This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json) Hash identifier: nHwTjZRVg1s7ES2+GN/lvnuyAYqTZsqtuPhU6ZP1knE= Subject key identifier: FD:4B:FB:51:60:F8:9A:BE:8D:87:EB:4A:3B:55:12:9C:6C:82:C2:F3 Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a Certificate serial: 019B59E3D69FDB8D117D4215B3ABB4AD7CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft Manifest number: 0E7C Signing time: Fri 26 Dec 2025 09:01:02 +0000 Manifest this update: Fri 26 Dec 2025 09:01:02 +0000 Manifest next update: Sat 27 Dec 2025 09:01:02 +0000 Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: CrKfaIOiTMYs6XrYqtc3UYWaHG7IDUVijgvvxTy27lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:d6:9f:db:8d:11:7d:42:15:b3:ab:b4:ad:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a Validity Not Before: Dec 26 09:01:02 2025 GMT Not After : Dec 27 09:01:02 2025 GMT Subject: CN=fd4bfb5160f89abe8d87eb4a3b55129c6c82c2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:4a:2d:bb:40:03:49:e5:b9:10:87:3f:27: 4b:45:41:41:66:2c:1c:d7:59:cc:01:35:e0:30:8f: f7:99:ed:a7:d6:a2:10:cb:4c:c9:2b:4a:7c:08:dc: 3c:c5:50:5c:d1:73:51:9a:ce:f8:5e:60:e9:01:5b: 9b:9b:c1:30:33:52:a5:9e:63:d3:ad:28:5a:0b:3a: 27:92:df:10:3b:ca:ce:f3:14:92:af:84:21:c6:a2: 02:90:f0:bd:81:dd:b8:f1:b8:ac:66:63:2b:21:ef: ef:18:c6:7f:bd:24:ca:57:1e:b5:a6:77:52:3a:ea: d4:a2:5b:90:c0:18:af:c4:ae:e0:e1:a5:b4:f1:d7: 4a:b0:bc:e6:19:31:af:43:30:60:14:1d:57:2d:5b: a2:d4:a7:4c:2d:f1:a6:42:c8:70:e8:34:93:8b:8f: ed:48:60:1c:0b:db:08:4d:8e:26:83:df:fb:c2:ac: 10:68:d3:00:da:b7:c1:99:ba:d9:88:e0:a7:83:c2: a9:6d:d9:9b:05:49:6e:6e:66:86:6a:0f:17:79:35: b4:78:3e:74:08:73:1d:d0:87:7c:99:98:03:f0:4b: 62:a9:6a:02:f9:f1:e4:1c:44:a9:ba:96:0f:91:95: f5:4a:85:f0:98:24:32:13:6e:c5:7d:f6:72:bc:2d: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4B:FB:51:60:F8:9A:BE:8D:87:EB:4A:3B:55:12:9C:6C:82:C2:F3 X509v3 Authority Key Identifier: keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:fc:9d:8c:ff:ed:4d:69:0e:bf:56:5b:50:d3:ba:8f:76:b3: ca:72:55:ce:6a:e9:7b:00:7c:df:ff:37:e6:e2:64:e3:b2:f5: a8:73:30:c5:9c:8a:a7:87:c7:c1:e8:0d:3c:d2:1e:f2:df:c5: 6f:1b:47:63:f8:99:c8:7c:d0:d6:55:16:5a:e4:c4:0c:a1:cb: f8:01:3b:57:4f:37:c9:0e:19:69:a5:1a:54:14:93:58:55:6c: b3:c5:60:d0:7f:0c:67:cf:6d:de:ef:c6:f3:53:a1:bb:b2:c7: 5f:f3:6d:1f:06:4d:c4:4c:d9:0f:ae:45:02:ae:d8:ff:21:f3: 31:85:5e:f8:6e:a1:ef:5c:f8:d2:2e:60:51:be:86:ca:6f:80: f8:1d:b5:5d:97:29:3f:cf:4f:91:2a:7a:8e:4d:a1:31:83:39: 0a:07:cc:3e:2b:7d:32:ba:62:49:4a:8e:6f:dc:9c:82:85:24: 20:67:29:e1:36:f3:b8:9e:db:85:12:ce:09:bc:68:15:a5:0e: 06:15:80:e8:82:1b:ff:b5:4e:6a:5e:56:8d:a9:c2:ab:50:ec: e8:d1:28:7c:28:61:d9:40:2c:cc:8d:75:57:94:18:a0:2e:ef: 76:b5:83:05:5b:19:1f:90:54:d4:5a:b6:92:b3:2c:38:24:41: c4:fb:38:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49af240RfUIVs6u0rXzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZDg4NGUxNTRjMjFjOWY0NTlmNDJhODM2YWJjYmM4YWMw ZjQxNWEwHhcNMjUxMjI2MDkwMTAyWhcNMjUxMjI3MDkwMTAyWjAzMTEwLwYDVQQD EyhmZDRiZmI1MTYwZjg5YWJlOGQ4N2ViNGEzYjU1MTI5YzZjODJjMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu25KLbtAA0nluRCHPydLRUFBZiwc 11nMATXgMI/3me2n1qIQy0zJK0p8CNw8xVBc0XNRms74XmDpAVubm8EwM1KlnmPT rShaCzonkt8QO8rO8xSSr4QhxqICkPC9gd248bisZmMrIe/vGMZ/vSTKVx61pndS OurUoluQwBivxK7g4aW08ddKsLzmGTGvQzBgFB1XLVui1KdMLfGmQshw6DSTi4/t SGAcC9sITY4mg9/7wqwQaNMA2rfBmbrZiOCng8KpbdmbBUlubmaGag8XeTW0eD50 CHMd0Id8mZgD8EtiqWoC+fHkHESpupYPkZX1SoXwmCQyE27FffZyvC14tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1L+1Fg+Jq+jYfrSjtVEpxsgsLzMB8GA1UdIwQY MBaAFLzYhOFUwhyfRZ9CqDary8isD0FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTIt NWQzMThhMjJjYTk2LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTItNWQzMThhMjJjYTk2 LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/ydjP/t TWkOv1ZbUNO6j3azynJVzmrpewB83/835uJk47L1qHMwxZyKp4fHwegNPNIe8t/F bxtHY/iZyHzQ1lUWWuTEDKHL+AE7V083yQ4ZaaUaVBSTWFVss8Vg0H8MZ89t3u/G 81Ohu7LHX/NtHwZNxEzZD65FAq7Y/yHzMYVe+G6h71z40i5gUb6Gym+A+B21XZcp P89PkSp6jk2hMYM5CgfMPit9MrpiSUqOb9ycgoUkIGcp4TbzuJ7bhRLOCbxoFaUO BhWA6IIb/7VOal5WjanCq1Ds6NEofChh2UAszI11V5QYoC7vdrWDBVsZH5BU1Fq2 krMsOCRBxPs4LQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:16 2025 by rpki-client