This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json) Hash identifier: Ryg+rxeJrcHFUe5+CNK+8erbBvEEGV/sH6bQ2fmZGOg= Subject key identifier: 4F:4C:90:4E:2F:0D:06:C9:41:19:E8:75:2A:14:C0:D0:BE:34:81:27 Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Certificate serial: 019B3EDA458B828F5B9A05FA8310ED1FA9DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:00:50 +0000 Manifest this update: Sun 21 Dec 2025 03:00:50 +0000 Manifest next update: Mon 22 Dec 2025 03:00:50 +0000 Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=) 2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=) 3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: smUWXvMTza5OHcbLMvmwAFe2bz68hT+DDRCEnnmHXWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:45:8b:82:8f:5b:9a:05:fa:83:10:ed:1f:a9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Validity Not Before: Dec 21 03:00:50 2025 GMT Not After : Dec 22 03:00:50 2025 GMT Subject: CN=4f4c904e2f0d06c94119e8752a14c0d0be348127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:d2:c4:bb:14:2f:68:1b:4f:9d:cf:30:03: 43:49:5b:ec:3a:c4:f5:1c:f1:52:4a:fe:6d:e7:ed: 69:6f:ab:0a:f1:6b:a4:6f:c7:dd:af:63:11:1a:03: dd:9c:e6:55:69:7f:32:25:74:eb:22:27:d7:1a:bc: 67:6f:24:f2:1d:85:93:63:c2:31:50:75:c1:36:1a: f8:db:2b:33:8f:a7:c5:19:6f:ff:0a:30:dc:ee:6e: 99:64:d1:23:55:a4:e7:95:f2:d9:ab:8d:94:5e:c6: 03:45:71:3e:36:a9:0e:7d:31:57:09:03:c4:f3:33: 54:6f:b3:5c:6a:f7:ba:db:6d:6c:5b:d9:d9:00:24: 9e:b6:dd:54:80:a4:03:3b:0c:33:c9:00:0d:ed:4f: dc:41:30:d5:89:a2:d5:ae:e7:74:e0:d7:6a:6e:c5: 3c:f0:2e:f9:63:e8:16:e2:a1:8d:46:58:e5:5c:70: 2f:d6:40:c2:b0:57:05:4c:c1:82:9c:36:40:ce:43: ef:2b:2e:e8:a1:a8:28:27:20:f8:39:70:15:08:b0: c6:5f:f6:10:3e:c0:df:05:b3:b0:42:ad:9e:d8:a8: 31:b8:da:0a:b1:ac:28:e7:13:e0:ca:6c:4f:b1:ac: e2:ed:9e:6d:1b:1e:a0:37:8b:51:27:7e:a9:f3:e4: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4C:90:4E:2F:0D:06:C9:41:19:E8:75:2A:14:C0:D0:BE:34:81:27 X509v3 Authority Key Identifier: keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f2:8d:29:2a:bd:8b:c3:1a:db:a8:ce:1a:d7:91:cc:0c:e1: fc:b6:d4:39:60:ed:b6:6d:9e:40:fc:ab:99:18:2e:10:60:ad: 17:84:da:74:92:27:d1:5c:49:25:e0:d3:ae:5b:79:5a:db:16: 5a:c4:40:06:99:65:5a:f1:32:f9:d5:7f:29:51:7b:56:a0:ac: 84:97:56:a7:6f:f8:86:bd:42:d9:48:19:41:7f:73:d4:4a:fd: db:9a:d0:e0:42:6c:b2:d7:1f:f4:32:f5:02:c3:58:79:95:0e: ae:4d:91:fd:8e:bb:0d:6c:0f:6f:27:1b:9d:65:bf:2f:56:03: 06:c8:a3:d9:51:a2:66:fb:bb:17:ca:8f:96:8f:c4:98:eb:09: 51:59:65:d4:16:57:9d:61:65:14:1c:84:13:13:90:6d:03:c9: 49:e1:b6:d0:5f:cb:f4:6a:49:65:53:32:6d:50:90:3a:5c:81: f3:46:8e:a4:ea:7c:4d:0c:4f:c3:2a:ea:d5:89:51:86:be:71: a2:4d:98:ff:ff:4b:79:a0:36:37:2f:4f:f5:fe:d6:f3:90:87: 69:94:c4:ac:60:c9:6d:ac:38:0d:59:03:6c:1a:e6:ee:50:cb: 8f:79:f6:f8:92:94:e3:fb:33:fc:b0:42:1d:d6:45:eb:64:f3: 04:1b:56:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2kWLgo9bmgX6gxDtH6nfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy MTZjNzgwHhcNMjUxMjIxMDMwMDUwWhcNMjUxMjIyMDMwMDUwWjAzMTEwLwYDVQQD Eyg0ZjRjOTA0ZTJmMGQwNmM5NDExOWU4NzUyYTE0YzBkMGJlMzQ4MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng7SxLsUL2gbT53PMANDSVvsOsT1 HPFSSv5t5+1pb6sK8Wukb8fdr2MRGgPdnOZVaX8yJXTrIifXGrxnbyTyHYWTY8Ix UHXBNhr42yszj6fFGW//CjDc7m6ZZNEjVaTnlfLZq42UXsYDRXE+NqkOfTFXCQPE 8zNUb7Ncave6221sW9nZACSett1UgKQDOwwzyQAN7U/cQTDViaLVrud04NdqbsU8 8C75Y+gW4qGNRljlXHAv1kDCsFcFTMGCnDZAzkPvKy7ooagoJyD4OXAVCLDGX/YQ PsDfBbOwQq2e2KgxuNoKsawo5xPgymxPsazi7Z5tGx6gN4tRJ36p8+TcNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9MkE4vDQbJQRnodSoUwNC+NIEnMB8GA1UdIwQY MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt NTY4MDVjYTExYzMzLzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvKNKSq9 i8Ma26jOGteRzAzh/LbUOWDttm2eQPyrmRguEGCtF4TadJIn0VxJJeDTrlt5WtsW WsRABpllWvEy+dV/KVF7VqCshJdWp2/4hr1C2UgZQX9z1Er925rQ4EJsstcf9DL1 AsNYeZUOrk2R/Y67DWwPbycbnWW/L1YDBsij2VGiZvu7F8qPlo/EmOsJUVll1BZX nWFlFByEExOQbQPJSeG20F/L9GpJZVMybVCQOlyB80aOpOp8TQxPwyrq1YlRhr5x ok2Y//9LeaA2Ny9P9f7W85CHaZTErGDJbaw4DVkDbBrm7lDLj3n2+JKU4/sz/LBC HdZF62TzBBtWUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:45 2025 by rpki-client