This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json) Hash identifier: Lb4NGSHqUlWV66df0+SPjR+4lPcVt7C4fyGNbgmiPAU= Subject key identifier: 75:ED:7B:1B:9B:C2:D7:AE:70:74:20:D3:B5:3A:04:E1:F1:5B:4C:B2 Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Certificate serial: 019AF7666A23D17E145F87571E687A65E6CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft Manifest number: 1769 Signing time: Sun 07 Dec 2025 06:01:15 +0000 Manifest this update: Sun 07 Dec 2025 06:01:15 +0000 Manifest next update: Mon 08 Dec 2025 06:01:15 +0000 Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=) 2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: nePOg/Aw3FjYHbZ+kQ57eqFvNsbOI7/uSO9HReN6UvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:6a:23:d1:7e:14:5f:87:57:1e:68:7a:65:e6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Validity Not Before: Dec 7 06:01:15 2025 GMT Not After : Dec 8 06:01:15 2025 GMT Subject: CN=75ed7b1b9bc2d7ae707420d3b53a04e1f15b4cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:7e:0a:81:12:97:0a:53:f8:61:da:57:d6: f6:ed:30:1d:3c:a7:67:ec:59:b6:ae:fa:da:31:0a: 1f:52:e7:c2:f2:f2:bb:76:39:8a:de:89:5e:50:ae: 37:8f:b7:73:a0:92:6a:e4:bd:63:c8:b4:08:a2:b3: 7d:60:60:6a:86:52:35:7c:86:ba:a2:ad:7a:bc:55: 75:c7:8c:e9:e1:ce:f7:f7:de:02:bf:01:09:dd:56: 2a:e9:63:bb:4e:59:93:12:81:60:fe:d6:aa:11:6c: ff:9f:9f:63:6a:56:84:9e:a3:6f:c0:12:10:de:e0: a9:1c:b9:f5:da:1d:ac:5a:a7:de:72:79:ee:24:d0: 05:98:64:a4:24:4c:ca:ab:a4:9e:e4:59:0a:72:81: 39:b2:2c:3f:70:a4:a2:4d:39:04:eb:93:40:94:83: 20:40:f4:93:ca:96:8d:22:4e:30:77:62:4e:93:76: 09:0a:2c:c2:20:46:53:fa:7f:aa:02:c2:77:7c:5f: 7c:44:b0:30:b7:83:08:48:c0:b3:38:9c:42:f2:50: e5:7c:2d:1d:1d:7e:de:50:5d:e3:70:ad:4e:5a:9b: 01:46:ed:f0:21:df:4f:ba:8c:65:ef:0b:dd:1a:8b: 4c:d2:6e:2d:b1:40:ec:e9:77:2f:0e:b8:54:08:08: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:ED:7B:1B:9B:C2:D7:AE:70:74:20:D3:B5:3A:04:E1:F1:5B:4C:B2 X509v3 Authority Key Identifier: keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d9:05:4a:8f:39:4f:be:38:65:6e:26:a2:28:62:71:00:92: 9e:a6:a8:c2:4f:92:5c:5e:ec:80:95:0c:2c:d5:4f:56:5b:67: 07:44:ca:dd:d1:6a:e5:9a:c9:7e:d8:2c:7a:e1:50:a8:37:6e: f9:a6:99:99:30:60:ab:75:47:df:df:ee:d1:45:a3:c4:94:ef: c1:1a:8f:e2:6a:f8:53:ed:4a:56:d6:87:c6:f8:8a:ac:30:ab: e6:d5:29:b1:9f:d5:04:53:62:ac:4f:6f:94:3e:f1:7d:69:96: ad:10:62:64:68:ec:1f:3a:04:d1:11:a8:e0:38:f5:c5:63:fb: 95:3f:e9:dd:df:d0:2e:9c:0e:c6:dd:56:df:80:25:d8:31:b6: 88:67:08:81:8b:bc:73:01:dc:80:6e:75:55:d4:78:2d:50:ab: 4e:82:69:01:bc:fe:18:6a:9f:a5:58:a5:f1:49:cd:ad:57:5a: 59:a1:94:0e:f4:c9:66:48:42:2e:43:af:32:96:a5:d2:9e:69: f6:21:e6:21:a6:f8:19:2d:45:33:a3:1b:69:a3:9a:8b:58:64: 34:99:06:70:21:7e:d7:ba:81:ae:eb:83:0c:c7:a6:a9:72:be: 30:e8:25:9a:86:9a:cc:9c:7b:07:00:2e:66:2d:90:74:55:b9: e2:8d:81:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Zmoj0X4UX4dXHmh6ZebKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi ZGU3MGUwHhcNMjUxMjA3MDYwMTE1WhcNMjUxMjA4MDYwMTE1WjAzMTEwLwYDVQQD Eyg3NWVkN2IxYjliYzJkN2FlNzA3NDIwZDNiNTNhMDRlMWYxNWI0Y2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu15+CoESlwpT+GHaV9b27TAdPKdn 7Fm2rvraMQofUufC8vK7djmK3oleUK43j7dzoJJq5L1jyLQIorN9YGBqhlI1fIa6 oq16vFV1x4zp4c73994CvwEJ3VYq6WO7TlmTEoFg/taqEWz/n59jalaEnqNvwBIQ 3uCpHLn12h2sWqfecnnuJNAFmGSkJEzKq6Se5FkKcoE5siw/cKSiTTkE65NAlIMg QPSTypaNIk4wd2JOk3YJCizCIEZT+n+qAsJ3fF98RLAwt4MISMCzOJxC8lDlfC0d HX7eUF3jcK1OWpsBRu3wId9Puoxl7wvdGotM0m4tsUDs6XcvDrhUCAh+4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXtexubwteucHQg07U6BOHxW0yyMB8GA1UdIwQY MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt MTM1YzQwMjE3Yjg2LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2 LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9kFSo85 T744ZW4moihicQCSnqaowk+SXF7sgJUMLNVPVltnB0TK3dFq5ZrJftgseuFQqDdu +aaZmTBgq3VH39/u0UWjxJTvwRqP4mr4U+1KVtaHxviKrDCr5tUpsZ/VBFNirE9v lD7xfWmWrRBiZGjsHzoE0RGo4Dj1xWP7lT/p3d/QLpwOxt1W34Al2DG2iGcIgYu8 cwHcgG51VdR4LVCrToJpAbz+GGqfpVil8UnNrVdaWaGUDvTJZkhCLkOvMpal0p5p 9iHmIab4GS1FM6MbaaOai1hkNJkGcCF+17qBruuDDMemqXK+MOglmoaazJx7BwAu Zi2QdFW54o2B5Q== -----END CERTIFICATE-----Generated at Sun Dec 7 11:13:06 2025 by rpki-client