This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json) Hash identifier: +NkX5sh+bzDpVmpfUDLs+SKa+Knbv+6fpbHtDdFCNJU= Subject key identifier: E1:8C:D1:11:97:83:82:C6:A1:CB:C5:4B:77:45:E0:E7:38:A3:5C:20 Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1 Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1 Certificate serial: 019B0E268C769CDFC26D6E22951AE10E1100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft Manifest number: 0225 Signing time: Thu 11 Dec 2025 16:02:45 +0000 Manifest this update: Thu 11 Dec 2025 16:02:45 +0000 Manifest next update: Fri 12 Dec 2025 16:02:45 +0000 Files and hashes: 1: SbG-TfF_crHX7bjktc6Jm6Mw08k.roa (hash: cILCavbni7VMAY2NB/vg63OOb75/V8DMaIDv6gy9of0=) 2: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: ammv+XWJQf5gcZGSJZ5EVSvAsW/E6DPq5GafadPM64I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:8c:76:9c:df:c2:6d:6e:22:95:1a:e1:0e:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1 Validity Not Before: Dec 11 16:02:45 2025 GMT Not After : Dec 12 16:02:45 2025 GMT Subject: CN=e18cd111978382c6a1cbc54b7745e0e738a35c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:d6:49:d9:ca:b5:db:56:73:4a:0f:df:af: 2e:47:f2:55:9c:08:26:1c:59:d8:7e:5c:83:bf:9a: ba:94:d8:f6:b6:58:25:4d:c1:68:d4:c4:82:43:9a: e0:76:3c:7c:7d:20:8d:ee:3a:c7:f2:d6:af:e7:93: 3f:3a:cc:6b:44:5b:70:02:82:71:d2:fe:81:5c:31: 90:18:75:5d:41:96:6a:0b:ae:72:f4:8a:21:08:71: 59:ea:d8:1b:25:57:7a:8a:85:b5:5b:20:3b:cc:63: 54:99:56:e9:e0:f2:06:d8:d5:e7:8e:45:78:d4:57: e2:c8:41:eb:49:a7:f9:d6:3d:02:46:9a:53:b8:47: 0c:13:ed:45:3c:ff:fc:2c:b9:a5:6e:e6:de:77:5f: e5:b3:ce:1d:03:e8:32:98:07:87:d6:75:e1:e3:78: ad:03:87:4d:9a:e5:0e:12:e6:85:c0:55:8f:44:8f: 59:26:97:f0:d0:7e:12:9b:de:e3:81:75:73:19:3e: ae:dc:70:81:bd:cf:78:be:9f:6d:98:a5:2c:b6:ad: 8f:b3:d0:41:d2:30:ef:a1:e7:70:10:4e:40:8a:e9: d1:8b:67:98:19:9a:a2:96:2e:cc:58:45:95:b1:11: be:86:41:cd:9c:8f:b4:cc:89:73:dc:f4:50:ac:d7: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:D1:11:97:83:82:C6:A1:CB:C5:4B:77:45:E0:E7:38:A3:5C:20 X509v3 Authority Key Identifier: keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ab:31:69:d3:39:24:c8:d9:21:bf:e0:cd:3e:28:cb:70:3b: 1a:ac:83:24:08:44:d1:16:cf:42:d9:2b:4a:f6:b3:12:c9:b3: c8:c8:e1:65:3d:25:3a:e0:80:e5:ef:26:5d:f6:6d:51:1d:82: 7d:04:ed:a4:31:d6:8d:1a:8c:f9:fb:62:53:79:53:df:50:a6: 69:25:3f:a6:b0:ec:02:80:17:68:f2:96:d4:cd:f6:f6:b7:0f: 0b:8e:9e:20:36:96:fa:04:2b:ac:f0:48:37:81:14:e3:4f:d2: 1d:31:c1:85:71:7a:ba:26:20:0c:7d:0c:7a:e4:9c:9c:13:34: da:09:79:21:c6:4f:14:0b:72:e7:ae:d3:93:9e:c0:92:6f:5c: 16:85:0f:ac:37:4c:62:6d:64:1f:e1:aa:63:2b:34:77:00:d3: 32:43:4f:ee:ed:fd:a7:b9:4e:b2:64:4a:46:1d:09:d0:71:3b: d9:e4:2c:4e:a9:28:35:19:f8:67:b9:28:87:7c:b0:22:db:b2: ce:22:4c:1a:7f:94:2d:dd:95:28:c2:a9:66:2f:55:0f:80:22: 0b:97:30:cc:ad:9f:18:f8:f1:73:a9:ff:5e:10:82:fd:11:d1: 4d:7a:07:30:64:68:32:2d:c5:3f:42:b8:fe:80:3b:8a:e0:19: 54:cd:92:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJox2nN/CbW4ilRrhDhEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDgyNjA3NjNhMTFlNzdiMGI1ZDdkZDIwMmJhNGNjMzAw NTM4YjEwHhcNMjUxMjExMTYwMjQ1WhcNMjUxMjEyMTYwMjQ1WjAzMTEwLwYDVQQD EyhlMThjZDExMTk3ODM4MmM2YTFjYmM1NGI3NzQ1ZTBlNzM4YTM1YzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqjWSdnKtdtWc0oP368uR/JVnAgm HFnYflyDv5q6lNj2tlglTcFo1MSCQ5rgdjx8fSCN7jrH8tav55M/OsxrRFtwAoJx 0v6BXDGQGHVdQZZqC65y9IohCHFZ6tgbJVd6ioW1WyA7zGNUmVbp4PIG2NXnjkV4 1FfiyEHrSaf51j0CRppTuEcME+1FPP/8LLmlbubed1/ls84dA+gymAeH1nXh43it A4dNmuUOEuaFwFWPRI9ZJpfw0H4Sm97jgXVzGT6u3HCBvc94vp9tmKUstq2Ps9BB 0jDvoedwEE5AiunRi2eYGZqili7MWEWVsRG+hkHNnI+0zIlz3PRQrNcY9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGM0RGXg4LGocvFS3dF4Oc4o1wgMB8GA1UdIwQY MBaAFLxIJgdjoR53sLXX3SArpMwwBTixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQt OWFiNTc2NWQ1YmI2LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQtOWFiNTc2NWQ1YmI2 LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6sxadM5 JMjZIb/gzT4oy3A7GqyDJAhE0RbPQtkrSvazEsmzyMjhZT0lOuCA5e8mXfZtUR2C fQTtpDHWjRqM+ftiU3lT31CmaSU/prDsAoAXaPKW1M329rcPC46eIDaW+gQrrPBI N4EU40/SHTHBhXF6uiYgDH0MeuScnBM02gl5IcZPFAty567Tk57Akm9cFoUPrDdM Ym1kH+GqYys0dwDTMkNP7u39p7lOsmRKRh0J0HE72eQsTqkoNRn4Z7koh3ywItuy ziJMGn+ULd2VKMKpZi9VD4AiC5cwzK2fGPjxc6n/XhCC/RHRTXoHMGRoMi3FP0K4 /oA7iuAZVM2Siw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:37 2025 by rpki-client