This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft File: vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json) Hash identifier: zl5JvQnLvMf8zQcx7YYx3cl+WbxChJRwl2F9ZS60XSY= Subject key identifier: 81:87:A9:B1:5E:AE:11:FA:E4:E0:02:03:23:54:E9:44:15:8E:29:51 Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48 Certificate issuer: /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348 Certificate serial: 019B5A51D55C78EA469277A8DB125FB73D5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft Manifest number: 118F Signing time: Fri 26 Dec 2025 11:01:10 +0000 Manifest this update: Fri 26 Dec 2025 11:01:10 +0000 Manifest next update: Sat 27 Dec 2025 11:01:10 +0000 Files and hashes: 1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: RCS1wjsXGZ3Q+U/mYFuO1n0ymbphlpAV49q3imol3qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:d5:5c:78:ea:46:92:77:a8:db:12:5f:b7:3d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348 Validity Not Before: Dec 26 11:01:10 2025 GMT Not After : Dec 27 11:01:10 2025 GMT Subject: CN=8187a9b15eae11fae4e002032354e944158e2951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:b4:3c:d8:3c:bf:3b:83:f8:3a:35:e2:43: 69:44:f3:a5:35:79:1c:e0:05:58:8e:3f:00:66:7a: 7b:5f:b5:03:2b:44:0a:fc:4e:d2:2d:05:62:06:cc: 4e:f4:c8:32:5f:2e:f7:a9:53:04:32:d1:88:f2:83: 01:0b:d0:02:c6:97:6c:40:f2:0a:05:76:8b:f1:38: ec:9b:35:2b:ee:1d:f9:09:63:26:7f:0a:7d:45:c1: b9:1b:4f:e2:b7:47:21:0a:73:fb:d7:d3:8f:fb:7b: c4:1e:d9:7f:64:df:28:dd:22:a5:ab:1e:74:a5:ca: 4d:be:1d:9e:68:59:b2:88:4e:31:6d:57:ba:54:db: 23:38:bb:6f:5d:ec:2e:bf:cb:76:14:60:e4:b2:e0: 55:87:a4:12:b9:47:61:a9:3c:0a:90:8e:b9:4e:80: e1:4d:74:f8:b0:ff:e7:c9:66:4e:ae:db:ae:48:f8: 32:b7:27:df:95:92:ac:9c:6d:e4:ac:62:03:0c:38: 7c:83:23:42:e0:28:72:6c:23:11:9a:cf:8e:9d:03: f9:af:2f:26:08:18:58:51:b3:94:61:de:33:50:2c: e7:bc:8f:b2:8a:a0:7f:a3:fb:2a:96:66:22:7a:01: 58:ad:20:7e:b1:25:58:19:9e:fc:b9:74:b3:cd:af: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:87:A9:B1:5E:AE:11:FA:E4:E0:02:03:23:54:E9:44:15:8E:29:51 X509v3 Authority Key Identifier: keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ca:c5:c3:38:1e:33:7d:d5:31:0d:d4:5e:00:22:2b:8e:79: 41:d0:bb:21:b1:7d:7d:19:54:2b:59:42:63:29:c9:25:cb:02: e2:8f:b7:01:20:49:77:04:11:ee:be:32:0d:25:b3:6a:60:0f: a6:24:c3:0c:d2:dc:54:d7:3e:7e:3b:29:9b:ac:9c:10:44:59: fe:34:d7:a3:7f:4d:2a:04:76:b4:2d:0a:8a:25:40:c5:fe:83: 3b:39:8a:e9:43:c4:c7:65:bc:b1:2f:46:ff:2b:aa:dd:49:6a: ab:8d:1d:3d:d7:4f:58:0e:79:e4:16:07:df:1a:66:9f:85:77: ba:0f:ca:1a:d1:47:5a:3d:d7:ee:ed:85:60:91:f1:67:d4:fd: f2:52:52:48:a8:bc:24:34:ec:73:38:e9:f5:ff:1e:fc:10:93: f1:3e:d0:76:c2:8d:88:17:b5:44:13:bd:ac:8e:22:f2:66:63: 27:16:c0:5c:8b:02:b7:cb:8c:85:3c:40:70:af:8d:ae:ca:98: 90:22:c7:43:d6:08:a3:2d:4a:0d:26:35:9b:6b:95:51:ab:37: aa:4c:d6:49:3d:74:22:4c:79:f1:ed:bd:38:2d:99:b7:a1:b8: 40:04:2c:97:43:a6:ee:4f:c3:b8:43:84:b1:a2:64:79:c7:23: 9d:16:40:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUdVceOpGkneo2xJftz1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBhZTNjM2QzMjNkYTM5NGE2Y2UwNWY2YjIzZDdjZjRk ZDEzNDgwHhcNMjUxMjI2MTEwMTEwWhcNMjUxMjI3MTEwMTEwWjAzMTEwLwYDVQQD Eyg4MTg3YTliMTVlYWUxMWZhZTRlMDAyMDMyMzU0ZTk0NDE1OGUyOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSG0PNg8vzuD+Do14kNpRPOlNXkc 4AVYjj8AZnp7X7UDK0QK/E7SLQViBsxO9MgyXy73qVMEMtGI8oMBC9ACxpdsQPIK BXaL8TjsmzUr7h35CWMmfwp9RcG5G0/it0chCnP719OP+3vEHtl/ZN8o3SKlqx50 pcpNvh2eaFmyiE4xbVe6VNsjOLtvXewuv8t2FGDksuBVh6QSuUdhqTwKkI65ToDh TXT4sP/nyWZOrtuuSPgytyfflZKsnG3krGIDDDh8gyNC4ChybCMRms+OnQP5ry8m CBhYUbOUYd4zUCznvI+yiqB/o/sqlmYiegFYrSB+sSVYGZ78uXSzza9QHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGHqbFerhH65OACAyNU6UQVjilRMB8GA1UdIwQY MBaAFL1grjw9Mj2jlKbOBfayPXz03RNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZmM1Y2YtOTk4Yi00ZTNkLTlkZmEt MWMzODY0YTdjMmRlLzEvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82ZmM1Y2YtOTk4Yi00ZTNkLTlkZmEtMWMzODY0YTdjMmRl LzEvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsrFwzge M33VMQ3UXgAiK455QdC7IbF9fRlUK1lCYynJJcsC4o+3ASBJdwQR7r4yDSWzamAP piTDDNLcVNc+fjspm6ycEERZ/jTXo39NKgR2tC0KiiVAxf6DOzmK6UPEx2W8sS9G /yuq3Ulqq40dPddPWA555BYH3xpmn4V3ug/KGtFHWj3X7u2FYJHxZ9T98lJSSKi8 JDTsczjp9f8e/BCT8T7QdsKNiBe1RBO9rI4i8mZjJxbAXIsCt8uMhTxAcK+NrsqY kCLHQ9YIoy1KDSY1m2uVUas3qkzWST10Ikx58e29OC2Zt6G4QAQsl0Om7k/DuEOE saJkeccjnRZAkA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:37 2025 by rpki-client