This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json) Hash identifier: BW3NiSQ4tg0ZvEbHqez+T+KHKpUhh+vUY0o11nbrL+0= Subject key identifier: E6:BB:DF:C4:90:2D:96:95:1D:EC:FF:58:79:FB:D0:55:CD:44:BD:04 Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Certificate serial: 019B2EFABEA6AB152283CF62416E89B2862B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 01:02:23 +0000 Manifest this update: Thu 18 Dec 2025 01:02:23 +0000 Manifest next update: Fri 19 Dec 2025 01:02:23 +0000 Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=) 2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: r5Q5SCRrikyJFLJBZ+sIOHFo7PxR+uVxg46fXhn8lF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:be:a6:ab:15:22:83:cf:62:41:6e:89:b2:86:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Validity Not Before: Dec 18 01:02:23 2025 GMT Not After : Dec 19 01:02:23 2025 GMT Subject: CN=e6bbdfc4902d96951decff5879fbd055cd44bd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:68:60:31:90:56:13:f8:d5:7a:15:74:89: 54:75:53:c7:3a:10:a8:2a:36:6c:fc:c6:71:64:63: 80:92:6b:d6:f2:60:07:1f:77:52:e4:dd:ef:a8:f0: 6c:b6:bf:b4:c7:3e:eb:04:1d:78:64:27:77:38:82: 75:4d:2d:80:4c:31:02:bf:c8:df:34:53:39:f5:9e: f5:98:1b:a0:33:3a:05:6a:c4:6e:ae:85:50:17:06: 99:ca:9e:70:81:fd:a2:50:77:6c:4c:6b:8c:e8:d4: 2a:60:a1:91:52:3f:c7:94:e3:af:93:b0:b6:4e:0e: 3a:80:29:fa:fb:8f:49:c2:0a:4f:8b:cc:c9:35:e5: 51:18:f2:f5:56:2d:e4:63:30:a7:6b:8b:37:78:01: f7:c6:fc:21:14:07:cc:11:00:2e:33:7b:76:38:2b: 5c:c7:0f:b8:58:28:c6:75:e7:1e:87:8b:41:f8:56: 17:66:e0:09:ba:6b:39:25:00:7b:f6:19:37:ce:d6: 39:4f:64:3d:fe:16:10:95:07:85:61:38:6e:97:bd: be:d4:b8:02:dd:4d:3c:27:8a:1a:e8:67:7a:6f:32: cc:9e:eb:94:be:eb:68:10:92:48:ed:38:a9:36:71: 97:ab:25:4e:89:27:0e:ee:16:30:41:c4:d6:7a:06: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BB:DF:C4:90:2D:96:95:1D:EC:FF:58:79:FB:D0:55:CD:44:BD:04 X509v3 Authority Key Identifier: keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:26:df:10:9b:86:8c:4f:7d:58:19:cd:c4:29:e4:d5:e6:9e: 38:9a:01:9d:44:1e:99:39:bf:d7:04:46:1a:4f:cb:1f:ea:90: c7:ab:75:41:32:ef:d4:5f:94:ef:1c:63:24:59:30:5b:ff:e7: 69:4f:85:fa:fb:a9:d1:05:e4:32:25:36:3a:67:84:1d:ee:f8: 1f:65:50:7e:e7:e8:9b:08:be:64:c6:19:4f:83:f3:d6:66:55: 21:59:2c:a3:e6:60:71:f4:db:08:0e:5a:d0:05:4a:ea:1a:21: d0:5e:3e:c6:79:ff:a8:4b:53:18:fb:05:6c:5c:8f:7b:8a:82: 53:0c:10:9d:59:3c:05:82:d6:f0:7c:93:f3:d3:d7:79:b0:4c: 2b:24:3b:84:b6:92:26:ec:87:78:0b:9e:ab:c2:dc:63:ad:a4: e1:08:fd:02:9d:02:48:23:7e:ac:fe:57:00:79:1f:2b:8c:62: 2f:32:0c:1e:dd:d3:69:5a:93:3c:41:4e:96:e2:2e:85:a2:21: 37:50:5b:f3:cb:ad:91:3b:2e:de:5b:cb:a4:46:2f:65:57:cd: 35:3b:d4:66:db:04:46:cf:14:29:d3:cb:57:52:da:d1:04:0b: 98:67:fd:9f:1b:57:c3:6f:61:81:41:84:db:4a:a3:4e:13:57: 22:f5:32:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+r6mqxUig89iQW6JsoYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjlmMGIwOTQ3MzhjNTI4MmZiZjRiMzA2NzBlYzVmZGNi NTg5ZGYwHhcNMjUxMjE4MDEwMjIzWhcNMjUxMjE5MDEwMjIzWjAzMTEwLwYDVQQD EyhlNmJiZGZjNDkwMmQ5Njk1MWRlY2ZmNTg3OWZiZDA1NWNkNDRiZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1loYDGQVhP41XoVdIlUdVPHOhCo KjZs/MZxZGOAkmvW8mAHH3dS5N3vqPBstr+0xz7rBB14ZCd3OIJ1TS2ATDECv8jf NFM59Z71mBugMzoFasRuroVQFwaZyp5wgf2iUHdsTGuM6NQqYKGRUj/HlOOvk7C2 Tg46gCn6+49JwgpPi8zJNeVRGPL1Vi3kYzCna4s3eAH3xvwhFAfMEQAuM3t2OCtc xw+4WCjGdeceh4tB+FYXZuAJums5JQB79hk3ztY5T2Q9/hYQlQeFYThul72+1LgC 3U08J4oa6Gd6bzLMnuuUvutoEJJI7TipNnGXqyVOiScO7hYwQcTWegawoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOa738SQLZaVHez/WHn70FXNRL0EMB8GA1UdIwQY MBaAFLz58LCUc4xSgvv0swZw7F/ctYnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTct ZTVjYTY3YzExNTMzLzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTctZTVjYTY3YzExNTMz LzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ybfEJuG jE99WBnNxCnk1eaeOJoBnUQemTm/1wRGGk/LH+qQx6t1QTLv1F+U7xxjJFkwW//n aU+F+vup0QXkMiU2OmeEHe74H2VQfufomwi+ZMYZT4Pz1mZVIVkso+ZgcfTbCA5a 0AVK6hoh0F4+xnn/qEtTGPsFbFyPe4qCUwwQnVk8BYLW8HyT89PXebBMKyQ7hLaS JuyHeAueq8LcY62k4Qj9Ap0CSCN+rP5XAHkfK4xiLzIMHt3TaVqTPEFOluIuhaIh N1Bb88utkTsu3lvLpEYvZVfNNTvUZtsERs8UKdPLV1La0QQLmGf9nxtXw29hgUGE 20qjThNXIvUyYA== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:38 2025 by rpki-client