This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json) Hash identifier: ogK4ZZ5keYiE6BmU4heEGT3Ly6rso0+uDrA5pvAmj70= Subject key identifier: 9F:8E:38:E6:64:E8:1B:7C:C6:18:DD:4F:60:B8:EB:46:B7:D4:57:CB Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61 Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061 Certificate serial: 019B820370832507B58624CC7D299DA7C6C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft Manifest number: 1011 Signing time: Sat 03 Jan 2026 04:00:22 +0000 Manifest this update: Sat 03 Jan 2026 04:00:22 +0000 Manifest next update: Sun 04 Jan 2026 04:00:22 +0000 Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: axX5XiVqi+a8OzQdwCVvsnolb9AwBtFpAvlPcXIMXEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:03:70:83:25:07:b5:86:24:cc:7d:29:9d:a7:c6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061 Validity Not Before: Jan 3 04:00:22 2026 GMT Not After : Jan 4 04:00:22 2026 GMT Subject: CN=9f8e38e664e81b7cc618dd4f60b8eb46b7d457cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c0:35:df:66:85:35:27:7e:6b:ba:60:73:5a: a1:2b:e6:cc:27:90:29:8c:88:1d:53:47:a3:0c:f7: 5f:76:2c:7c:cf:56:52:c6:64:c6:cf:6f:fc:d8:fd: 40:7f:39:e7:54:c9:f3:b1:40:a6:be:b2:1e:89:34: 30:ef:5f:7c:07:b2:f1:5b:a9:3f:54:3a:13:0f:27: 57:04:00:73:89:5c:1d:ad:4e:af:b4:d5:c0:ee:ba: 09:15:54:c7:72:e9:1c:a7:f0:a8:98:15:db:ad:c9: c0:f5:17:53:8f:f2:df:55:18:5c:13:82:be:81:96: 5e:46:35:dd:b1:79:14:54:4d:db:8a:e5:9a:f4:24: cc:b5:78:75:90:70:9c:09:83:23:fe:0f:66:bc:15: 7e:19:a8:4e:a9:4e:fd:bf:3d:0e:a7:71:2f:22:b1: 9d:b2:e9:a2:c0:76:ba:88:df:6b:27:5f:98:79:08: 80:f6:a7:6a:c0:53:60:53:7c:42:ed:d0:39:55:03: 6c:4e:ea:80:12:7f:15:35:ec:d1:71:d9:55:94:76: 27:18:ec:32:d6:5f:8d:b5:47:21:d7:60:1d:09:17: f2:3d:ff:22:5e:72:6d:11:45:63:b0:67:c8:9b:b5: 2b:5f:23:bc:9f:7c:77:36:6a:43:48:0f:7f:f4:1c: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8E:38:E6:64:E8:1B:7C:C6:18:DD:4F:60:B8:EB:46:B7:D4:57:CB X509v3 Authority Key Identifier: keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c1:da:2e:d1:eb:a7:68:c1:c5:b6:93:31:da:42:40:46:b6: eb:b4:ef:13:d3:61:37:57:96:ae:55:eb:f9:41:88:b4:81:22: 68:5b:46:6c:83:39:ed:bf:37:f3:4b:29:e1:37:c8:9d:4a:21: 96:65:5e:31:d8:c4:99:19:f0:f7:e6:c6:c7:73:a1:68:12:fe: 47:fb:67:98:a9:03:19:6a:33:0c:b0:9d:b4:b9:98:96:85:23: cb:e7:98:f6:15:a4:93:39:3a:02:cf:67:db:d6:b9:5c:6c:10: 15:dd:f8:77:04:a2:eb:51:3c:27:f1:2c:44:bc:21:eb:0d:38: 99:2e:49:cf:3c:fa:2f:cc:ed:1f:ac:0a:99:78:8f:ff:63:7a: 2d:e4:49:9d:fc:1f:ac:17:94:df:53:be:8f:59:33:50:04:a2: 3e:04:6a:bf:1d:c2:8f:12:f4:d2:f5:68:d3:52:32:2c:1d:c8: fd:10:2d:32:22:41:f6:37:f6:50:2e:3a:b7:09:1f:5c:d0:48: 7b:3e:18:db:36:bd:5c:cc:90:a3:12:bc:20:48:77:34:85:3c: 8d:cc:05:7b:3f:eb:5c:16:23:6b:e4:39:1c:d6:ab:56:42:c6: 70:a1:45:9f:10:f0:b3:b9:1e:a7:20:1d:7f:57:55:8c:8e:1b: db:11:71:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuCA3CDJQe1hiTMfSmdp8bIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzc1MTlkNjI4ODJlZjQ2NzJmYTIxMjc2NjI1NzI3YTJm YmUwNjEwHhcNMjYwMTAzMDQwMDIyWhcNMjYwMTA0MDQwMDIyWjAzMTEwLwYDVQQD Eyg5ZjhlMzhlNjY0ZTgxYjdjYzYxOGRkNGY2MGI4ZWI0NmI3ZDQ1N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MA132aFNSd+a7pgc1qhK+bMJ5Ap jIgdU0ejDPdfdix8z1ZSxmTGz2/82P1AfznnVMnzsUCmvrIeiTQw7198B7LxW6k/ VDoTDydXBABziVwdrU6vtNXA7roJFVTHcukcp/ComBXbrcnA9RdTj/LfVRhcE4K+ gZZeRjXdsXkUVE3biuWa9CTMtXh1kHCcCYMj/g9mvBV+GahOqU79vz0Op3EvIrGd sumiwHa6iN9rJ1+YeQiA9qdqwFNgU3xC7dA5VQNsTuqAEn8VNezRcdlVlHYnGOwy 1l+NtUch12AdCRfyPf8iXnJtEUVjsGfIm7UrXyO8n3x3NmpDSA9/9BxgBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+OOOZk6Bt8xhjdT2C460a31FfLMB8GA1UdIwQY MBaAFLzHUZ1iiC70Zy+iEnZiVyei++BhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMt MmJmMGM2Nzg3ZmJiLzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMtMmJmMGM2Nzg3ZmJi LzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8HaLtHr p2jBxbaTMdpCQEa267TvE9NhN1eWrlXr+UGItIEiaFtGbIM57b8380sp4TfInUoh lmVeMdjEmRnw9+bGx3OhaBL+R/tnmKkDGWozDLCdtLmYloUjy+eY9hWkkzk6As9n 29a5XGwQFd34dwSi61E8J/EsRLwh6w04mS5Jzzz6L8ztH6wKmXiP/2N6LeRJnfwf rBeU31O+j1kzUASiPgRqvx3CjxL00vVo01IyLB3I/RAtMiJB9jf2UC46twkfXNBI ez4Y2za9XMyQoxK8IEh3NIU8jcwFez/rXBYja+Q5HNarVkLGcKFFnxDws7kepyAd f1dVjI4b2xFx/Q== -----END CERTIFICATE-----Generated at Sat Jan 3 06:30:48 2026 by rpki-client