This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json) Hash identifier: BV07NnVXpjSRhRmBV/9nxGWVXpHNvf+3uWXW6/WqeXI= Subject key identifier: 7A:76:9C:F0:F0:2B:F7:E6:A9:90:7F:F9:9E:55:C5:6E:CE:74:47:73 Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4 Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4 Certificate serial: 019B281B7E0F7188066A8595E5F116B0D47C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 17:00:48 +0000 Manifest this update: Tue 16 Dec 2025 17:00:48 +0000 Manifest next update: Wed 17 Dec 2025 17:00:48 +0000 Files and hashes: 1: 1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa (hash: 7aGZcVrrNLU0uixa8/gBU4YvCztU5V0t53AcHm6cX3E=) 2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: aLC9/qKseKi6FvAv0GOzdIQOg8HcHDZ4sKAymbs73VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:7e:0f:71:88:06:6a:85:95:e5:f1:16:b0:d4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4 Validity Not Before: Dec 16 17:00:48 2025 GMT Not After : Dec 17 17:00:48 2025 GMT Subject: CN=7a769cf0f02bf7e6a9907ff99e55c56ece744773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:cb:83:86:0d:e1:46:10:a0:be:94:42:2f: 5b:df:9f:56:9a:59:3f:d6:8a:a8:a4:e6:39:24:a7: a2:ee:89:d3:da:cf:58:0a:3d:bd:cb:a3:7d:00:77: 0a:02:62:42:83:52:68:57:28:b9:a0:23:86:6c:15: d8:c2:eb:ac:d7:1d:44:6b:4e:48:2c:a1:93:0b:4e: cf:74:f3:4a:ba:6f:f5:52:9e:47:dc:5d:8e:c7:76: c2:71:2f:ef:5a:57:9b:15:77:9a:cc:69:bc:4f:fe: 97:0e:6e:b4:80:64:82:b7:ba:e1:eb:42:dd:3c:0e: c4:6e:7b:2b:33:9d:cc:57:4c:a4:fd:84:df:dc:59: 1b:51:71:3e:66:e7:48:8f:d6:19:07:94:db:88:f9: 66:76:74:6c:3c:47:86:5f:86:19:71:b2:1b:3e:16: f1:ed:f8:01:9a:09:79:51:90:c3:ec:da:09:c8:b0: d7:94:0b:f2:77:4c:54:bf:7b:4b:de:3c:76:e5:1c: 35:e5:e6:e9:27:02:9b:14:b3:e6:3c:f0:b6:12:fa: 99:ec:cc:ef:9e:8f:b9:fa:0d:1a:d4:47:49:4e:6a: c0:78:ad:c9:c9:25:6a:cf:ac:fb:d5:d7:7f:69:e9: e0:3b:34:bf:dd:3a:b7:a6:2b:5b:39:83:f1:54:65: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:76:9C:F0:F0:2B:F7:E6:A9:90:7F:F9:9E:55:C5:6E:CE:74:47:73 X509v3 Authority Key Identifier: keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:0a:83:60:b1:f9:90:b7:c4:36:88:a9:1d:11:38:f0:78:0a: 1d:3b:e3:a4:cd:29:28:fd:05:e1:62:bc:0e:c2:aa:02:aa:c0: 49:9f:7d:1e:11:ef:18:3b:6b:30:c6:06:9e:b5:88:7c:e5:90: b9:2f:8b:52:42:44:79:84:0b:9a:0a:63:7d:5f:3d:e6:1a:42: fd:85:86:27:dd:af:ec:9f:d2:0f:47:0c:c0:23:7f:cf:c9:68: 33:a1:bd:df:29:1d:ed:97:52:4c:2e:f6:7d:18:fa:2c:f0:42: fb:ab:54:c9:6b:43:e6:4d:56:95:fe:34:2f:b1:c2:e7:7a:75: 99:71:40:c6:78:9f:b2:04:c8:bd:77:be:b5:65:36:94:c4:e2: 96:54:80:be:05:bb:0c:7d:a9:fc:bc:5e:37:19:50:96:5e:e4: 30:aa:90:11:bf:ac:05:2c:0e:af:31:28:ca:c4:ab:68:f2:24: 9f:18:10:6b:85:fa:b2:2a:f5:37:52:50:0f:91:b4:83:e6:d1: b0:3a:fe:44:d0:eb:e2:24:07:3f:97:f7:3a:ec:2b:d4:66:10: 0d:71:8f:6a:72:60:3d:ef:d9:54:80:1c:4f:bc:3a:b1:37:c8: e9:45:42:67:d8:80:42:01:cc:7a:08:6e:34:fc:60:77:62:a7: b1:3c:e4:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG34PcYgGaoWV5fEWsNR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzAzM2ExMDJiM2I3OTEyYTM2NjMyMGY0NDM1YzUzZmI5 NzczZjQwHhcNMjUxMjE2MTcwMDQ4WhcNMjUxMjE3MTcwMDQ4WjAzMTEwLwYDVQQD Eyg3YTc2OWNmMGYwMmJmN2U2YTk5MDdmZjk5ZTU1YzU2ZWNlNzQ0NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuijLg4YN4UYQoL6UQi9b359Wmlk/ 1oqopOY5JKei7onT2s9YCj29y6N9AHcKAmJCg1JoVyi5oCOGbBXYwuus1x1Ea05I LKGTC07PdPNKum/1Up5H3F2Ox3bCcS/vWlebFXeazGm8T/6XDm60gGSCt7rh60Ld PA7EbnsrM53MV0yk/YTf3FkbUXE+ZudIj9YZB5TbiPlmdnRsPEeGX4YZcbIbPhbx 7fgBmgl5UZDD7NoJyLDXlAvyd0xUv3tL3jx25Rw15ebpJwKbFLPmPPC2EvqZ7Mzv no+5+g0a1EdJTmrAeK3JySVqz6z71dd/aengOzS/3Tq3pitbOYPxVGXvQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp2nPDwK/fmqZB/+Z5VxW7OdEdzMB8GA1UdIwQY MBaAFLwwM6ECs7eRKjZjIPRDXFP7l3P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWIt ZjlhN2FjZDkxYmNjLzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWItZjlhN2FjZDkxYmNj LzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAqDYLH5 kLfENoipHRE48HgKHTvjpM0pKP0F4WK8DsKqAqrASZ99HhHvGDtrMMYGnrWIfOWQ uS+LUkJEeYQLmgpjfV895hpC/YWGJ92v7J/SD0cMwCN/z8loM6G93ykd7ZdSTC72 fRj6LPBC+6tUyWtD5k1Wlf40L7HC53p1mXFAxnifsgTIvXe+tWU2lMTillSAvgW7 DH2p/LxeNxlQll7kMKqQEb+sBSwOrzEoysSraPIknxgQa4X6sir1N1JQD5G0g+bR sDr+RNDr4iQHP5f3Ouwr1GYQDXGPanJgPe/ZVIAcT7w6sTfI6UVCZ9iAQgHMeghu NPxgd2KnsTzkWg== -----END CERTIFICATE-----Generated at Wed Dec 17 00:24:04 2025 by rpki-client