This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json) Hash identifier: lmaBhox87M/q6aZvmmvDTP0fFjc9atJ2KBCXEfzAXQQ= Subject key identifier: CC:ED:78:78:D4:74:FC:18:62:06:34:73:42:BD:41:7B:06:A3:65:9F Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Certificate serial: 019B4A0425485B7CF85653FF1EBCF0ACBF94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft Manifest number: 1335 Signing time: Tue 23 Dec 2025 07:02:24 +0000 Manifest this update: Tue 23 Dec 2025 07:02:24 +0000 Manifest next update: Wed 24 Dec 2025 07:02:24 +0000 Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=) 2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: 8hC5+WVZ5b5TjuGfpoItukqpTmsNn5sEjvfvYw/ovgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:25:48:5b:7c:f8:56:53:ff:1e:bc:f0:ac:bf:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285 Validity Not Before: Dec 23 07:02:24 2025 GMT Not After : Dec 24 07:02:24 2025 GMT Subject: CN=cced7878d474fc186206347342bd417b06a3659f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:37:e4:02:99:cc:2a:ad:b5:56:70:75:79: 81:81:63:fa:b4:40:f0:c0:62:1b:f3:89:c3:86:fe: 37:70:9f:ee:22:79:a9:82:10:5c:99:a8:93:67:01: b8:18:8c:1d:67:76:a0:0c:b7:af:ad:d3:b8:ed:c3: 88:69:ed:bd:2c:b4:10:e7:40:f1:d3:66:92:a0:d1: 31:94:e5:1a:34:6a:96:42:92:fd:3c:56:df:e4:04: 06:e6:f8:99:8c:f5:3c:95:99:80:cd:f9:c6:ab:0a: d7:b7:cd:51:db:59:d9:c8:71:98:35:48:f5:29:ae: e2:b9:b4:6b:c5:a6:73:28:57:71:17:da:ea:4e:2c: 49:4c:4c:38:51:3f:7a:9f:a3:68:9e:4c:18:99:ee: 69:f2:b4:e2:90:52:02:e0:41:64:1c:1c:c8:c4:4d: d8:d7:ef:b2:b7:a3:01:4a:85:12:75:13:fa:e6:28: 3c:41:da:22:01:2c:5d:93:f8:38:3b:98:c9:ad:64: ec:f5:2e:d2:1f:50:0d:e5:63:89:77:a3:78:7c:14: 14:57:d7:10:7a:2f:bd:76:90:19:e0:04:81:8b:f2: 5e:0a:ac:09:6a:9c:2b:83:81:fc:74:c9:b4:04:f0: 4c:6f:51:e2:c5:2e:4a:f6:d6:f4:b0:8a:76:7f:71: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:ED:78:78:D4:74:FC:18:62:06:34:73:42:BD:41:7B:06:A3:65:9F X509v3 Authority Key Identifier: keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:42:43:0f:a9:0f:24:60:da:ad:af:af:b7:e0:2b:75:bc:a3: e7:7c:bd:6b:bc:21:0b:53:fc:d8:93:d8:34:5b:eb:c9:97:3a: 29:2a:a7:db:2b:e3:1b:10:e1:f2:60:b0:25:72:14:c8:07:59: 6b:b4:9d:63:b9:08:33:cd:8e:65:b3:27:a7:d0:ff:9c:d3:af: 4f:19:f8:84:06:73:91:4a:2d:b3:0f:36:b2:64:8c:08:80:31: d1:35:0a:6a:04:53:a0:41:48:ef:08:26:cd:9b:a6:cc:9a:8d: 48:cc:79:ab:a7:44:11:ef:ec:26:88:ba:ea:d8:17:42:c4:17: 55:68:2f:b1:5c:6c:65:96:83:13:8b:f4:f3:36:1d:40:05:1e: c2:8b:f0:72:83:50:f6:d1:71:63:71:03:90:99:e8:99:14:30: 5d:11:11:7c:fd:50:d8:cd:a4:60:49:14:c7:6a:33:07:54:28: 6d:ff:ad:2e:f0:96:b7:ae:31:71:e6:8e:29:d0:6d:6c:fe:97: 70:90:6b:14:ef:fa:bc:eb:33:f2:2b:23:77:00:b8:04:ff:e3: 5d:3f:c0:54:b1:87:e9:d1:f0:bd:f0:29:cd:60:f1:1e:8a:6b: 80:23:d6:e9:ce:e1:29:a7:4b:b0:38:d1:3a:1d:2b:bf:a4:7b: 2b:98:62:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBCVIW3z4VlP/HrzwrL+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMWRiNWQ3MjhiZDI3NmI0Yzc1MmUxMjVhNTA4ZmY4Nzg0 YWQyODUwHhcNMjUxMjIzMDcwMjI0WhcNMjUxMjI0MDcwMjI0WjAzMTEwLwYDVQQD EyhjY2VkNzg3OGQ0NzRmYzE4NjIwNjM0NzM0MmJkNDE3YjA2YTM2NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB835AKZzCqttVZwdXmBgWP6tEDw wGIb84nDhv43cJ/uInmpghBcmaiTZwG4GIwdZ3agDLevrdO47cOIae29LLQQ50Dx 02aSoNExlOUaNGqWQpL9PFbf5AQG5viZjPU8lZmAzfnGqwrXt81R21nZyHGYNUj1 Ka7iubRrxaZzKFdxF9rqTixJTEw4UT96n6NonkwYme5p8rTikFIC4EFkHBzIxE3Y 1++yt6MBSoUSdRP65ig8QdoiASxdk/g4O5jJrWTs9S7SH1AN5WOJd6N4fBQUV9cQ ei+9dpAZ4ASBi/JeCqwJapwrg4H8dMm0BPBMb1HixS5K9tb0sIp2f3EAUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzteHjUdPwYYgY0c0K9QXsGo2WfMB8GA1UdIwQY MBaAFL0dtdcovSdrTHUuElpQj/h4StKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMt Nzc2OTE1NDg4MjI1LzEvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jYTMxZGYtN2M5Yy00NGVmLTlkZGMtNzc2OTE1NDg4MjI1 LzEvdlIyMTF5aTlKMnRNZFM0U1dsQ1AtSGhLMG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkJDD6kP JGDara+vt+Ardbyj53y9a7whC1P82JPYNFvryZc6KSqn2yvjGxDh8mCwJXIUyAdZ a7SdY7kIM82OZbMnp9D/nNOvTxn4hAZzkUotsw82smSMCIAx0TUKagRToEFI7wgm zZumzJqNSMx5q6dEEe/sJoi66tgXQsQXVWgvsVxsZZaDE4v08zYdQAUewovwcoNQ 9tFxY3EDkJnomRQwXRERfP1Q2M2kYEkUx2ozB1Qobf+tLvCWt64xceaOKdBtbP6X cJBrFO/6vOsz8isjdwC4BP/jXT/AVLGH6dHwvfApzWDxHoprgCPW6c7hKadLsDjR Oh0rv6R7K5hiWQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:55:16 2025 by rpki-client