This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json) Hash identifier: 5KnWbLP1LL9ujq95+qm+B2OZefps6i8bPh/ydPw2Vgo= Subject key identifier: 9B:89:8A:E6:E0:6B:5D:33:BD:9F:38:76:08:A3:91:E9:21:B9:43:B6 Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Certificate serial: 019B3ED9FB06B081C6802A6E16F5C57F480E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 03:00:31 +0000 Manifest this update: Sun 21 Dec 2025 03:00:31 +0000 Manifest next update: Mon 22 Dec 2025 03:00:31 +0000 Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=) 2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: xc1cwhOhHNwYnH4VJynj4Wfu29QFVlMs+HhwzcgY9ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:d9:fb:06:b0:81:c6:80:2a:6e:16:f5:c5:7f:48:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Validity Not Before: Dec 21 03:00:31 2025 GMT Not After : Dec 22 03:00:31 2025 GMT Subject: CN=9b898ae6e06b5d33bd9f387608a391e921b943b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:47:4a:ff:ab:1f:76:82:b4:86:ae:c8:fb: 45:da:9c:48:db:c4:9e:e3:0f:27:a5:b5:9c:37:09: 4b:7c:c4:7b:64:86:38:cd:df:5a:72:7c:06:0d:19: f2:f8:9a:de:a4:65:26:11:37:7d:e7:d6:b0:d9:cd: 60:9e:bb:13:ee:0e:a4:be:93:00:80:b0:01:63:cd: b6:12:d0:0a:bc:27:03:69:f7:42:c7:9b:c3:22:43: 07:14:7c:40:32:21:44:54:33:fd:ce:9f:7e:62:bc: a3:0d:28:04:a3:83:76:8e:6c:1c:b1:cb:ca:eb:6d: 82:c1:9d:3f:c0:1d:b3:af:01:49:cd:3c:f7:e9:ca: 74:32:71:b5:dc:4b:e0:44:9d:68:d5:7b:26:b1:b8: 04:03:a3:2b:ed:7f:46:01:b4:48:69:de:e4:17:02: a8:32:4c:05:2a:f8:f0:7c:c7:72:d0:57:15:e1:a0: 31:47:24:81:ea:f5:51:1a:92:60:4c:b7:9e:50:a2: 5f:45:b9:b0:0b:28:4e:7e:a6:80:31:2b:ed:b5:a6: d6:f8:bd:2e:65:21:23:51:62:f9:98:fe:e6:8a:f0: a3:cf:37:84:8f:26:ab:12:b5:18:49:f7:e0:0c:97: 40:83:af:aa:f5:15:ce:51:d2:6e:f4:29:d1:14:06: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:89:8A:E6:E0:6B:5D:33:BD:9F:38:76:08:A3:91:E9:21:B9:43:B6 X509v3 Authority Key Identifier: keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:c8:c2:02:71:a8:36:79:6c:be:a8:2a:10:89:7f:f6:68: 04:5c:31:61:a9:19:75:66:65:81:36:8c:8e:d8:de:4c:72:69: 51:39:c0:d1:c9:67:f9:55:de:7c:8e:60:f8:bc:fa:c1:d2:9a: 03:9f:d6:f9:4d:78:0e:48:dd:4d:0f:74:e5:e4:2c:24:36:25: f5:2b:8d:6c:b5:99:14:a0:d7:42:6e:f6:7a:fa:6b:20:c8:83: 35:e0:f4:7b:e8:71:3a:c4:24:98:74:3a:4d:8b:30:4d:57:57: 62:9f:c7:a1:e3:3b:47:ad:5e:fc:d8:ce:a5:83:4b:28:1e:66: b6:62:bb:fe:94:76:b1:00:6e:65:04:59:9f:ca:42:b3:03:f2: e3:56:d7:d4:e3:ee:89:fe:82:31:05:9c:96:e1:c8:a9:05:2b: b1:6d:d9:25:3e:ac:f9:e8:df:34:4b:05:a0:e9:33:97:84:b9: 46:7b:f2:8e:70:6e:e0:73:3c:35:b5:77:c7:dc:ec:f6:95:00: 48:c1:61:93:be:b2:12:b8:a9:31:8e:23:b6:34:e8:7b:d8:ce: 52:e4:f6:df:3b:1a:ab:64:01:d1:ad:fd:65:d2:0c:fc:4c:c7: 41:12:af:57:1d:97:23:2d:17:0f:93:f3:27:38:d2:8e:2f:11: c3:16:ba:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2fsGsIHGgCpuFvXFf0gOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi ZGU3MGUwHhcNMjUxMjIxMDMwMDMxWhcNMjUxMjIyMDMwMDMxWjAzMTEwLwYDVQQD Eyg5Yjg5OGFlNmUwNmI1ZDMzYmQ5ZjM4NzYwOGEzOTFlOTIxYjk0M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ZHSv+rH3aCtIauyPtF2pxI28Se 4w8npbWcNwlLfMR7ZIY4zd9acnwGDRny+JrepGUmETd959aw2c1gnrsT7g6kvpMA gLABY822EtAKvCcDafdCx5vDIkMHFHxAMiFEVDP9zp9+YryjDSgEo4N2jmwcscvK 622CwZ0/wB2zrwFJzTz36cp0MnG13EvgRJ1o1XsmsbgEA6Mr7X9GAbRIad7kFwKo MkwFKvjwfMdy0FcV4aAxRySB6vVRGpJgTLeeUKJfRbmwCyhOfqaAMSvttabW+L0u ZSEjUWL5mP7mivCjzzeEjyarErUYSffgDJdAg6+q9RXOUdJu9CnRFAYwVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuJiubga10zvZ84dgijkekhuUO2MB8GA1UdIwQY MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt MTM1YzQwMjE3Yjg2LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2 LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNzIwgJx qDZ5bL6oKhCJf/ZoBFwxYakZdWZlgTaMjtjeTHJpUTnA0cln+VXefI5g+Lz6wdKa A5/W+U14DkjdTQ905eQsJDYl9SuNbLWZFKDXQm72evprIMiDNeD0e+hxOsQkmHQ6 TYswTVdXYp/HoeM7R61e/NjOpYNLKB5mtmK7/pR2sQBuZQRZn8pCswPy41bX1OPu if6CMQWcluHIqQUrsW3ZJT6s+ejfNEsFoOkzl4S5RnvyjnBu4HM8NbV3x9zs9pUA SMFhk76yEripMY4jtjToe9jOUuT23zsaq2QB0a39ZdIM/EzHQRKvVx2XIy0XD5Pz JzjSji8Rwxa6dg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:08 2025 by rpki-client