This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json) Hash identifier: hFvzZnWLXsoRBAgVUZjX92X+cj+hKosEgUmOKdB7/ho= Subject key identifier: 19:23:79:2C:E2:A9:48:CB:CC:A0:68:E5:57:E6:54:E0:A8:38:E7:D6 Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Certificate serial: 019B15DE4904AB5755781B6BF8060541389A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft Manifest number: 1197 Signing time: Sat 13 Dec 2025 04:00:47 +0000 Manifest this update: Sat 13 Dec 2025 04:00:47 +0000 Manifest next update: Sun 14 Dec 2025 04:00:47 +0000 Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=) 2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: PBoejovJrTpumGVrzlWfx3CqiODeVDcd+/uKv9talQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:de:49:04:ab:57:55:78:1b:6b:f8:06:05:41:38:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Validity Not Before: Dec 13 04:00:47 2025 GMT Not After : Dec 14 04:00:47 2025 GMT Subject: CN=1923792ce2a948cbcca068e557e654e0a838e7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:21:8c:ec:e0:39:b9:09:40:74:66:36:e3: 64:87:47:77:fc:45:c7:f6:70:a5:78:b5:0a:38:94: bf:60:73:ea:7f:a0:34:f0:9b:13:42:6d:be:5d:85: ca:b7:cc:67:7c:db:70:33:75:d0:bd:e3:be:33:2a: 44:c4:ff:1e:81:ac:c3:97:a0:88:15:a3:4f:3a:d1: c0:f6:a9:fb:d1:96:1e:09:ef:a9:20:bc:66:63:b9: 3a:1e:d2:f2:b0:06:ac:9d:cc:32:12:83:07:66:cc: eb:05:ca:72:bc:44:ba:2e:a8:32:3b:b1:b7:3b:b0: 25:f2:a0:33:d5:08:c5:07:ce:7f:0b:c5:d5:88:63: 1a:ca:67:91:a8:f6:1b:5e:5c:a7:7c:cc:f8:b2:da: 37:07:db:c6:75:72:0a:26:8b:f3:8c:b5:2b:d3:0a: 82:ff:b6:91:23:6a:f7:4a:17:46:02:79:53:be:01: 78:c7:37:c9:99:af:ab:b1:bd:19:ae:56:92:e2:f5: 4e:72:50:89:35:13:b1:74:9e:69:99:08:f7:fa:b6: ef:1c:76:c5:75:70:a0:9d:88:b9:4a:80:0b:01:d5: 60:14:86:31:8f:5c:82:48:3b:2d:6a:04:c7:11:24: 1c:77:1f:71:17:c5:b3:10:ab:90:f7:e1:c4:dc:a5: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:23:79:2C:E2:A9:48:CB:CC:A0:68:E5:57:E6:54:E0:A8:38:E7:D6 X509v3 Authority Key Identifier: keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f4:1c:e9:d1:da:d1:a3:c6:cd:5b:d8:20:1b:1a:93:5a:a0: 69:21:50:b0:3e:4d:74:2d:25:88:9b:27:6e:8d:e2:cc:84:0a: c5:b1:fe:fb:29:b5:36:ac:bc:82:22:1f:8d:61:34:29:ee:17: a2:db:31:f0:3f:6d:63:be:ab:49:3e:38:8c:7d:c8:57:cf:50: e2:fd:19:94:90:b2:eb:18:46:4e:74:43:64:54:2f:a1:7f:63: 23:90:b4:88:2c:19:a4:c0:55:a6:4d:40:f3:eb:7c:50:12:46: a3:18:b8:18:2d:6b:83:ba:9c:7b:18:83:49:84:0a:e3:8b:26: 34:c6:0b:61:08:8e:3a:b8:47:8f:a3:1b:42:95:ba:93:bd:64: 85:ae:07:65:09:17:0f:d4:9d:af:28:4f:99:13:42:e1:ac:bb: 48:61:b4:42:cd:56:31:26:45:f4:2b:a4:8d:2e:2f:da:c4:d0: 8d:b8:58:04:b1:3a:99:cc:86:63:04:b9:ba:88:86:fb:10:cf: 8f:16:90:af:d4:d3:d9:52:52:5c:d2:3d:97:e9:5e:bf:21:79: 61:d5:04:4d:72:e9:a0:cb:ae:43:c7:f0:63:57:de:63:36:65: cd:d0:7c:37:06:00:e0:6c:9e:4f:ef:70:41:6a:6c:51:8a:89: b1:bb:64:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsV3kkEq1dVeBtr+AYFQTiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl MGI5MjUwHhcNMjUxMjEzMDQwMDQ3WhcNMjUxMjE0MDQwMDQ3WjAzMTEwLwYDVQQD EygxOTIzNzkyY2UyYTk0OGNiY2NhMDY4ZTU1N2U2NTRlMGE4MzhlN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOghjOzgObkJQHRmNuNkh0d3/EXH 9nCleLUKOJS/YHPqf6A08JsTQm2+XYXKt8xnfNtwM3XQveO+MypExP8egazDl6CI FaNPOtHA9qn70ZYeCe+pILxmY7k6HtLysAasncwyEoMHZszrBcpyvES6LqgyO7G3 O7Al8qAz1QjFB85/C8XViGMaymeRqPYbXlynfMz4sto3B9vGdXIKJovzjLUr0wqC /7aRI2r3ShdGAnlTvgF4xzfJma+rsb0ZrlaS4vVOclCJNROxdJ5pmQj3+rbvHHbF dXCgnYi5SoALAdVgFIYxj1yCSDstagTHESQcdx9xF8WzEKuQ9+HE3KXM3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkjeSziqUjLzKBo5VfmVOCoOOfWMB8GA1UdIwQY MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt MDIxNWM0ZWFhN2MzLzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/Qc6dHa 0aPGzVvYIBsak1qgaSFQsD5NdC0liJsnbo3izIQKxbH++ym1Nqy8giIfjWE0Ke4X otsx8D9tY76rST44jH3IV89Q4v0ZlJCy6xhGTnRDZFQvoX9jI5C0iCwZpMBVpk1A 8+t8UBJGoxi4GC1rg7qcexiDSYQK44smNMYLYQiOOrhHj6MbQpW6k71kha4HZQkX D9SdryhPmRNC4ay7SGG0Qs1WMSZF9CukjS4v2sTQjbhYBLE6mcyGYwS5uoiG+xDP jxaQr9TT2VJSXNI9l+levyF5YdUETXLpoMuuQ8fwY1feYzZlzdB8NwYA4GyeT+9w QWpsUYqJsbtkPA== -----END CERTIFICATE-----Generated at Sat Dec 13 07:17:53 2025 by rpki-client