This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json) Hash identifier: UAwKuPksf0skMnmgmG0B35E2x/8QiJ/7hMObSwzcxzs= Subject key identifier: 70:98:EF:DD:B0:E1:AD:D5:5F:7B:12:EF:B5:28:70:F6:C2:E3:22:97 Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a Certificate serial: 019B4693F0D46568180B0E4B769DF61BDEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft Manifest number: 0E72 Signing time: Mon 22 Dec 2025 15:00:59 +0000 Manifest this update: Mon 22 Dec 2025 15:00:59 +0000 Manifest next update: Tue 23 Dec 2025 15:00:59 +0000 Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: ojJlklAgIkHJE6QcLOa1XlwWIyQJtL9PZQpmICReVsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:f0:d4:65:68:18:0b:0e:4b:76:9d:f6:1b:de:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a Validity Not Before: Dec 22 15:00:59 2025 GMT Not After : Dec 23 15:00:59 2025 GMT Subject: CN=7098efddb0e1add55f7b12efb52870f6c2e32297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:85:b1:ad:85:4a:0f:80:c6:a8:22:ba:82: 1e:46:38:5d:92:c7:2f:88:b2:c6:17:0c:d4:d8:c4: cb:7d:87:51:54:20:3e:92:f1:75:0a:12:36:38:fd: 7a:13:d0:b2:0b:11:e4:b1:64:98:5d:50:9e:c6:03: 7f:a2:56:5a:6e:1c:6d:88:91:d7:5f:7e:4c:31:7d: 11:e4:12:eb:a2:55:0d:4f:df:4a:c0:0a:0e:14:75: f9:6f:e7:9c:cd:34:a3:60:35:08:92:33:bf:7b:9d: 9e:0c:55:13:44:20:c0:b7:89:af:95:12:9f:50:ce: 58:80:78:00:da:c4:67:c8:cc:56:40:58:6e:74:4e: fe:4c:e7:cb:3d:fd:ee:a9:02:83:a2:51:41:13:46: f7:8a:2b:ea:ba:7b:22:82:16:1d:d0:76:da:94:0a: f1:16:9e:77:51:53:be:2c:d2:1f:4d:63:c8:39:d0: c5:f7:4f:a2:09:64:2b:1e:97:9b:ad:5f:4b:5f:d9: 89:71:c1:1d:9b:9b:c3:eb:35:d7:dc:d5:69:05:1b: 55:93:4f:39:0d:80:ba:40:8a:5e:c1:67:c7:de:f8: 67:b3:7c:94:e7:7a:7e:a4:bb:84:8e:30:a7:4d:c1: 47:54:50:a3:44:4c:16:0f:e7:0e:30:f3:89:fa:10: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:98:EF:DD:B0:E1:AD:D5:5F:7B:12:EF:B5:28:70:F6:C2:E3:22:97 X509v3 Authority Key Identifier: keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:27:c5:0c:8b:d6:75:91:8a:5a:6d:49:9e:43:8a:11:67:d0: 36:9d:14:63:7a:28:9b:1f:79:27:f1:5b:05:1e:b3:b9:37:42: d2:2e:1e:fb:f9:c1:79:b1:35:0c:96:d2:b6:4e:e6:09:b9:51: 92:7b:83:88:92:84:f9:60:b4:bf:4b:0a:bb:04:bd:c7:55:5d: d1:5c:45:ec:a8:fe:69:27:27:03:04:b8:e4:df:db:e7:ed:4e: cf:d5:7c:11:75:13:d5:61:16:95:8e:99:39:ec:01:36:23:1a: a3:6a:3f:9a:44:23:d5:f9:50:98:b8:3e:50:98:9b:c7:95:02: a4:ba:45:9e:9b:34:98:8f:ad:74:b4:b6:09:74:06:06:c9:03: 2d:54:c2:0b:30:51:21:d2:58:b8:b0:31:45:cd:29:aa:7c:8a: a0:86:0b:0d:37:18:a9:d9:46:20:cb:3f:fe:e1:d0:ea:e5:6e: 8c:a0:a1:e0:2b:53:f4:20:5a:52:41:f0:fe:22:4f:91:16:93: 05:a8:5a:ec:f9:88:a5:d3:b5:c4:c5:ec:35:fe:17:6a:3c:bc: aa:98:31:41:67:54:a2:2b:80:12:fe:60:1f:4a:cc:fe:96:a0: 66:1f:98:53:d2:43:18:21:12:b1:94:9b:39:15:db:8d:b4:f7: 62:a0:c8:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk/DUZWgYCw5Ldp32G96tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZDg4NGUxNTRjMjFjOWY0NTlmNDJhODM2YWJjYmM4YWMw ZjQxNWEwHhcNMjUxMjIyMTUwMDU5WhcNMjUxMjIzMTUwMDU5WjAzMTEwLwYDVQQD Eyg3MDk4ZWZkZGIwZTFhZGQ1NWY3YjEyZWZiNTI4NzBmNmMyZTMyMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TyFsa2FSg+AxqgiuoIeRjhdkscv iLLGFwzU2MTLfYdRVCA+kvF1ChI2OP16E9CyCxHksWSYXVCexgN/olZabhxtiJHX X35MMX0R5BLrolUNT99KwAoOFHX5b+eczTSjYDUIkjO/e52eDFUTRCDAt4mvlRKf UM5YgHgA2sRnyMxWQFhudE7+TOfLPf3uqQKDolFBE0b3iivqunsighYd0HbalArx Fp53UVO+LNIfTWPIOdDF90+iCWQrHpebrV9LX9mJccEdm5vD6zXX3NVpBRtVk085 DYC6QIpewWfH3vhns3yU53p+pLuEjjCnTcFHVFCjREwWD+cOMPOJ+hCDLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCY792w4a3VX3sS77UocPbC4yKXMB8GA1UdIwQY MBaAFLzYhOFUwhyfRZ9CqDary8isD0FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTIt NWQzMThhMjJjYTk2LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTItNWQzMThhMjJjYTk2 LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyfFDIvW dZGKWm1JnkOKEWfQNp0UY3oomx95J/FbBR6zuTdC0i4e+/nBebE1DJbStk7mCblR knuDiJKE+WC0v0sKuwS9x1Vd0VxF7Kj+aScnAwS45N/b5+1Oz9V8EXUT1WEWlY6Z OewBNiMao2o/mkQj1flQmLg+UJibx5UCpLpFnps0mI+tdLS2CXQGBskDLVTCCzBR IdJYuLAxRc0pqnyKoIYLDTcYqdlGIMs//uHQ6uVujKCh4CtT9CBaUkHw/iJPkRaT Baha7PmIpdO1xMXsNf4Xajy8qpgxQWdUoiuAEv5gH0rM/pagZh+YU9JDGCESsZSb ORXbjbT3YqDIRw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:50:40 2025 by rpki-client