This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft File: vPPYLGBpUlW7VE_xoawy2w-xFuU.mft (raw, json) Hash identifier: 06q8b8zw7VQfHPq655MvfX6S3+fxc7dw11gObm2hWp0= Subject key identifier: 82:11:84:BA:48:C6:8C:B6:F4:DA:DB:90:B3:CB:47:F7:12:BC:FB:0D Authority key identifier: BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5 Certificate issuer: /CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5 Certificate serial: 019B3F118D5C421CEC75B1B60A3BC4BD24D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft Manifest number: 010D Signing time: Sun 21 Dec 2025 04:01:13 +0000 Manifest this update: Sun 21 Dec 2025 04:01:13 +0000 Manifest next update: Mon 22 Dec 2025 04:01:13 +0000 Files and hashes: 1: d59ifLeoofn7-UvWX5Z_heEmW3w.roa (hash: myKQPKzA+B6pXm0I1iyKz0J47S4IH4zVCcxURKYGIbw=) 2: vPPYLGBpUlW7VE_xoawy2w-xFuU.crl (hash: K+i78goqpKBV2G6svyCIhDLacK4ypT4sw4Amdj2FDUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8d:5c:42:1c:ec:75:b1:b6:0a:3b:c4:bd:24:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5 Validity Not Before: Dec 21 04:01:13 2025 GMT Not After : Dec 22 04:01:13 2025 GMT Subject: CN=821184ba48c68cb6f4dadb90b3cb47f712bcfb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:7c:4d:de:59:47:a8:62:3f:1e:39:f5:4b: 15:0b:71:ec:cf:00:72:64:e4:f7:fe:46:be:10:9b: 4a:e5:a1:6e:28:08:3b:20:63:aa:b6:74:b4:bd:d0: 4b:8b:3d:48:da:98:ae:a9:bf:08:ca:74:4d:3f:5c: 3c:e8:e2:bd:f4:ff:3f:3f:3d:b7:14:82:18:ec:64: f2:56:4d:93:8b:4f:b8:ca:0d:26:8c:6d:55:57:9f: 75:7f:63:2b:0b:c9:33:4b:fe:4d:93:12:06:8d:59: 69:83:4d:4f:02:54:ce:cf:5a:ff:b2:81:e4:f8:d6: d1:0c:65:52:9e:9d:2e:fc:61:33:87:40:c3:54:cf: bc:14:20:c2:c1:33:8c:9c:27:d4:76:ee:9b:46:cd: a5:f1:77:4d:a1:49:3d:40:02:96:fa:d0:14:3b:84: 80:9f:ec:66:ea:34:2c:7c:4b:fd:f2:82:f1:ac:bc: 1c:bc:d4:b2:eb:9e:bb:96:64:33:04:f3:e7:c5:00: 26:29:ef:a7:61:02:42:a6:92:4e:75:50:5f:8f:10: 43:28:a4:71:bc:40:85:29:aa:6b:c2:58:59:53:dd: 8c:a4:29:d9:82:4a:50:f8:06:6e:ae:8e:a9:97:ee: ec:06:f6:c7:12:a4:ea:aa:0f:d9:0f:d4:18:ba:7a: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:11:84:BA:48:C6:8C:B6:F4:DA:DB:90:B3:CB:47:F7:12:BC:FB:0D X509v3 Authority Key Identifier: keyid:BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:22:9d:0c:57:c0:ea:c8:66:af:27:b9:7b:bc:f8:60:97:f6: 8b:ca:c2:e8:fe:d0:34:6a:fd:fa:8d:2f:65:35:69:a7:d1:c3: 18:36:2c:48:ec:84:3d:8b:4b:cd:9d:ed:b8:f9:5d:11:9c:c9: 07:2f:db:68:7e:8b:22:1c:90:7c:b7:e6:bf:fb:51:6c:78:7e: 1b:f3:9f:f0:e2:b6:e1:dd:69:b4:e6:21:bc:a2:7d:03:04:58: c8:67:c6:f7:aa:9e:e8:d2:49:f3:1e:55:fe:fd:99:4c:8d:c4: d3:99:d0:9c:f4:d1:13:13:8a:f1:81:30:60:72:4c:db:0c:f7: 8e:db:64:47:c6:18:5d:04:39:23:77:37:eb:13:de:a4:2b:0d: eb:a6:3c:8e:3c:9e:29:29:1e:4c:56:1d:d7:50:2a:c4:86:ef: 76:04:47:5b:b5:b1:e3:ab:78:d5:86:95:4a:83:94:c4:5f:63: 37:35:70:35:2a:c0:16:20:72:e4:b5:ac:11:a7:3d:18:bb:e0: f0:3d:9b:e0:6b:f4:b4:e3:17:5d:48:d0:96:c7:68:08:3f:fe: c7:a2:03:b0:ff:14:16:be:b4:27:4a:53:19:ad:09:6f:e4:c2: d5:2d:07:dc:7b:8b:3a:5e:1b:6a:45:3f:ba:a1:b6:e5:83:b5: 7e:8c:24:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EY1cQhzsdbG2CjvEvSTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjNkODJjNjA2OTUyNTViYjU0NGZmMWExYWMzMmRiMGZi MTE2ZTUwHhcNMjUxMjIxMDQwMTEzWhcNMjUxMjIyMDQwMTEzWjAzMTEwLwYDVQQD Eyg4MjExODRiYTQ4YzY4Y2I2ZjRkYWRiOTBiM2NiNDdmNzEyYmNmYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rB8Td5ZR6hiPx459UsVC3HszwBy ZOT3/ka+EJtK5aFuKAg7IGOqtnS0vdBLiz1I2piuqb8IynRNP1w86OK99P8/Pz23 FIIY7GTyVk2Ti0+4yg0mjG1VV591f2MrC8kzS/5NkxIGjVlpg01PAlTOz1r/soHk +NbRDGVSnp0u/GEzh0DDVM+8FCDCwTOMnCfUdu6bRs2l8XdNoUk9QAKW+tAUO4SA n+xm6jQsfEv98oLxrLwcvNSy6567lmQzBPPnxQAmKe+nYQJCppJOdVBfjxBDKKRx vECFKaprwlhZU92MpCnZgkpQ+AZuro6pl+7sBvbHEqTqqg/ZD9QYunqimwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIRhLpIxoy29NrbkLPLR/cSvPsNMB8GA1UdIwQY MBaAFLzz2CxgaVJVu1RP8aGsMtsPsRblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lYTkxZjktYmIxMi00NTQ0LTliMmYt ZTU3MDM2OWVlMDNiLzEvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9lYTkxZjktYmIxMi00NTQ0LTliMmYtZTU3MDM2OWVlMDNi LzEvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCKdDFfA 6shmrye5e7z4YJf2i8rC6P7QNGr9+o0vZTVpp9HDGDYsSOyEPYtLzZ3tuPldEZzJ By/baH6LIhyQfLfmv/tRbHh+G/Of8OK24d1ptOYhvKJ9AwRYyGfG96qe6NJJ8x5V /v2ZTI3E05nQnPTRExOK8YEwYHJM2wz3jttkR8YYXQQ5I3c36xPepCsN66Y8jjye KSkeTFYd11AqxIbvdgRHW7Wx46t41YaVSoOUxF9jNzVwNSrAFiBy5LWsEac9GLvg 8D2b4Gv0tOMXXUjQlsdoCD/+x6IDsP8UFr60J0pTGa0Jb+TC1S0H3HuLOl4bakU/ uqG25YO1fowkbg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:36 2025 by rpki-client