This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json) Hash identifier: BTqHyKstJfKYYuskjVbrPIVo5GUFyr3yYlz5vgm2cXk= Subject key identifier: B3:90:BD:CE:94:C7:31:74:EF:44:78:94:D4:4E:46:C7:D0:3A:2E:F1 Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43 Certificate serial: 019B3CB55E2F6C5EC97D960CA9F9250A81DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft Manifest number: 0CEC Signing time: Sat 20 Dec 2025 17:01:17 +0000 Manifest this update: Sat 20 Dec 2025 17:01:17 +0000 Manifest next update: Sun 21 Dec 2025 17:01:17 +0000 Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=) 2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=) 3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=) 4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: t2CvoG+D/ApQIY0y1Sjq4inJIYsvEVT/zaFzxofycXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5e:2f:6c:5e:c9:7d:96:0c:a9:f9:25:0a:81:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43 Validity Not Before: Dec 20 17:01:17 2025 GMT Not After : Dec 21 17:01:17 2025 GMT Subject: CN=b390bdce94c73174ef447894d44e46c7d03a2ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:c4:98:14:9c:19:a0:02:5c:b4:cb:a6:81: 7e:4c:73:59:ca:12:90:56:a2:f8:f9:cc:0f:06:bf: af:7d:e8:ed:f1:66:99:05:ab:4d:f4:45:51:e8:5c: 16:2e:86:a0:a6:b5:e8:c0:f8:d8:18:4c:57:dd:a5: cd:23:21:a7:a2:38:5c:dd:a7:0b:ce:f2:1c:49:b3: 6e:f3:24:3e:bb:09:df:67:12:08:e5:fe:cd:6a:82: 93:b2:c5:56:ab:ad:68:d4:a1:64:ec:c2:6c:51:3f: 95:00:2d:b8:48:82:25:a8:5a:5a:bd:22:67:51:63: ef:37:42:62:09:42:25:2f:a0:64:17:02:55:0d:ae: b4:12:9f:70:ee:68:6c:76:40:fb:01:13:43:63:4d: 15:6f:54:a7:23:16:a7:a2:de:93:cc:38:79:a9:1d: 86:18:5e:93:e0:32:d1:da:72:46:2e:80:3d:83:aa: 47:84:69:1e:85:5e:57:54:ef:d1:15:03:68:27:10: 97:69:0e:6f:9f:1e:ab:ee:52:3f:f4:7a:ee:68:61: 9e:b5:57:71:08:dd:78:cc:02:d1:67:64:c6:ba:9e: 7c:c0:92:dc:be:3b:92:60:fb:1b:6e:92:ea:18:1e: 12:57:34:d6:71:a9:86:f4:c1:05:7e:ac:83:f1:4d: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:BD:CE:94:C7:31:74:EF:44:78:94:D4:4E:46:C7:D0:3A:2E:F1 X509v3 Authority Key Identifier: keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:84:d7:f4:d1:b0:61:06:62:28:13:1f:c2:2a:be:ee:d9:26: f3:7b:82:37:41:35:da:3e:a4:e8:a5:8c:5c:f9:b0:be:a4:54: 42:1f:49:76:3d:ff:7a:4b:08:85:f7:23:35:3d:37:5f:c1:b4: e5:27:81:ea:d7:00:19:33:7d:c1:0c:2c:1f:cb:27:7a:56:0b: 4e:5c:f4:88:34:e2:f7:8a:94:90:0f:4f:5e:11:74:ac:2f:c0: aa:a3:77:12:de:d3:f3:a7:4a:91:b0:94:f4:53:92:05:ac:5f: 7d:39:8e:7c:c6:a9:2a:1d:6d:e4:b4:5f:e4:30:7f:6a:c2:43: 48:b3:88:2c:6f:7e:4b:07:f5:c2:a2:e7:b0:7f:00:77:92:1d: c0:2c:57:c4:31:8a:38:cd:89:95:b3:e6:55:94:b8:09:cb:1d: 37:9d:72:6e:bb:8c:33:b5:53:db:ae:59:8e:9f:e3:ae:e7:9c: 0c:5a:88:fb:84:d9:f7:ba:5a:40:b4:ac:3b:93:78:da:7d:04: 4c:15:85:ea:e4:98:1e:3c:11:44:c7:08:b4:3e:84:d8:55:61: 75:54:d7:77:67:51:81:c2:64:9d:72:30:64:eb:60:46:28:e7: a4:18:d4:d5:57:26:bc:c6:cc:f0:ef:cb:40:93:b6:7f:4a:1a: 88:14:c8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tV4vbF7JfZYMqfklCoHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDQyNjJmNjQyYjFiYjBiNTNiMmE2ZDc3OThjMDg5OWQx ZTRkNDMwHhcNMjUxMjIwMTcwMTE3WhcNMjUxMjIxMTcwMTE3WjAzMTEwLwYDVQQD EyhiMzkwYmRjZTk0YzczMTc0ZWY0NDc4OTRkNDRlNDZjN2QwM2EyZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9HEmBScGaACXLTLpoF+THNZyhKQ VqL4+cwPBr+vfejt8WaZBatN9EVR6FwWLoagprXowPjYGExX3aXNIyGnojhc3acL zvIcSbNu8yQ+uwnfZxII5f7NaoKTssVWq61o1KFk7MJsUT+VAC24SIIlqFpavSJn UWPvN0JiCUIlL6BkFwJVDa60Ep9w7mhsdkD7ARNDY00Vb1SnIxanot6TzDh5qR2G GF6T4DLR2nJGLoA9g6pHhGkehV5XVO/RFQNoJxCXaQ5vnx6r7lI/9HruaGGetVdx CN14zALRZ2TGup58wJLcvjuSYPsbbpLqGB4SVzTWcamG9MEFfqyD8U3sIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOQvc6UxzF070R4lNRORsfQOi7xMB8GA1UdIwQY MBaAFL3UJi9kKxuwtTsqbXeYwImdHk1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEt M2JkNzlmZmM2Mzk4LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEtM2JkNzlmZmM2Mzk4 LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYTX9NGw YQZiKBMfwiq+7tkm83uCN0E12j6k6KWMXPmwvqRUQh9Jdj3/eksIhfcjNT03X8G0 5SeB6tcAGTN9wQwsH8snelYLTlz0iDTi94qUkA9PXhF0rC/AqqN3Et7T86dKkbCU 9FOSBaxffTmOfMapKh1t5LRf5DB/asJDSLOILG9+Swf1wqLnsH8Ad5IdwCxXxDGK OM2JlbPmVZS4CcsdN51ybruMM7VT265Zjp/jruecDFqI+4TZ97paQLSsO5N42n0E TBWF6uSYHjwRRMcItD6E2FVhdVTXd2dRgcJknXIwZOtgRijnpBjU1VcmvMbM8O/L QJO2f0oaiBTIhw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:59 2025 by rpki-client