This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json) Hash identifier: o1oQVsJhjUfbmAFoSGSAPu1bjr9/TuUtLjC3f12Kc9E= Subject key identifier: E4:6B:5C:CD:4E:9F:41:A7:71:B3:26:00:FA:2D:52:06:24:AA:96:E8 Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b Certificate serial: 019AFAD6C58D13569948E6C043AE15AC38BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft Manifest number: 40 Signing time: Sun 07 Dec 2025 22:02:50 +0000 Manifest this update: Sun 07 Dec 2025 22:02:50 +0000 Manifest next update: Mon 08 Dec 2025 22:02:50 +0000 Files and hashes: 1: 4_S-VpcaJ-dsPDdYImdSZM32e8U.roa (hash: 1hjmdXa5Q0sUuajrWvcZ3QxX+b+38dKLCgIK//YJGng=) 2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: Rg0q9nkxU4WnSliolX8PeAnyDo0ZEPStsdzYH3r72Lk=) 3: vliKZaSIov7ra7oMtOXo3pmSa_0.roa (hash: AlmCVWWv9Xl539mX2jpyekktTbSaEDqWKWKYo9HGa3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 22:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d6:c5:8d:13:56:99:48:e6:c0:43:ae:15:ac:38:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b Validity Not Before: Dec 7 22:02:50 2025 GMT Not After : Dec 8 22:02:50 2025 GMT Subject: CN=e46b5ccd4e9f41a771b32600fa2d520624aa96e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:31:d6:c3:b1:0b:5d:85:f7:66:62:8b:c9: 27:dd:d5:81:39:5a:26:9a:f4:f5:bc:f4:a3:d9:69: dd:9c:cd:6e:92:a3:1d:ba:d3:b5:2e:08:de:ae:be: 7e:79:13:60:26:53:e5:ec:54:58:28:75:35:9e:34: f4:05:50:25:2b:74:31:e2:de:21:08:2d:d0:53:bc: 5a:c5:65:a9:6e:09:d0:7e:2e:0e:c6:be:2b:91:f9: 0d:2b:36:5a:31:ef:7d:ed:77:48:28:79:a3:52:47: 60:68:2f:01:0b:91:8e:c5:aa:0c:39:81:a2:be:af: 4c:8e:95:12:1f:d2:b1:90:ca:44:03:43:e1:a1:99: 3b:c9:2c:8e:c9:61:69:70:fc:95:30:12:39:b3:2a: 8f:61:45:45:be:5d:e3:73:07:20:ac:75:45:15:22: 72:ab:74:89:86:5a:18:77:c7:32:c8:8d:a6:a8:ae: cb:db:5c:36:a9:e9:e2:d8:c1:cf:ee:4b:07:84:2e: d2:99:5d:24:02:a3:42:e9:b7:40:a3:f6:5f:87:c9: 0e:cc:57:49:0e:7a:55:07:bf:4e:46:18:9b:61:73: ce:ec:7e:c9:9b:bc:87:27:ae:2f:ec:93:91:cc:d8: 29:38:87:af:9f:72:b4:07:c2:21:8c:91:41:32:52: 95:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:5C:CD:4E:9F:41:A7:71:B3:26:00:FA:2D:52:06:24:AA:96:E8 X509v3 Authority Key Identifier: keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:dc:57:f3:5b:fb:94:0d:28:49:c3:84:0f:69:21:6f:fe: fb:40:f5:b5:df:a8:b8:ce:c3:31:2a:ec:95:65:fa:d0:0a:2b: 83:41:74:8e:b9:18:95:c4:b1:5d:3b:78:d9:73:3c:d7:4e:77: 21:a7:dd:6d:ea:28:50:98:5c:ce:f3:69:9a:bc:72:27:5c:a6: 1e:9a:3b:e8:96:df:b4:4f:20:5b:84:cf:b1:a1:67:3a:1b:27: 08:5c:5a:73:1b:ce:80:e5:6a:4f:fc:86:4c:1c:f7:af:c0:c7: bb:57:c2:57:f9:91:98:50:28:c8:1d:dc:ac:f8:d2:cd:b7:17: 59:72:c6:66:5c:13:55:0c:05:36:18:04:4d:44:02:f0:da:00: 44:c1:eb:1e:6b:65:73:7a:93:f1:5a:97:24:7d:74:eb:9e:ec: 93:7e:d7:25:c4:aa:05:e6:05:66:8c:f1:d1:c1:a9:c7:da:d2: cf:f9:8e:15:5a:f6:25:23:be:ef:59:bd:dc:b6:ab:fb:3e:61: 2c:f1:1d:8c:27:2a:ba:16:71:74:e7:be:6b:44:95:95:b8:7c: d4:83:54:d8:0d:b0:f7:83:82:52:fa:ea:f0:4b:cf:73:06:cb: 31:ae:66:3b:6b:fc:50:fb:11:56:ab:fc:6a:9a:60:53:ef:d3: d9:a9:31:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61sWNE1aZSObAQ64VrDi6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy MGMzNWIwHhcNMjUxMjA3MjIwMjUwWhcNMjUxMjA4MjIwMjUwWjAzMTEwLwYDVQQD EyhlNDZiNWNjZDRlOWY0MWE3NzFiMzI2MDBmYTJkNTIwNjI0YWE5NmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluQx1sOxC12F92Zii8kn3dWBOVom mvT1vPSj2WndnM1ukqMdutO1Lgjerr5+eRNgJlPl7FRYKHU1njT0BVAlK3Qx4t4h CC3QU7xaxWWpbgnQfi4Oxr4rkfkNKzZaMe997XdIKHmjUkdgaC8BC5GOxaoMOYGi vq9MjpUSH9KxkMpEA0PhoZk7ySyOyWFpcPyVMBI5syqPYUVFvl3jcwcgrHVFFSJy q3SJhloYd8cyyI2mqK7L21w2qeni2MHP7ksHhC7SmV0kAqNC6bdAo/Zfh8kOzFdJ DnpVB79ORhibYXPO7H7Jm7yHJ64v7JORzNgpOIevn3K0B8IhjJFBMlKVYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORrXM1On0GncbMmAPotUgYkqpboMB8GA1UdIwQY MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct MDY5NjA2NDQxNTE0LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0 LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBHcV/Nb +5QNKEnDhA9pIW/++0D1td+ouM7DMSrslWX60Aorg0F0jrkYlcSxXTt42XM81053 IafdbeooUJhczvNpmrxyJ1ymHpo76JbftE8gW4TPsaFnOhsnCFxacxvOgOVqT/yG TBz3r8DHu1fCV/mRmFAoyB3crPjSzbcXWXLGZlwTVQwFNhgETUQC8NoARMHrHmtl c3qT8VqXJH10657sk37XJcSqBeYFZozx0cGpx9rSz/mOFVr2JSO+71m93Lar+z5h LPEdjCcquhZxdOe+a0SVlbh81INU2A2w94OCUvrq8EvPcwbLMa5mO2v8UPsRVqv8 appgU+/T2akxkg== -----END CERTIFICATE-----Generated at Mon Dec 8 06:17:48 2025 by rpki-client