This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json) Hash identifier: CNnuqkXYJZ8GX3iOvDumHhDm15CM0jfazUSTmlztg84= Subject key identifier: 17:F7:8B:25:C6:5F:95:2F:A7:13:68:56:05:FB:9A:DB:00:67:32:17 Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Certificate serial: 019AF2769FF4B542A4B7B1ACE210BF7299A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft Manifest number: 151D Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: esQs3FXj7eHQ7fym0Zd0GPbTp7U+Uv7bpQck02dWrck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9f:f4:b5:42:a4:b7:b1:ac:e2:10:bf:72:99:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=17f78b25c65f952fa713685605fb9adb00673217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:b3:e1:09:ba:8e:75:3e:1f:ff:58:a2:84: f7:dc:f2:11:9c:21:89:43:11:04:03:30:18:00:b1: 8c:20:0a:12:03:bb:12:eb:e3:4a:0b:d9:92:46:a0: 38:65:73:00:48:99:86:f1:da:7f:9b:ce:d3:7b:d3: e3:b4:2f:ad:db:c7:b4:d2:66:58:47:f9:0e:83:94: 6e:7a:6f:4c:1e:c0:1d:47:c6:fb:f8:a6:0b:3d:4c: 65:ef:34:00:74:d6:5b:07:50:e1:05:75:ab:c9:4a: 6c:8e:30:b6:bf:0f:d4:e8:5b:9f:78:8d:5d:b4:12: e5:92:d2:76:f8:ac:27:f8:41:bb:2d:3e:98:5a:67: 5d:a5:c0:30:57:f3:bf:ae:79:77:c4:a3:93:b4:13: a8:de:08:cc:47:c4:66:b8:ed:80:20:b9:f9:d3:ea: 88:3d:b4:91:14:ca:b0:7c:f8:58:60:6c:1d:1e:68: 30:7b:7a:a8:4a:f2:bb:94:dc:90:23:1b:08:ff:e8: 06:a4:11:56:61:97:62:a3:4f:0b:6f:f4:cf:d1:c7: 9f:ba:8f:84:2c:2e:63:90:d1:94:9b:d7:33:b7:d8: 94:83:f6:bf:e9:72:74:e9:27:8c:7a:0e:d0:1e:25: bf:67:ff:28:8d:86:6b:e5:a4:2a:dd:70:17:25:d2: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:8B:25:C6:5F:95:2F:A7:13:68:56:05:FB:9A:DB:00:67:32:17 X509v3 Authority Key Identifier: keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:99:ab:a8:3c:35:16:27:c1:34:5b:7c:5c:df:ed:2f:1f:47: 35:98:78:91:c7:83:16:93:06:84:c5:34:66:7f:0e:c3:b2:be: 5d:3f:39:a3:43:7e:a5:83:48:26:e2:55:73:c8:09:19:d7:5c: ad:82:a3:76:65:af:d9:bd:23:c9:f7:58:aa:6b:78:c1:f1:12: f5:8b:1e:a1:b0:4e:80:7b:09:d9:b5:40:f0:c1:d5:37:8c:9e: b9:62:67:b8:13:dd:c1:b8:fe:3d:c1:62:e2:54:48:99:97:4d: 87:1e:54:45:ac:1d:1e:2e:94:bf:59:86:99:ab:be:97:2f:5f: 35:85:ab:94:3f:40:45:b1:6c:1c:70:f7:d0:26:06:c4:99:09: 3d:e6:de:dd:05:e8:37:e4:4f:ea:aa:c6:99:b7:32:09:4f:4c: de:b5:9e:53:26:e4:38:12:6d:f9:c7:7c:7c:1b:54:93:f4:66: 14:14:30:6a:2b:ab:0a:24:f1:c9:35:37:eb:b5:b9:79:9d:42: 10:3e:a9:ed:02:b0:24:77:61:5f:2f:db:ea:25:8e:b4:2a:19: c0:47:30:14:0d:2b:d8:78:fa:dc:a0:a9:4a:f3:b6:5e:08:1f: f2:44:39:91:7f:c8:77:b2:0b:f7:dd:93:e8:79:ef:7a:7b:cb: 3b:0b:fe:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp/0tUKkt7Gs4hC/cpmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjk1NTQxNTUxYzc5YjhjZDU5ODg2ZTRkMTJiOGIxMzky NTVhYzQwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EygxN2Y3OGIyNWM2NWY5NTJmYTcxMzY4NTYwNWZiOWFkYjAwNjczMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR+z4Qm6jnU+H/9YooT33PIRnCGJ QxEEAzAYALGMIAoSA7sS6+NKC9mSRqA4ZXMASJmG8dp/m87Te9PjtC+t28e00mZY R/kOg5Ruem9MHsAdR8b7+KYLPUxl7zQAdNZbB1DhBXWryUpsjjC2vw/U6FufeI1d tBLlktJ2+Kwn+EG7LT6YWmddpcAwV/O/rnl3xKOTtBOo3gjMR8RmuO2AILn50+qI PbSRFMqwfPhYYGwdHmgwe3qoSvK7lNyQIxsI/+gGpBFWYZdio08Lb/TP0cefuo+E LC5jkNGUm9czt9iUg/a/6XJ06SeMeg7QHiW/Z/8ojYZr5aQq3XAXJdL4FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf3iyXGX5UvpxNoVgX7mtsAZzIXMB8GA1UdIwQY MBaAFLy5VUFVHHm4zVmIbk0SuLE5JVrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEt NjEwOWM3MzhlYmY2LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEtNjEwOWM3MzhlYmY2 LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5mrqDw1 FifBNFt8XN/tLx9HNZh4kceDFpMGhMU0Zn8Ow7K+XT85o0N+pYNIJuJVc8gJGddc rYKjdmWv2b0jyfdYqmt4wfES9YseobBOgHsJ2bVA8MHVN4yeuWJnuBPdwbj+PcFi 4lRImZdNhx5URawdHi6Uv1mGmau+ly9fNYWrlD9ARbFsHHD30CYGxJkJPebe3QXo N+RP6qrGmbcyCU9M3rWeUybkOBJt+cd8fBtUk/RmFBQwaiurCiTxyTU367W5eZ1C ED6p7QKwJHdhXy/b6iWOtCoZwEcwFA0r2Hj63KCpSvO2Xggf8kQ5kX/Id7IL992T 6HnvenvLOwv+5w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:59 2025 by rpki-client