This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json) Hash identifier: CBg+riVCcaB2T8eHt0vgS7eP81xttXI3fl7Vj7c+HM4= Subject key identifier: 44:FD:C7:2C:7C:BE:70:29:CF:4F:67:E4:9F:37:38:D9:5E:61:25:DB Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d Certificate serial: 019B2B1DDE833EB8B34699DBE5506C9C7DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft Manifest number: 037A Signing time: Wed 17 Dec 2025 07:02:16 +0000 Manifest this update: Wed 17 Dec 2025 07:02:16 +0000 Manifest next update: Thu 18 Dec 2025 07:02:16 +0000 Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: H1PuC0SiZxvR+W5hUkF0VbQZ6khHuWMZoFK4BNJc+hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:de:83:3e:b8:b3:46:99:db:e5:50:6c:9c:7d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d Validity Not Before: Dec 17 07:02:16 2025 GMT Not After : Dec 18 07:02:16 2025 GMT Subject: CN=44fdc72c7cbe7029cf4f67e49f3738d95e6125db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:dc:c1:ab:30:21:3f:bc:85:e9:87:09:00: e3:0b:d1:44:81:95:f3:d4:3a:49:4b:cc:53:03:7b: 89:8e:c8:ae:ea:0d:7a:75:07:2e:55:1e:75:a5:03: 5c:fb:6d:52:e8:fb:4d:04:c4:fe:19:c4:04:6a:ae: e2:97:2e:66:08:97:d7:7a:0f:df:5c:71:56:14:e6: f3:c1:b0:69:bc:0f:ba:a9:99:67:b9:82:93:fb:69: d3:b9:b8:87:19:ca:4e:08:85:ec:e1:f7:b4:24:75: 5f:11:cd:59:21:92:4e:07:76:59:95:57:07:f0:27: 88:13:1c:75:9e:2b:76:e4:13:9f:c4:ac:1f:06:21: f7:88:f5:38:62:06:a0:10:b1:7c:7c:ee:93:10:dd: 42:cd:c8:59:db:ae:6f:14:dc:7c:21:63:fc:50:42: f3:4a:bd:78:69:14:7c:c1:8b:a0:74:30:f2:e4:3f: 95:d6:36:77:c5:38:52:47:86:54:a0:96:47:d9:94: 20:27:8a:5a:ab:03:13:e6:8c:e6:ae:1c:c7:a3:56: e9:05:f6:de:31:6e:58:f5:de:ad:34:16:d2:87:68: 51:0f:21:02:c7:7f:01:88:ab:ec:8f:83:19:e5:60: db:2c:03:aa:a1:8a:45:f3:b9:dc:d9:db:1f:4f:e5: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:C7:2C:7C:BE:70:29:CF:4F:67:E4:9F:37:38:D9:5E:61:25:DB X509v3 Authority Key Identifier: keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:65:88:9f:fa:b5:ed:7e:77:3d:8f:17:f0:cd:93:dc:f1:9c: 8a:d7:c5:07:da:0a:eb:25:89:fe:0f:a5:af:97:af:a3:60:5c: 50:77:ca:f7:44:84:5b:df:36:a4:68:50:ae:57:3f:17:4b:e4: e9:99:44:5f:36:d0:19:2f:ab:f9:eb:88:b7:4b:9f:0f:aa:9b: 88:35:58:64:87:aa:2c:ae:66:83:37:e6:09:9b:f0:57:f6:3a: 62:ad:fc:d0:59:64:00:74:12:64:6a:03:4f:09:56:ef:d7:7f: 5e:49:00:7d:75:60:7e:2d:91:e2:c4:25:46:48:66:ab:9c:1b: 86:de:b5:4b:cd:ca:bb:97:48:f8:91:4c:7e:6e:a1:2a:f9:24: 7e:7a:53:ae:71:cc:6e:d1:bb:0e:01:a9:ab:d3:ff:0b:ac:b7: 37:64:c4:c4:af:84:43:52:19:b3:39:e8:31:51:fd:cf:05:93: 0f:a1:f2:0c:43:67:c4:41:51:90:9e:79:f8:81:c6:e2:67:d6: 59:79:3f:35:ae:ae:93:c0:c3:b8:7c:47:fa:97:f8:a6:89:2e: 83:65:f8:fb:8d:b0:b4:f0:27:91:e3:7a:74:8d:6f:ce:73:4e: f0:3f:7e:53:37:59:b2:fa:ab:3a:c4:a7:aa:f7:0d:f2:76:f0: 24:09:78:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHd6DPrizRpnb5VBsnH2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWEzODFmOGE2MGNjNTFiNTI5OTBlZDM4Njk0OGY2ODRj MzE1OWQwHhcNMjUxMjE3MDcwMjE2WhcNMjUxMjE4MDcwMjE2WjAzMTEwLwYDVQQD Eyg0NGZkYzcyYzdjYmU3MDI5Y2Y0ZjY3ZTQ5ZjM3MzhkOTVlNjEyNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8LcwaswIT+8hemHCQDjC9FEgZXz 1DpJS8xTA3uJjsiu6g16dQcuVR51pQNc+21S6PtNBMT+GcQEaq7ily5mCJfXeg/f XHFWFObzwbBpvA+6qZlnuYKT+2nTubiHGcpOCIXs4fe0JHVfEc1ZIZJOB3ZZlVcH 8CeIExx1nit25BOfxKwfBiH3iPU4YgagELF8fO6TEN1CzchZ265vFNx8IWP8UELz Sr14aRR8wYugdDDy5D+V1jZ3xThSR4ZUoJZH2ZQgJ4paqwMT5ozmrhzHo1bpBfbe MW5Y9d6tNBbSh2hRDyECx38BiKvsj4MZ5WDbLAOqoYpF87nc2dsfT+XhZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET9xyx8vnApz09n5J83ONleYSXbMB8GA1UdIwQY MBaAFLyaOB+KYMxRtSmQ7ThpSPaEwxWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTkt ZWEwNzE4MzU5ZTUyLzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTktZWEwNzE4MzU5ZTUy LzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGWIn/q1 7X53PY8X8M2T3PGcitfFB9oK6yWJ/g+lr5evo2BcUHfK90SEW982pGhQrlc/F0vk 6ZlEXzbQGS+r+euIt0ufD6qbiDVYZIeqLK5mgzfmCZvwV/Y6Yq380FlkAHQSZGoD TwlW79d/XkkAfXVgfi2R4sQlRkhmq5wbht61S83Ku5dI+JFMfm6hKvkkfnpTrnHM btG7DgGpq9P/C6y3N2TExK+EQ1IZsznoMVH9zwWTD6HyDENnxEFRkJ55+IHG4mfW WXk/Na6uk8DDuHxH+pf4pokug2X4+42wtPAnkeN6dI1vznNO8D9+UzdZsvqrOsSn qvcN8nbwJAl4VA== -----END CERTIFICATE-----Generated at Wed Dec 17 12:53:35 2025 by rpki-client