This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json) Hash identifier: AdGOqLpPqG1/U2mt0ZOCq6A8yGDGLHFLLLRh/DroqZQ= Subject key identifier: 3E:14:6C:82:70:98:2A:81:FA:2C:AD:A3:3B:23:C2:0B:37:A7:FF:70 Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E Certificate issuer: /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e Certificate serial: 019B65E84C4E920780837DA7CB8C0BC2058B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 17:01:21 +0000 Manifest this update: Sun 28 Dec 2025 17:01:21 +0000 Manifest next update: Mon 29 Dec 2025 17:01:21 +0000 Files and hashes: 1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: mvd+vz8EDPU6nQPEJgaPSJvF82PUqYG+NV+EEzZNTYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:4c:4e:92:07:80:83:7d:a7:cb:8c:0b:c2:05:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e Validity Not Before: Dec 28 17:01:21 2025 GMT Not After : Dec 29 17:01:21 2025 GMT Subject: CN=3e146c8270982a81fa2cada33b23c20b37a7ff70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:dd:dd:86:09:a4:33:b1:e3:08:ee:65:3d: 11:2c:9d:44:8b:70:13:9a:f0:9c:92:61:c0:5a:af: 18:e5:69:da:27:f6:36:28:48:4f:ba:9a:b5:52:38: 0b:cd:8b:ca:10:f6:c2:b5:6a:6a:0d:54:2c:e2:0f: de:e1:bf:e6:aa:17:cf:51:ce:ed:66:ee:d9:97:d1: 03:89:4b:4b:09:5a:d0:26:09:17:84:43:e4:78:c0: 35:e6:48:50:55:a3:14:5a:1a:fb:b8:dc:e6:fe:0a: dc:3d:fe:4f:ca:b2:74:fc:4d:38:af:e9:94:c4:ae: 7d:f3:e7:dd:6b:6e:04:6d:a5:9b:ea:85:ae:39:73: 5b:7d:05:2c:89:27:de:f6:8c:fe:01:2d:f0:00:56: 93:36:8d:8a:83:45:3f:d5:cb:73:55:1b:85:8f:a2: 23:ae:4a:60:e9:b1:fa:03:6f:7f:d0:36:40:d0:f9: 2d:19:f3:49:8c:23:4b:02:6f:1a:51:f6:13:50:98: 60:b1:7d:34:d6:13:55:fa:89:71:eb:00:b8:43:f3: 7b:c7:20:c8:9a:70:fd:94:34:20:56:3e:28:a7:37: d3:94:f4:2b:61:9e:77:79:9b:e4:d1:af:24:11:73: b4:2b:66:fa:da:16:1a:e3:70:e3:54:84:22:b3:1a: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:14:6C:82:70:98:2A:81:FA:2C:AD:A3:3B:23:C2:0B:37:A7:FF:70 X509v3 Authority Key Identifier: keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:ad:38:8d:ee:93:58:90:30:14:0d:30:e4:a8:6f:3a:8e: 25:b3:82:78:01:1c:ea:e7:59:ed:f5:98:2b:88:b7:f3:d2:da: 3e:2a:d5:d9:96:87:9a:35:de:59:6f:1a:de:48:2c:8a:66:b9: 6e:dc:ef:f8:48:65:bc:2a:32:bd:4d:f7:fc:84:76:2c:d0:12: 56:10:ad:d8:c5:d7:c0:93:41:17:c9:2c:ae:bf:b6:71:e2:0c: af:12:49:27:d5:5f:ee:1c:97:68:60:7e:0c:e7:4e:de:91:0a: 39:1b:94:36:cd:f2:11:88:63:37:fd:09:9b:69:85:10:59:0b: 6e:33:4c:3f:8f:44:27:4a:46:e4:6c:b0:f2:ac:80:2c:ce:eb: 14:03:f8:d3:61:39:d5:25:f7:ae:b1:9f:8c:6a:26:e3:6b:e0: 57:41:41:c8:98:62:37:9e:66:af:82:bc:66:2e:07:84:c1:8b: 1b:0b:f0:33:d0:f8:47:2f:ea:d7:f9:ae:fc:fc:f7:a7:ea:0d: 97:89:f3:d1:af:85:22:90:8c:28:f8:5b:d3:44:b5:6a:c8:30: 1d:4b:27:2c:43:cf:f2:42:d0:ff:7a:5b:f5:0e:26:58:62:0e: 3d:d7:27:bb:a9:e9:ae:41:0b:2d:43:f1:25:8e:dc:96:2d:71: ea:4f:80:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6ExOkgeAg32ny4wLwgWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTA2ZTRkODJmYmFlMzRjMTUyYTM1ZDQzZDBmZGY0OWQ1 NGJlOWUwHhcNMjUxMjI4MTcwMTIxWhcNMjUxMjI5MTcwMTIxWjAzMTEwLwYDVQQD EygzZTE0NmM4MjcwOTgyYTgxZmEyY2FkYTMzYjIzYzIwYjM3YTdmZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonDd3YYJpDOx4wjuZT0RLJ1Ei3AT mvCckmHAWq8Y5WnaJ/Y2KEhPupq1UjgLzYvKEPbCtWpqDVQs4g/e4b/mqhfPUc7t Zu7Zl9EDiUtLCVrQJgkXhEPkeMA15khQVaMUWhr7uNzm/grcPf5PyrJ0/E04r+mU xK598+fda24EbaWb6oWuOXNbfQUsiSfe9oz+AS3wAFaTNo2Kg0U/1ctzVRuFj6Ij rkpg6bH6A29/0DZA0PktGfNJjCNLAm8aUfYTUJhgsX001hNV+olx6wC4Q/N7xyDI mnD9lDQgVj4opzfTlPQrYZ53eZvk0a8kEXO0K2b62hYa43DjVIQisxoKmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4UbIJwmCqB+iytozsjwgs3p/9wMB8GA1UdIwQY MBaAFLwQbk2C+640wVKjXUPQ/fSdVL6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzct NjM0OWExN2FiYjQzLzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzctNjM0OWExN2FiYjQz LzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWOtOI3u k1iQMBQNMOSobzqOJbOCeAEc6udZ7fWYK4i389LaPirV2ZaHmjXeWW8a3kgsima5 btzv+EhlvCoyvU33/IR2LNASVhCt2MXXwJNBF8ksrr+2ceIMrxJJJ9Vf7hyXaGB+ DOdO3pEKORuUNs3yEYhjN/0Jm2mFEFkLbjNMP49EJ0pG5Gyw8qyALM7rFAP402E5 1SX3rrGfjGom42vgV0FByJhiN55mr4K8Zi4HhMGLGwvwM9D4Ry/q1/mu/Pz3p+oN l4nz0a+FIpCMKPhb00S1asgwHUsnLEPP8kLQ/3pb9Q4mWGIOPdcnu6nprkELLUPx JY7cli1x6k+Aig== -----END CERTIFICATE-----Generated at Mon Dec 29 00:49:27 2025 by rpki-client