This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json) Hash identifier: F0HjGOfPFNwwI6Ji0y5Mnq53o1D/8rx84WCaNehDJ6I= Subject key identifier: 6A:D3:B5:DC:49:E8:0E:3A:DE:B5:78:EC:4E:9B:15:B8:E1:B5:D2:B1 Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Certificate serial: 019B6279362094FD82E36E44EC951893631F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft Manifest number: 1557 Signing time: Sun 28 Dec 2025 01:01:09 +0000 Manifest this update: Sun 28 Dec 2025 01:01:09 +0000 Manifest next update: Mon 29 Dec 2025 01:01:09 +0000 Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: AclCFqxbfu3TOdzv4szEt/b8RQ5zOL4TCt8ShcYDyK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:36:20:94:fd:82:e3:6e:44:ec:95:18:93:63:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Validity Not Before: Dec 28 01:01:09 2025 GMT Not After : Dec 29 01:01:09 2025 GMT Subject: CN=6ad3b5dc49e80e3adeb578ec4e9b15b8e1b5d2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:b7:5a:30:73:18:22:f5:84:49:ba:e6:41: d4:24:3c:63:74:84:e9:7e:4d:7a:bd:88:61:e3:bc: bc:d4:3e:84:72:f3:a1:a3:36:3f:8b:2a:b8:f3:d6: b7:37:28:d8:62:64:aa:91:da:c1:ab:ab:12:03:3a: b3:18:6d:4b:f1:de:fd:15:85:49:6c:2f:76:33:15: 6a:ba:92:d8:18:a1:86:f9:e7:da:cc:dd:21:ae:de: 4f:9b:06:73:8c:9b:fc:fd:8f:90:0f:2c:bf:cb:a3: d5:32:79:f2:2b:74:02:88:e9:11:c7:8c:34:4d:a1: 2a:d2:1e:bc:cb:a2:cf:15:f4:04:7d:29:d9:72:8a: d9:ae:75:62:73:ba:2a:6a:cc:e5:f5:91:05:c7:81: 56:81:f7:fa:bd:f6:08:bd:27:9c:93:60:5e:fc:13: 22:a0:1b:c6:fc:56:13:6d:5c:f6:bb:48:ca:0a:18: e4:a0:fe:b6:d2:0d:2c:63:07:5d:c0:66:b4:f6:5f: 56:51:f2:03:4c:8c:3e:51:d6:27:15:a8:4e:d2:7a: cb:6b:59:85:c8:e3:b8:cc:11:c2:19:a5:3c:31:8b: 59:7f:9c:2f:9f:e3:62:d4:fe:10:0b:e8:23:53:e8: 58:16:c3:20:93:34:56:82:25:06:6c:3a:e4:d5:98: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:B5:DC:49:E8:0E:3A:DE:B5:78:EC:4E:9B:15:B8:E1:B5:D2:B1 X509v3 Authority Key Identifier: keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b7:44:9f:8f:69:c9:ad:48:6c:b0:a0:ee:b0:da:c6:64:28: c6:ab:50:cc:98:3c:83:11:3b:90:14:78:74:d3:0f:8f:34:8e: 3e:98:07:91:79:b6:65:7f:35:e1:0f:7f:60:ed:d1:b7:60:6f: 5d:e3:86:8a:d9:a2:4c:49:e0:44:a4:83:dd:52:09:67:dd:1c: 90:4f:45:bb:8c:48:f6:b7:25:34:b1:92:25:92:ae:96:3e:e8: 50:00:d8:db:25:98:5a:90:9e:77:cf:7d:18:e2:f6:9a:a2:f2: 95:3e:fa:43:34:d1:93:ea:fc:57:ee:05:91:c9:9b:00:7d:45: fa:ab:a3:7b:d6:16:0a:95:1e:76:58:31:51:a5:2e:b7:29:fb: 3f:83:1b:fb:9b:31:ca:54:4c:6e:0f:3b:11:16:85:f1:bd:77: 6a:df:b8:fe:6c:c1:16:04:97:74:3d:7a:1e:0e:eb:e1:3c:b5: 14:76:9c:d2:40:23:4c:35:c3:94:99:c0:e3:d2:00:36:e5:a1: 09:43:2c:f0:f6:2c:82:22:67:96:13:f9:3a:01:45:4a:d5:84: 63:64:60:8a:21:66:83:ae:40:55:08:da:c2:df:22:3d:99:04: 50:d6:35:f4:9f:4c:bf:4e:83:94:4f:de:03:fb:f5:00:9b:7c: 51:9b:e9:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieTYglP2C425E7JUYk2MfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjk1NTQxNTUxYzc5YjhjZDU5ODg2ZTRkMTJiOGIxMzky NTVhYzQwHhcNMjUxMjI4MDEwMTA5WhcNMjUxMjI5MDEwMTA5WjAzMTEwLwYDVQQD Eyg2YWQzYjVkYzQ5ZTgwZTNhZGViNTc4ZWM0ZTliMTViOGUxYjVkMmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknS3WjBzGCL1hEm65kHUJDxjdITp fk16vYhh47y81D6EcvOhozY/iyq489a3NyjYYmSqkdrBq6sSAzqzGG1L8d79FYVJ bC92MxVqupLYGKGG+efazN0hrt5PmwZzjJv8/Y+QDyy/y6PVMnnyK3QCiOkRx4w0 TaEq0h68y6LPFfQEfSnZcorZrnVic7oqaszl9ZEFx4FWgff6vfYIvSeck2Be/BMi oBvG/FYTbVz2u0jKChjkoP620g0sYwddwGa09l9WUfIDTIw+UdYnFahO0nrLa1mF yOO4zBHCGaU8MYtZf5wvn+Ni1P4QC+gjU+hYFsMgkzRWgiUGbDrk1Zj5nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrTtdxJ6A463rV47E6bFbjhtdKxMB8GA1UdIwQY MBaAFLy5VUFVHHm4zVmIbk0SuLE5JVrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEt NjEwOWM3MzhlYmY2LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEtNjEwOWM3MzhlYmY2 LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbdEn49p ya1IbLCg7rDaxmQoxqtQzJg8gxE7kBR4dNMPjzSOPpgHkXm2ZX814Q9/YO3Rt2Bv XeOGitmiTEngRKSD3VIJZ90ckE9Fu4xI9rclNLGSJZKulj7oUADY2yWYWpCed899 GOL2mqLylT76QzTRk+r8V+4FkcmbAH1F+quje9YWCpUedlgxUaUutyn7P4Mb+5sx ylRMbg87ERaF8b13at+4/mzBFgSXdD16Hg7r4Ty1FHac0kAjTDXDlJnA49IANuWh CUMs8PYsgiJnlhP5OgFFStWEY2RgiiFmg65AVQjawt8iPZkEUNY19J9Mv06DlE/e A/v1AJt8UZvpKw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:45 2025 by rpki-client