This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json) Hash identifier: WWrTMvteAuHNE2ckyTXYP3EuOfvDRHDnROFUWynPd3U= Subject key identifier: 33:FD:BD:51:83:15:FC:E1:2D:AB:05:38:69:79:93:52:3A:D6:0B:72 Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62 Certificate serial: 019B45B80430247B9E8BDB1116BEC01CA332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft Manifest number: 0276 Signing time: Mon 22 Dec 2025 11:00:46 +0000 Manifest this update: Mon 22 Dec 2025 11:00:46 +0000 Manifest next update: Tue 23 Dec 2025 11:00:46 +0000 Files and hashes: 1: MJ4RLy7CJreAqnDUSlRSwn4juMU.roa (hash: v6JFCrXijEKQQaabThj0nZbCn18vazC8HwmJq1jATUY=) 2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: wD+uHCIVvapwBfIHshMGFhWC6sF65XzUz8DrfthUSBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:04:30:24:7b:9e:8b:db:11:16:be:c0:1c:a3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62 Validity Not Before: Dec 22 11:00:46 2025 GMT Not After : Dec 23 11:00:46 2025 GMT Subject: CN=33fdbd518315fce12dab0538697993523ad60b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:4a:3a:12:26:b1:79:9c:2b:a1:97:b4:bb: 26:ff:3a:e2:1e:b8:d2:87:9b:ee:bf:7e:f9:f9:df: 0a:c6:a7:54:94:22:19:00:53:e8:2c:08:05:13:f2: 6a:86:c1:d3:24:3c:6b:46:e7:41:7a:23:0e:20:aa: d7:a3:e9:b1:07:3a:0a:0d:6d:da:b5:f9:d4:d0:5f: dc:92:7e:a7:e2:ca:ab:a3:cc:f7:30:76:d5:73:19: 89:c7:6f:ae:9e:22:17:da:9e:a0:2d:9c:bf:7f:7a: ed:7b:38:89:a7:32:17:79:9c:46:5f:ad:25:6f:ea: 1a:95:7a:89:54:71:a0:01:d0:6a:ff:11:79:f5:55: fe:17:b3:a6:7d:52:5c:a8:86:b3:6b:c6:c2:7a:6b: ac:e4:68:7c:a2:0c:d9:1d:83:66:f9:48:2b:e7:79: cc:a4:94:48:2a:1c:65:90:18:fe:d8:13:9c:75:aa: 3d:34:cd:f1:40:7f:72:ee:98:0f:ce:f9:d2:34:f0: f4:c0:d1:d4:39:dc:aa:f9:ce:68:45:e4:0e:8f:81: bb:ba:ef:4c:6d:d7:76:1e:f6:bd:7c:51:91:1c:f3: 7e:6c:c5:c8:f2:ab:cb:10:4f:a1:7e:29:21:71:fa: cf:ed:df:a2:85:5c:40:15:ec:3e:dc:a3:24:28:a5: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:BD:51:83:15:FC:E1:2D:AB:05:38:69:79:93:52:3A:D6:0B:72 X509v3 Authority Key Identifier: keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:27:34:6c:3d:36:36:c2:1d:f9:91:7d:08:d3:80:b5:ad:77: f2:6f:c7:d0:ab:2e:cd:f2:fa:15:71:4f:d7:6c:1f:01:63:64: 89:e6:26:2d:e0:6f:71:b1:0b:83:f7:66:3d:ed:d5:99:84:ee: 9c:19:f9:3e:23:9c:4e:b0:7d:91:0c:e7:69:db:b1:1b:df:78: ae:b4:f3:3c:6a:9a:8e:d2:1c:2f:53:65:30:cd:a5:92:6c:13: 80:f9:58:49:6d:28:31:2f:24:91:0d:14:5d:fb:cd:31:06:f6: 20:17:de:d7:95:44:a6:8d:41:cb:3f:91:6a:50:56:9b:02:db: e9:c5:d3:1f:34:37:b2:6d:c5:71:aa:c6:e7:02:8b:ae:cc:59: 1d:a9:fb:2d:04:90:92:7b:f6:02:bd:b0:3e:ff:ee:e8:ab:2d: b4:7a:2a:26:c5:e9:54:73:77:cc:cd:17:e6:64:91:f9:49:bf: 15:01:76:27:22:3d:ed:7d:e8:27:0e:00:1c:03:f7:81:12:2c: 70:25:55:5c:08:7c:d9:5a:0f:53:0b:fd:50:d6:95:89:ce:19: 06:63:e7:82:a9:57:f4:88:3d:e3:1f:81:1f:f0:b3:93:32:05: a8:1c:89:47:4a:1f:0e:98:5a:07:05:ef:61:e9:01:3b:47:21: 1a:f1:10:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuAQwJHuei9sRFr7AHKMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz ZDFmNjIwHhcNMjUxMjIyMTEwMDQ2WhcNMjUxMjIzMTEwMDQ2WjAzMTEwLwYDVQQD EygzM2ZkYmQ1MTgzMTVmY2UxMmRhYjA1Mzg2OTc5OTM1MjNhZDYwYjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3pKOhImsXmcK6GXtLsm/zriHrjS h5vuv375+d8KxqdUlCIZAFPoLAgFE/JqhsHTJDxrRudBeiMOIKrXo+mxBzoKDW3a tfnU0F/ckn6n4sqro8z3MHbVcxmJx2+uniIX2p6gLZy/f3rteziJpzIXeZxGX60l b+oalXqJVHGgAdBq/xF59VX+F7OmfVJcqIaza8bCemus5Gh8ogzZHYNm+Ugr53nM pJRIKhxlkBj+2BOcdao9NM3xQH9y7pgPzvnSNPD0wNHUOdyq+c5oReQOj4G7uu9M bdd2Hva9fFGRHPN+bMXI8qvLEE+hfikhcfrP7d+ihVxAFew+3KMkKKWopwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP9vVGDFfzhLasFOGl5k1I61gtyMB8GA1UdIwQY MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt Njc5NWU2Yzg3MjQ3LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3 LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYic0bD02 NsId+ZF9CNOAta138m/H0KsuzfL6FXFP12wfAWNkieYmLeBvcbELg/dmPe3VmYTu nBn5PiOcTrB9kQznaduxG994rrTzPGqajtIcL1NlMM2lkmwTgPlYSW0oMS8kkQ0U XfvNMQb2IBfe15VEpo1Byz+RalBWmwLb6cXTHzQ3sm3FcarG5wKLrsxZHan7LQSQ knv2Ar2wPv/u6KsttHoqJsXpVHN3zM0X5mSR+Um/FQF2JyI97X3oJw4AHAP3gRIs cCVVXAh82VoPUwv9UNaVic4ZBmPngqlX9Ig94x+BH/CzkzIFqByJR0ofDphaBwXv YekBO0chGvEQCg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:10:46 2025 by rpki-client