This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: JAbWKRiXYpeXc5svPDmGVrz8TonOWRdBe5jIih0ESuI= Subject key identifier: 1B:CD:6B:AA:8B:B6:CA:BD:C7:63:06:C8:05:1C:0C:B4:76:F4:E7:67 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B397D537445A17B83E5D3C2AF8211CEBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1496 Signing time: Sat 20 Dec 2025 02:01:13 +0000 Manifest this update: Sat 20 Dec 2025 02:01:13 +0000 Manifest next update: Sun 21 Dec 2025 02:01:13 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: NfOEXEE7Ybvyt3lwAuabMpICz4B2Zz814GppYpmK0aY=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:53:74:45:a1:7b:83:e5:d3:c2:af:82:11:ce:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Dec 20 02:01:13 2025 GMT Not After : Dec 21 02:01:13 2025 GMT Subject: CN=1bcd6baa8bb6cabdc76306c8051c0cb476f4e767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c5:31:98:96:1c:a5:04:37:5a:74:9b:27:ee: 1d:f4:3e:53:ed:40:1b:71:ea:13:93:64:99:f4:d8: 9d:0f:bc:12:53:ed:d1:c6:c1:e3:28:cd:eb:7c:bb: 8f:c2:94:6e:3d:9d:fd:ab:73:85:98:fe:e2:9c:4c: 9b:af:b9:1b:95:f8:e2:64:57:16:0c:79:f5:e1:fa: 2b:a2:f9:9d:9b:33:c7:e9:e1:ba:19:d9:c8:6e:ed: de:83:df:88:46:76:e2:78:0d:13:0a:04:bb:26:11: 70:b0:19:22:a6:84:99:84:da:05:8b:52:97:37:e9: 84:1b:49:c1:77:3b:d8:be:06:a4:cb:8d:9d:15:84: 8b:37:8b:c1:9a:83:10:6e:fc:d0:60:37:c9:7b:38: 34:9a:25:7c:75:e2:e2:b0:45:80:bb:da:52:b3:3a: 86:3e:e6:83:6e:a4:dd:b8:23:e0:96:22:34:51:1e: f5:8a:99:1c:b7:72:e1:ad:85:f3:86:f4:d8:55:8a: fc:89:9a:48:b3:07:10:76:3f:de:0e:d5:f6:08:7b: c5:a0:fd:9a:1f:6a:a7:2b:1f:ed:b7:e3:c5:85:38: 77:2f:e3:58:1d:32:a6:06:6f:39:a6:27:ad:d5:5d: 4e:75:1a:6e:e2:53:bc:92:c9:ff:77:14:bb:7a:6f: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:6B:AA:8B:B6:CA:BD:C7:63:06:C8:05:1C:0C:B4:76:F4:E7:67 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f2:09:44:5f:52:09:f3:d8:37:77:4f:f0:c5:d6:85:8c:94: b3:df:3a:84:d8:20:6c:06:2c:80:14:df:90:30:9c:6c:4c:ac: 8d:b9:1f:05:5f:50:79:31:07:7d:ec:bc:f2:e4:1f:ad:4c:a1: 59:6d:64:3e:ff:de:91:8b:aa:e2:fe:33:41:63:3b:01:2c:2c: e8:47:b9:15:f0:d9:4e:87:4a:1b:cc:b0:a9:6c:46:c2:40:99: 4e:13:02:ba:8d:05:f5:25:60:9c:61:75:7b:12:90:88:62:0b: 19:03:93:72:6d:d9:50:eb:ee:80:7c:4c:8a:72:ae:88:f3:d0: 7f:eb:60:f2:29:fc:c9:43:ea:49:2e:ab:72:73:aa:a3:04:f2: 68:36:73:0b:52:4a:ee:84:c7:f2:e5:00:2a:cc:0d:54:ed:1f: f5:96:96:c5:be:45:cf:f1:8a:3f:27:26:7e:59:8d:c8:0c:7a: 69:34:ac:28:53:c5:f4:fb:cd:d5:64:7b:ac:4f:c6:ce:0d:f2: ea:61:9b:7f:c1:e6:5d:3c:40:5e:3b:36:79:09:39:66:2e:98: 67:4b:f3:00:96:e5:1b:af:80:01:cd:64:81:97:96:38:c8:8b: dc:b5:ca:2e:62:4b:c7:8b:64:b1:3a:fa:15:e6:de:c6:2b:02: 72:a6:77:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fVN0RaF7g+XTwq+CEc6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUxMjIwMDIwMTEzWhcNMjUxMjIxMDIwMTEzWjAzMTEwLwYDVQQD EygxYmNkNmJhYThiYjZjYWJkYzc2MzA2YzgwNTFjMGNiNDc2ZjRlNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cUxmJYcpQQ3WnSbJ+4d9D5T7UAb ceoTk2SZ9NidD7wSU+3RxsHjKM3rfLuPwpRuPZ39q3OFmP7inEybr7kblfjiZFcW DHn14forovmdmzPH6eG6GdnIbu3eg9+IRnbieA0TCgS7JhFwsBkipoSZhNoFi1KX N+mEG0nBdzvYvgaky42dFYSLN4vBmoMQbvzQYDfJezg0miV8deLisEWAu9pSszqG PuaDbqTduCPgliI0UR71ipkct3LhrYXzhvTYVYr8iZpIswcQdj/eDtX2CHvFoP2a H2qnKx/tt+PFhTh3L+NYHTKmBm85piet1V1OdRpu4lO8ksn/dxS7em936wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvNa6qLtsq9x2MGyAUcDLR29OdnMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvIJRF9S CfPYN3dP8MXWhYyUs986hNggbAYsgBTfkDCcbEysjbkfBV9QeTEHfey88uQfrUyh WW1kPv/ekYuq4v4zQWM7ASws6Ee5FfDZTodKG8ywqWxGwkCZThMCuo0F9SVgnGF1 exKQiGILGQOTcm3ZUOvugHxMinKuiPPQf+tg8in8yUPqSS6rcnOqowTyaDZzC1JK 7oTH8uUAKswNVO0f9ZaWxb5Fz/GKPycmflmNyAx6aTSsKFPF9PvN1WR7rE/Gzg3y 6mGbf8HmXTxAXjs2eQk5Zi6YZ0vzAJblG6+AAc1kgZeWOMiL3LXKLmJLx4tksTr6 FebexisCcqZ30Q== -----END CERTIFICATE-----Generated at Sat Dec 20 10:00:16 2025 by rpki-client