This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json) Hash identifier: hsCAPzh/g28tYY/uSKJVMny4x5mm/KiBoxg0MSgBr9k= Subject key identifier: 20:9B:04:AB:A6:D6:78:2E:31:39:9C:6E:5A:34:78:05:A5:C1:A6:E7 Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Certificate serial: 019B2D78AFE562AB7B9927EE36646DE1D541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft Manifest number: 149F Signing time: Wed 17 Dec 2025 18:00:42 +0000 Manifest this update: Wed 17 Dec 2025 18:00:42 +0000 Manifest next update: Thu 18 Dec 2025 18:00:42 +0000 Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: rmy+BIHvF3ryoJkBznjcNSA2qv8bwiLr/9rW5tlAne8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:af:e5:62:ab:7b:99:27:ee:36:64:6d:e1:d5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Validity Not Before: Dec 17 18:00:42 2025 GMT Not After : Dec 18 18:00:42 2025 GMT Subject: CN=209b04aba6d6782e31399c6e5a347805a5c1a6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:61:c8:68:f9:a2:ff:49:30:5c:a0:63:d2: 46:07:d0:35:be:1f:0b:48:a4:df:36:60:41:1e:01: be:8b:ca:07:ca:4f:ae:c6:64:31:ee:0b:38:0d:d7: 25:86:89:33:93:35:0b:a6:9b:10:fe:1f:60:79:f6: 92:04:58:d9:84:52:5d:b3:76:1d:ec:d3:6d:02:d9: f0:1c:34:64:9a:81:41:3b:a5:91:52:fe:14:be:f9: 13:b7:e7:4d:18:81:ed:ed:df:ee:b3:d5:ad:ab:27: e2:b2:bf:71:08:78:06:8e:e8:db:03:d7:d0:f6:65: 9e:c2:75:ad:ce:26:ba:29:a2:41:4f:27:79:68:1e: 3e:3c:2c:24:4c:6b:a5:69:09:20:38:d3:41:25:d6: 17:f9:54:66:1f:c9:2c:a4:27:9d:91:21:e2:f3:ee: 40:40:c5:1a:bd:19:fa:49:4b:d7:51:e2:4e:18:65: 5e:a0:fa:0c:21:0f:cb:91:ec:3f:a9:2c:22:89:53: dc:4f:00:b8:1d:d3:d7:9c:d2:25:78:ef:c2:55:11: 44:fc:f6:b3:b0:85:ae:20:36:32:bc:40:1d:d6:04: 6c:71:9d:df:59:3c:5b:83:f5:33:96:5f:9c:ef:a8: 4a:fb:44:89:16:5d:88:10:f7:10:48:ce:04:82:a1: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9B:04:AB:A6:D6:78:2E:31:39:9C:6E:5A:34:78:05:A5:C1:A6:E7 X509v3 Authority Key Identifier: keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:25:56:a1:1a:e4:f3:13:e4:9e:02:ce:64:b3:40:c4:f3:75: ae:e5:5d:af:5b:06:b7:49:81:b5:da:bc:06:3f:2a:27:29:e5: c6:97:93:e9:ce:7e:4d:12:97:e6:d7:f6:2d:96:d3:e4:1f:61: 02:c4:10:b7:04:aa:54:ea:20:52:5c:6e:dd:48:46:e8:4d:52: 86:11:49:15:c9:3a:8c:50:32:2f:c4:34:ea:14:2d:40:0f:12: 75:91:f5:c0:35:81:b5:99:93:8f:26:a6:d7:af:6e:35:c9:61: da:e5:32:e2:77:8c:ef:ee:db:47:cd:82:11:1e:16:38:04:23: a5:6f:ff:f5:09:f1:5d:e1:65:24:0d:b8:48:79:1c:d6:d9:10: d6:df:7c:9b:a8:fd:80:2e:53:c5:2d:7d:98:59:9e:c6:c5:3b: 82:25:6b:9a:eb:7a:84:71:b3:01:6e:41:25:f6:6c:0f:a1:10: c6:57:bd:f5:d3:34:23:4f:02:9a:03:5a:19:93:ab:5a:5a:d1: a3:eb:21:2f:62:de:6d:a3:d0:f8:97:3b:80:77:f9:9e:4a:7a: 6a:2b:30:64:4f:40:6f:a4:61:e6:bc:e1:89:e1:f7:f7:97:ef: 68:e4:47:73:09:4b:e4:ee:e7:c5:7b:78:37:ff:52:65:3e:57: 63:f9:f7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteK/lYqt7mSfuNmRt4dVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZjg3NGQwMTU0MDcwZTk2MmEzYzg3MTk4MjFmZGI5Y2Ix MDE2ZTEwHhcNMjUxMjE3MTgwMDQyWhcNMjUxMjE4MTgwMDQyWjAzMTEwLwYDVQQD EygyMDliMDRhYmE2ZDY3ODJlMzEzOTljNmU1YTM0NzgwNWE1YzFhNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsElhyGj5ov9JMFygY9JGB9A1vh8L SKTfNmBBHgG+i8oHyk+uxmQx7gs4DdclhokzkzULppsQ/h9gefaSBFjZhFJds3Yd 7NNtAtnwHDRkmoFBO6WRUv4UvvkTt+dNGIHt7d/us9Wtqyfisr9xCHgGjujbA9fQ 9mWewnWtzia6KaJBTyd5aB4+PCwkTGulaQkgONNBJdYX+VRmH8kspCedkSHi8+5A QMUavRn6SUvXUeJOGGVeoPoMIQ/Lkew/qSwiiVPcTwC4HdPXnNIleO/CVRFE/Paz sIWuIDYyvEAd1gRscZ3fWTxbg/Uzll+c76hK+0SJFl2IEPcQSM4EgqGEhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCbBKum1nguMTmcblo0eAWlwabnMB8GA1UdIwQY MBaAFL/4dNAVQHDpYqPIcZgh/bnLEBbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQt OWIyMWYzMzRkMDI4LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQtOWIyMWYzMzRkMDI4 LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCVWoRrk 8xPkngLOZLNAxPN1ruVdr1sGt0mBtdq8Bj8qJynlxpeT6c5+TRKX5tf2LZbT5B9h AsQQtwSqVOogUlxu3UhG6E1ShhFJFck6jFAyL8Q06hQtQA8SdZH1wDWBtZmTjyam 169uNclh2uUy4neM7+7bR82CER4WOAQjpW//9QnxXeFlJA24SHkc1tkQ1t98m6j9 gC5TxS19mFmexsU7giVrmut6hHGzAW5BJfZsD6EQxle99dM0I08CmgNaGZOrWlrR o+shL2LebaPQ+Jc7gHf5nkp6aiswZE9Ab6Rh5rzhieH395fvaORHcwlL5O7nxXt4 N/9SZT5XY/n3og== -----END CERTIFICATE-----Generated at Wed Dec 17 22:10:06 2025 by rpki-client