This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json) Hash identifier: LoLkBq7Kstudw9tOPyEw2WqcEdEN8+48ZT3MNxY0dk0= Subject key identifier: A7:5E:46:C0:D0:D2:3A:15:DB:62:78:9A:F7:57:71:7B:5A:0E:A7:12 Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6 Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6 Certificate serial: 019B1A28C2368C890A8F8D425CBB7CF8DB56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft Manifest number: 0894 Signing time: Sun 14 Dec 2025 00:00:37 +0000 Manifest this update: Sun 14 Dec 2025 00:00:37 +0000 Manifest next update: Mon 15 Dec 2025 00:00:37 +0000 Files and hashes: 1: 1DMwz6cy5-zMTggYwJ41QekWZIY.roa (hash: nwmEuQjAVrxnR0Ze+XAFnQ4uH1WM0zEOCcXND1iguH8=) 2: tAG_ogHK36F9dYARrabqMiVm7WI.roa (hash: XyLTR6YvVH7wVie2ZS7kPXzKlWsXCj8THEJuI5lJwIg=) 3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: Dd07Yk5kcvaBueB8JVJZz/aG0k9qflrEd3+eW5itlCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:c2:36:8c:89:0a:8f:8d:42:5c:bb:7c:f8:db:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6 Validity Not Before: Dec 14 00:00:37 2025 GMT Not After : Dec 15 00:00:37 2025 GMT Subject: CN=a75e46c0d0d23a15db62789af757717b5a0ea712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:00:67:d9:17:2a:e1:d2:5c:e7:30:df:55: 67:ec:58:88:e4:d4:f7:8a:ed:d9:f8:86:c5:fd:e3: 55:1a:5a:a7:83:e8:9e:58:17:3f:5f:fa:33:cb:b4: 50:95:14:46:83:f5:b4:a0:df:ad:1d:82:13:35:ad: 76:27:d7:ea:3e:26:2c:63:6d:57:b9:3e:24:39:1e: 91:86:99:e8:d3:09:07:d1:34:52:38:cb:ed:d9:c2: 30:7e:84:ac:37:bf:79:d9:b4:c5:7c:05:e5:4b:09: 20:af:ed:61:08:47:89:78:b7:7a:0d:db:ad:a5:da: 47:22:24:80:9e:db:bd:97:72:a3:33:ec:4d:d1:a9: 7b:57:9c:f9:10:fe:96:72:e2:1f:13:af:53:88:85: 3b:be:7a:01:f4:7b:90:25:90:ff:90:56:95:27:38: de:93:00:3c:a4:db:3c:47:4e:83:e0:e1:dc:69:f0: 5f:aa:12:a0:9c:85:57:41:4b:6b:16:7a:d1:f8:af: d3:22:4e:31:b2:df:5a:73:63:f8:f8:94:0c:2e:c4: e5:42:bb:92:9f:e5:b5:df:06:a7:6b:78:ed:f5:93: e2:94:da:96:5e:0d:2c:39:e4:18:72:1d:be:f6:b0: 79:80:f2:59:8f:0e:51:fe:42:d2:cb:d5:97:cf:87: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5E:46:C0:D0:D2:3A:15:DB:62:78:9A:F7:57:71:7B:5A:0E:A7:12 X509v3 Authority Key Identifier: keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:37:a7:0a:dc:98:b6:27:45:a6:28:a4:74:97:7d:9a:50:85: 62:c1:f7:f5:48:61:01:5d:cf:8e:d7:e3:7a:17:70:5d:5e:74: a4:38:16:9f:a1:bf:b6:a2:10:e3:75:bc:2c:e1:75:bd:9b:df: 29:98:70:32:a5:c4:a6:56:fb:55:a9:19:e2:70:d2:87:84:40: 5f:14:50:8a:55:e9:e2:67:70:1d:cc:81:68:bf:f0:f8:49:d4: e2:49:3b:5b:cb:a5:a1:5d:ba:05:df:d1:c5:1a:52:fd:e8:d8: 8b:79:66:89:d7:85:16:ba:d8:26:49:48:f1:fe:fd:b8:11:c8: a9:a1:dc:15:f6:28:bf:69:98:c6:f2:df:7d:73:36:1a:85:91: 85:ab:85:23:95:a7:59:50:f5:bb:8c:38:9b:81:34:5b:8d:5d: a7:28:1e:f4:96:18:a5:0d:77:c9:2d:57:2b:34:5b:ac:2a:dc: 9a:b4:e0:a3:5f:4b:82:8d:37:0e:46:d5:da:0a:19:77:31:0c: 67:21:d8:ac:f4:03:a0:5a:ea:c8:6e:08:e5:3d:37:38:e1:6c: 3c:88:be:0c:fe:45:07:0d:da:f8:98:5f:b3:c1:84:28:d2:74: 54:fe:a3:e4:e5:6b:3d:53:f2:40:82:7a:0f:c9:da:a8:38:06: 9c:ff:fa:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKMI2jIkKj41CXLt8+NtWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMWYzZGMyMjk1MzA2Y2M3ZGY4NzJjZWVjY2Q2ODk0ZDBl MGVhZTYwHhcNMjUxMjE0MDAwMDM3WhcNMjUxMjE1MDAwMDM3WjAzMTEwLwYDVQQD EyhhNzVlNDZjMGQwZDIzYTE1ZGI2Mjc4OWFmNzU3NzE3YjVhMGVhNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LsAZ9kXKuHSXOcw31Vn7FiI5NT3 iu3Z+IbF/eNVGlqng+ieWBc/X/ozy7RQlRRGg/W0oN+tHYITNa12J9fqPiYsY21X uT4kOR6Rhpno0wkH0TRSOMvt2cIwfoSsN7952bTFfAXlSwkgr+1hCEeJeLd6Ddut pdpHIiSAntu9l3KjM+xN0al7V5z5EP6WcuIfE69TiIU7vnoB9HuQJZD/kFaVJzje kwA8pNs8R06D4OHcafBfqhKgnIVXQUtrFnrR+K/TIk4xst9ac2P4+JQMLsTlQruS n+W13wana3jt9ZPilNqWXg0sOeQYch2+9rB5gPJZjw5R/kLSy9WXz4eURwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdeRsDQ0joV22J4mvdXcXtaDqcSMB8GA1UdIwQY MBaAFL4fPcIpUwbMffhyzuzNaJTQ4OrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEt YjUxYWRmZmM2ZWVjLzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xYmRiZjgtMzk1Zi00YTg1LWE0NGEtYjUxYWRmZmM2ZWVj LzEvdmg4OXdpbFRCc3g5LUhMTzdNMW9sTkRnNnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDenCtyY tidFpiikdJd9mlCFYsH39UhhAV3PjtfjehdwXV50pDgWn6G/tqIQ43W8LOF1vZvf KZhwMqXEplb7VakZ4nDSh4RAXxRQilXp4mdwHcyBaL/w+EnU4kk7W8uloV26Bd/R xRpS/ejYi3lmideFFrrYJklI8f79uBHIqaHcFfYov2mYxvLffXM2GoWRhauFI5Wn WVD1u4w4m4E0W41dpyge9JYYpQ13yS1XKzRbrCrcmrTgo19Lgo03DkbV2goZdzEM ZyHYrPQDoFrqyG4I5T03OOFsPIi+DP5FBw3a+Jhfs8GEKNJ0VP6j5OVrPVPyQIJ6 D8naqDgGnP/6OQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:08 2025 by rpki-client