This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json) Hash identifier: mOMOlgUU0og190yxTuf10JWt/uSWevmebalbtgnS2t0= Subject key identifier: D8:84:69:37:E9:A9:E4:1F:7F:B3:AB:5D:63:EE:AC:7C:D1:F9:53:AA Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa Certificate serial: 019B3BA29CA00213B02EC212E1F441B3074E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft Manifest number: 091E Signing time: Sat 20 Dec 2025 12:01:11 +0000 Manifest this update: Sat 20 Dec 2025 12:01:11 +0000 Manifest next update: Sun 21 Dec 2025 12:01:11 +0000 Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=) 2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: ENZH9OnEJQj+cfZGIGkMcytCm375iiBZVuPzhUWo+P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:9c:a0:02:13:b0:2e:c2:12:e1:f4:41:b3:07:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa Validity Not Before: Dec 20 12:01:11 2025 GMT Not After : Dec 21 12:01:11 2025 GMT Subject: CN=d8846937e9a9e41f7fb3ab5d63eeac7cd1f953aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:75:4d:40:16:43:9a:ca:ee:57:b2:be:e1: 71:55:72:85:ee:0f:c4:d2:ce:95:1f:b8:d9:ca:b7: 5f:f4:08:3e:45:95:b8:a6:fa:2b:f5:15:b8:c1:69: e1:53:59:78:e8:1a:6a:86:f9:54:63:ad:5e:c7:ae: 59:91:39:58:d6:be:cd:76:ec:fc:87:e2:8e:67:09: c5:76:64:71:98:ac:25:95:74:59:c0:9b:c6:b8:97: d7:66:5a:0a:e8:0c:0a:24:b3:97:f6:a7:7a:d2:93: 88:45:ce:3e:7d:71:18:ee:23:07:bb:0a:b5:40:be: a9:4a:6f:d5:0c:8d:12:b9:39:dd:04:b4:26:5c:c6: 01:7a:3f:3a:af:b4:85:2f:e0:95:34:50:48:d0:1a: 74:b6:69:be:5d:46:8c:61:82:98:1d:b9:89:97:c7: b6:b5:10:16:4c:8b:9a:6d:36:95:46:42:8c:ea:b4: 5b:41:63:b3:35:aa:01:71:7e:91:a4:8f:8f:3a:18: 85:99:26:2e:63:c3:3c:37:71:0b:2c:95:c6:a6:9c: 35:69:76:8f:72:96:0c:03:fc:02:1e:63:be:5d:44: c4:3d:80:4c:93:61:5a:5d:df:42:07:98:dd:80:01: 81:72:cc:1f:ab:4d:ed:20:b9:d0:5b:03:f8:b9:fc: e9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:84:69:37:E9:A9:E4:1F:7F:B3:AB:5D:63:EE:AC:7C:D1:F9:53:AA X509v3 Authority Key Identifier: keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:28:25:0f:01:56:63:40:3c:45:60:e6:0a:18:6b:b9:98:b7: 56:64:f6:19:64:a7:86:82:be:a1:fb:cb:9e:9a:a3:60:67:a5: bf:71:0b:4b:a5:3e:69:93:d5:64:0d:10:5b:a2:1f:0f:29:66: 3b:b2:48:1c:07:14:35:ee:d9:49:e6:27:e9:99:db:b7:a9:cc: bb:5c:a8:dd:86:48:66:55:1c:b9:54:6c:2f:71:6b:ae:ce:47: f7:a2:2b:3e:8c:36:2b:b3:5c:d9:08:4a:01:da:19:fa:c2:12: a2:5b:7e:06:42:0a:20:f0:ed:ac:e4:35:0d:f4:86:85:1f:a5: 25:64:39:68:e7:27:e3:39:ab:17:de:7e:60:b3:b5:94:72:01: 23:4f:e0:e3:59:af:5b:ec:06:95:56:c4:5f:b7:88:d5:8b:d6: 0f:c2:d2:82:b4:de:91:c8:a8:00:a0:bd:db:4f:e4:04:92:2a: 1c:b4:1b:19:db:d3:db:21:93:7b:33:5a:72:f7:fa:3e:0c:58: 6c:50:f0:1e:ad:93:f0:ec:bd:1b:a5:11:d0:21:2f:34:6f:a6: b0:28:aa:0e:3d:f9:0a:fa:c3:b8:03:6a:fb:a9:89:3f:a1:55: a3:af:52:79:84:d5:60:19:25:0a:3c:fc:53:4e:d3:71:93:a5: 9f:9f:a0:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7opygAhOwLsIS4fRBswdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh MjQ5YWEwHhcNMjUxMjIwMTIwMTExWhcNMjUxMjIxMTIwMTExWjAzMTEwLwYDVQQD EyhkODg0NjkzN2U5YTllNDFmN2ZiM2FiNWQ2M2VlYWM3Y2QxZjk1M2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LN1TUAWQ5rK7leyvuFxVXKF7g/E 0s6VH7jZyrdf9Ag+RZW4pvor9RW4wWnhU1l46BpqhvlUY61ex65ZkTlY1r7Nduz8 h+KOZwnFdmRxmKwllXRZwJvGuJfXZloK6AwKJLOX9qd60pOIRc4+fXEY7iMHuwq1 QL6pSm/VDI0SuTndBLQmXMYBej86r7SFL+CVNFBI0Bp0tmm+XUaMYYKYHbmJl8e2 tRAWTIuabTaVRkKM6rRbQWOzNaoBcX6RpI+POhiFmSYuY8M8N3ELLJXGppw1aXaP cpYMA/wCHmO+XUTEPYBMk2FaXd9CB5jdgAGBcswfq03tILnQWwP4ufzpZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiEaTfpqeQff7OrXWPurHzR+VOqMB8GA1UdIwQY MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct ZmViMGU1MTVjMDJjLzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiglDwFW Y0A8RWDmChhruZi3VmT2GWSnhoK+ofvLnpqjYGelv3ELS6U+aZPVZA0QW6IfDylm O7JIHAcUNe7ZSeYn6Znbt6nMu1yo3YZIZlUcuVRsL3Frrs5H96IrPow2K7Nc2QhK AdoZ+sISolt+BkIKIPDtrOQ1DfSGhR+lJWQ5aOcn4zmrF95+YLO1lHIBI0/g41mv W+wGlVbEX7eI1YvWD8LSgrTekcioAKC920/kBJIqHLQbGdvT2yGTezNacvf6PgxY bFDwHq2T8Oy9G6UR0CEvNG+msCiqDj35CvrDuANq+6mJP6FVo69SeYTVYBklCjz8 U07TcZOln5+gzw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:41 2025 by rpki-client