This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json) Hash identifier: mNg4jsMLVw4FsRgE5HhGqzYw8JFUiTaZ7VgYEb8QdqQ= Subject key identifier: 73:87:B4:E5:AB:DD:F1:68:D2:8E:9A:DE:D6:04:CB:2D:3D:AA:77:09 Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d Certificate serial: 019B3C7FD1E1AB3C62CB1DE696E549244E42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft Manifest number: 0707 Signing time: Sat 20 Dec 2025 16:02:48 +0000 Manifest this update: Sat 20 Dec 2025 16:02:48 +0000 Manifest next update: Sun 21 Dec 2025 16:02:48 +0000 Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: Tthm544foWC/qv79auMuJLZslktgbg/a362bmgr0Sl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:d1:e1:ab:3c:62:cb:1d:e6:96:e5:49:24:4e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d Validity Not Before: Dec 20 16:02:48 2025 GMT Not After : Dec 21 16:02:48 2025 GMT Subject: CN=7387b4e5abddf168d28e9aded604cb2d3daa7709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:a1:6d:16:1a:c5:4d:e3:b6:d5:e1:27:36: a9:43:0a:d3:d8:f9:94:1a:dc:5e:06:54:16:ba:83: fb:f3:1b:46:30:e6:7d:ea:00:2d:e1:f1:fe:81:57: a2:ef:69:64:8e:d3:be:b4:35:62:b7:95:b7:73:31: af:8d:0b:8b:af:49:f1:fc:ee:76:f1:fe:7c:64:54: 07:83:4e:b0:c2:12:14:90:ac:68:66:39:24:cd:6a: 4e:9b:de:fd:2a:a0:d9:c0:f8:fc:55:9d:42:1a:bb: 63:cf:2c:bd:ca:9a:20:4c:a8:aa:52:69:e0:a1:cb: 12:d2:56:71:bf:84:bd:fd:6b:2a:32:a8:01:b2:49: c4:ef:27:d9:ab:e3:96:fb:d5:71:27:4c:8a:f1:f3: 47:6c:e5:09:cf:7c:a3:63:51:49:5d:5b:4c:43:7f: cf:b5:43:19:41:86:72:24:be:b9:e6:44:4b:de:8a: 19:3e:6e:7d:33:3b:f6:85:e5:94:df:3d:d5:d9:28: 6c:12:68:c3:6f:4b:89:26:10:e9:c2:0a:58:de:e1: 7b:99:59:8e:02:e3:63:be:32:42:70:bd:55:e1:19: 3f:38:cf:43:a7:aa:3a:d0:29:e0:c4:e2:74:b4:81: c9:50:c0:74:72:4d:3b:af:68:e6:15:92:9a:ea:f1: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:87:B4:E5:AB:DD:F1:68:D2:8E:9A:DE:D6:04:CB:2D:3D:AA:77:09 X509v3 Authority Key Identifier: keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a1:88:3d:0a:54:fe:95:a3:c8:a9:97:19:59:ca:6f:a5:9a: 8a:9d:2f:81:58:e7:0f:55:bd:e5:9f:49:da:43:4b:71:7c:97: f7:5c:6f:b9:31:19:9a:f7:bc:e1:57:88:79:40:e2:57:43:0b: 25:af:6c:0c:75:74:da:97:09:84:88:63:6d:b3:07:cc:99:dd: 80:1e:51:c7:ab:aa:85:bd:d3:27:c9:de:4d:78:d3:c4:2b:64: 65:f7:15:c8:96:0f:7b:9b:93:03:38:9d:6c:68:76:ad:a9:a2: 24:0f:70:50:cc:15:a0:8a:91:eb:81:ec:7d:9e:d8:82:29:da: 30:8e:f5:4f:19:f0:cd:52:5d:6a:41:d5:81:ae:b7:e1:27:83: 35:74:94:f4:44:0f:f8:25:c2:7d:6d:ac:1c:83:84:7b:b7:e0: f2:63:70:a8:92:6c:65:cc:fc:d1:bd:5c:43:8f:aa:1f:ce:5c: 63:58:b2:a3:2d:db:0a:75:38:19:0a:0f:bd:a9:6e:ef:e0:65: a9:a0:05:04:7d:e8:ee:79:20:99:0e:04:1c:50:0c:5e:ac:d0: f8:4d:bd:ec:10:bc:b9:d5:ba:2d:31:18:85:db:35:48:4c:36: d1:f9:db:fd:0e:4a:c3:b1:37:56:83:44:d6:db:84:22:57:3d: 64:d9:ba:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9Hhqzxiyx3mluVJJE5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5 OGEzOGQwHhcNMjUxMjIwMTYwMjQ4WhcNMjUxMjIxMTYwMjQ4WjAzMTEwLwYDVQQD Eyg3Mzg3YjRlNWFiZGRmMTY4ZDI4ZTlhZGVkNjA0Y2IyZDNkYWE3NzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHShbRYaxU3jttXhJzapQwrT2PmU GtxeBlQWuoP78xtGMOZ96gAt4fH+gVei72lkjtO+tDVit5W3czGvjQuLr0nx/O52 8f58ZFQHg06wwhIUkKxoZjkkzWpOm979KqDZwPj8VZ1CGrtjzyy9ypogTKiqUmng ocsS0lZxv4S9/WsqMqgBsknE7yfZq+OW+9VxJ0yK8fNHbOUJz3yjY1FJXVtMQ3/P tUMZQYZyJL655kRL3ooZPm59Mzv2heWU3z3V2ShsEmjDb0uJJhDpwgpY3uF7mVmO AuNjvjJCcL1V4Rk/OM9Dp6o60CngxOJ0tIHJUMB0ck07r2jmFZKa6vHDGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOHtOWr3fFo0o6a3tYEyy09qncJMB8GA1UdIwQY MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2 LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqGIPQpU /pWjyKmXGVnKb6Waip0vgVjnD1W95Z9J2kNLcXyX91xvuTEZmve84VeIeUDiV0ML Ja9sDHV02pcJhIhjbbMHzJndgB5Rx6uqhb3TJ8neTXjTxCtkZfcVyJYPe5uTAzid bGh2ramiJA9wUMwVoIqR64HsfZ7YginaMI71TxnwzVJdakHVga634SeDNXSU9EQP +CXCfW2sHIOEe7fg8mNwqJJsZcz80b1cQ4+qH85cY1iyoy3bCnU4GQoPvalu7+Bl qaAFBH3o7nkgmQ4EHFAMXqzQ+E297BC8udW6LTEYhds1SEw20fnb/Q5Kw7E3VoNE 1tuEIlc9ZNm6uA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:07:23 2025 by rpki-client