This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json) Hash identifier: YBs6W09JPgi3S/I7UP20FhgyZ+7l7GX5vLLPWGlHp/0= Subject key identifier: D6:B8:66:3F:E3:0E:7F:82:25:1F:EF:80:4E:31:AD:50:AA:C2:7C:38 Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Certificate serial: 019B18714B48C14595FDDD64E8B4DE97A419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft Manifest number: 1707 Signing time: Sat 13 Dec 2025 16:00:36 +0000 Manifest this update: Sat 13 Dec 2025 16:00:36 +0000 Manifest next update: Sun 14 Dec 2025 16:00:36 +0000 Files and hashes: 1: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: dNa4vD+BjhRiFMffrRDhtWQiWRnaerArI7/daiQzG+o=) 2: zXUyVEZPQIOvlcMzJdAhnQlNrBA.roa (hash: R0waJ/l+tfmJv5LfjnRTw8gnCOj1Af2T9Z4QZDnplrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:4b:48:c1:45:95:fd:dd:64:e8:b4:de:97:a4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Validity Not Before: Dec 13 16:00:36 2025 GMT Not After : Dec 14 16:00:36 2025 GMT Subject: CN=d6b8663fe30e7f82251fef804e31ad50aac27c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:04:ab:6f:50:48:f8:b5:c9:73:da:5a:a0: bd:e9:a7:5b:6e:34:c7:52:78:c3:95:b7:ca:19:12: 7f:e4:16:2e:b8:5d:5c:d1:8b:21:14:92:03:d6:8f: 0d:66:95:b4:be:d0:25:c1:4b:21:3d:7b:d2:8d:41: 4d:8a:38:3e:67:ef:6f:aa:a5:2d:69:93:ab:0b:c9: e0:76:2f:8d:98:fb:d4:c8:35:45:6c:ca:26:97:cf: 0d:73:cd:a6:53:32:a9:c5:90:d6:33:e6:98:3c:f6: 7d:08:04:57:55:50:31:30:76:a8:29:e8:69:68:ba: 3e:fd:ed:0a:83:05:a0:81:fa:00:ca:08:d3:13:5d: eb:65:be:3a:3b:76:57:f5:67:de:09:e8:77:39:87: af:6f:e9:13:fd:88:37:90:58:be:a4:2c:ed:55:34: 4f:5e:42:10:61:fc:ab:4e:f0:c2:81:f1:10:94:3c: 4a:0a:10:3a:4d:f6:07:48:1c:e4:ff:29:38:d9:de: 9b:33:fd:26:db:d1:a2:7a:33:20:3f:e3:cb:6c:34: 6d:dc:e8:ea:c2:57:9b:69:df:db:ae:f0:2a:91:0b: 5d:56:5f:7f:46:d4:c9:5b:25:e1:2d:75:31:a0:4c: 69:20:37:ca:f4:8e:bc:0a:ba:4b:95:c1:48:0a:7b: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B8:66:3F:E3:0E:7F:82:25:1F:EF:80:4E:31:AD:50:AA:C2:7C:38 X509v3 Authority Key Identifier: keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8c:e2:59:91:c2:07:23:3b:f8:5c:c0:4c:73:e7:40:ae:89: 8a:e2:83:cc:c6:df:46:b3:1f:dd:cb:c2:3d:64:15:ce:3a:60: ec:c5:79:58:69:97:36:6d:be:64:5e:64:47:55:1f:df:65:3d: 65:f2:ea:16:7b:be:ac:fe:0c:4c:2a:6b:98:88:4d:a4:d0:98: 54:f5:6b:7c:6a:dc:22:2e:09:61:a1:08:10:50:b6:61:57:62: c7:ea:e1:7e:7b:45:13:5c:bf:71:f1:02:6e:16:a4:03:a3:7e: 98:81:3c:bc:a5:67:0e:e1:68:5a:68:41:3b:eb:63:3c:20:54: 0f:e7:5f:5a:d5:06:22:17:49:68:0b:96:0e:c5:af:77:0d:32: 65:7d:d8:fc:4e:28:2d:06:a5:2e:ef:cd:9e:52:c2:0f:8c:c0: 76:32:d1:b7:e7:49:47:26:4d:fb:5a:3c:14:44:f3:b3:3f:ad: 1c:2c:ce:65:eb:fc:6b:d5:5d:f4:58:bd:86:7e:6b:98:b8:81: 27:ba:10:bf:f2:77:07:c1:e8:5f:dd:b9:40:b7:72:83:f3:ca: 0e:02:a0:c3:73:8c:3f:21:68:f4:df:d4:c5:5e:1e:8b:c6:3b: a0:94:9f:01:9f:62:0c:bf:c5:61:9c:c1:74:fa:8b:13:48:b3: 56:9e:1a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcUtIwUWV/d1k6LTel6QZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx OGEwM2UwHhcNMjUxMjEzMTYwMDM2WhcNMjUxMjE0MTYwMDM2WjAzMTEwLwYDVQQD EyhkNmI4NjYzZmUzMGU3ZjgyMjUxZmVmODA0ZTMxYWQ1MGFhYzI3YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojYEq29QSPi1yXPaWqC96adbbjTH UnjDlbfKGRJ/5BYuuF1c0YshFJID1o8NZpW0vtAlwUshPXvSjUFNijg+Z+9vqqUt aZOrC8ngdi+NmPvUyDVFbMoml88Nc82mUzKpxZDWM+aYPPZ9CARXVVAxMHaoKehp aLo+/e0KgwWggfoAygjTE13rZb46O3ZX9WfeCeh3OYevb+kT/Yg3kFi+pCztVTRP XkIQYfyrTvDCgfEQlDxKChA6TfYHSBzk/yk42d6bM/0m29GiejMgP+PLbDRt3Ojq wlebad/brvAqkQtdVl9/RtTJWyXhLXUxoExpIDfK9I68CrpLlcFICnuFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa4Zj/jDn+CJR/vgE4xrVCqwnw4MB8GA1UdIwQY MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt MDVkN2JkNGE3NDFkLzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoziWZHC ByM7+FzATHPnQK6JiuKDzMbfRrMf3cvCPWQVzjpg7MV5WGmXNm2+ZF5kR1Uf32U9 ZfLqFnu+rP4MTCprmIhNpNCYVPVrfGrcIi4JYaEIEFC2YVdix+rhfntFE1y/cfEC bhakA6N+mIE8vKVnDuFoWmhBO+tjPCBUD+dfWtUGIhdJaAuWDsWvdw0yZX3Y/E4o LQalLu/NnlLCD4zAdjLRt+dJRyZN+1o8FETzsz+tHCzOZev8a9Vd9Fi9hn5rmLiB J7oQv/J3B8HoX925QLdyg/PKDgKgw3OMPyFo9N/UxV4ei8Y7oJSfAZ9iDL/FYZzB dPqLE0izVp4atA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:03:29 2025 by rpki-client