This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json) Hash identifier: 9sEC4L1qlF9KwGHi/hSty6GPJfPI76TazDulkR1voe4= Subject key identifier: 3A:95:E3:37:5D:C0:F6:96:75:F1:7C:73:72:78:56:3C:2E:E2:5F:5C Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Certificate serial: 019B35332244D5E1259B5E9A3F160FD9434C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 06:01:42 +0000 Manifest this update: Fri 19 Dec 2025 06:01:42 +0000 Manifest next update: Sat 20 Dec 2025 06:01:42 +0000 Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=) 2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: 1MP+1sbOZmLq0U9nZAkHTB5ieXRUjx3CACHgsSxKxk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:22:44:d5:e1:25:9b:5e:9a:3f:16:0f:d9:43:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Validity Not Before: Dec 19 06:01:42 2025 GMT Not After : Dec 20 06:01:42 2025 GMT Subject: CN=3a95e3375dc0f69675f17c737278563c2ee25f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:02:68:64:9e:6d:e3:72:9c:3b:18:02:7d:a1: a9:34:22:f3:e3:88:c4:10:30:8a:40:77:be:30:ef: 0f:15:74:78:07:3e:83:63:8a:e7:a0:1c:5b:87:7c: 07:9e:80:94:4c:3f:62:e1:d4:0e:18:04:24:a2:fd: 80:28:06:b1:4b:00:c9:65:17:bd:88:18:f4:cb:8b: 72:25:7d:e1:d0:b4:49:28:b8:de:cc:ef:14:2f:45: b4:c7:1d:16:65:63:a1:31:d9:fe:67:6c:b0:3b:01: 0f:fd:a0:0b:05:b3:02:5a:5b:28:9a:e3:cb:67:dc: 2c:2a:79:28:a9:ad:b0:14:3c:d6:f0:9d:90:03:4d: f6:8c:5d:4e:e8:e1:ac:fb:02:fc:ec:57:2a:2d:4b: 7f:a9:bb:1b:9f:da:e5:e4:38:7a:ca:59:3d:39:52: 58:f5:a4:6c:41:9b:8d:a2:26:64:a9:05:19:77:9b: 36:07:af:ce:47:53:d6:f6:fb:36:2f:0f:75:9c:f1: 81:62:ad:0e:e3:4a:53:b2:75:5d:d5:9b:04:d0:69: 9f:03:5b:09:36:86:13:dd:da:29:11:ca:30:83:7a: eb:e6:30:4c:7e:22:d4:5b:28:61:48:19:f4:e2:29: 16:09:62:b5:fe:b0:1d:9b:97:97:69:74:38:82:bf: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:E3:37:5D:C0:F6:96:75:F1:7C:73:72:78:56:3C:2E:E2:5F:5C X509v3 Authority Key Identifier: keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f8:5d:1a:ed:9f:33:3f:5b:7c:f0:ba:3e:1c:6d:7b:b0:b9: d5:b6:d7:c5:96:b8:ea:58:b2:c5:94:2b:21:95:89:e4:b7:6d: 6b:63:4b:2b:5c:79:25:8c:bd:f0:eb:d5:5d:a1:68:67:e8:e4: ce:a1:d9:71:80:f1:e1:a4:3f:e1:02:4e:13:f2:44:19:e5:18: 93:2e:93:4e:eb:5a:f7:d8:71:6b:5d:88:64:34:53:1e:c7:a3: 15:2d:b7:07:cc:85:ba:26:8a:ee:9e:af:b3:66:43:8c:a3:11: 02:16:5f:4b:c4:72:58:12:8a:c5:aa:ec:33:57:a0:2b:f8:bb: 78:9b:f6:97:61:77:74:06:98:82:c4:22:40:35:d2:e7:6d:8e: 5a:e3:0f:63:a1:72:72:53:53:d5:47:bf:2d:5c:40:b2:bc:2e: b7:8f:e8:00:d8:45:d8:a9:ad:1e:d9:be:2f:f0:30:27:39:48: 60:c2:7b:22:02:b3:b3:ee:dd:f1:0f:18:f1:f4:8f:dd:47:fe: c2:3b:44:56:50:8a:b6:10:b8:42:9d:be:3e:0d:72:2e:e7:89: 4e:0b:75:32:16:e9:fc:87:da:76:1e:3a:9f:b7:d5:dd:5a:cc: eb:be:84:71:6d:aa:e2:2f:7d:a0:9c:04:f3:99:9a:65:40:d8: 30:5b:32:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MyJE1eElm16aPxYP2UNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1 OTcxYjUwHhcNMjUxMjE5MDYwMTQyWhcNMjUxMjIwMDYwMTQyWjAzMTEwLwYDVQQD EygzYTk1ZTMzNzVkYzBmNjk2NzVmMTdjNzM3Mjc4NTYzYzJlZTI1ZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAJoZJ5t43KcOxgCfaGpNCLz44jE EDCKQHe+MO8PFXR4Bz6DY4rnoBxbh3wHnoCUTD9i4dQOGAQkov2AKAaxSwDJZRe9 iBj0y4tyJX3h0LRJKLjezO8UL0W0xx0WZWOhMdn+Z2ywOwEP/aALBbMCWlsomuPL Z9wsKnkoqa2wFDzW8J2QA032jF1O6OGs+wL87FcqLUt/qbsbn9rl5Dh6ylk9OVJY 9aRsQZuNoiZkqQUZd5s2B6/OR1PW9vs2Lw91nPGBYq0O40pTsnVd1ZsE0GmfA1sJ NoYT3dopEcowg3rr5jBMfiLUWyhhSBn04ikWCWK1/rAdm5eXaXQ4gr9I8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqV4zddwPaWdfF8c3J4Vjwu4l9cMB8GA1UdIwQY MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfhdGu2f Mz9bfPC6Phxte7C51bbXxZa46liyxZQrIZWJ5Ldta2NLK1x5JYy98OvVXaFoZ+jk zqHZcYDx4aQ/4QJOE/JEGeUYky6TTuta99hxa12IZDRTHsejFS23B8yFuiaK7p6v s2ZDjKMRAhZfS8RyWBKKxarsM1egK/i7eJv2l2F3dAaYgsQiQDXS522OWuMPY6Fy clNT1Ue/LVxAsrwut4/oANhF2KmtHtm+L/AwJzlIYMJ7IgKzs+7d8Q8Y8fSP3Uf+ wjtEVlCKthC4Qp2+Pg1yLueJTgt1Mhbp/Ifadh46n7fV3VrM676EcW2q4i99oJwE 85maZUDYMFsyWg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:34 2025 by rpki-client