This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json) Hash identifier: vcv2JRsVGs5+gZRUgUjc3b/MQqaMNgrFxmfTjD9/v2M= Subject key identifier: 7D:83:93:B1:31:68:FC:09:FE:4B:D0:BE:6A:6C:6E:FB:A3:15:A6:1D Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Certificate serial: 019B37C555A6CB2A9994E8D4EC9A1E037AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 18:00:37 +0000 Manifest this update: Fri 19 Dec 2025 18:00:37 +0000 Manifest next update: Sat 20 Dec 2025 18:00:37 +0000 Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=) 2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=) 3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: Y/zgUfISnp0CkZJwJtM4G6cMP9CTU+j4foCcJibj/YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:55:a6:cb:2a:99:94:e8:d4:ec:9a:1e:03:7a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df Validity Not Before: Dec 19 18:00:37 2025 GMT Not After : Dec 20 18:00:37 2025 GMT Subject: CN=7d8393b13168fc09fe4bd0be6a6c6efba315a61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:fc:c9:70:4a:04:65:cd:b5:83:ce:14:42: ba:89:89:e3:1b:9f:a0:96:9a:f7:ab:3c:e1:14:53: 4b:09:6a:b3:57:15:3b:82:b3:2c:d0:63:95:56:55: 49:25:d4:c3:f9:32:b6:8d:27:5e:98:92:4e:d0:ca: 5c:aa:72:43:12:4c:2f:78:7a:84:dd:31:a0:d6:e7: 06:03:ae:e9:ff:42:58:b2:ad:2e:28:5c:a0:41:65: 78:81:ea:5b:7d:9b:27:b7:c8:55:75:5c:11:0b:99: 29:6d:fa:1a:d2:b8:b4:cc:53:00:2b:73:90:31:1b: d5:6f:cd:6d:0e:15:40:6f:b8:09:cb:c3:f1:fc:6d: 3e:ae:74:d4:4f:30:ae:a1:0c:2b:74:37:23:5c:0f: de:57:1a:2a:f9:5d:e4:3d:07:5e:29:6c:cb:2f:13: d8:54:a5:3b:db:a1:b8:74:95:11:68:08:79:f2:fa: 33:91:b3:f2:a0:ae:d8:6e:bc:68:9d:5f:a5:22:16: cf:b5:dd:b4:22:c4:0d:03:59:07:58:0c:ef:da:c3: 98:72:46:64:8a:25:c9:6f:4f:66:18:76:6d:e8:53: 1e:7f:08:a9:7b:48:7f:e7:00:62:0c:c0:8c:80:45: 01:8b:ff:1a:9b:0f:7f:52:43:ea:6a:bb:76:7e:0f: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:83:93:B1:31:68:FC:09:FE:4B:D0:BE:6A:6C:6E:FB:A3:15:A6:1D X509v3 Authority Key Identifier: keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:11:79:bb:7b:c5:a4:cd:e2:38:ac:05:a5:76:fe:93:a1:74: f2:3c:89:02:30:1a:fa:4c:68:ea:af:de:04:89:b3:07:b7:68: a0:a7:ab:55:1f:8a:d4:e8:e8:b7:ee:69:9f:4c:ff:0d:93:28: ab:a5:7c:61:d0:03:6f:bf:db:e4:25:ac:96:5c:0e:b9:1a:55: bc:8f:d8:4b:d1:5c:8a:98:97:36:f3:a5:49:cf:27:40:0a:ac: 04:da:45:79:84:3f:00:78:d5:fe:f5:f5:65:95:da:ad:eb:63: fc:f1:60:5e:8e:97:84:cf:3c:d3:ec:62:dc:e7:66:19:ee:92: 9a:ca:da:f0:ba:86:2e:e4:dc:69:74:47:b6:a7:4b:27:c0:44: 0d:ff:d2:99:a8:aa:a8:b3:5e:f9:b6:6f:16:c3:5b:93:0a:bf: 89:78:db:ea:86:e9:f8:f6:e9:8e:d0:af:52:8a:5b:76:13:93: d1:78:87:07:84:92:cd:7e:0c:26:a8:b1:eb:1a:07:6b:f5:49: e7:41:fd:c3:d4:0e:18:3b:20:a6:a5:66:1b:58:eb:f2:94:b0: 8e:42:20:47:98:fe:8a:ca:f3:08:43:00:6f:ea:f3:71:75:c9: 14:d3:21:f6:51:fa:ff:73:45:e9:ff:84:3f:bb:5e:87:08:c6: d8:9a:3c:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xVWmyyqZlOjU7JoeA3rGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5 NjQ3ZGYwHhcNMjUxMjE5MTgwMDM3WhcNMjUxMjIwMTgwMDM3WjAzMTEwLwYDVQQD Eyg3ZDgzOTNiMTMxNjhmYzA5ZmU0YmQwYmU2YTZjNmVmYmEzMTVhNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndP8yXBKBGXNtYPOFEK6iYnjG5+g lpr3qzzhFFNLCWqzVxU7grMs0GOVVlVJJdTD+TK2jSdemJJO0MpcqnJDEkwveHqE 3TGg1ucGA67p/0JYsq0uKFygQWV4gepbfZsnt8hVdVwRC5kpbfoa0ri0zFMAK3OQ MRvVb81tDhVAb7gJy8Px/G0+rnTUTzCuoQwrdDcjXA/eVxoq+V3kPQdeKWzLLxPY VKU726G4dJURaAh58vozkbPyoK7YbrxonV+lIhbPtd20IsQNA1kHWAzv2sOYckZk iiXJb09mGHZt6FMefwipe0h/5wBiDMCMgEUBi/8amw9/UkPqart2fg8EkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2Dk7ExaPwJ/kvQvmpsbvujFaYdMB8GA1UdIwQY MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut OTVjODk0MmRmNzI0LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0 LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxF5u3vF pM3iOKwFpXb+k6F08jyJAjAa+kxo6q/eBImzB7dooKerVR+K1Ojot+5pn0z/DZMo q6V8YdADb7/b5CWsllwOuRpVvI/YS9FcipiXNvOlSc8nQAqsBNpFeYQ/AHjV/vX1 ZZXaretj/PFgXo6XhM880+xi3OdmGe6Smsra8LqGLuTcaXRHtqdLJ8BEDf/Smaiq qLNe+bZvFsNbkwq/iXjb6obp+PbpjtCvUopbdhOT0XiHB4SSzX4MJqix6xoHa/VJ 50H9w9QOGDsgpqVmG1jr8pSwjkIgR5j+isrzCEMAb+rzcXXJFNMh9lH6/3NF6f+E P7tehwjG2Jo8Nw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:26 2025 by rpki-client