This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json) Hash identifier: 0PsiTHigDuVINLIYCkU8Bbzt0ZOxgMneQUrZJRH5xc4= Subject key identifier: 0C:C9:F0:45:09:D2:40:5D:B4:32:42:E0:63:D0:F0:4D:7C:9E:F4:08 Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d Certificate serial: 019B44395E1BEC8D4FFBB9BC7B4F174A1E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft Manifest number: 070B Signing time: Mon 22 Dec 2025 04:02:48 +0000 Manifest this update: Mon 22 Dec 2025 04:02:48 +0000 Manifest next update: Tue 23 Dec 2025 04:02:48 +0000 Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: dGmNe/7P88BZaOpABOeGJJpDLsT7fgXeoCnBoODMFGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:5e:1b:ec:8d:4f:fb:b9:bc:7b:4f:17:4a:1e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d Validity Not Before: Dec 22 04:02:48 2025 GMT Not After : Dec 23 04:02:48 2025 GMT Subject: CN=0cc9f04509d2405db43242e063d0f04d7c9ef408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:60:d3:4a:5e:e1:86:4c:ce:f0:d3:78:9a: 20:e4:84:25:b5:7e:ab:37:05:70:87:d9:0f:63:cf: ca:67:59:4a:c9:f6:f2:e5:c7:70:2c:6d:07:ec:b9: 4d:87:b5:4a:d1:91:51:98:82:85:5d:a5:c9:96:0f: 57:c6:39:ca:ba:fa:5c:c4:73:5b:97:dc:88:59:c9: 9a:fe:d6:3b:23:58:28:4f:8b:12:93:86:a5:da:7e: 8a:2f:84:2d:e5:4d:79:43:53:a6:78:37:df:29:ef: a3:b4:69:0a:94:0d:c4:f9:1f:ca:ec:53:54:c3:3b: 01:61:e3:2c:2e:a8:bd:c4:9e:55:f4:2e:a0:93:e7: 1e:61:cc:27:69:c2:1b:c2:e0:17:3b:cc:4d:af:33: f2:f2:95:87:cb:09:06:c4:34:7c:a5:d0:73:3a:5b: a7:a5:87:9c:8e:f1:a0:0e:e9:71:bf:29:ae:da:ee: 7d:63:af:2c:7d:4b:ed:99:44:4e:ec:10:bd:7e:61: 8a:bb:f4:01:74:06:61:1f:9c:df:0f:70:14:03:c1: b2:61:b8:e2:c7:57:96:a7:55:4d:d8:84:c3:17:fb: 4b:94:03:25:8b:14:8f:c3:64:53:c6:11:bc:6e:4b: 7a:fd:70:80:eb:20:28:95:17:a5:27:0e:b8:b4:7b: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C9:F0:45:09:D2:40:5D:B4:32:42:E0:63:D0:F0:4D:7C:9E:F4:08 X509v3 Authority Key Identifier: keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e2:6c:8b:a1:e9:82:e9:b2:67:fa:94:0f:eb:eb:17:fc:ed: 9e:da:83:ef:2f:bc:65:8f:bb:d4:4e:a7:6f:20:10:03:0f:45: da:9b:53:20:c5:ac:76:42:5e:ab:14:ef:19:63:74:b6:3b:ce: 06:1c:88:dc:ae:42:5b:3d:d3:7a:69:08:b1:66:5b:f1:91:ae: 0f:36:c3:9b:53:d6:2d:56:ae:bb:e2:b9:95:fc:bc:2a:ad:02: 39:92:a6:43:69:65:cd:0f:9d:81:c0:62:fd:7d:54:bc:f6:b3: 73:f9:fe:f0:e5:eb:07:0c:04:c9:cf:d1:ef:e9:e2:db:dc:1c: 80:e2:a8:ae:e2:b2:f7:49:a7:dd:20:af:93:0e:2c:c1:e5:36: 8b:27:e5:cd:6f:a7:c3:6a:7c:ca:f4:57:a7:67:53:67:88:0f: a1:cb:0c:b5:98:20:89:6f:00:4f:3f:4d:43:4e:08:77:65:1e: e6:60:7b:23:58:c2:67:97:f9:90:91:2c:98:50:3c:1d:e5:df: b2:4a:a0:f4:35:14:b7:c5:e8:1b:6a:2d:d3:88:10:13:74:8a: 6a:58:eb:4d:df:a9:44:9d:31:6c:69:1a:4b:5a:78:80:a5:26: bd:1c:3c:84:8e:f2:ad:d0:ba:48:58:f2:36:a5:05:2a:5f:95: 06:9d:f9:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOV4b7I1P+7m8e08XSh4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5 OGEzOGQwHhcNMjUxMjIyMDQwMjQ4WhcNMjUxMjIzMDQwMjQ4WjAzMTEwLwYDVQQD EygwY2M5ZjA0NTA5ZDI0MDVkYjQzMjQyZTA2M2QwZjA0ZDdjOWVmNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPJg00pe4YZMzvDTeJog5IQltX6r NwVwh9kPY8/KZ1lKyfby5cdwLG0H7LlNh7VK0ZFRmIKFXaXJlg9XxjnKuvpcxHNb l9yIWcma/tY7I1goT4sSk4al2n6KL4Qt5U15Q1OmeDffKe+jtGkKlA3E+R/K7FNU wzsBYeMsLqi9xJ5V9C6gk+ceYcwnacIbwuAXO8xNrzPy8pWHywkGxDR8pdBzOlun pYecjvGgDulxvymu2u59Y68sfUvtmURO7BC9fmGKu/QBdAZhH5zfD3AUA8GyYbji x1eWp1VN2ITDF/tLlAMlixSPw2RTxhG8bkt6/XCA6yAolRelJw64tHtQywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzJ8EUJ0kBdtDJC4GPQ8E18nvQIMB8GA1UdIwQY MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2 LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuJsi6Hp gumyZ/qUD+vrF/ztntqD7y+8ZY+71E6nbyAQAw9F2ptTIMWsdkJeqxTvGWN0tjvO BhyI3K5CWz3TemkIsWZb8ZGuDzbDm1PWLVauu+K5lfy8Kq0COZKmQ2llzQ+dgcBi /X1UvPazc/n+8OXrBwwEyc/R7+ni29wcgOKoruKy90mn3SCvkw4sweU2iyflzW+n w2p8yvRXp2dTZ4gPocsMtZggiW8ATz9NQ04Id2Ue5mB7I1jCZ5f5kJEsmFA8HeXf skqg9DUUt8XoG2ot04gQE3SKaljrTd+pRJ0xbGkaS1p4gKUmvRw8hI7yrdC6SFjy NqUFKl+VBp35xA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:39 2025 by rpki-client