This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json) Hash identifier: XYlQXCFTtfDl84jmubY5txsyZEHz9hPzS6/2TMFG920= Subject key identifier: 3E:C7:47:98:EF:FA:A6:D5:53:11:4B:60:55:DA:B0:76:24:AE:DE:5D Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af Certificate serial: 019B5D535572FCBB9A78D4EB05BF40F46628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft Manifest number: 0CE5 Signing time: Sat 27 Dec 2025 01:01:41 +0000 Manifest this update: Sat 27 Dec 2025 01:01:41 +0000 Manifest next update: Sun 28 Dec 2025 01:01:41 +0000 Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: xF9iTa7SWuuwfTMUEW8u4jtAuaxWt6k15Zmc9NCT048=) 2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:55:72:fc:bb:9a:78:d4:eb:05:bf:40:f4:66:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af Validity Not Before: Dec 27 01:01:41 2025 GMT Not After : Dec 28 01:01:41 2025 GMT Subject: CN=3ec74798effaa6d553114b6055dab07624aede5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:37:d8:0b:f1:73:2f:38:d6:0c:c4:fd:5c: d2:98:75:55:ac:20:7d:73:6e:f6:c3:31:25:ba:95: c1:13:7a:f6:25:17:b0:ff:39:08:34:4f:65:c3:36: c5:16:89:94:28:1b:67:fd:6e:89:b4:6c:71:ae:37: 04:d3:3c:9f:4c:0b:3b:66:6a:a1:72:61:cc:1e:cd: c4:41:ff:23:d6:06:46:29:4b:82:23:10:f3:54:3f: 07:de:b3:4f:93:a1:ba:14:37:53:3b:d3:42:95:38: 43:1d:78:27:66:ec:e8:87:a7:75:7f:4d:76:8e:ad: 0a:2a:2a:74:6d:fe:18:87:7d:42:c2:3a:9b:97:28: 27:b2:75:da:74:db:07:11:c0:be:de:9f:59:c4:94: c2:b6:1d:f0:3a:48:31:05:3c:08:0f:90:70:a9:f2: ce:35:6f:01:11:fa:d3:bc:31:22:be:e0:26:fc:63: 5e:bc:67:01:8f:00:ed:b7:27:0b:80:48:4c:e4:f0: 1a:e8:31:6d:10:6c:63:4d:83:dc:42:3c:8c:09:64: 42:a6:37:db:6c:78:4f:13:51:ad:b0:b1:d9:e2:41: fc:01:f4:ed:21:c2:b2:d8:9d:7d:79:0d:08:d8:70: bd:47:b3:8c:02:9b:9f:02:c5:b3:fd:f3:1e:35:f9: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C7:47:98:EF:FA:A6:D5:53:11:4B:60:55:DA:B0:76:24:AE:DE:5D X509v3 Authority Key Identifier: keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:97:6a:1b:61:1a:d9:90:99:de:5e:01:24:7e:bb:33:a1:c6: bd:02:15:95:15:f1:35:75:98:5a:54:fe:1c:00:52:9e:1d:bb: 35:f0:57:a1:4e:c8:32:19:04:e5:c9:3f:ef:d4:9f:0c:25:27: d5:cd:ce:f9:9b:f5:af:68:ed:25:c6:f6:d3:45:e7:74:c1:65: e0:0e:e3:07:b8:fd:c1:33:f7:8f:1d:f9:73:b6:ce:3a:d3:4e: 3c:2b:54:f1:eb:d7:86:ee:f4:07:9a:b1:b7:61:17:35:cf:75: 25:f3:7e:7a:21:b1:2d:08:fe:f0:ec:97:e2:af:af:ff:b5:71: 4b:10:98:4f:d4:8e:81:57:ff:0f:7c:e9:69:ef:df:53:26:d2: d3:b1:3e:22:b0:3d:b0:c2:8f:e5:a3:d7:d5:8e:dc:7e:54:b8: 60:d9:93:3e:72:ad:a7:77:ef:85:04:c3:e7:b8:5d:90:72:1a: d2:c5:cd:ba:8a:50:a9:c8:80:0e:b6:2d:b7:01:29:81:94:b3: 23:71:33:90:ef:ac:dc:83:58:06:10:11:6a:a1:5d:0e:fa:b7: 0b:0a:85:c3:88:79:2a:57:b9:63:38:c0:fd:49:8e:e1:ca:8a: bb:48:89:c9:5e:1d:93:6a:56:72:13:66:c7:0a:29:5b:ae:c8: 91:df:64:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU1Vy/LuaeNTrBb9A9GYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWVjOGRiNTk3MjYwNzVlZTI5ZjVlZmM5MGI2MWU3M2Mw N2Y3YWYwHhcNMjUxMjI3MDEwMTQxWhcNMjUxMjI4MDEwMTQxWjAzMTEwLwYDVQQD EygzZWM3NDc5OGVmZmFhNmQ1NTMxMTRiNjA1NWRhYjA3NjI0YWVkZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszE32Avxcy841gzE/VzSmHVVrCB9 c272wzElupXBE3r2JRew/zkINE9lwzbFFomUKBtn/W6JtGxxrjcE0zyfTAs7Zmqh cmHMHs3EQf8j1gZGKUuCIxDzVD8H3rNPk6G6FDdTO9NClThDHXgnZuzoh6d1f012 jq0KKip0bf4Yh31CwjqblygnsnXadNsHEcC+3p9ZxJTCth3wOkgxBTwID5BwqfLO NW8BEfrTvDEivuAm/GNevGcBjwDttycLgEhM5PAa6DFtEGxjTYPcQjyMCWRCpjfb bHhPE1GtsLHZ4kH8AfTtIcKy2J19eQ0I2HC9R7OMApufAsWz/fMeNfmR8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7HR5jv+qbVUxFLYFXasHYkrt5dMB8GA1UdIwQY MBaAFLyeyNtZcmB17in178kLYec8B/evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjIt ZTU3ZmJkYWU1OTAzLzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjItZTU3ZmJkYWU1OTAz LzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZdqG2Ea 2ZCZ3l4BJH67M6HGvQIVlRXxNXWYWlT+HABSnh27NfBXoU7IMhkE5ck/79SfDCUn 1c3O+Zv1r2jtJcb200XndMFl4A7jB7j9wTP3jx35c7bOOtNOPCtU8evXhu70B5qx t2EXNc91JfN+eiGxLQj+8OyX4q+v/7VxSxCYT9SOgVf/D3zpae/fUybS07E+IrA9 sMKP5aPX1Y7cflS4YNmTPnKtp3fvhQTD57hdkHIa0sXNuopQqciADrYttwEpgZSz I3EzkO+s3INYBhARaqFdDvq3CwqFw4h5Kle5YzjA/UmO4cqKu0iJyV4dk2pWchNm xwopW67Ikd9kww== -----END CERTIFICATE-----Generated at Sat Dec 27 04:48:03 2025 by rpki-client