This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft File: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft (raw, json) Hash identifier: /ZdVONaXyhMYZIieWDBKr+rb0dR4Wtwbpyt0gIQJ/ek= Subject key identifier: D6:5E:B3:ED:C5:B5:3D:74:04:51:CA:80:CD:06:A7:5F:03:69:38:9E Authority key identifier: BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C Certificate issuer: /CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c Certificate serial: 019B597644DB00E624CB68662F0FE13E9199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft Manifest number: 16A9 Signing time: Fri 26 Dec 2025 07:01:21 +0000 Manifest this update: Fri 26 Dec 2025 07:01:21 +0000 Manifest next update: Sat 27 Dec 2025 07:01:21 +0000 Files and hashes: 1: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl (hash: Duya7S8zk8/hdp7jrk8ni6Vyz1GUguyFn/hfxl54bko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:44:db:00:e6:24:cb:68:66:2f:0f:e1:3e:91:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c Validity Not Before: Dec 26 07:01:21 2025 GMT Not After : Dec 27 07:01:21 2025 GMT Subject: CN=d65eb3edc5b53d740451ca80cd06a75f0369389e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:34:8f:38:19:c9:6f:49:56:c1:61:d4:d7: c0:4d:c0:4a:2c:b7:e8:86:26:9b:0b:c8:ce:69:0d: 5b:77:ed:da:0a:33:62:9b:ea:44:ca:68:1f:a0:f3: fb:71:e4:9a:09:99:eb:57:6b:cb:6e:af:a7:c4:f3: 04:6c:89:81:80:ed:ea:0e:a7:ab:08:4b:1f:83:29: f0:36:b2:3a:ba:84:a3:55:e5:ad:85:f2:bb:41:ac: 77:10:e5:ab:72:7a:17:ab:94:b4:47:15:e2:d5:53: 69:cb:df:2f:68:d9:93:9f:e3:46:9f:10:1f:55:ea: 33:e0:d0:3f:34:51:f3:5b:29:33:d5:57:c7:5e:c7: bb:7a:b5:b6:a4:2d:55:f2:05:47:77:38:de:fd:48: 90:76:b5:da:ee:28:bd:1c:07:7d:ff:de:4f:8a:77: 75:1e:72:ac:0b:c9:e8:f0:02:1c:6f:82:c4:05:a4: 5a:4d:fd:19:da:01:e1:ef:8f:65:c6:6f:0f:3c:f9: 3e:94:a7:64:ed:ee:8a:3b:fb:50:c3:26:fb:07:62: 90:2b:d4:8c:55:8c:2f:73:1b:22:61:85:7e:65:80: 11:2d:81:19:46:e3:0c:38:8a:84:70:be:7e:c8:a7: 2e:af:f1:2f:24:56:f0:d1:f7:7e:75:0c:41:a6:4f: 43:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5E:B3:ED:C5:B5:3D:74:04:51:CA:80:CD:06:A7:5F:03:69:38:9E X509v3 Authority Key Identifier: keyid:BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:13:d5:9d:7d:ab:02:d9:d7:d1:6f:f3:d3:49:05:05:27:ca: 1d:a6:4c:bf:76:f0:c0:8c:6a:93:04:d2:38:fe:47:5e:da:ef: 69:3b:8f:d1:3b:d1:bf:99:42:69:eb:73:39:dd:fc:d7:b5:65: 20:23:c9:c3:ae:7b:9e:58:4c:24:a9:1d:8b:96:c7:72:a2:96: 9e:d0:dc:89:68:6d:5d:e7:dd:65:2b:13:94:3e:a9:9d:42:76: b9:40:63:9e:04:f6:f6:d8:e7:e4:e2:83:1c:d0:ac:a1:01:d2: 60:39:73:d3:80:63:e0:f9:4b:53:f8:3e:5e:cb:54:ba:dd:22: 92:e1:2c:3d:81:26:6d:b0:2a:ea:0b:8d:43:2d:79:18:3d:28: 0a:80:d2:fc:b8:08:5d:2d:fa:b3:7b:cb:a9:99:63:fc:0b:7d: b9:51:26:35:19:2d:6e:18:d9:79:bc:c1:ed:b2:31:6f:5d:be: 87:61:af:b1:99:2c:5a:eb:94:3a:86:6e:89:16:f2:ac:ad:d6: c9:5e:e0:05:9e:8b:9b:cb:fd:b5:10:5a:a8:ef:e0:2b:64:8d: 8c:74:a9:43:33:69:fa:5a:22:36:0e:be:c0:ef:0a:18:26:52: 03:1c:07:55:52:3e:53:ee:59:7d:26:83:b0:f1:67:85:03:5a: 41:0f:bb:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkTbAOYky2hmLw/hPpGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmM0ZjEyOGM0YzU2ODUxYjk3NTU0ZDI0YzY2YWQ1ZWUy M2ZjOWMwHhcNMjUxMjI2MDcwMTIxWhcNMjUxMjI3MDcwMTIxWjAzMTEwLwYDVQQD EyhkNjVlYjNlZGM1YjUzZDc0MDQ1MWNhODBjZDA2YTc1ZjAzNjkzODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt100jzgZyW9JVsFh1NfATcBKLLfo hiabC8jOaQ1bd+3aCjNim+pEymgfoPP7ceSaCZnrV2vLbq+nxPMEbImBgO3qDqer CEsfgynwNrI6uoSjVeWthfK7Qax3EOWrcnoXq5S0RxXi1VNpy98vaNmTn+NGnxAf Veoz4NA/NFHzWykz1VfHXse7erW2pC1V8gVHdzje/UiQdrXa7ii9HAd9/95Pind1 HnKsC8no8AIcb4LEBaRaTf0Z2gHh749lxm8PPPk+lKdk7e6KO/tQwyb7B2KQK9SM VYwvcxsiYYV+ZYARLYEZRuMMOIqEcL5+yKcur/EvJFbw0fd+dQxBpk9D8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZes+3FtT10BFHKgM0Gp18DaTieMB8GA1UdIwQY MBaAFLz8TxKMTFaFG5dVTSTGatXuI/ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My82ZjZmNzgtMWRlNy00NGU5LWJmMzkt MTI5ODRjYTdhN2EyLzEvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My82ZjZmNzgtMWRlNy00NGU5LWJmMzktMTI5ODRjYTdhN2Ey LzEvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRPVnX2r AtnX0W/z00kFBSfKHaZMv3bwwIxqkwTSOP5HXtrvaTuP0TvRv5lCaetzOd3817Vl ICPJw657nlhMJKkdi5bHcqKWntDciWhtXefdZSsTlD6pnUJ2uUBjngT29tjn5OKD HNCsoQHSYDlz04Bj4PlLU/g+XstUut0ikuEsPYEmbbAq6guNQy15GD0oCoDS/LgI XS36s3vLqZlj/At9uVEmNRktbhjZebzB7bIxb12+h2GvsZksWuuUOoZuiRbyrK3W yV7gBZ6Lm8v9tRBaqO/gK2SNjHSpQzNp+loiNg6+wO8KGCZSAxwHVVI+U+5ZfSaD sPFnhQNaQQ+7wA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:56 2025 by rpki-client