This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json) Hash identifier: r/P84rezRk24GiOCnACTmOp2VZX/odTFF5/xImQn++8= Subject key identifier: 5E:7B:5E:D8:6B:4E:BB:7E:FE:01:65:F1:43:1B:D3:75:FC:50:81:4D Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Certificate serial: 019B530642DDDE29241757BDA074C806F0D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft Manifest number: 154F Signing time: Thu 25 Dec 2025 01:01:17 +0000 Manifest this update: Thu 25 Dec 2025 01:01:17 +0000 Manifest next update: Fri 26 Dec 2025 01:01:17 +0000 Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: oCvMXAboduKXELrQCKb0zk9CKWA0INnC5+oLM3g6I7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:42:dd:de:29:24:17:57:bd:a0:74:c8:06:f0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Validity Not Before: Dec 25 01:01:17 2025 GMT Not After : Dec 26 01:01:17 2025 GMT Subject: CN=5e7b5ed86b4ebb7efe0165f1431bd375fc50814d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:61:27:7f:89:8e:8a:06:2a:f8:ec:97:f9: 2d:04:df:2b:58:2d:7d:ca:f4:5b:12:18:55:6b:02: 71:58:b9:29:e9:6f:94:e1:1c:48:82:2a:e0:62:7b: 89:c6:61:35:bf:1c:a2:4d:eb:46:e3:89:70:71:c3: 5a:a0:2f:db:47:30:da:72:7c:62:9c:60:8b:0c:2c: f1:1e:94:d7:45:82:16:5a:e6:ad:41:82:66:c1:61: 59:dc:22:d8:f0:ff:3f:3e:57:c2:e4:83:0f:62:aa: 7b:1a:50:f8:24:2d:fa:e7:2d:5e:b0:ba:f2:f8:b1: 9a:b1:47:1a:ff:1c:6a:09:68:95:50:ea:31:15:2f: 08:e1:f6:6a:71:37:0b:b2:f4:eb:e1:dc:33:17:51: 50:df:1a:f8:c8:7f:af:cf:88:d8:2f:15:c0:be:99: d6:06:b6:af:43:41:16:b1:99:57:91:12:b7:99:fd: d0:c1:5c:25:43:ae:cd:44:4a:c1:12:3b:36:c9:1f: b5:cb:bc:3b:01:72:dd:c6:5b:a5:ea:81:5a:11:7a: 8a:22:8a:40:ff:b9:e5:38:17:c2:d2:c0:3d:6e:79: 16:da:16:38:18:f4:f7:10:6c:1b:ff:30:ef:4e:3e: 0e:5d:62:b2:a0:4a:50:3c:81:98:2d:bc:9b:71:62: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7B:5E:D8:6B:4E:BB:7E:FE:01:65:F1:43:1B:D3:75:FC:50:81:4D X509v3 Authority Key Identifier: keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:db:16:e0:89:06:af:ce:7a:c7:2f:63:be:49:16:65:af: f5:f5:e4:19:75:d3:fa:d8:ae:59:e8:c4:80:da:4f:46:e7:78: 3b:00:d6:aa:5c:09:ef:92:32:df:79:ed:72:55:4c:06:19:c9: e4:34:cf:8a:cd:a4:98:78:37:7d:8a:b2:10:90:8b:ee:9c:20: 5d:d0:9d:c8:02:b6:6a:93:32:50:1f:a3:b7:3a:06:d3:dc:44: 4e:f4:02:da:09:89:d1:33:38:58:76:a8:4b:d6:45:6a:bf:6c: 98:59:05:15:9a:b4:cc:d5:33:d6:fb:6a:75:4c:bc:f2:fd:25: 09:d0:d5:73:c4:e5:dd:4b:6d:18:e9:e6:9f:9d:c7:24:a3:1a: c5:0d:27:6f:61:65:76:fd:68:de:2d:0c:37:a7:e1:42:98:53: e9:22:bf:aa:6d:63:6a:e7:f4:29:c8:4c:7d:48:03:0f:bc:1a: 4a:0e:f0:c5:7b:3c:79:23:92:58:35:40:f3:50:4c:c7:31:b7: 85:52:3a:86:a5:fd:3b:44:f9:51:e7:e4:91:b3:98:a4:61:6c: ea:60:6a:ed:ed:0a:e9:51:74:93:63:ba:60:49:52:bd:00:06: f7:f0:e4:06:89:ac:ff:74:ca:21:c0:ed:6b:bf:77:7e:b0:78: d0:5d:96:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBkLd3ikkF1e9oHTIBvDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjk1NTQxNTUxYzc5YjhjZDU5ODg2ZTRkMTJiOGIxMzky NTVhYzQwHhcNMjUxMjI1MDEwMTE3WhcNMjUxMjI2MDEwMTE3WjAzMTEwLwYDVQQD Eyg1ZTdiNWVkODZiNGViYjdlZmUwMTY1ZjE0MzFiZDM3NWZjNTA4MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH9hJ3+JjooGKvjsl/ktBN8rWC19 yvRbEhhVawJxWLkp6W+U4RxIgirgYnuJxmE1vxyiTetG44lwccNaoC/bRzDacnxi nGCLDCzxHpTXRYIWWuatQYJmwWFZ3CLY8P8/PlfC5IMPYqp7GlD4JC365y1esLry +LGasUca/xxqCWiVUOoxFS8I4fZqcTcLsvTr4dwzF1FQ3xr4yH+vz4jYLxXAvpnW BravQ0EWsZlXkRK3mf3QwVwlQ67NRErBEjs2yR+1y7w7AXLdxlul6oFaEXqKIopA /7nlOBfC0sA9bnkW2hY4GPT3EGwb/zDvTj4OXWKyoEpQPIGYLbybcWJ1XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF57XthrTrt+/gFl8UMb03X8UIFNMB8GA1UdIwQY MBaAFLy5VUFVHHm4zVmIbk0SuLE5JVrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEt NjEwOWM3MzhlYmY2LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEtNjEwOWM3MzhlYmY2 LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBXbFuCJ Bq/OescvY75JFmWv9fXkGXXT+tiuWejEgNpPRud4OwDWqlwJ75Iy33ntclVMBhnJ 5DTPis2kmHg3fYqyEJCL7pwgXdCdyAK2apMyUB+jtzoG09xETvQC2gmJ0TM4WHao S9ZFar9smFkFFZq0zNUz1vtqdUy88v0lCdDVc8Tl3UttGOnmn53HJKMaxQ0nb2Fl dv1o3i0MN6fhQphT6SK/qm1jauf0KchMfUgDD7waSg7wxXs8eSOSWDVA81BMxzG3 hVI6hqX9O0T5UefkkbOYpGFs6mBq7e0K6VF0k2O6YElSvQAG9/DkBoms/3TKIcDt a793frB40F2Wrw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:07:26 2025 by rpki-client