This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json) Hash identifier: oE8vrORLmQdBDcx+f94vwrt4tOngVlw9emryxgwZISU= Subject key identifier: 0E:DE:CA:37:11:03:FB:AF:21:EB:30:B3:C7:72:46:00:2A:2D:7D:A4 Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Certificate serial: 019B3CECAE7AA7D932E4F6442051B060A530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 18:01:42 +0000 Manifest this update: Sat 20 Dec 2025 18:01:42 +0000 Manifest next update: Sun 21 Dec 2025 18:01:42 +0000 Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=) 2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: CptienbE9vFIx1kzSwxCIduJfoErs/hNEasnS2J7FSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:ae:7a:a7:d9:32:e4:f6:44:20:51:b0:60:a5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Validity Not Before: Dec 20 18:01:42 2025 GMT Not After : Dec 21 18:01:42 2025 GMT Subject: CN=0edeca371103fbaf21eb30b3c77246002a2d7da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:95:bd:39:bd:49:d5:95:3c:a1:2f:20:19: 9d:52:49:86:55:11:73:6b:ee:ec:50:1d:1d:92:bd: 32:8c:32:ea:16:c6:45:b7:dc:79:db:ac:b8:e4:b1: 54:e3:60:99:a9:2d:7e:5b:12:44:ea:eb:52:36:55: 65:24:cb:a1:19:ba:4d:cd:66:0f:bc:00:6a:ab:e6: 21:a5:af:de:ed:d3:14:e3:b4:55:18:b9:8b:69:a6: 1d:a1:f0:98:75:01:d1:fa:ae:32:6a:8b:f5:02:6d: 8d:fd:7a:09:e7:7c:a9:d2:87:c0:8f:c3:5e:14:42: 53:95:cb:36:0d:e2:e8:0e:9a:9b:48:c8:f5:e1:80: 57:d4:ad:4f:e4:b5:14:74:62:06:cd:91:f0:0d:e3: d8:ad:2d:2c:21:61:02:04:33:7f:89:9f:60:2e:d3: d7:af:6e:b4:67:4f:56:60:05:90:db:f9:1d:c3:9f: c7:ab:71:12:07:56:b4:69:19:3f:e5:78:22:ae:12: 2e:18:23:b4:0f:ce:a0:00:60:63:8d:fd:4d:d1:60: 71:d2:62:5d:74:45:ce:35:c9:ac:80:6c:e8:ad:14: fc:c3:6a:1e:89:9a:cd:f5:08:3c:34:bd:fe:94:14: 28:62:fa:d2:a0:64:e8:63:60:ae:1a:fd:c2:d8:24: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DE:CA:37:11:03:FB:AF:21:EB:30:B3:C7:72:46:00:2A:2D:7D:A4 X509v3 Authority Key Identifier: keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0c:c3:fd:7c:5d:9f:cd:96:85:96:6c:c4:57:3e:d6:8b:78: eb:a3:91:06:c3:89:af:f8:0c:5e:65:00:cc:9c:0b:b0:5b:c7: f3:6a:e7:af:0e:92:3e:c6:ba:17:0b:85:dc:e2:11:5d:fe:ed: 8c:aa:1f:5c:27:f1:97:e9:f0:81:fd:35:29:82:95:1f:3a:53: 0e:6a:9e:af:ca:84:10:42:f7:99:5a:21:31:a0:0a:b1:d0:08: 52:5d:44:f4:d4:31:a2:e4:64:20:40:42:51:6f:c7:bb:68:8e: 80:0b:fa:c9:f7:01:f7:d1:49:d9:2b:61:cd:c4:37:87:ec:df: 1b:11:b0:d1:71:cb:fb:86:a3:61:68:a4:59:5e:90:23:bf:52: 96:71:27:41:27:4b:f0:1e:1a:81:23:61:ec:33:52:1e:94:c5: 52:ad:8f:fb:bb:49:d3:72:f3:d4:da:ea:d9:b5:50:fe:ea:8d: d1:99:a1:23:4a:67:8b:ce:cf:e9:1b:70:a5:51:d4:84:00:9f: fa:ba:c6:0d:11:5c:c3:70:17:4b:a7:dc:cd:cc:06:6e:d0:fd: 11:47:ef:9d:88:12:2e:e8:2d:2d:d1:38:de:a2:cd:5b:23:39: 7a:29:af:1b:a2:5e:4b:84:0e:dc:af:ea:c9:b6:68:dd:a1:f4: 97:db:59:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87K56p9ky5PZEIFGwYKUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1 OTcxYjUwHhcNMjUxMjIwMTgwMTQyWhcNMjUxMjIxMTgwMTQyWjAzMTEwLwYDVQQD EygwZWRlY2EzNzExMDNmYmFmMjFlYjMwYjNjNzcyNDYwMDJhMmQ3ZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4qVvTm9SdWVPKEvIBmdUkmGVRFz a+7sUB0dkr0yjDLqFsZFt9x526y45LFU42CZqS1+WxJE6utSNlVlJMuhGbpNzWYP vABqq+Yhpa/e7dMU47RVGLmLaaYdofCYdQHR+q4yaov1Am2N/XoJ53yp0ofAj8Ne FEJTlcs2DeLoDpqbSMj14YBX1K1P5LUUdGIGzZHwDePYrS0sIWECBDN/iZ9gLtPX r260Z09WYAWQ2/kdw5/Hq3ESB1a0aRk/5XgirhIuGCO0D86gAGBjjf1N0WBx0mJd dEXONcmsgGzorRT8w2oeiZrN9Qg8NL3+lBQoYvrSoGToY2CuGv3C2CQO4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7eyjcRA/uvIesws8dyRgAqLX2kMB8GA1UdIwQY MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigzD/Xxd n82WhZZsxFc+1ot466ORBsOJr/gMXmUAzJwLsFvH82rnrw6SPsa6FwuF3OIRXf7t jKofXCfxl+nwgf01KYKVHzpTDmqer8qEEEL3mVohMaAKsdAIUl1E9NQxouRkIEBC UW/Hu2iOgAv6yfcB99FJ2SthzcQ3h+zfGxGw0XHL+4ajYWikWV6QI79SlnEnQSdL 8B4agSNh7DNSHpTFUq2P+7tJ03Lz1Nrq2bVQ/uqN0ZmhI0pni87P6RtwpVHUhACf +rrGDRFcw3AXS6fczcwGbtD9EUfvnYgSLugtLdE43qLNWyM5eimvG6JeS4QO3K/q ybZo3aH0l9tZrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:02 2025 by rpki-client