This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json) Hash identifier: nWiDzwl+OY04a78vfon+Y5hikzVb7tsnWtRcKhNNPP8= Subject key identifier: C0:EC:4E:FF:48:9C:89:49:C4:3D:62:08:11:3A:0F:AD:BC:7F:33:9B Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Certificate serial: 019B3B6BAD7EE5EFE2A9C7DCDD0A2B7ED393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft Manifest number: 0654 Signing time: Sat 20 Dec 2025 11:01:11 +0000 Manifest this update: Sat 20 Dec 2025 11:01:11 +0000 Manifest next update: Sun 21 Dec 2025 11:01:11 +0000 Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=) 2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=) 3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: Bjksi0aq27Y4ZzWuBZ/GyXTIUOZ8EAQZLilBQPfEsP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ad:7e:e5:ef:e2:a9:c7:dc:dd:0a:2b:7e:d3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Validity Not Before: Dec 20 11:01:11 2025 GMT Not After : Dec 21 11:01:11 2025 GMT Subject: CN=c0ec4eff489c8949c43d6208113a0fadbc7f339b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:b4:d6:ae:25:7a:fc:86:8a:4e:59:35:ca: fb:aa:dc:88:70:8b:ae:08:76:27:0d:a9:a0:33:31: 4a:84:f9:77:43:11:8b:0e:e4:92:45:e4:b3:3b:ef: f4:bb:5e:05:51:e1:58:3a:63:37:c9:56:90:07:59: e7:8b:5c:50:0e:4b:ef:30:0b:b4:2c:2f:89:44:8f: 1e:1e:35:55:14:a5:78:28:48:02:e8:c2:04:70:dc: 07:09:47:82:8a:da:03:6f:fd:e5:c0:f2:39:cc:ae: 53:b0:de:78:79:55:b8:9c:88:c5:02:0d:29:87:e4: d5:1a:cc:ca:20:bb:eb:ea:d2:fb:04:93:0e:85:f5: d9:b5:1d:e9:59:dd:be:0f:b3:4a:a4:84:14:7c:66: 54:f2:9e:8f:c2:23:de:6c:7f:b9:47:00:a5:89:5e: 44:00:e9:f4:d6:b4:14:2b:83:ca:b6:d7:93:38:d0: 66:85:81:78:90:dd:3b:11:c7:74:15:7d:a3:32:8f: e0:5d:89:e7:70:99:39:62:a9:d2:cc:cb:3e:37:bb: 30:6d:72:70:02:dd:d4:4b:d0:48:0d:82:a3:62:d3: 4b:8c:a4:02:58:bc:4b:50:17:ff:ff:ac:72:a6:ad: 18:21:ff:c2:5c:b2:f4:a7:3d:bc:75:71:b6:97:ea: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EC:4E:FF:48:9C:89:49:C4:3D:62:08:11:3A:0F:AD:BC:7F:33:9B X509v3 Authority Key Identifier: keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ff:47:4d:42:e5:48:5e:22:dc:33:64:28:ee:8e:55:a3:82: 69:a1:a5:3b:9b:d2:63:58:c9:5a:93:0a:d4:58:dc:06:db:20: 65:3f:18:50:a7:a2:11:8d:53:9c:01:8e:f5:ad:7c:dd:8d:08: 5d:a3:3f:36:4a:4a:0e:9a:d6:97:12:50:3f:a3:59:46:af:a3: 0d:c5:1f:4d:90:80:ee:b2:ad:fc:4a:60:27:8d:b4:2f:7f:e8: e2:fb:b0:2b:4c:77:93:2c:c3:5e:4d:5a:32:72:1a:e9:73:3b: 06:e4:68:6c:23:2e:8b:38:2c:ce:e5:21:8a:9a:01:06:da:db: 7f:64:fe:12:ea:ff:ca:36:54:80:65:86:69:0a:a7:a3:fe:d0: 59:57:f6:c5:c0:8c:5e:d7:69:e8:e6:b1:dd:46:97:df:94:bf: 8f:61:81:a2:45:3a:cb:3d:ce:94:5e:7f:0c:7c:91:7f:11:38: 65:48:d2:95:27:4d:65:77:34:0b:3f:3e:42:17:b8:b5:1e:4c: 96:80:a1:f2:79:5b:74:93:a7:09:de:c1:60:8b:6c:b8:29:c5: 4c:75:1c:a7:f9:ba:73:d9:47:bc:c8:75:ec:8b:c6:0f:ec:d5: d5:29:aa:c9:7b:1c:b8:ce:a5:15:00:ea:45:63:dd:38:03:cb: 41:5f:b4:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a61+5e/iqcfc3QorftOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0 MjNkNjgwHhcNMjUxMjIwMTEwMTExWhcNMjUxMjIxMTEwMTExWjAzMTEwLwYDVQQD EyhjMGVjNGVmZjQ4OWM4OTQ5YzQzZDYyMDgxMTNhMGZhZGJjN2YzMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRW01q4levyGik5ZNcr7qtyIcIuu CHYnDamgMzFKhPl3QxGLDuSSReSzO+/0u14FUeFYOmM3yVaQB1nni1xQDkvvMAu0 LC+JRI8eHjVVFKV4KEgC6MIEcNwHCUeCitoDb/3lwPI5zK5TsN54eVW4nIjFAg0p h+TVGszKILvr6tL7BJMOhfXZtR3pWd2+D7NKpIQUfGZU8p6PwiPebH+5RwCliV5E AOn01rQUK4PKtteTONBmhYF4kN07Ecd0FX2jMo/gXYnncJk5YqnSzMs+N7swbXJw At3US9BIDYKjYtNLjKQCWLxLUBf//6xypq0YIf/CXLL0pz28dXG2l+ozHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDsTv9InIlJxD1iCBE6D628fzObMB8GA1UdIwQY MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf9HTULl SF4i3DNkKO6OVaOCaaGlO5vSY1jJWpMK1FjcBtsgZT8YUKeiEY1TnAGO9a183Y0I XaM/NkpKDprWlxJQP6NZRq+jDcUfTZCA7rKt/EpgJ420L3/o4vuwK0x3kyzDXk1a MnIa6XM7BuRobCMuizgszuUhipoBBtrbf2T+Eur/yjZUgGWGaQqno/7QWVf2xcCM Xtdp6Oax3UaX35S/j2GBokU6yz3OlF5/DHyRfxE4ZUjSlSdNZXc0Cz8+Qhe4tR5M loCh8nlbdJOnCd7BYItsuCnFTHUcp/m6c9lHvMh17IvGD+zV1SmqyXscuM6lFQDq RWPdOAPLQV+0zg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:05:44 2025 by rpki-client