This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json) Hash identifier: /uKP6S2AXD8348v6hxTz2AKRAcsdk/HmmioTsjFrU2Q= Subject key identifier: C1:DF:75:40:8A:92:95:30:26:FE:A5:00:C5:44:FF:BB:EE:EA:DB:43 Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Certificate serial: 019B3B3451D2FFA0E63510EDEFA4D3B85DB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 10:00:43 +0000 Manifest this update: Sat 20 Dec 2025 10:00:43 +0000 Manifest next update: Sun 21 Dec 2025 10:00:43 +0000 Files and hashes: 1: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: itq1OiM2b15lE0RU9fLY2tavx3VtPtBAyRma1xb5ECk=) 2: zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa (hash: R0waJ/l+tfmJv5LfjnRTw8gnCOj1Af2T9Z4QZDnplrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:51:d2:ff:a0:e6:35:10:ed:ef:a4:d3:b8:5d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Validity Not Before: Dec 20 10:00:43 2025 GMT Not After : Dec 21 10:00:43 2025 GMT Subject: CN=c1df75408a92953026fea500c544ffbbeeeadb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:c9:61:f8:2a:d8:4f:44:3a:22:f5:1d:f2: 8d:fe:1b:01:68:8e:6c:40:e7:d2:6a:cf:b7:a7:f1: 37:59:ea:ad:f2:44:24:11:f2:ac:62:e1:7f:85:46: 7e:17:58:e5:77:0b:2d:cc:fd:cf:2a:e8:8d:33:37: 21:c8:0d:d8:20:e3:ae:26:67:c0:35:b2:28:83:54: 43:e5:ba:fa:2e:09:fd:17:b0:3e:dc:1e:c6:ff:89: f5:0a:d0:67:b3:19:ab:ad:9f:a1:e9:29:7c:93:e3: cb:34:48:39:fe:a8:a3:8d:c8:79:f1:90:fc:78:02: e2:c0:68:21:00:c7:d7:db:c0:d0:8a:a8:d1:ec:a9: 08:df:1d:86:8f:b1:38:0c:7c:03:24:1a:bb:39:a6: 2a:61:d2:58:7d:d9:03:02:ca:cb:71:7a:6c:0f:34: 1b:7d:5a:8e:27:1d:d6:3b:48:a7:ca:d8:e7:c2:3e: 5e:b4:14:7e:80:4f:d9:69:fa:77:58:4e:a2:08:e7: 7c:cc:82:54:6f:6d:3d:2f:df:7f:b7:10:7d:b8:cc: f0:29:cf:6a:30:62:ce:a7:d1:52:5e:65:e7:76:57: 1e:c2:1f:35:13:d0:ab:2f:57:f3:c8:8a:3b:94:f9: e9:6d:2b:77:b7:80:9c:3d:3e:28:f0:a3:00:72:e1: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DF:75:40:8A:92:95:30:26:FE:A5:00:C5:44:FF:BB:EE:EA:DB:43 X509v3 Authority Key Identifier: keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4d:f9:b6:39:b9:a5:9f:94:4b:1b:d1:3b:75:ac:12:c5:12: b3:21:a1:a0:67:f3:60:42:24:ad:a0:a6:20:7e:e7:1f:8b:cf: 6a:2c:a4:e7:17:e1:84:cd:5e:d0:1e:f5:89:1d:c2:cd:01:b0: 00:1b:c2:ff:af:cd:ff:d2:d3:32:cc:3b:13:03:50:fa:b1:8e: 67:ed:21:40:03:ea:f3:a5:c5:af:d9:79:22:fb:6e:bd:30:fc: d7:5e:6a:09:0b:ae:85:54:d7:4a:60:90:0d:25:98:ba:30:0d: 3c:21:2b:8f:22:33:fe:ac:e2:4e:f3:42:24:a2:83:ce:36:b5: 3d:42:27:ef:80:11:d1:6b:27:f8:97:4d:23:2e:6e:2f:f6:20: 8e:f2:8e:e2:99:fa:ac:3f:60:4d:b3:6c:92:29:7c:2e:a5:84: 02:95:6f:64:8f:25:c6:15:c5:c0:78:1f:1b:8e:8d:66:fc:05: 5c:7a:6a:e3:ab:79:92:bd:18:05:ed:e7:30:2f:b3:5d:9b:62: 7d:45:ba:85:d6:91:88:a7:e9:cc:27:ee:7f:8f:50:a4:d9:a4: 5f:f6:46:ba:fa:c1:22:24:99:21:5b:fc:76:0d:4e:a3:8b:9f: bc:5f:82:82:c3:e8:8c:fe:7e:96:71:74:98:47:bc:3b:e9:fa: 14:a3:4d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NFHS/6DmNRDt76TTuF2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx OGEwM2UwHhcNMjUxMjIwMTAwMDQzWhcNMjUxMjIxMTAwMDQzWjAzMTEwLwYDVQQD EyhjMWRmNzU0MDhhOTI5NTMwMjZmZWE1MDBjNTQ0ZmZiYmVlZWFkYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFXJYfgq2E9EOiL1HfKN/hsBaI5s QOfSas+3p/E3Weqt8kQkEfKsYuF/hUZ+F1jldwstzP3PKuiNMzchyA3YIOOuJmfA NbIog1RD5br6Lgn9F7A+3B7G/4n1CtBnsxmrrZ+h6Sl8k+PLNEg5/qijjch58ZD8 eALiwGghAMfX28DQiqjR7KkI3x2Gj7E4DHwDJBq7OaYqYdJYfdkDAsrLcXpsDzQb fVqOJx3WO0inytjnwj5etBR+gE/Zafp3WE6iCOd8zIJUb209L99/txB9uMzwKc9q MGLOp9FSXmXndlcewh81E9CrL1fzyIo7lPnpbSt3t4CcPT4o8KMAcuFBkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHfdUCKkpUwJv6lAMVE/7vu6ttDMB8GA1UdIwQY MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt MDVkN2JkNGE3NDFkLzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk35tjm5 pZ+USxvRO3WsEsUSsyGhoGfzYEIkraCmIH7nH4vPaiyk5xfhhM1e0B71iR3CzQGw ABvC/6/N/9LTMsw7EwNQ+rGOZ+0hQAPq86XFr9l5IvtuvTD8115qCQuuhVTXSmCQ DSWYujANPCErjyIz/qziTvNCJKKDzja1PUIn74AR0Wsn+JdNIy5uL/YgjvKO4pn6 rD9gTbNskil8LqWEApVvZI8lxhXFwHgfG46NZvwFXHpq46t5kr0YBe3nMC+zXZti fUW6hdaRiKfpzCfuf49QpNmkX/ZGuvrBIiSZIVv8dg1Oo4ufvF+CgsPojP5+lnF0 mEe8O+n6FKNNFA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:32 2025 by rpki-client