This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json) Hash identifier: mJon9C1rV7KeihUEWHJcvrGlk46iSmjrK7fY4Z6zqe8= Subject key identifier: 80:53:F8:E1:88:1E:E3:1A:45:BF:57:6E:F0:6A:CC:98:31:46:ED:99 Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Certificate serial: 019B1A295A054FB9593ACB34C51603529BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft Manifest number: 0444 Signing time: Sun 14 Dec 2025 00:01:16 +0000 Manifest this update: Sun 14 Dec 2025 00:01:16 +0000 Manifest next update: Mon 15 Dec 2025 00:01:16 +0000 Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=) 2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: +4DYcSMhlG98aVdMnEm1IKViqV+L6Y6jC1Qm5XsSFsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:5a:05:4f:b9:59:3a:cb:34:c5:16:03:52:9b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Validity Not Before: Dec 14 00:01:16 2025 GMT Not After : Dec 15 00:01:16 2025 GMT Subject: CN=8053f8e1881ee31a45bf576ef06acc983146ed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:e1:de:1e:b5:1a:2d:47:99:61:3f:d4:e9: 02:8e:03:df:1d:7a:87:db:ec:f5:85:56:01:79:14: 90:45:bf:51:f3:84:f3:d4:b4:65:4c:95:9a:e6:ac: ba:c5:5a:dd:5d:4d:cd:92:95:bb:28:60:3e:c3:61: e7:b7:83:0b:16:ae:ee:4f:47:8d:70:d3:f9:ec:e2: b3:d9:36:36:3d:ac:da:de:d4:25:18:ca:d7:be:7b: bf:5a:b1:3b:0a:89:55:71:2c:87:1c:d9:2a:df:cf: 19:29:74:97:26:01:19:0b:6c:83:1c:d9:08:c5:38: 04:3c:5c:0e:23:a7:73:4e:5c:3b:56:07:84:c1:6a: 2c:ad:1a:b3:f6:d7:31:05:72:e4:b0:b3:a1:05:03: 43:d1:2b:b7:67:3d:ba:f8:00:91:a2:fd:7f:52:e1: 91:26:41:75:c0:49:da:04:7c:06:9a:7b:8b:b7:4d: 34:0f:e6:e9:53:6f:be:b4:8b:87:b3:e4:fc:9b:69: e8:6b:87:5c:aa:d3:3e:10:0e:88:ea:8f:03:e9:43: 73:4f:ac:16:f0:ab:c7:b0:b6:2d:e6:5c:42:56:af: 17:d8:df:b7:cf:19:34:1d:07:18:df:a1:29:1f:dc: 38:05:f7:31:35:6d:94:92:c5:79:fc:21:ea:05:ae: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:F8:E1:88:1E:E3:1A:45:BF:57:6E:F0:6A:CC:98:31:46:ED:99 X509v3 Authority Key Identifier: keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8b:f7:a1:6b:d4:b9:78:27:d7:47:a8:ce:1e:6e:0d:c3:86: f4:4c:d2:bd:af:75:d2:ed:d1:f4:80:3d:35:0e:6e:a8:58:bc: 6b:4c:da:a5:dc:74:dc:a4:a5:11:ef:e5:44:6d:93:68:72:f5: f2:85:f4:f5:8e:63:15:91:25:5e:95:0f:a8:99:c2:82:6b:ab: 4c:62:8a:77:9d:f3:9d:77:c9:66:a5:6b:47:31:0b:4f:70:7d: 53:f3:fa:b7:8a:0f:02:c2:5b:ea:c6:03:da:fe:52:1c:86:98: d4:59:3e:b8:b2:17:e3:89:90:bf:91:bb:a5:be:23:3d:c5:e2: f6:a1:9a:35:a0:73:c5:74:93:50:e5:eb:59:15:15:2a:3c:2f: 3e:6f:4d:0b:ac:1a:a2:fa:c7:ad:29:8b:b5:20:f2:71:87:e6: 95:d2:64:df:84:e5:fe:c9:06:4e:35:0b:d2:9e:ff:94:cf:66: 9d:d9:bf:3b:7f:0b:f3:51:ac:a1:60:31:72:7a:9f:23:be:14: 6a:60:4c:ea:13:d0:31:63:68:d4:b0:ef:9f:f6:9b:41:67:34: f0:41:48:2a:91:43:66:97:0f:ac:59:60:a3:47:79:e4:ce:2d: fc:34:a4:f6:da:dd:fc:bc:1f:bd:a1:51:78:65:75:ef:3f:09: dc:b3:4d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKVoFT7lZOss0xRYDUpv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjI0ZGY0YTdjOWFhMjEzMWQ4NTc1MDNiOTNkNjBmN2Zi NTFiZDkwHhcNMjUxMjE0MDAwMTE2WhcNMjUxMjE1MDAwMTE2WjAzMTEwLwYDVQQD Eyg4MDUzZjhlMTg4MWVlMzFhNDViZjU3NmVmMDZhY2M5ODMxNDZlZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomHh3h61Gi1HmWE/1OkCjgPfHXqH 2+z1hVYBeRSQRb9R84Tz1LRlTJWa5qy6xVrdXU3NkpW7KGA+w2Hnt4MLFq7uT0eN cNP57OKz2TY2Paza3tQlGMrXvnu/WrE7ColVcSyHHNkq388ZKXSXJgEZC2yDHNkI xTgEPFwOI6dzTlw7VgeEwWosrRqz9tcxBXLksLOhBQND0Su3Zz26+ACRov1/UuGR JkF1wEnaBHwGmnuLt000D+bpU2++tIuHs+T8m2noa4dcqtM+EA6I6o8D6UNzT6wW 8KvHsLYt5lxCVq8X2N+3zxk0HQcY36EpH9w4BfcxNW2UksV5/CHqBa7TRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBT+OGIHuMaRb9XbvBqzJgxRu2ZMB8GA1UdIwQY MBaAFL2yTfSnyaohMdhXUDuT1g9/tRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAt ZDMwYWViMWMyMGNhLzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAtZDMwYWViMWMyMGNh LzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4v3oWvU uXgn10eozh5uDcOG9EzSva910u3R9IA9NQ5uqFi8a0zapdx03KSlEe/lRG2TaHL1 8oX09Y5jFZElXpUPqJnCgmurTGKKd53znXfJZqVrRzELT3B9U/P6t4oPAsJb6sYD 2v5SHIaY1Fk+uLIX44mQv5G7pb4jPcXi9qGaNaBzxXSTUOXrWRUVKjwvPm9NC6wa ovrHrSmLtSDycYfmldJk34Tl/skGTjUL0p7/lM9mndm/O38L81GsoWAxcnqfI74U amBM6hPQMWNo1LDvn/abQWc08EFIKpFDZpcPrFlgo0d55M4t/DSk9trd/LwfvaFR eGV17z8J3LNNyA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:14 2025 by rpki-client