This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json) Hash identifier: 2aHEXlu13Pd5khRSJXewUl1caEcSCHvMX14pJuB0JyU= Subject key identifier: 45:30:91:AA:07:F4:81:C9:29:24:97:BA:1E:07:5A:EF:7D:32:2D:2A Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75 Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575 Certificate serial: 019B2C66AB1D38A900F73EE04684D237A644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft Manifest number: 0BB9 Signing time: Wed 17 Dec 2025 13:01:24 +0000 Manifest this update: Wed 17 Dec 2025 13:01:24 +0000 Manifest next update: Thu 18 Dec 2025 13:01:24 +0000 Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=) 2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: /ukQj5m6wVpfMbUf4ddvER0evcTIG68mq6eTEg4sCvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:ab:1d:38:a9:00:f7:3e:e0:46:84:d2:37:a6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575 Validity Not Before: Dec 17 13:01:24 2025 GMT Not After : Dec 18 13:01:24 2025 GMT Subject: CN=453091aa07f481c9292497ba1e075aef7d322d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:b0:7a:60:87:6f:97:01:f7:13:7e:f3:4b: 77:49:91:b9:8e:ff:67:f3:04:89:fc:f7:69:b3:2d: 97:9d:8f:29:93:88:56:8c:94:cb:53:fa:f9:8b:b9: d1:8b:db:42:18:03:ad:26:d1:eb:81:67:51:c6:bb: 52:65:ac:8a:41:57:03:ef:7c:5a:d1:8d:be:b2:4d: e9:da:0a:d1:b1:d0:64:75:cc:45:17:d0:13:c1:56: e9:b8:73:7d:49:15:75:5d:17:86:1a:69:4d:ad:a9: 74:c7:cd:2a:5a:9f:a5:5e:32:dd:2c:20:5b:dd:37: 66:c1:48:c0:b3:a7:46:ca:b7:64:80:d8:87:02:09: 0c:fd:3e:48:5b:de:e9:f1:47:ec:b8:de:be:1d:bd: 76:8d:c6:c4:8e:69:60:27:1f:1e:36:38:1c:b6:3b: e6:f4:5e:bc:20:53:99:d2:78:09:88:bf:b8:77:18: 9b:45:9a:28:a2:70:1e:45:8f:8e:85:56:41:e1:17: 6e:63:78:c7:fe:96:11:64:99:b4:8c:86:17:b2:19: 71:72:35:dc:c1:c7:92:2b:11:d3:e4:ba:f5:45:b0: 9b:01:71:4a:8b:26:92:4d:e9:bf:34:2a:7c:b8:95: 52:9f:0a:d5:a0:5e:ec:bf:bf:da:cb:c8:0a:03:09: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:30:91:AA:07:F4:81:C9:29:24:97:BA:1E:07:5A:EF:7D:32:2D:2A X509v3 Authority Key Identifier: keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:65:a3:4f:cc:65:3a:d5:a4:81:7a:ad:33:84:af:70:77:a4: b2:6e:a9:e2:f3:e3:98:91:4c:fd:7e:03:47:81:66:e3:5c:07: 0f:45:eb:93:b1:16:78:b7:73:b9:b5:da:23:23:4e:4b:0c:8a: 7e:82:ac:de:52:5b:cb:61:98:d9:87:26:43:3e:1f:ef:78:41: 05:75:d5:13:ff:d0:a8:a2:a0:12:21:8b:7f:8c:21:5f:63:47: ed:b2:46:47:25:4d:8b:c0:91:59:5a:a1:94:19:85:c1:75:60: 6a:8b:bc:9a:48:2e:2a:6c:f5:e1:cc:41:d8:e6:6c:38:fe:7a: 2c:97:f5:ad:b9:1e:02:42:fe:f8:33:bc:09:a7:7d:b0:f1:4e: a5:97:53:df:72:73:ac:4b:1f:67:87:75:db:38:88:3b:a5:4c: 5b:9a:1f:69:df:76:b7:8e:4a:eb:e8:37:0f:56:69:0a:cc:45: 8d:4a:39:2e:bd:05:e6:42:01:d3:54:f3:23:2f:9e:20:41:46: f9:e5:b8:cb:d4:4c:d0:0c:c6:cf:e6:73:f3:2d:7c:6b:0b:33: b5:fe:a5:8f:8e:7a:5d:15:9a:4c:30:33:79:b2:93:2c:b5:38: d3:d9:a8:d4:48:6e:1c:eb:76:52:06:12:a8:67:eb:b9:5c:c4: d5:7b:7d:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZqsdOKkA9z7gRoTSN6ZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTkxMTM0MzIyNjIyOWQyMDNlYTMyNmE5ZDY5ZDRmYzM0 NmM1NzUwHhcNMjUxMjE3MTMwMTI0WhcNMjUxMjE4MTMwMTI0WjAzMTEwLwYDVQQD Eyg0NTMwOTFhYTA3ZjQ4MWM5MjkyNDk3YmExZTA3NWFlZjdkMzIyZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK6wemCHb5cB9xN+80t3SZG5jv9n 8wSJ/Pdpsy2XnY8pk4hWjJTLU/r5i7nRi9tCGAOtJtHrgWdRxrtSZayKQVcD73xa 0Y2+sk3p2grRsdBkdcxFF9ATwVbpuHN9SRV1XReGGmlNral0x80qWp+lXjLdLCBb 3TdmwUjAs6dGyrdkgNiHAgkM/T5IW97p8UfsuN6+Hb12jcbEjmlgJx8eNjgctjvm 9F68IFOZ0ngJiL+4dxibRZooonAeRY+OhVZB4RduY3jH/pYRZJm0jIYXshlxcjXc wceSKxHT5Lr1RbCbAXFKiyaSTem/NCp8uJVSnwrVoF7sv7/ay8gKAwkjaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUwkaoH9IHJKSSXuh4HWu99Mi0qMB8GA1UdIwQY MBaAFL0ZETQyJiKdID6jJqnWnU/DRsV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZTdkMTAtMjQzZi00N2I1LWFmYzQt MzU2ZWU5Nzc2MTUzLzEvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85ZTdkMTAtMjQzZi00N2I1LWFmYzQtMzU2ZWU5Nzc2MTUz LzEvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2WjT8xl OtWkgXqtM4SvcHeksm6p4vPjmJFM/X4DR4Fm41wHD0Xrk7EWeLdzubXaIyNOSwyK foKs3lJby2GY2YcmQz4f73hBBXXVE//QqKKgEiGLf4whX2NH7bJGRyVNi8CRWVqh lBmFwXVgaou8mkguKmz14cxB2OZsOP56LJf1rbkeAkL++DO8Cad9sPFOpZdT33Jz rEsfZ4d12ziIO6VMW5ofad92t45K6+g3D1ZpCsxFjUo5Lr0F5kIB01TzIy+eIEFG +eW4y9RM0AzGz+Zz8y18awsztf6lj456XRWaTDAzebKTLLU409mo1EhuHOt2UgYS qGfruVzE1Xt9Hw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:53:06 2025 by rpki-client