This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json) Hash identifier: bBVl5w0q/owiUuj6CJWH3Mxy0M9fA/FClOb0ignqdpQ= Subject key identifier: E2:1D:E5:90:47:D1:43:20:50:B7:31:B3:25:D4:CD:A4:79:EA:AB:42 Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6 Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6 Certificate serial: 019B40C874958ED4C683CCD3D781258F7690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft Manifest number: 08A8 Signing time: Sun 21 Dec 2025 12:00:37 +0000 Manifest this update: Sun 21 Dec 2025 12:00:37 +0000 Manifest next update: Mon 22 Dec 2025 12:00:37 +0000 Files and hashes: 1: 1DMwz6cy5-zMTggYwJ41QekWZIY.roa (hash: nwmEuQjAVrxnR0Ze+XAFnQ4uH1WM0zEOCcXND1iguH8=) 2: tAG_ogHK36F9dYARrabqMiVm7WI.roa (hash: XyLTR6YvVH7wVie2ZS7kPXzKlWsXCj8THEJuI5lJwIg=) 3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: d2s0bOOriWS5VNdQ//NcnTVtRbU8hb9MZKPvsgkVuU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:74:95:8e:d4:c6:83:cc:d3:d7:81:25:8f:76:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6 Validity Not Before: Dec 21 12:00:37 2025 GMT Not After : Dec 22 12:00:37 2025 GMT Subject: CN=e21de59047d1432050b731b325d4cda479eaab42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:5d:28:ae:4e:57:66:79:e7:54:e4:83:13: f7:8a:63:dc:20:ea:60:66:af:d6:02:f2:85:bd:ec: c6:d1:fe:54:7f:41:95:d4:d6:ff:2e:19:ff:16:50: cb:f7:d0:35:8e:eb:cc:08:dd:38:34:56:a6:25:22: 71:8d:e7:3d:ca:0d:9b:29:a2:9a:a6:b8:f2:96:40: 19:16:1c:39:e7:7e:eb:4a:8b:0d:be:a4:84:ca:f5: 6a:3d:84:4c:d1:05:ba:37:06:60:0e:7c:1e:ac:7e: e3:ff:23:90:7f:9c:bb:a7:29:66:26:ec:f4:84:b6: 2f:da:e0:a2:88:a2:ed:f7:15:50:29:8a:35:fc:6b: 14:3a:24:4d:1f:c2:ef:d9:72:48:a2:ea:fa:c3:0f: e1:5d:6f:4f:72:6f:f5:58:d6:45:4f:e2:b2:bc:43: dc:fc:ea:bc:4c:f6:40:a4:89:ee:30:2e:e7:c4:f9: 52:e4:75:b5:cb:a8:b1:1a:e9:ca:5b:ba:76:5d:39: bc:08:b1:aa:9e:f7:67:2d:15:b8:c4:32:62:f9:b5: 5a:88:37:83:85:42:c2:65:af:09:ab:b9:06:c6:ba: 8d:dc:37:a3:8d:7a:df:fd:33:48:2e:47:d7:78:22: 38:8a:7f:bf:4b:94:8d:0b:d5:19:ee:fc:8c:e0:66: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:E5:90:47:D1:43:20:50:B7:31:B3:25:D4:CD:A4:79:EA:AB:42 X509v3 Authority Key Identifier: keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:96:58:d8:7d:8c:fe:20:3d:f7:5d:14:1f:cd:cd:74:80:99: 62:75:53:74:97:86:91:17:6d:f8:9c:eb:52:25:df:90:93:fc: a9:61:b2:6f:65:2e:9e:d1:0f:b8:dd:86:f1:a1:6f:2a:ca:94: 7f:ff:b7:dd:8b:2f:70:19:79:87:83:2a:51:ce:cc:78:c1:95: fb:1a:a9:51:92:9d:99:51:9e:b0:b7:72:ca:de:9d:a2:19:b7: d9:88:03:e8:74:58:b5:67:ba:ed:ea:88:a0:cc:09:90:cf:3c: 28:2c:eb:b8:df:bd:90:23:1b:c6:20:d0:81:bd:8f:64:da:ac: 27:07:f6:42:03:36:c3:2b:45:a8:37:ea:2e:bd:f6:c3:7c:02: 70:96:fb:72:68:48:26:9e:d8:5a:10:e5:4c:f4:2b:77:d0:bd: 15:e9:76:23:d7:3e:05:9c:8f:ef:c0:63:b2:af:80:5c:87:9e: 37:f5:a3:1b:86:45:19:b3:4d:ba:c1:39:5b:fc:bc:08:05:35: 0e:9d:ed:a0:6b:66:d8:40:5b:e9:ed:ce:91:af:91:40:5a:1a: 97:73:49:ab:c8:fa:92:89:c7:0c:80:db:b8:21:9d:28:53:59: fa:08:01:98:d3:80:2e:a6:b9:87:26:96:84:77:94:0f:a7:3e: 37:5c:5d:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyHSVjtTGg8zT14Elj3aQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMWYzZGMyMjk1MzA2Y2M3ZGY4NzJjZWVjY2Q2ODk0ZDBl MGVhZTYwHhcNMjUxMjIxMTIwMDM3WhcNMjUxMjIyMTIwMDM3WjAzMTEwLwYDVQQD EyhlMjFkZTU5MDQ3ZDE0MzIwNTBiNzMxYjMyNWQ0Y2RhNDc5ZWFhYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZVdKK5OV2Z551TkgxP3imPcIOpg Zq/WAvKFvezG0f5Uf0GV1Nb/Lhn/FlDL99A1juvMCN04NFamJSJxjec9yg2bKaKa prjylkAZFhw5537rSosNvqSEyvVqPYRM0QW6NwZgDnwerH7j/yOQf5y7pylmJuz0 hLYv2uCiiKLt9xVQKYo1/GsUOiRNH8Lv2XJIour6ww/hXW9Pcm/1WNZFT+KyvEPc /Oq8TPZApInuMC7nxPlS5HW1y6ixGunKW7p2XTm8CLGqnvdnLRW4xDJi+bVaiDeD hULCZa8Jq7kGxrqN3DejjXrf/TNILkfXeCI4in+/S5SNC9UZ7vyM4GbrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOId5ZBH0UMgULcxsyXUzaR56qtCMB8GA1UdIwQY MBaAFL4fPcIpUwbMffhyzuzNaJTQ4OrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEt YjUxYWRmZmM2ZWVjLzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEtYjUxYWRmZmM2ZWVj LzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpZY2H2M /iA9910UH83NdICZYnVTdJeGkRdt+JzrUiXfkJP8qWGyb2UuntEPuN2G8aFvKsqU f/+33YsvcBl5h4MqUc7MeMGV+xqpUZKdmVGesLdyyt6dohm32YgD6HRYtWe67eqI oMwJkM88KCzruN+9kCMbxiDQgb2PZNqsJwf2QgM2wytFqDfqLr32w3wCcJb7cmhI Jp7YWhDlTPQrd9C9Fel2I9c+BZyP78Bjsq+AXIeeN/WjG4ZFGbNNusE5W/y8CAU1 Dp3toGtm2EBb6e3Oka+RQFoal3NJq8j6konHDIDbuCGdKFNZ+ggBmNOALqa5hyaW hHeUD6c+N1xdig== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:47 2025 by rpki-client