This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json) Hash identifier: YP2dvsDGPhLNRu7VByfdPT4eXleuyLWDOvge1IO1Gtc= Subject key identifier: BD:DC:3E:03:1B:FA:05:F2:22:D9:BD:EC:80:1C:AC:8E:89:24:58:51 Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Certificate serial: 019B44394A26D831370EC496B2A9A3EAE2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft Manifest number: 1332 Signing time: Mon 22 Dec 2025 04:02:43 +0000 Manifest this update: Mon 22 Dec 2025 04:02:43 +0000 Manifest next update: Tue 23 Dec 2025 04:02:43 +0000 Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=) 2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: C3H91PoDvKk8vG7Tr3jY5Bu20LLFdKPbxRciagC/T9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:4a:26:d8:31:37:0e:c4:96:b2:a9:a3:ea:e2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Validity Not Before: Dec 22 04:02:43 2025 GMT Not After : Dec 23 04:02:43 2025 GMT Subject: CN=bddc3e031bfa05f222d9bdec801cac8e89245851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:a8:b8:b8:75:00:95:0d:52:c0:c8:89:18: b9:7f:35:d2:a4:88:43:8f:38:02:24:95:e7:ad:b8: 70:fe:ee:8d:3b:a4:02:ad:b0:b4:49:7a:37:0d:70: 9c:99:32:1c:68:a9:7a:1d:98:86:25:b0:dc:c1:ae: fd:d0:6c:07:30:e3:21:84:32:93:90:82:4b:4e:82: 66:ea:63:4f:58:0a:cf:34:4a:04:02:48:e8:3d:8a: 6e:11:1a:21:c8:f9:ac:8b:5a:62:24:db:97:d0:48: 7e:7d:de:85:1e:e5:bb:82:e5:e3:24:87:08:60:a4: d5:b4:b8:cd:be:7b:eb:b0:b8:91:48:2a:e9:d9:b9: 8f:66:e6:c5:3a:19:54:8b:b8:a6:87:d6:f4:86:9f: 86:fb:14:d1:82:a8:75:e3:48:4a:b3:06:9e:17:90: 4c:23:5d:96:f0:0a:99:19:4c:8f:df:eb:db:fc:b5: 12:f0:69:35:2f:15:c8:3c:05:90:7f:de:bb:41:7b: 94:f1:4c:f5:55:ce:3d:88:88:19:99:e4:60:9e:ff: c1:7a:18:7f:c7:9a:c3:f2:48:c4:30:f4:35:d1:1b: b1:51:f5:03:b9:6b:a5:83:b4:b7:48:3a:9e:8b:0b: c1:91:bb:59:c1:a8:6a:a2:97:a7:39:6c:fd:b9:07: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DC:3E:03:1B:FA:05:F2:22:D9:BD:EC:80:1C:AC:8E:89:24:58:51 X509v3 Authority Key Identifier: keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e4:98:c8:2f:19:ca:a8:73:62:04:df:18:d3:5f:55:c0:1d: 8c:14:36:0b:c9:54:59:66:d0:98:a5:97:d1:26:c6:1e:31:15: 88:c4:c9:16:e7:61:a8:3d:8a:32:e5:ed:76:9c:cc:00:8d:3d: e7:df:4d:6c:06:95:cd:3e:c5:5c:22:e1:1b:49:58:ca:e2:45: 3e:57:bb:67:79:e9:97:a6:54:d1:d3:c7:05:3a:69:6d:8f:1a: 1b:3d:7e:b9:ae:07:bd:11:5c:db:fd:9c:fc:2c:0b:b0:12:a8: 50:19:38:ea:95:22:13:d0:b8:a2:37:e4:9e:ab:1e:31:b5:2e: 83:79:a8:00:91:03:f8:3f:09:13:5f:64:5d:d7:ad:6c:2c:e1: 1b:7f:23:c3:5f:c3:5f:09:ff:d0:f6:20:73:cd:dc:1b:d8:89: db:db:be:86:db:dd:f6:1b:3d:47:ed:91:db:b2:60:0f:6f:a5: 57:a4:37:86:0e:05:c8:7d:dd:8b:20:04:ce:e9:18:2f:fd:e7: 6b:b3:34:4f:52:2b:74:ea:8b:0e:f4:51:66:65:f2:b3:4a:c7: 56:89:35:c6:1a:c9:cb:2a:14:7c:af:dc:0c:ef:f4:dd:4f:e7: 75:f6:99:28:b9:5c:ad:a5:e2:c6:36:5f:96:a5:f0:94:a5:f8: 1d:5d:4c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOUom2DE3DsSWsqmj6uLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMWRiNWQ3MjhiZDI3NmI0Yzc1MmUxMjVhNTA4ZmY4Nzg0 YWQyODUwHhcNMjUxMjIyMDQwMjQzWhcNMjUxMjIzMDQwMjQzWjAzMTEwLwYDVQQD EyhiZGRjM2UwMzFiZmEwNWYyMjJkOWJkZWM4MDFjYWM4ZTg5MjQ1ODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaKouLh1AJUNUsDIiRi5fzXSpIhD jzgCJJXnrbhw/u6NO6QCrbC0SXo3DXCcmTIcaKl6HZiGJbDcwa790GwHMOMhhDKT kIJLToJm6mNPWArPNEoEAkjoPYpuERohyPmsi1piJNuX0Eh+fd6FHuW7guXjJIcI YKTVtLjNvnvrsLiRSCrp2bmPZubFOhlUi7imh9b0hp+G+xTRgqh140hKswaeF5BM I12W8AqZGUyP3+vb/LUS8Gk1LxXIPAWQf967QXuU8Uz1Vc49iIgZmeRgnv/Behh/ x5rD8kjEMPQ10RuxUfUDuWulg7S3SDqeiwvBkbtZwahqopenOWz9uQd4hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3cPgMb+gXyItm97IAcrI6JJFhRMB8GA1UdIwQY MBaAFL0dtdcovSdrTHUuElpQj/h4StKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMt Nzc2OTE1NDg4MjI1LzEvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMtNzc2OTE1NDg4MjI1 LzEvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOSYyC8Z yqhzYgTfGNNfVcAdjBQ2C8lUWWbQmKWX0SbGHjEViMTJFudhqD2KMuXtdpzMAI09 599NbAaVzT7FXCLhG0lYyuJFPle7Z3npl6ZU0dPHBTppbY8aGz1+ua4HvRFc2/2c /CwLsBKoUBk46pUiE9C4ojfknqseMbUug3moAJED+D8JE19kXdetbCzhG38jw1/D Xwn/0PYgc83cG9iJ29u+htvd9hs9R+2R27JgD2+lV6Q3hg4FyH3diyAEzukYL/3n a7M0T1IrdOqLDvRRZmXys0rHVok1xhrJyyoUfK/cDO/03U/ndfaZKLlcraXixjZf lqXwlKX4HV1MQg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:51 2025 by rpki-client