:02:40 +0000 Manifest this update: Sat 06 Dec 2025 10:02:40 +0000 Manifest next update: Sun 07 Dec 2025 10:02:40 +0000 Files and hashes: 1: vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl (hash: WJAlVloMXDEMFCEK6rPN3rthflaiq9f/kPpL/c7NVAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:13:ad:6a:2e:e0:40:ee:bc:ff:d4:70:4d:94:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc90a0c58f9129225e191924aab72c7c03b43c5a Validity Not Before: Dec 6 10:02:40 2025 GMT Not After : Dec 7 10:02:40 2025 GMT Subject: CN=3fa6234e962435c8ec286b3ae0f6517114198e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:af:90:e0:9f:c9:c9:40:0a:a8:76:0b:7e:4a: 2a:e6:7c:e6:3c:10:9d:ff:2e:87:19:90:14:e4:88: 75:a4:e4:b5:1f:67:4a:db:2a:b9:44:36:cc:22:63: 33:b5:dc:64:54:f6:16:b3:96:71:f7:44:d2:44:29: 15:7a:0c:f2:c7:b7:b4:43:05:1b:78:8c:af:02:8f: 6c:05:8b:9f:1f:87:66:01:3d:74:80:98:24:e0:b5: 59:8f:e8:73:fe:1e:7f:3e:7a:3d:a8:a5:3c:87:17: 49:37:8d:4b:83:5f:9f:b9:af:84:55:ac:6b:35:03: c0:74:9d:68:fd:4e:a0:a6:16:14:8a:fd:1f:94:6a: c5:7f:25:16:df:04:a7:2b:96:6f:80:51:96:bf:47: ac:f5:4e:ab:e1:10:bb:c0:ee:68:37:eb:1d:d9:99: 27:da:d7:f4:5f:91:d4:41:ca:d0:e0:ac:22:a1:25: f3:5b:20:a5:ad:bb:1a:5c:72:81:f1:22:d2:51:f4: bb:a3:aa:a3:99:9b:93:61:55:8a:82:22:cc:bb:4b: de:87:07:94:14:c2:1d:a5:fe:c1:32:76:f8:9d:85: a0:bc:91:cf:1e:a8:7b:5d:c4:73:c2:e6:7d:66:dd: 90:54:1b:2a:62:b6:74:3e:0a:77:91:7a:07:21:54: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A6:23:4E:96:24:35:C8:EC:28:6B:3A:E0:F6:51:71:14:19:8E:98 X509v3 Authority Key Identifier: keyid:BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c2:7e:4b:81:aa:4c:d1:56:94:a1:e8:c2:f4:31:bb:33:a5: 0f:11:1c:db:6b:a8:59:79:a4:14:16:dc:9c:a9:00:bf:c7:5b: 04:f9:ba:3a:2c:ef:ab:38:4c:06:57:06:fc:e5:49:17:ba:96: 53:6e:f6:9c:1a:71:85:47:34:b7:0d:26:b5:30:79:b8:8c:7e: 2c:89:5a:ee:ff:69:bc:21:14:37:31:b8:c5:7a:cf:52:54:c0: 4a:24:05:be:96:d8:32:67:9e:4d:09:a2:ea:2a:a1:02:cd:93: 39:a0:52:e6:30:52:07:97:06:dd:79:b7:53:dd:65:89:29:d9: ba:31:d5:af:01:40:83:53:c7:ab:b3:01:84:e7:01:02:71:7f: bc:ca:ab:0d:5d:14:c5:42:2a:21:14:09:a4:c1:3f:c5:50:d1: 9c:2d:96:21:c5:5a:0a:04:57:5d:17:fe:31:b8:46:c2:21:0c: 58:8f:41:40:1b:08:99:b1:47:19:ea:7a:aa:80:25:28:71:b2: ef:e0:4c:35:97:61:03:af:d5:06:7d:80:d2:3a:ce:08:02:43: 80:48:cf:67:56:27:88:23:d4:eb:ba:eb:e6:7a:73:71:e2:8e: c8:85:42:19:7f:79:23:b7:5d:40:71:15:37:4f:f0:27:7b:78: 9d:a5:ff:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHROtai7gQO68/9RwTZQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOTBhMGM1OGY5MTI5MjI1ZTE5MTkyNGFhYjcyYzdjMDNi NDNjNWEwHhcNMjUxMjA2MTAwMjQwWhcNMjUxMjA3MTAwMjQwWjAzMTEwLwYDVQQD EygzZmE2MjM0ZTk2MjQzNWM4ZWMyODZiM2FlMGY2NTE3MTE0MTk4ZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a+Q4J/JyUAKqHYLfkoq5nzmPBCd /y6HGZAU5Ih1pOS1H2dK2yq5RDbMImMztdxkVPYWs5Zx90TSRCkVegzyx7e0QwUb eIyvAo9sBYufH4dmAT10gJgk4LVZj+hz/h5/Pno9qKU8hxdJN41Lg1+fua+EVaxr NQPAdJ1o/U6gphYUiv0flGrFfyUW3wSnK5ZvgFGWv0es9U6r4RC7wO5oN+sd2Zkn 2tf0X5HUQcrQ4KwioSXzWyClrbsaXHKB8SLSUfS7o6qjmZuTYVWKgiLMu0vehweU FMIdpf7BMnb4nYWgvJHPHqh7XcRzwuZ9Zt2QVBsqYrZ0Pgp3kXoHIVRiqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+mI06WJDXI7ChrOuD2UXEUGY6YMB8GA1UdIwQY MBaAFLyQoMWPkSkiXhkZJKq3LHwDtDxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpDZ3hZLVJLU0plR1Jra3FyY3NmQU8wUEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMDdiMzEtMmZjZi00Yjg5LWIwYzEt ZWQ1ZGU3NzE0MzQ4LzEvdkpDZ3hZLVJLU0plR1Jra3FyY3NmQU8wUEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xMDdiMzEtMmZjZi00Yjg5LWIwYzEtZWQ1ZGU3NzE0MzQ4 LzEvdkpDZ3hZLVJLU0plR1Jra3FyY3NmQU8wUEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMJ+S4Gq TNFWlKHowvQxuzOlDxEc22uoWXmkFBbcnKkAv8dbBPm6OizvqzhMBlcG/OVJF7qW U272nBpxhUc0tw0mtTB5uIx+LIla7v9pvCEUNzG4xXrPUlTASiQFvpbYMmeeTQmi 6iqhAs2TOaBS5jBSB5cG3Xm3U91liSnZujHVrwFAg1PHq7MBhOcBAnF/vMqrDV0U xUIqIRQJpME/xVDRnC2WIcVaCgRXXRf+MbhGwiEMWI9BQBsImbFHGep6qoAlKHGy 7+BMNZdhA6/VBn2A0jrOCAJDgEjPZ1YniCPU67rr5npzceKOyIVCGX95I7ddQHEV N0/wJ3t4naX/mg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:04 2025 by rpki-client