This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json) Hash identifier: lkN7N+smTNsfkT9RIRRq+hK95WK7XB6eW4d7qpCzBTs= Subject key identifier: 91:B6:8E:E3:5E:D1:BA:A1:FC:2B:0B:07:78:FB:82:9B:38:F2:B9:C3 Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E Certificate issuer: /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e Certificate serial: 019B397D3FBBCDC476A0039751CCAFE9DEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 02:01:08 +0000 Manifest this update: Sat 20 Dec 2025 02:01:08 +0000 Manifest next update: Sun 21 Dec 2025 02:01:08 +0000 Files and hashes: 1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: fMV99rzoBaEMHxTZNPZ744uR1EwyeZ9ebN1aZW01XiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:3f:bb:cd:c4:76:a0:03:97:51:cc:af:e9:de:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e Validity Not Before: Dec 20 02:01:08 2025 GMT Not After : Dec 21 02:01:08 2025 GMT Subject: CN=91b68ee35ed1baa1fc2b0b0778fb829b38f2b9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:c3:b3:d8:53:60:dc:b1:1c:91:bf:be:3a: a5:e0:a9:14:8e:ec:08:0d:fa:c9:d5:11:85:ed:23: 1b:3c:2f:45:36:11:2f:c4:6c:fd:de:82:5a:14:1e: ee:6a:d8:1d:d9:77:1d:41:7e:7d:6d:e1:8f:b0:96: a8:ba:8c:e4:fa:e0:0e:27:ba:08:35:c4:25:a9:44: 71:a8:bc:40:96:63:33:10:76:62:5f:9d:a7:c7:e1: 57:53:c3:7c:43:68:a3:43:85:e3:44:21:29:cc:5b: e0:89:26:97:26:a7:13:ca:54:79:d8:54:07:5d:7a: 94:83:95:9f:4a:1c:a4:0f:d5:de:2c:f2:f9:be:57: c6:bf:c0:66:f2:2c:88:4a:c1:ac:69:dd:84:0a:d4: 3a:5f:db:5f:6a:bf:56:db:7d:b4:ba:f2:1e:0d:4a: c9:8e:cb:ac:0a:ae:ae:34:06:b8:b0:35:7a:35:f9: b4:5a:31:3d:54:29:ef:92:89:07:62:9b:4f:e2:b9: 02:68:31:74:50:dd:49:f1:a3:a6:24:71:52:4e:ad: a7:76:2b:d7:74:d1:24:d2:3c:01:69:8e:e6:1a:dd: 55:85:b8:b5:64:ef:fb:c8:74:9b:64:71:90:f6:3a: 10:1f:64:20:a4:2e:97:1b:98:90:38:c0:c3:3a:da: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:8E:E3:5E:D1:BA:A1:FC:2B:0B:07:78:FB:82:9B:38:F2:B9:C3 X509v3 Authority Key Identifier: keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:94:3b:15:71:41:3a:c9:ce:5e:b9:64:49:df:22:27:9e:c6: 1f:9a:84:51:fd:f6:f1:ec:5f:90:d3:09:47:ce:b8:65:99:e2: a1:2b:6b:69:b8:3f:b8:1a:74:ce:5d:32:51:cd:a7:f1:b8:81: 44:a6:b8:b5:34:09:fa:e7:36:bb:63:9e:26:e7:36:ba:51:61: 2f:5b:3c:69:fb:6f:09:e3:08:85:a2:e0:9a:19:5a:7d:25:66: 48:ce:47:de:9f:98:17:d8:09:7c:0c:53:54:1d:08:36:39:af: bf:ac:f0:2b:d9:25:85:86:5e:e9:25:61:44:87:63:c3:4e:55: 5d:b1:18:b1:48:17:33:04:d1:9f:4c:b3:90:4d:83:b5:79:9a: a3:c0:4a:f6:ad:9d:64:99:82:d2:df:47:ea:58:5a:75:0a:8a: 09:ce:61:19:83:2a:38:14:12:0d:58:15:bc:e6:38:5a:bb:e5: d3:96:29:81:07:3e:fd:b7:48:c9:d8:4b:4c:2b:b5:0c:ba:ee: 9d:94:d6:ad:76:3e:1d:60:b4:b0:c4:be:ae:af:ab:93:00:9d: e1:08:20:67:94:80:3b:8c:36:0c:54:d9:ee:00:9f:ea:b0:15: 11:f0:d7:2d:63:2b:07:9d:52:7a:57:4e:00:d3:f9:b6:b7:97: f6:73:3c:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fT+7zcR2oAOXUcyv6d7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTA2ZTRkODJmYmFlMzRjMTUyYTM1ZDQzZDBmZGY0OWQ1 NGJlOWUwHhcNMjUxMjIwMDIwMTA4WhcNMjUxMjIxMDIwMTA4WjAzMTEwLwYDVQQD Eyg5MWI2OGVlMzVlZDFiYWExZmMyYjBiMDc3OGZiODI5YjM4ZjJiOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4zDs9hTYNyxHJG/vjql4KkUjuwI DfrJ1RGF7SMbPC9FNhEvxGz93oJaFB7uatgd2XcdQX59beGPsJaouozk+uAOJ7oI NcQlqURxqLxAlmMzEHZiX52nx+FXU8N8Q2ijQ4XjRCEpzFvgiSaXJqcTylR52FQH XXqUg5WfShykD9XeLPL5vlfGv8Bm8iyISsGsad2ECtQ6X9tfar9W2320uvIeDUrJ jsusCq6uNAa4sDV6Nfm0WjE9VCnvkokHYptP4rkCaDF0UN1J8aOmJHFSTq2ndivX dNEk0jwBaY7mGt1Vhbi1ZO/7yHSbZHGQ9joQH2QgpC6XG5iQOMDDOtpxBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG2juNe0bqh/CsLB3j7gps48rnDMB8GA1UdIwQY MBaAFLwQbk2C+640wVKjXUPQ/fSdVL6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzct NjM0OWExN2FiYjQzLzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzctNjM0OWExN2FiYjQz LzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpQ7FXFB OsnOXrlkSd8iJ57GH5qEUf328exfkNMJR864ZZnioStrabg/uBp0zl0yUc2n8biB RKa4tTQJ+uc2u2OeJuc2ulFhL1s8aftvCeMIhaLgmhlafSVmSM5H3p+YF9gJfAxT VB0INjmvv6zwK9klhYZe6SVhRIdjw05VXbEYsUgXMwTRn0yzkE2DtXmao8BK9q2d ZJmC0t9H6lhadQqKCc5hGYMqOBQSDVgVvOY4Wrvl05YpgQc+/bdIydhLTCu1DLru nZTWrXY+HWC0sMS+rq+rkwCd4QggZ5SAO4w2DFTZ7gCf6rAVEfDXLWMrB51SeldO ANP5treX9nM8sw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:59 2025 by rpki-client