This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json) Hash identifier: L5kYISTcnQcoGgjy8gOitxOSDRUZ3EJsxoC0RsAPLow= Subject key identifier: 3D:C8:4D:58:19:43:B7:B3:70:B7:4C:B1:88:B4:F3:71:28:D8:B0:C6 Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43 Certificate serial: 019B3AC6EE0CAD9DA9033544517BDF301D80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft Manifest number: 0CEB Signing time: Sat 20 Dec 2025 08:01:14 +0000 Manifest this update: Sat 20 Dec 2025 08:01:14 +0000 Manifest next update: Sun 21 Dec 2025 08:01:14 +0000 Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=) 2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=) 3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=) 4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: WmSlRAI6jGGiLd2AehbGYwj6pWIyaPqHfX09ol4D47o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ee:0c:ad:9d:a9:03:35:44:51:7b:df:30:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43 Validity Not Before: Dec 20 08:01:14 2025 GMT Not After : Dec 21 08:01:14 2025 GMT Subject: CN=3dc84d581943b7b370b74cb188b4f37128d8b0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:6a:82:35:96:fd:41:74:fa:14:d5:cf:cc: e4:21:fe:6e:ee:9a:c3:fa:28:6f:0e:52:9a:e7:c1: cd:00:70:03:c2:62:26:ef:30:78:bf:af:fb:32:9e: 12:80:c5:3f:4e:b8:4e:ab:8f:e8:3d:79:49:5d:ce: ce:df:2c:54:4c:f5:f9:a0:13:fb:40:27:9c:a8:58: 31:c1:2a:d9:af:62:23:1d:b1:b7:33:fb:ee:bc:d6: d4:3a:cd:7c:e4:c8:8e:59:41:61:c1:8a:9b:a5:42: 1b:70:1a:ef:36:37:7d:4a:4f:31:44:ab:84:b9:0b: 28:8b:2c:84:63:b9:2a:c8:a5:e7:e2:99:ce:f1:b2: cf:8d:7a:dc:d6:b1:7a:d3:59:02:0b:83:7a:89:67: 48:10:0f:7e:a9:93:01:d2:7d:83:24:07:fc:15:a0: d0:1d:36:0a:d1:87:5f:a0:12:4b:12:42:af:5f:15: 53:55:04:19:a4:6a:15:9d:4b:1e:d0:11:fd:73:d8: 7c:3e:24:33:be:5a:c4:16:fe:35:ae:27:0d:63:6b: fd:71:75:97:5b:c8:c4:b9:0d:34:e6:d9:90:5e:ce: d2:f8:94:b5:64:ba:06:a8:5f:aa:5a:84:ec:0d:39: ad:07:2c:a1:20:4a:d4:7f:60:c3:eb:82:99:97:ad: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C8:4D:58:19:43:B7:B3:70:B7:4C:B1:88:B4:F3:71:28:D8:B0:C6 X509v3 Authority Key Identifier: keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:02:0d:5c:dc:2c:2d:8b:62:cb:97:13:cb:3c:ec:17:e5:44: 5c:96:68:72:8c:32:46:c3:e5:11:b0:9b:0c:1e:24:2c:1e:f6: 87:79:e9:0a:76:95:ec:15:ab:ad:12:1d:60:12:a4:5b:e6:e2: 83:dd:99:a8:24:dc:d8:6d:3b:03:e9:3e:3e:29:10:d0:72:ed: 83:24:c4:98:2e:80:d2:27:26:d4:00:1c:8b:24:04:b3:52:ee: 21:31:40:c3:9b:1d:f1:66:9c:d5:3c:d2:70:9d:2b:04:7a:be: 88:30:22:aa:ef:b0:72:2b:80:7c:55:83:8a:07:ee:d3:84:dd: 42:56:8f:73:75:4a:30:70:d0:e5:0d:91:9b:6f:e0:87:c1:af: fd:21:ab:d8:2f:8d:31:1f:32:69:46:f7:29:80:d4:88:72:ec: a1:9b:0f:65:86:c5:d2:74:b2:e3:c5:2a:15:bc:0a:9d:ba:c5: 74:1c:b2:d0:8c:37:24:0a:ba:15:83:be:46:e7:e4:4f:96:92: f4:30:91:21:7c:df:4e:29:f4:7e:81:42:97:58:13:d8:93:87: 6d:38:e7:5c:3f:5a:ca:e2:27:dd:b2:05:6b:b8:d4:11:44:ce: 3d:6c:f6:cf:a0:73:1c:02:1f:31:87:ed:89:d3:c6:a8:e7:70: 94:da:a2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xu4MrZ2pAzVEUXvfMB2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDQyNjJmNjQyYjFiYjBiNTNiMmE2ZDc3OThjMDg5OWQx ZTRkNDMwHhcNMjUxMjIwMDgwMTE0WhcNMjUxMjIxMDgwMTE0WjAzMTEwLwYDVQQD EygzZGM4NGQ1ODE5NDNiN2IzNzBiNzRjYjE4OGI0ZjM3MTI4ZDhiMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5pqgjWW/UF0+hTVz8zkIf5u7prD +ihvDlKa58HNAHADwmIm7zB4v6/7Mp4SgMU/TrhOq4/oPXlJXc7O3yxUTPX5oBP7 QCecqFgxwSrZr2IjHbG3M/vuvNbUOs185MiOWUFhwYqbpUIbcBrvNjd9Sk8xRKuE uQsoiyyEY7kqyKXn4pnO8bLPjXrc1rF601kCC4N6iWdIEA9+qZMB0n2DJAf8FaDQ HTYK0YdfoBJLEkKvXxVTVQQZpGoVnUse0BH9c9h8PiQzvlrEFv41ricNY2v9cXWX W8jEuQ005tmQXs7S+JS1ZLoGqF+qWoTsDTmtByyhIErUf2DD64KZl60ByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3ITVgZQ7ezcLdMsYi083Eo2LDGMB8GA1UdIwQY MBaAFL3UJi9kKxuwtTsqbXeYwImdHk1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEt M2JkNzlmZmM2Mzk4LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEtM2JkNzlmZmM2Mzk4 LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQINXNws LYtiy5cTyzzsF+VEXJZocowyRsPlEbCbDB4kLB72h3npCnaV7BWrrRIdYBKkW+bi g92ZqCTc2G07A+k+PikQ0HLtgyTEmC6A0icm1AAciyQEs1LuITFAw5sd8Wac1TzS cJ0rBHq+iDAiqu+wciuAfFWDigfu04TdQlaPc3VKMHDQ5Q2Rm2/gh8Gv/SGr2C+N MR8yaUb3KYDUiHLsoZsPZYbF0nSy48UqFbwKnbrFdByy0Iw3JAq6FYO+RufkT5aS 9DCRIXzfTin0foFCl1gT2JOHbTjnXD9ayuIn3bIFa7jUEUTOPWz2z6BzHAIfMYft idPGqOdwlNqi1g== -----END CERTIFICATE-----Generated at Sat Dec 20 12:22:58 2025 by rpki-client