This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: QZ/TldWk9CwVjUyvrhbQk3nl/Bey+JED/4B/Bl9hgJ8= Subject key identifier: 81:8B:6F:58:06:0E:AE:51:80:D8:D2:71:F5:4B:79:0C:1A:E9:92:40 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B1C858E2B2055E2BF3AAFEFF4B4D51CE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1487 Signing time: Sun 14 Dec 2025 11:01:13 +0000 Manifest this update: Sun 14 Dec 2025 11:01:13 +0000 Manifest next update: Mon 15 Dec 2025 11:01:13 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: qqN4qSMT2ysnVDjSneBDla2Tlh5g22LfXXtGBwXd9zw=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:8e:2b:20:55:e2:bf:3a:af:ef:f4:b4:d5:1c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Dec 14 11:01:13 2025 GMT Not After : Dec 15 11:01:13 2025 GMT Subject: CN=818b6f58060eae5180d8d271f54b790c1ae99240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:42:75:16:b4:6c:37:0f:4d:fe:f4:da:5a: 3c:0c:55:84:9f:59:b5:ad:44:5d:f8:22:4d:ad:6d: be:c4:63:7f:84:ed:51:08:22:30:05:7f:b4:8e:f4: 4d:ec:bf:0d:59:64:89:61:d5:10:42:a9:b0:6f:0b: 93:a8:26:ce:db:b1:82:78:5c:10:9d:87:72:12:9c: 60:4f:1c:24:78:10:5d:7d:bc:aa:8f:d5:52:95:b8: 31:e8:3e:8e:42:1f:b5:37:9b:25:95:15:d4:fe:30: ff:ee:4e:d1:4d:36:f2:2e:ed:53:fc:15:11:5a:6e: 61:c7:23:d7:00:90:bc:7d:50:78:8e:0d:91:71:9c: 3c:09:3d:0c:ae:5d:96:84:98:a2:10:cc:37:4d:04: 86:a7:98:d1:8f:76:66:90:19:6e:d1:fe:43:e6:ad: f0:3c:db:f6:e8:02:f5:c8:40:56:51:71:12:08:3c: 02:0e:a6:2e:82:65:ef:9d:9f:00:77:be:1e:89:2d: a4:24:a6:0a:ff:c7:90:55:86:01:ab:cb:c3:bf:a3: 31:fb:a5:3e:f5:8f:03:40:11:01:64:ca:97:36:83: b8:62:1a:42:c5:66:12:be:12:85:b7:4f:db:33:0d: 11:93:c1:5f:41:07:2a:d2:50:a8:bd:1d:a9:68:4d: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8B:6F:58:06:0E:AE:51:80:D8:D2:71:F5:4B:79:0C:1A:E9:92:40 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:e6:db:a9:cc:ff:61:a5:67:00:d3:a9:5f:3d:60:c9:2c: 23:ae:52:20:4b:7c:5a:91:53:b4:95:22:3c:f6:70:db:69:2f: 69:41:bb:32:41:bb:16:dd:a0:b5:0e:f3:98:a1:13:45:61:ba: 33:e3:aa:09:ef:f4:7a:b8:77:45:20:91:19:ba:00:5d:2a:ae: b0:e5:5a:7b:63:e7:c7:1b:89:a6:df:68:26:09:61:3a:2f:b1: db:0f:b8:28:e0:58:7b:e2:ce:7f:92:9f:83:11:45:cd:a7:58: 4f:33:1b:97:bf:9e:7b:49:b6:d1:e9:67:9e:23:58:f6:86:ab: 92:d3:b6:f8:04:61:f9:55:b9:22:cc:2c:06:7f:26:22:c7:53: 13:2a:b6:aa:18:56:a2:6f:18:fb:cc:45:d3:73:6a:08:4d:3d: 14:48:1e:8b:bc:91:89:77:8d:22:cd:84:04:8c:fc:97:98:75: f7:4a:08:b6:6b:d4:bb:6c:e2:7b:da:bf:b0:f7:ed:cc:d6:49: f0:5b:1a:72:c4:b8:a2:05:1e:1d:a7:cb:bd:ad:ec:b3:1b:c6: ba:54:3b:d3:d9:28:bf:73:9f:f5:e3:5c:f1:ab:d7:07:fd:27: 34:e5:6e:bf:05:36:d7:ad:13:0b:de:27:e0:7f:1e:b3:91:3c: f6:79:90:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschY4rIFXivzqv7/S01RznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUxMjE0MTEwMTEzWhcNMjUxMjE1MTEwMTEzWjAzMTEwLwYDVQQD Eyg4MThiNmY1ODA2MGVhZTUxODBkOGQyNzFmNTRiNzkwYzFhZTk5MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvolCdRa0bDcPTf702lo8DFWEn1m1 rURd+CJNrW2+xGN/hO1RCCIwBX+0jvRN7L8NWWSJYdUQQqmwbwuTqCbO27GCeFwQ nYdyEpxgTxwkeBBdfbyqj9VSlbgx6D6OQh+1N5sllRXU/jD/7k7RTTbyLu1T/BUR Wm5hxyPXAJC8fVB4jg2RcZw8CT0Mrl2WhJiiEMw3TQSGp5jRj3ZmkBlu0f5D5q3w PNv26AL1yEBWUXESCDwCDqYugmXvnZ8Ad74eiS2kJKYK/8eQVYYBq8vDv6Mx+6U+ 9Y8DQBEBZMqXNoO4YhpCxWYSvhKFt0/bMw0Rk8FfQQcq0lCovR2paE0FxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGLb1gGDq5RgNjScfVLeQwa6ZJAMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsnm26nM /2GlZwDTqV89YMksI65SIEt8WpFTtJUiPPZw22kvaUG7MkG7Ft2gtQ7zmKETRWG6 M+OqCe/0erh3RSCRGboAXSqusOVae2PnxxuJpt9oJglhOi+x2w+4KOBYe+LOf5Kf gxFFzadYTzMbl7+ee0m20elnniNY9oarktO2+ARh+VW5IswsBn8mIsdTEyq2qhhW om8Y+8xF03NqCE09FEgei7yRiXeNIs2EBIz8l5h190oItmvUu2zie9q/sPftzNZJ 8FsacsS4ogUeHafLva3ssxvGulQ709kov3Of9eNc8avXB/0nNOVuvwU2160TC94n 4H8es5E89nmQCg== -----END CERTIFICATE-----Generated at Sun Dec 14 15:17:09 2025 by rpki-client