This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json) Hash identifier: +JQk7+2j6dSWDYvLd8aCfTPGxLF6FtzOgJ0rGXLLzCA= Subject key identifier: 2D:74:A2:E6:BD:F0:6A:02:F4:9B:3C:52:DA:10:43:71:6D:35:1D:E0 Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Certificate serial: 019B3721078F1C252A2B137080D115EFBD84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 15:01:09 +0000 Manifest this update: Fri 19 Dec 2025 15:01:09 +0000 Manifest next update: Sat 20 Dec 2025 15:01:09 +0000 Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=) 2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: nzpwNNAcMeVUg3/3oquZtBVflGL1A+AJw0KFZ7dZtJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:07:8f:1c:25:2a:2b:13:70:80:d1:15:ef:bd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944 Validity Not Before: Dec 19 15:01:09 2025 GMT Not After : Dec 20 15:01:09 2025 GMT Subject: CN=2d74a2e6bdf06a02f49b3c52da1043716d351de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:74:58:b6:14:8a:28:5b:e8:30:16:a2:6a: 6f:e1:db:18:21:84:54:4d:45:18:a9:fa:dd:32:ef: 3b:d3:d9:96:c3:de:b7:a4:d0:7a:ed:3f:3e:9a:0e: 97:70:af:9f:47:b4:0a:38:8a:b2:c6:a2:1a:b0:10: 16:d1:45:4f:83:94:d6:9e:00:5a:73:2b:f2:d3:94: ea:e4:7c:db:b6:9c:57:2f:11:fb:7a:b6:f1:f0:16: e5:fa:89:14:1f:bd:72:c0:e9:12:c0:d1:1e:55:d7: 10:27:c5:7c:df:c6:42:c7:b9:b2:29:65:18:8f:fa: ca:3e:e5:a5:18:28:55:80:a3:ba:51:8d:8a:ea:3e: 71:bb:00:95:be:ac:5c:81:52:3b:5b:46:48:1a:44: 1c:69:8b:00:db:3b:93:a5:cf:54:65:2c:f5:38:40: ef:fb:f4:da:fe:e3:66:e4:b8:5e:85:06:b2:b7:87: ec:f3:2e:df:84:d2:86:ba:24:4a:cd:3c:9a:66:c2: 73:d5:9d:9a:9d:b9:96:0f:64:84:08:14:4c:eb:30: 7b:e4:6f:77:c7:a7:b7:35:af:60:69:82:48:5f:ac: ca:a4:24:86:38:fe:41:0f:cc:8c:6b:bf:6e:5a:a9: 6e:bb:17:c2:0d:1e:56:ec:0f:79:19:8c:2b:9a:20: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:74:A2:E6:BD:F0:6A:02:F4:9B:3C:52:DA:10:43:71:6D:35:1D:E0 X509v3 Authority Key Identifier: keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f1:48:25:c6:0e:e4:04:3d:92:15:8e:fa:83:c4:5a:29:4a: c1:31:30:e3:6e:f7:8d:e5:13:a4:1e:67:0e:53:e9:e1:1e:5e: cc:e8:17:a4:46:51:fd:70:1f:5f:d5:86:46:04:fb:ed:74:d6: 61:e5:0c:e4:c5:7f:78:01:f7:84:e7:42:7f:85:0a:02:32:fa: a1:aa:ef:85:bf:23:0f:dc:9a:22:b4:d7:9c:00:3f:3b:a0:69: fa:44:b8:e7:97:d1:a2:9c:a4:37:85:de:66:8a:7f:8b:7d:8b: 2c:a6:a7:79:80:56:eb:63:24:a7:78:da:ec:90:72:83:a0:cd: ae:86:98:f2:f3:20:49:f0:de:05:42:0b:69:98:d1:d2:f1:ea: 71:7b:7b:96:ab:d1:c2:6c:8a:2a:09:e8:62:1e:d5:a8:98:27: a5:81:8f:d2:57:56:2e:f9:f6:76:4e:e2:6c:40:53:56:14:b1: 2a:cf:69:46:e0:a0:06:49:d1:29:fa:53:d4:6c:71:df:8c:fa: dc:bf:35:3e:b3:78:af:61:96:f1:19:5c:53:ca:39:cb:c6:92: 2b:a4:ae:26:2f:9c:8a:df:ae:8e:d7:f9:37:55:12:02:16:64: 96:4a:3e:e4:74:b4:4a:90:9b:54:27:34:d4:b0:9c:8d:8f:3a: 12:49:bc:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IQePHCUqKxNwgNEV772EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWJkYzQxMDZhZGRlODllMWNlOWMzMmI4MDdiMjA4MmVi Yjk5NDQwHhcNMjUxMjE5MTUwMTA5WhcNMjUxMjIwMTUwMTA5WjAzMTEwLwYDVQQD EygyZDc0YTJlNmJkZjA2YTAyZjQ5YjNjNTJkYTEwNDM3MTZkMzUxZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Th0WLYUiihb6DAWompv4dsYIYRU TUUYqfrdMu8709mWw963pNB67T8+mg6XcK+fR7QKOIqyxqIasBAW0UVPg5TWngBa cyvy05Tq5HzbtpxXLxH7erbx8Bbl+okUH71ywOkSwNEeVdcQJ8V838ZCx7myKWUY j/rKPuWlGChVgKO6UY2K6j5xuwCVvqxcgVI7W0ZIGkQcaYsA2zuTpc9UZSz1OEDv +/Ta/uNm5LhehQayt4fs8y7fhNKGuiRKzTyaZsJz1Z2anbmWD2SECBRM6zB75G93 x6e3Na9gaYJIX6zKpCSGOP5BD8yMa79uWqluuxfCDR5W7A95GYwrmiDEPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC10oua98GoC9Js8UtoQQ3FtNR3gMB8GA1UdIwQY MBaAFL9b3EEGrd6J4c6cMrgHsgguu5lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMt YmVkYWMxMGFhY2RjLzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMtYmVkYWMxMGFhY2Rj LzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPFIJcYO 5AQ9khWO+oPEWilKwTEw4273jeUTpB5nDlPp4R5ezOgXpEZR/XAfX9WGRgT77XTW YeUM5MV/eAH3hOdCf4UKAjL6oarvhb8jD9yaIrTXnAA/O6Bp+kS455fRopykN4Xe Zop/i32LLKaneYBW62Mkp3ja7JByg6DNroaY8vMgSfDeBUILaZjR0vHqcXt7lqvR wmyKKgnoYh7VqJgnpYGP0ldWLvn2dk7ibEBTVhSxKs9pRuCgBknRKfpT1Gxx34z6 3L81PrN4r2GW8RlcU8o5y8aSK6SuJi+cit+ujtf5N1USAhZklko+5HS0SpCbVCc0 1LCcjY86Ekm82g== -----END CERTIFICATE-----Generated at Fri Dec 19 22:55:30 2025 by rpki-client