This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json) Hash identifier: 8ndaL3GxSKx8VAeQYijvTDpzK777v9PJB2pQP7vlZTw= Subject key identifier: 71:A2:C4:97:E3:EF:46:51:5C:7E:E3:C9:FC:78:1F:DD:83:4A:C6:48 Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Certificate serial: 019B6768A411C49D1A02A906B52785C379CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft Manifest number: 111D Signing time: Mon 29 Dec 2025 00:01:09 +0000 Manifest this update: Mon 29 Dec 2025 00:01:09 +0000 Manifest next update: Tue 30 Dec 2025 00:01:09 +0000 Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=) 2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: JMSWVq8cwma1BTVnoZVeHp1OWwXkgos91XoxvmrbLxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:a4:11:c4:9d:1a:02:a9:06:b5:27:85:c3:79:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Validity Not Before: Dec 29 00:01:09 2025 GMT Not After : Dec 30 00:01:09 2025 GMT Subject: CN=71a2c497e3ef46515c7ee3c9fc781fdd834ac648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:96:3c:11:f4:39:0b:2c:e7:62:41:e9:04: a9:de:82:19:3f:52:0f:5b:ce:e4:2e:b8:74:cb:1a: 16:ee:e9:50:50:25:8a:bf:03:4e:a0:26:c2:fc:47: cd:7a:e2:80:4a:29:9a:02:b5:11:a4:95:74:0c:2d: 87:d4:c9:ef:c3:1c:09:32:a4:d0:df:ea:42:db:db: a8:23:36:e3:e4:ff:f0:99:00:84:40:7a:98:df:69: 0d:9a:65:3e:2a:e7:f9:03:29:96:e8:4c:70:e7:4c: d0:f9:70:8c:14:34:6b:e7:f1:8a:27:87:93:73:22: 2b:84:74:cb:b7:98:92:8f:6a:6a:a5:cb:f0:f7:dd: 43:fc:6c:2e:b7:a2:18:70:83:a7:7f:0b:2d:30:93: d5:6f:d1:b8:38:38:23:9b:8e:26:2a:ac:5c:83:e6: e4:f6:08:f6:bf:79:3e:e5:bc:e6:4f:88:1f:a9:b1: db:c5:d2:5a:21:5f:4f:af:7f:a8:70:d8:d5:ea:e6: 45:ab:83:89:f6:fb:f7:b0:f0:a5:b2:ed:44:86:38: d0:4f:b6:8a:f3:4c:96:5d:a9:4c:c6:bf:2a:d7:c5: 24:fb:73:52:03:cd:84:a5:58:2e:08:17:5a:a6:c1: 6a:dd:a5:af:ad:76:a0:a3:1c:f4:66:c3:73:0c:d2: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A2:C4:97:E3:EF:46:51:5C:7E:E3:C9:FC:78:1F:DD:83:4A:C6:48 X509v3 Authority Key Identifier: keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e0:8c:58:2b:83:64:72:ef:eb:21:e6:be:04:2e:08:76:81: a7:dc:a3:7f:a4:3b:9c:0c:a6:2b:40:e1:65:0b:fd:49:cc:13: 8f:68:f7:82:ae:df:b6:e2:bc:15:d1:90:bd:3a:bd:85:a5:a7: 4a:d2:fa:b4:0c:fb:0c:e2:5b:09:7a:81:61:b6:5f:88:06:c1: 6c:3d:c1:f3:ce:bb:2b:8d:ed:a1:20:58:ac:35:ad:c3:31:1d: be:3f:d6:e8:62:57:a5:ea:9e:77:05:ad:94:b4:ab:17:fb:f6: b2:2f:84:dc:0a:b5:f8:80:42:87:f4:7c:d8:09:66:14:d0:ef: 30:dd:6f:1c:9b:f2:93:53:70:f3:48:cf:2d:01:f7:1d:01:fd: 48:fb:58:6c:f9:39:77:29:36:bd:03:17:25:60:36:a7:bf:83: 15:4b:36:c2:9a:5b:04:6e:6b:34:b9:1a:8a:3c:db:bd:f8:ff: 84:4f:28:57:ea:a6:42:bf:4f:c8:86:7a:d2:e0:e4:47:63:e9: b6:cb:78:ad:26:81:c2:ba:22:15:78:2a:d6:17:21:da:a6:90: 88:1b:64:fe:77:fc:b4:47:a1:c3:9d:91:0f:95:c4:d2:56:6d: 2c:2d:62:8b:98:6c:55:4f:4d:82:ae:48:18:9c:f0:3e:a2:58: 63:ac:a7:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaKQRxJ0aAqkGtSeFw3nPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5 ZTU1Y2EwHhcNMjUxMjI5MDAwMTA5WhcNMjUxMjMwMDAwMTA5WjAzMTEwLwYDVQQD Eyg3MWEyYzQ5N2UzZWY0NjUxNWM3ZWUzYzlmYzc4MWZkZDgzNGFjNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s+WPBH0OQss52JB6QSp3oIZP1IP W87kLrh0yxoW7ulQUCWKvwNOoCbC/EfNeuKASimaArURpJV0DC2H1MnvwxwJMqTQ 3+pC29uoIzbj5P/wmQCEQHqY32kNmmU+Kuf5AymW6Exw50zQ+XCMFDRr5/GKJ4eT cyIrhHTLt5iSj2pqpcvw991D/Gwut6IYcIOnfwstMJPVb9G4ODgjm44mKqxcg+bk 9gj2v3k+5bzmT4gfqbHbxdJaIV9Pr3+ocNjV6uZFq4OJ9vv3sPClsu1EhjjQT7aK 80yWXalMxr8q18Uk+3NSA82EpVguCBdapsFq3aWvrXagoxz0ZsNzDNIYPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGixJfj70ZRXH7jyfx4H92DSsZIMB8GA1UdIwQY MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt NjBlN2U0NTM5OWU2LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2 LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuCMWCuD ZHLv6yHmvgQuCHaBp9yjf6Q7nAymK0DhZQv9ScwTj2j3gq7ftuK8FdGQvTq9haWn StL6tAz7DOJbCXqBYbZfiAbBbD3B8867K43toSBYrDWtwzEdvj/W6GJXpeqedwWt lLSrF/v2si+E3Aq1+IBCh/R82AlmFNDvMN1vHJvyk1Nw80jPLQH3HQH9SPtYbPk5 dyk2vQMXJWA2p7+DFUs2wppbBG5rNLkaijzbvfj/hE8oV+qmQr9PyIZ60uDkR2Pp tst4rSaBwroiFXgq1hch2qaQiBtk/nf8tEehw52RD5XE0lZtLC1ii5hsVU9Ngq5I GJzwPqJYY6yn9g== -----END CERTIFICATE-----Generated at Mon Dec 29 02:25:34 2025 by rpki-client