This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json) Hash identifier: 07MDYKX7Dbxr4g4In4vQWHtnl58tSp7K18utOLVFk4Q= Subject key identifier: 3C:9B:0B:40:8A:3A:00:9F:3E:32:8A:B1:2E:FA:C4:A5:E0:2D:FC:EA Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff Certificate serial: 019B3CEBFE021877438969D507828DA56079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft Manifest number: 0E50 Signing time: Sat 20 Dec 2025 18:00:57 +0000 Manifest this update: Sat 20 Dec 2025 18:00:57 +0000 Manifest next update: Sun 21 Dec 2025 18:00:57 +0000 Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=) 2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: lP9EHVZIlhWlkJHl2LNKVa19wvmJOiyW+6JyFsgk3Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:fe:02:18:77:43:89:69:d5:07:82:8d:a5:60:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff Validity Not Before: Dec 20 18:00:57 2025 GMT Not After : Dec 21 18:00:57 2025 GMT Subject: CN=3c9b0b408a3a009f3e328ab12efac4a5e02dfcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:68:38:e9:54:04:d0:43:9a:5f:90:7e:d1: 9f:16:19:d1:5b:fd:f3:35:2b:2c:e6:c8:5f:8e:1d: e1:04:5f:97:21:79:14:f3:dd:76:08:58:51:bc:1c: d0:40:8d:a3:ff:09:21:0e:4e:ee:c6:2f:7f:2b:1a: 1f:fe:28:2b:a7:97:97:d6:27:f5:34:7b:5c:0e:9e: 10:df:ae:2b:a0:d1:a4:3e:6d:4a:27:cc:3d:6a:80: 4c:13:8f:fb:bf:21:c2:4e:78:f4:9c:39:89:f7:cd: 97:28:0f:87:62:c2:ac:41:ae:98:70:e1:27:e0:c2: 53:a5:b0:0d:2a:60:45:b6:8c:37:34:0e:76:22:77: 22:f7:9f:d1:ca:f8:5c:07:f1:8e:5c:e4:3d:e5:a8: ea:cf:48:e2:a0:29:56:03:bb:2e:f7:95:d9:63:4d: ca:ca:6a:2a:ad:1c:e3:f6:9f:4a:ce:41:59:75:2c: 58:e8:1e:97:c0:d9:3d:37:a6:f0:10:8f:63:eb:f5: 58:e0:f5:99:1e:99:71:9a:fc:f8:70:00:dc:13:09: 99:b9:75:78:f5:7c:db:c2:3c:89:b6:c8:8c:8b:90: fa:19:2d:37:57:b6:46:b1:de:d1:53:f7:28:e9:d5: ff:84:88:80:70:48:bb:d1:3f:24:2b:e7:83:64:de: c8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9B:0B:40:8A:3A:00:9F:3E:32:8A:B1:2E:FA:C4:A5:E0:2D:FC:EA X509v3 Authority Key Identifier: keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7d:73:9d:ce:d9:46:e1:6a:75:cc:e8:1a:87:71:73:2b:25: cd:ce:7a:ed:3f:60:5c:1b:60:51:67:eb:2c:ea:36:02:72:d8: 38:0d:e3:bf:81:96:05:de:7b:40:6d:52:1a:1e:7c:19:66:00: 00:8a:aa:d7:b2:08:4c:f2:64:8e:fe:bb:54:79:fb:a4:0f:33: 40:8d:c5:42:41:c8:a5:f6:f2:22:47:76:58:af:f6:06:51:01: 02:fb:00:90:0d:f7:e3:1c:ed:d1:ab:5c:f1:ba:f1:6a:40:d0: be:b4:c1:ec:45:43:56:2f:6a:dd:16:1b:3c:ea:31:fd:39:cb: 62:3b:df:e9:76:e2:f9:ff:0d:03:4f:e1:69:e9:5a:fe:e9:df: 78:0e:59:76:5b:6b:e2:02:6a:3a:9c:6f:d0:f0:90:25:16:44: ff:20:4c:b8:8d:32:09:c9:f9:46:e8:c9:1a:08:42:cd:17:fe: 86:9d:b9:83:72:a0:20:15:4e:41:c6:d6:fe:d7:f8:04:d7:c4: d4:a1:8e:7a:3d:25:3c:30:29:30:8e:e8:41:d5:4e:09:9f:48: 6f:c2:2a:81:70:05:7f:bd:2c:da:75:11:59:8a:43:c3:b0:d6: 9f:5b:05:e6:87:f2:49:99:50:12:f2:a7:ea:02:81:88:d9:f2: 04:a0:77:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/4CGHdDiWnVB4KNpWB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOTAzNDAzYzIwYTZjZGIyMjM2NmNjN2FjZjQ4ZTlmOTli ZTM0ZmYwHhcNMjUxMjIwMTgwMDU3WhcNMjUxMjIxMTgwMDU3WjAzMTEwLwYDVQQD EygzYzliMGI0MDhhM2EwMDlmM2UzMjhhYjEyZWZhYzRhNWUwMmRmY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bFoOOlUBNBDml+QftGfFhnRW/3z NSss5shfjh3hBF+XIXkU8912CFhRvBzQQI2j/wkhDk7uxi9/Kxof/igrp5eX1if1 NHtcDp4Q364roNGkPm1KJ8w9aoBME4/7vyHCTnj0nDmJ982XKA+HYsKsQa6YcOEn 4MJTpbANKmBFtow3NA52Inci95/RyvhcB/GOXOQ95ajqz0jioClWA7su95XZY03K ymoqrRzj9p9KzkFZdSxY6B6XwNk9N6bwEI9j6/VY4PWZHplxmvz4cADcEwmZuXV4 9XzbwjyJtsiMi5D6GS03V7ZGsd7RU/co6dX/hIiAcEi70T8kK+eDZN7IYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDybC0CKOgCfPjKKsS76xKXgLfzqMB8GA1UdIwQY MBaAFLyQNAPCCmzbIjZsx6z0jp+ZvjT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2It MDM1MDc4NzIyNWM4LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9kNWU1Y2ItNWIyNy00N2Y2LThhY2ItMDM1MDc4NzIyNWM4 LzEvdkpBMEE4SUtiTnNpTm16SHJQU09uNW0tTlA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVH1znc7Z RuFqdczoGodxcyslzc567T9gXBtgUWfrLOo2AnLYOA3jv4GWBd57QG1SGh58GWYA AIqq17IITPJkjv67VHn7pA8zQI3FQkHIpfbyIkd2WK/2BlEBAvsAkA334xzt0atc 8brxakDQvrTB7EVDVi9q3RYbPOox/TnLYjvf6Xbi+f8NA0/haela/unfeA5Zdltr 4gJqOpxv0PCQJRZE/yBMuI0yCcn5RujJGghCzRf+hp25g3KgIBVOQcbW/tf4BNfE 1KGOej0lPDApMI7oQdVOCZ9Ib8IqgXAFf70s2nURWYpDw7DWn1sF5ofySZlQEvKn 6gKBiNnyBKB3ug== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:52 2025 by rpki-client