This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json) Hash identifier: STNfbw1lg7An+XrSZsNDplCNcy6JJo+vyMF0388vGoA= Subject key identifier: 50:94:4B:88:97:50:60:EA:38:C6:D0:FD:A5:94:45:B0:F6:F9:53:86 Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1 Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1 Certificate serial: 019B46270481367BC58DDC9F1D9A2D91FBFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 13:02:00 +0000 Manifest this update: Mon 22 Dec 2025 13:02:00 +0000 Manifest next update: Tue 23 Dec 2025 13:02:00 +0000 Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: 7dD1zeLInIRHIutIIPjowzd9wyCTmSgvHQgMD+R7E3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:04:81:36:7b:c5:8d:dc:9f:1d:9a:2d:91:fb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1 Validity Not Before: Dec 22 13:02:00 2025 GMT Not After : Dec 23 13:02:00 2025 GMT Subject: CN=50944b88975060ea38c6d0fda59445b0f6f95386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:71:bb:f3:22:ae:03:86:ad:e6:b9:d8:62: 3f:fe:fb:c0:8a:e0:ff:b4:f9:86:95:0f:09:b0:f9: 68:ca:bf:68:4b:86:1c:24:09:73:e7:db:e5:5d:90: e2:4e:18:bf:91:93:08:02:33:2c:71:e7:25:15:23: 8e:b8:10:d9:59:65:e9:30:2f:d5:86:31:0a:fe:05: ef:32:f7:0a:e4:6e:7b:aa:5e:9f:1b:61:4c:c4:f1: 51:85:ba:73:28:32:12:ca:ed:3b:6f:fb:9c:ad:f4: f4:ab:c8:14:ac:73:d2:ca:cf:a7:4e:11:20:36:4c: 64:ca:d2:87:42:ec:d3:51:c2:9c:46:35:7a:d2:09: 34:ce:6b:57:c6:e2:3c:34:70:78:1f:b4:56:aa:ac: 20:a7:b2:02:9f:d5:7f:40:79:a9:b6:aa:ba:92:d5: 9f:11:f8:fe:15:a0:01:ad:82:74:2e:d2:52:1f:a2: b9:72:f7:44:f0:e1:64:1b:30:79:a1:63:40:a4:d0: 6e:79:d6:af:64:54:72:9a:41:39:f9:d2:0d:40:1b: e6:0f:15:1f:e1:12:e5:ce:2b:13:d3:b9:36:bc:ea: a2:92:4c:e8:79:e9:54:e8:d9:56:7f:cd:97:94:46: 09:ff:0b:18:ad:1a:63:b0:27:4d:04:35:44:c5:23: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:94:4B:88:97:50:60:EA:38:C6:D0:FD:A5:94:45:B0:F6:F9:53:86 X509v3 Authority Key Identifier: keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fe:40:0a:ad:c5:a3:e5:ae:b8:96:7f:d4:1f:8c:ad:76:a0: ac:70:7d:24:2e:34:90:e0:7d:c9:27:36:1f:43:51:ab:60:e2: a6:bf:30:72:8f:d8:57:12:51:15:8f:95:45:e8:1f:dd:88:fd: ba:53:db:6f:c0:1f:6f:50:0b:0e:4d:37:76:c7:41:66:ef:66: 84:88:48:09:bc:5e:8b:59:57:bc:95:c4:d2:4b:3f:5a:eb:3e: 2b:f4:61:4f:c1:59:6e:e1:32:0b:e0:86:6f:fc:cb:12:ea:57: da:45:b2:e8:43:be:bd:85:0e:22:9c:e0:4c:e1:e8:6b:c2:3a: 5c:e5:1d:34:cc:97:40:0c:24:b5:f4:88:6f:f4:b9:0d:69:48: b2:79:75:14:3f:22:58:26:e5:91:3c:29:68:2f:66:94:cb:f2: 63:d3:a8:f4:77:dd:ba:da:39:96:2c:da:a6:51:ed:43:27:f9: 92:19:68:f6:04:f6:6d:94:7f:62:d1:92:17:be:36:f7:36:aa: af:d2:02:a8:be:b1:e1:05:b1:36:3d:5b:9e:5c:c7:e7:34:05: f4:b9:9e:21:c5:63:f8:af:b6:e6:f7:57:0b:ef:eb:f4:52:dd: cc:be:4e:84:9f:52:0d:a3:b9:a5:e1:cf:8e:79:9c:2f:49:bd: e2:fa:05:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJwSBNnvFjdyfHZotkfv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzA1YmM5ZTc3M2RmYzhhNDliYjQzMDgyNWI5NzQ2ZGQ0 MWM0ZjEwHhcNMjUxMjIyMTMwMjAwWhcNMjUxMjIzMTMwMjAwWjAzMTEwLwYDVQQD Eyg1MDk0NGI4ODk3NTA2MGVhMzhjNmQwZmRhNTk0NDViMGY2Zjk1Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjNxu/MirgOGrea52GI//vvAiuD/ tPmGlQ8JsPloyr9oS4YcJAlz59vlXZDiThi/kZMIAjMsceclFSOOuBDZWWXpMC/V hjEK/gXvMvcK5G57ql6fG2FMxPFRhbpzKDISyu07b/ucrfT0q8gUrHPSys+nThEg NkxkytKHQuzTUcKcRjV60gk0zmtXxuI8NHB4H7RWqqwgp7ICn9V/QHmptqq6ktWf Efj+FaABrYJ0LtJSH6K5cvdE8OFkGzB5oWNApNBuedavZFRymkE5+dINQBvmDxUf 4RLlzisT07k2vOqikkzoeelU6NlWf82XlEYJ/wsYrRpjsCdNBDVExSNChQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCUS4iXUGDqOMbQ/aWURbD2+VOGMB8GA1UdIwQY MBaAFLzAW8nnc9/IpJu0MIJbl0bdQcTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kYTdmMjQtNDBkMC00YTRjLTg5MDEt NzIyZTJkZTM3ZjA2LzEvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kYTdmMjQtNDBkMC00YTRjLTg5MDEtNzIyZTJkZTM3ZjA2 LzEvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApv5ACq3F o+WuuJZ/1B+MrXagrHB9JC40kOB9ySc2H0NRq2Dipr8wco/YVxJRFY+VRegf3Yj9 ulPbb8Afb1ALDk03dsdBZu9mhIhICbxei1lXvJXE0ks/Wus+K/RhT8FZbuEyC+CG b/zLEupX2kWy6EO+vYUOIpzgTOHoa8I6XOUdNMyXQAwktfSIb/S5DWlIsnl1FD8i WCblkTwpaC9mlMvyY9Oo9Hfduto5lizaplHtQyf5khlo9gT2bZR/YtGSF7429zaq r9ICqL6x4QWxNj1bnlzH5zQF9LmeIcVj+K+25vdXC+/r9FLdzL5OhJ9SDaO5peHP jnmcL0m94voF7g== -----END CERTIFICATE-----Generated at Mon Dec 22 22:56:59 2025 by rpki-client