This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json) Hash identifier: 0PY1AfxX/ksSzKRi1O6jp2Cw8zo0udNTppLCLICFMN8= Subject key identifier: B7:67:4A:85:19:C9:63:8D:E0:47:46:04:BC:8B:D5:18:A3:00:9B:DC Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51 Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751 Certificate serial: 019B53063595B2BC91A1ACFBE2B0E842068C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 01:01:14 +0000 Manifest this update: Thu 25 Dec 2025 01:01:14 +0000 Manifest next update: Fri 26 Dec 2025 01:01:14 +0000 Files and hashes: 1: lTr_UVi_A79a3K8ej8EhTQ-s56o.asa (hash: Kis6ukaDSScAbBexiq/JiDaCOANQ9hpiW6hUa9xiV5s=) 2: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: //pPGxhSLPWJrd8fw8DBuQ0hNGPexRlEEBMHlLZ6F/o=) 3: znul8D-ksNRhN2Cclb1d9oAN3m4.roa (hash: e1Z/F5VmaFQnbIQzB91uNx60SZ0/+TW0LayKFelguZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:35:95:b2:bc:91:a1:ac:fb:e2:b0:e8:42:06:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751 Validity Not Before: Dec 25 01:01:14 2025 GMT Not After : Dec 26 01:01:14 2025 GMT Subject: CN=b7674a8519c9638de0474604bc8bd518a3009bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:6c:a5:12:64:34:81:8d:1a:d8:ab:09:83: b4:fa:c3:ad:10:1c:90:c2:08:5c:35:f5:3a:d2:e0: 29:ed:fd:93:26:c1:82:0d:d8:55:ee:3c:bf:7c:f5: d3:7b:a9:fb:7e:50:1c:00:10:db:c6:19:ff:d1:6e: 01:d2:54:5d:6a:20:d7:6f:35:59:7c:10:a9:6e:ef: 13:1b:44:4d:fc:9a:63:fe:bf:1f:eb:16:d2:40:8e: 1b:04:6c:c9:ca:ad:14:06:05:14:85:56:37:be:21: 66:3d:6c:d6:69:0d:9a:d6:9e:f8:99:2c:ba:4e:09: ea:66:21:86:d7:b0:ca:ad:0a:0c:05:b9:d2:e9:23: 5d:16:b8:f2:03:9b:40:16:ed:c3:fc:29:51:41:cb: 3f:7d:1a:94:f2:09:30:02:de:b9:18:5c:e7:3b:e3: 2a:90:85:0f:0a:92:57:c8:80:53:d2:4d:e8:e8:80: 43:3e:a1:e1:bf:f7:c1:99:c1:e7:04:07:6a:87:81: 4b:ff:be:1b:4a:e7:f9:5a:5c:fc:70:23:38:74:f8: f4:ff:e1:e9:93:ca:a5:1b:36:35:fc:1c:98:f7:b1: 7f:9c:76:33:f2:ae:0f:09:a9:46:24:3b:88:5a:d3: 61:ff:80:28:7b:ad:a9:98:72:55:cd:09:1f:d3:6a: bb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:67:4A:85:19:C9:63:8D:E0:47:46:04:BC:8B:D5:18:A3:00:9B:DC X509v3 Authority Key Identifier: keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d5:0f:58:4d:6a:c8:ce:f5:04:98:2a:e4:58:0d:1b:71:53: 62:62:58:fe:e3:f8:59:4f:fc:83:6f:07:07:a1:1b:56:2f:25: be:f4:98:8b:3b:17:11:c7:c9:7c:52:ba:e1:2f:bc:b9:51:c0: 96:6b:0b:8f:e7:01:e6:67:fd:93:e8:45:76:2f:05:5f:b7:27: f5:87:56:f8:70:b6:26:0e:05:bd:40:c1:58:6e:82:ab:ac:14: e5:0a:ab:c3:43:56:0a:96:ed:38:23:8b:61:76:56:81:2d:d8: b9:26:b6:09:ac:66:74:7b:b1:2b:13:47:be:cd:c6:0f:4d:25: b0:5b:de:c2:cb:69:3e:a4:d8:82:da:f1:9b:5c:10:b1:f5:7f: d8:39:b8:f4:17:de:2f:2a:b1:ee:6a:e2:d2:19:05:48:b8:98: 83:97:85:55:35:07:42:db:f7:f9:f3:5f:ec:df:3c:e6:ae:e6: 4b:6f:d1:5d:75:ce:61:38:83:ed:f9:84:ec:c5:72:7f:d1:2b: 79:74:ad:90:f8:26:e1:c2:b2:2d:fb:6b:4d:5d:63:51:3f:03: bb:f7:59:97:2e:32:3c:e1:91:ee:6c:90:99:cc:d9:d9:6c:ab: 3d:58:8a:71:38:67:9b:69:d4:a2:30:08:54:35:65:ae:5a:ab: 4a:2a:c1:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBjWVsryRoaz74rDoQgaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli M2U3NTEwHhcNMjUxMjI1MDEwMTE0WhcNMjUxMjI2MDEwMTE0WjAzMTEwLwYDVQQD EyhiNzY3NGE4NTE5Yzk2MzhkZTA0NzQ2MDRiYzhiZDUxOGEzMDA5YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6RspRJkNIGNGtirCYO0+sOtEByQ wghcNfU60uAp7f2TJsGCDdhV7jy/fPXTe6n7flAcABDbxhn/0W4B0lRdaiDXbzVZ fBCpbu8TG0RN/Jpj/r8f6xbSQI4bBGzJyq0UBgUUhVY3viFmPWzWaQ2a1p74mSy6 TgnqZiGG17DKrQoMBbnS6SNdFrjyA5tAFu3D/ClRQcs/fRqU8gkwAt65GFznO+Mq kIUPCpJXyIBT0k3o6IBDPqHhv/fBmcHnBAdqh4FL/74bSuf5Wlz8cCM4dPj0/+Hp k8qlGzY1/ByY97F/nHYz8q4PCalGJDuIWtNh/4Aoe62pmHJVzQkf02q7CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdnSoUZyWON4EdGBLyL1RijAJvcMB8GA1UdIwQY MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt ODZjMWVlMmE5ZWJhLzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNUPWE1q yM71BJgq5FgNG3FTYmJY/uP4WU/8g28HB6EbVi8lvvSYizsXEcfJfFK64S+8uVHA lmsLj+cB5mf9k+hFdi8FX7cn9YdW+HC2Jg4FvUDBWG6Cq6wU5Qqrw0NWCpbtOCOL YXZWgS3YuSa2CaxmdHuxKxNHvs3GD00lsFvewstpPqTYgtrxm1wQsfV/2Dm49Bfe Lyqx7mri0hkFSLiYg5eFVTUHQtv3+fNf7N885q7mS2/RXXXOYTiD7fmE7MVyf9Er eXStkPgm4cKyLftrTV1jUT8Du/dZly4yPOGR7myQmczZ2WyrPViKcThnm2nUojAI VDVlrlqrSirBbQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:24:35 2025 by rpki-client