This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft File: vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json) Hash identifier: 6XGLcdDrzjJQc04ASRWcGcomWcCIdYVHEFzh5eQLYrc= Subject key identifier: F0:EC:02:3E:BD:1A:E6:C0:AA:90:33:0D:47:58:61:B8:C1:3D:99:D6 Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1 Certificate issuer: /CN=bc3a4697447d190308644a58bceaa124c074b7e1 Certificate serial: 019B4581928A3C6B363B15E36F224E8B4DA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 10:01:18 +0000 Manifest this update: Mon 22 Dec 2025 10:01:18 +0000 Manifest next update: Tue 23 Dec 2025 10:01:18 +0000 Files and hashes: 1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=) 2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: fQUmnNNnX+964QKdm5iANL50/uZlsxxA5PSNaEb+iNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:92:8a:3c:6b:36:3b:15:e3:6f:22:4e:8b:4d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1 Validity Not Before: Dec 22 10:01:18 2025 GMT Not After : Dec 23 10:01:18 2025 GMT Subject: CN=f0ec023ebd1ae6c0aa90330d475861b8c13d99d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:62:2b:92:13:7a:e0:91:79:33:81:18:e0: 80:3b:fa:a7:3f:9a:e2:66:9a:7e:1b:ba:54:1e:04: 1b:b4:79:3d:df:88:53:49:50:52:59:51:cb:29:f9: 80:ac:6c:8c:31:20:cc:12:51:f8:ec:e2:90:be:10: 7a:f1:b4:79:2b:57:f3:f6:0f:65:52:37:6c:cb:c9: cc:dc:d2:bb:d5:bd:dd:fc:9d:ac:e5:82:11:97:07: 1a:96:f1:8f:29:ef:47:58:fe:b3:58:ac:55:f3:33: be:be:09:f2:fb:b4:bd:c0:9c:7f:fc:d4:2d:24:27: 9c:39:3c:99:e6:d9:7a:d1:96:33:a9:04:2d:4f:12: 0a:06:7f:10:c7:a0:0d:ea:a4:87:ec:e1:e3:e3:9a: 66:8f:7c:c1:d2:29:99:0d:5a:2b:61:29:ca:bc:9b: 36:1e:51:42:08:6b:c5:a6:e3:47:73:60:bb:6e:0a: 43:7d:ee:04:96:e0:4b:23:80:1c:4f:2b:f6:19:1d: 95:e0:84:ab:6f:c7:e8:4a:e1:79:8f:e3:38:67:fc: d2:5b:18:92:18:be:c5:bf:00:66:32:9c:65:d1:ab: 23:04:e5:b7:ed:eb:02:80:ee:83:50:d4:c9:d4:dc: 7c:24:9b:c8:9f:2b:ba:c9:2e:d7:11:9f:e3:00:67: 7e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:02:3E:BD:1A:E6:C0:AA:90:33:0D:47:58:61:B8:C1:3D:99:D6 X509v3 Authority Key Identifier: keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8a:f7:2f:c7:88:2d:d1:44:b9:86:dc:e2:67:54:bb:02:60: e0:f6:6e:8d:15:48:83:73:52:a6:b6:e1:3b:9e:24:64:10:13: 96:d9:a8:2e:4b:0e:9a:4c:2b:68:52:81:51:88:67:ec:e9:de: 7f:08:e6:2d:39:1f:96:9a:61:f7:ae:04:bd:75:ee:b4:3e:1c: 52:6d:5d:73:74:00:dc:fe:06:ac:31:74:3d:4a:22:46:2d:98: 99:ea:bf:62:ea:0a:90:49:f2:a6:13:52:13:39:e0:02:b6:5b: 2f:92:4e:01:87:8f:85:bb:7a:cc:f0:0a:4c:6f:69:2d:24:54: 28:70:3a:9d:1e:99:61:f9:33:1f:b9:6d:31:b6:d2:0f:12:fe: c5:f2:8c:fd:61:b5:b6:a5:24:8d:73:76:b6:6b:c6:2a:fb:c3: 68:4a:be:5d:d8:1f:0d:e7:82:af:c9:61:74:9d:c4:d8:53:f1: 36:ba:af:97:a2:e6:15:74:55:52:67:4e:d4:b4:19:23:e7:ea: 5e:c1:0d:bf:ea:6b:c0:d4:49:62:0b:21:6f:6b:77:bf:76:7a: 5e:00:55:98:4d:47:ff:0e:ac:e4:a3:ff:1a:8a:da:bb:8e:54: da:3a:ab:d9:06:e4:7b:47:64:15:1b:e2:74:81:8f:53:8c:e4: 36:fa:5a:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgZKKPGs2OxXjbyJOi02lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjM2E0Njk3NDQ3ZDE5MDMwODY0NGE1OGJjZWFhMTI0YzA3 NGI3ZTEwHhcNMjUxMjIyMTAwMTE4WhcNMjUxMjIzMTAwMTE4WjAzMTEwLwYDVQQD EyhmMGVjMDIzZWJkMWFlNmMwYWE5MDMzMGQ0NzU4NjFiOGMxM2Q5OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplBiK5ITeuCReTOBGOCAO/qnP5ri Zpp+G7pUHgQbtHk934hTSVBSWVHLKfmArGyMMSDMElH47OKQvhB68bR5K1fz9g9l Ujdsy8nM3NK71b3d/J2s5YIRlwcalvGPKe9HWP6zWKxV8zO+vgny+7S9wJx//NQt JCecOTyZ5tl60ZYzqQQtTxIKBn8Qx6AN6qSH7OHj45pmj3zB0imZDVorYSnKvJs2 HlFCCGvFpuNHc2C7bgpDfe4EluBLI4AcTyv2GR2V4ISrb8foSuF5j+M4Z/zSWxiS GL7FvwBmMpxl0asjBOW37esCgO6DUNTJ1Nx8JJvInyu6yS7XEZ/jAGd+dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDsAj69GubAqpAzDUdYYbjBPZnWMB8GA1UdIwQY MBaAFLw6RpdEfRkDCGRKWLzqoSTAdLfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81YWE2MTktZGNjYS00OWQ1LTkwMWYt YTVhYjdiNjQxNTVmLzEvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi81YWE2MTktZGNjYS00OWQ1LTkwMWYtYTVhYjdiNjQxNTVm LzEvdkRwR2wwUjlHUU1JWkVwWXZPcWhKTUIwdC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4r3L8eI LdFEuYbc4mdUuwJg4PZujRVIg3NSprbhO54kZBATltmoLksOmkwraFKBUYhn7One fwjmLTkflpph964EvXXutD4cUm1dc3QA3P4GrDF0PUoiRi2Ymeq/YuoKkEnyphNS EzngArZbL5JOAYePhbt6zPAKTG9pLSRUKHA6nR6ZYfkzH7ltMbbSDxL+xfKM/WG1 tqUkjXN2tmvGKvvDaEq+XdgfDeeCr8lhdJ3E2FPxNrqvl6LmFXRVUmdO1LQZI+fq XsENv+prwNRJYgshb2t3v3Z6XgBVmE1H/w6s5KP/Gorau45U2jqr2Qbke0dkFRvi dIGPU4zkNvpaoA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:45:37 2025 by rpki-client