This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json) Hash identifier: j7vOv/zDlZRMlrwm7fl7RiI9A9j7FM8+WjMTQ2rMIzs= Subject key identifier: 77:F3:D7:BE:D4:6B:AA:D4:34:75:E6:C7:95:B9:38:B9:A5:AB:89:C0 Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43 Certificate serial: 019B1BE0DF93A032EF4B383AC2B6B933DE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft Manifest number: 0CDB Signing time: Sun 14 Dec 2025 08:01:20 +0000 Manifest this update: Sun 14 Dec 2025 08:01:20 +0000 Manifest next update: Mon 15 Dec 2025 08:01:20 +0000 Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=) 2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=) 3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=) 4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: q2vfyJYHvtzxjDxGWT/ny3Tbwch67tLMhIAMJy9EGhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:df:93:a0:32:ef:4b:38:3a:c2:b6:b9:33:de:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43 Validity Not Before: Dec 14 08:01:20 2025 GMT Not After : Dec 15 08:01:20 2025 GMT Subject: CN=77f3d7bed46baad43475e6c795b938b9a5ab89c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:ad:88:79:9e:e3:98:e7:ae:ad:e7:50:f1: ce:7e:34:60:8c:0b:90:0b:d2:46:0f:1b:e7:f1:96: 42:26:e4:6f:6b:b5:8a:4f:4a:85:b3:eb:20:0e:f4: df:6a:3f:cb:2a:5b:05:b5:90:97:40:b8:d5:b4:16: b3:f0:37:41:12:e5:25:21:d5:ed:33:db:52:14:0f: 20:cb:10:5d:d8:85:57:d2:61:2f:a6:9f:99:8b:31: 4d:9c:00:af:f8:72:35:1f:a7:c3:75:f3:89:a6:66: b3:52:f8:3f:80:b0:fb:0e:20:3d:90:f8:b9:92:0f: de:df:02:85:6e:ca:a3:ba:6d:29:5e:29:e5:83:ad: 96:6f:5e:40:a2:77:8e:72:0d:48:21:f7:31:3e:a9: e3:c4:88:8a:87:29:e5:dd:ba:1b:87:5e:5c:a9:f7: 05:a6:7c:4a:89:7c:d4:8b:fa:96:36:f5:d5:cd:48: 1a:17:02:cd:4b:95:d6:d7:6d:1a:9b:09:0c:c2:2f: c1:8b:63:f4:b2:76:e0:f3:a3:a1:c9:2b:58:8c:ef: 23:59:58:a3:8c:b7:a4:f6:8a:fb:71:26:1c:f9:77: 81:e6:9b:7c:70:d0:4b:8d:55:5f:c2:2e:72:4a:39: e4:c4:28:ad:28:70:bb:07:dc:97:21:30:7a:12:d1: db:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:D7:BE:D4:6B:AA:D4:34:75:E6:C7:95:B9:38:B9:A5:AB:89:C0 X509v3 Authority Key Identifier: keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:42:ec:ec:fd:a5:45:b8:bf:e0:fa:30:40:27:c3:40:68:f1: ec:da:c3:32:4e:ac:a7:b7:b1:67:33:02:ec:50:c4:c9:73:c8: fb:6f:be:42:79:ae:8b:e3:a3:8a:6e:21:9e:80:69:f2:a3:65: 72:7f:c8:89:3f:4e:9c:c9:e0:b9:89:1f:7b:60:cd:d3:bb:78: d1:8d:2f:47:19:03:bb:54:f3:0b:3d:3c:6d:f7:1b:d3:2d:b2: 06:c1:99:53:eb:a4:ed:92:63:42:25:58:67:61:58:df:ad:af: 49:06:09:2e:48:b0:8f:84:92:dc:a6:8a:bb:44:6e:fd:aa:aa: 72:d6:36:6d:df:37:72:73:fa:0c:05:2a:51:c5:a9:6b:2b:91: 3b:4b:1f:33:2c:52:0c:f0:11:ef:9f:7d:79:dd:99:a3:ef:61: 8f:66:d0:26:d9:4a:da:8c:1f:25:02:8b:0e:d4:d6:8e:de:e8: 54:34:a9:ec:29:c6:84:95:7d:35:5b:b8:9f:ed:69:7f:b9:0f: 44:0e:d4:96:87:8b:92:e4:53:73:f7:8f:98:b0:26:46:ac:65: f3:94:b0:cc:02:e0:b6:08:78:76:9a:2e:ea:a9:36:92:22:08: f5:3e:4a:61:26:1e:ca:8a:b6:fa:92:94:b9:1f:41:9d:77:2b: 85:2c:42:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4N+ToDLvSzg6wra5M96EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDQyNjJmNjQyYjFiYjBiNTNiMmE2ZDc3OThjMDg5OWQx ZTRkNDMwHhcNMjUxMjE0MDgwMTIwWhcNMjUxMjE1MDgwMTIwWjAzMTEwLwYDVQQD Eyg3N2YzZDdiZWQ0NmJhYWQ0MzQ3NWU2Yzc5NWI5MzhiOWE1YWI4OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iWtiHme45jnrq3nUPHOfjRgjAuQ C9JGDxvn8ZZCJuRva7WKT0qFs+sgDvTfaj/LKlsFtZCXQLjVtBaz8DdBEuUlIdXt M9tSFA8gyxBd2IVX0mEvpp+ZizFNnACv+HI1H6fDdfOJpmazUvg/gLD7DiA9kPi5 kg/e3wKFbsqjum0pXinlg62Wb15AoneOcg1IIfcxPqnjxIiKhynl3bobh15cqfcF pnxKiXzUi/qWNvXVzUgaFwLNS5XW120amwkMwi/Bi2P0snbg86OhyStYjO8jWVij jLek9or7cSYc+XeB5pt8cNBLjVVfwi5ySjnkxCitKHC7B9yXITB6EtHbcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfz177Ua6rUNHXmx5W5OLmlq4nAMB8GA1UdIwQY MBaAFL3UJi9kKxuwtTsqbXeYwImdHk1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEt M2JkNzlmZmM2Mzk4LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEtM2JkNzlmZmM2Mzk4 LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkLs7P2l Rbi/4PowQCfDQGjx7NrDMk6sp7exZzMC7FDEyXPI+2++Qnmui+Ojim4hnoBp8qNl cn/IiT9OnMnguYkfe2DN07t40Y0vRxkDu1TzCz08bfcb0y2yBsGZU+uk7ZJjQiVY Z2FY362vSQYJLkiwj4SS3KaKu0Ru/aqqctY2bd83cnP6DAUqUcWpayuRO0sfMyxS DPAR7599ed2Zo+9hj2bQJtlK2owfJQKLDtTWjt7oVDSp7CnGhJV9NVu4n+1pf7kP RA7UloeLkuRTc/ePmLAmRqxl85SwzALgtgh4dpou6qk2kiII9T5KYSYeyoq2+pKU uR9BnXcrhSxC3g== -----END CERTIFICATE-----Generated at Sun Dec 14 14:43:18 2025 by rpki-client