This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft File: v_1vzVFt27AQL1sDI6JsDtf2jCI.mft (raw, json) Hash identifier: 2vxrtF8Q5vrvYYtBEZ98NttV4efj5TE94lvbiEmOA3Y= Subject key identifier: F4:C2:31:5D:A6:7C:96:DB:89:38:2F:2E:18:1D:87:F2:17:27:C1:4D Authority key identifier: BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22 Certificate issuer: /CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22 Certificate serial: 019B19BAD690FC5A003C051BED6F20E3C47E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft Manifest number: 1772 Signing time: Sat 13 Dec 2025 22:00:33 +0000 Manifest this update: Sat 13 Dec 2025 22:00:33 +0000 Manifest next update: Sun 14 Dec 2025 22:00:33 +0000 Files and hashes: 1: v_1vzVFt27AQL1sDI6JsDtf2jCI.crl (hash: XhzIVVRKtf9r/FX+Qm9ioSQSd7XSGoNIFduyTOiWerE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:d6:90:fc:5a:00:3c:05:1b:ed:6f:20:e3:c4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22 Validity Not Before: Dec 13 22:00:33 2025 GMT Not After : Dec 14 22:00:33 2025 GMT Subject: CN=f4c2315da67c96db89382f2e181d87f21727c14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:9c:82:39:47:7a:91:ee:d1:1b:6c:25:d5: e4:e2:ca:52:c1:9c:d1:05:15:cf:71:80:7b:a9:9b: 0c:e8:67:99:ad:61:72:ee:f0:0c:df:8a:5a:b1:c8: 83:69:73:c1:a8:d9:72:e0:37:da:8c:d2:9b:46:75: b3:ea:91:be:f0:18:33:7f:71:30:0d:d4:83:cf:8d: 46:b3:6b:04:d8:62:bf:07:20:7a:9a:3c:67:28:7a: 34:34:4b:13:99:07:6f:51:02:25:a7:7e:6c:95:dd: 5e:60:db:65:44:2a:b7:f9:a6:5e:38:2f:30:4e:84: 4a:2d:86:4e:77:af:ab:d4:56:50:2d:9e:b3:c5:d6: 85:85:73:00:18:d6:35:eb:2f:97:80:62:1b:01:ec: 31:52:42:ca:bb:6e:1b:6f:8e:d7:52:20:37:2e:c7: 68:dd:cb:43:79:11:a0:4a:73:46:e2:cf:53:ea:63: 0c:23:45:b2:64:b2:dd:e3:a1:1d:98:29:30:6a:f9: 5b:94:21:06:10:ad:fe:11:df:2a:dc:4a:38:6d:39: 3d:91:be:f7:7e:72:aa:0e:8e:01:3d:49:9b:b5:b0: 13:18:e8:24:13:6c:98:84:c9:54:b3:4c:2d:c5:62: d9:25:65:4d:8b:95:c0:b7:6b:86:05:b9:2b:5a:b1: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C2:31:5D:A6:7C:96:DB:89:38:2F:2E:18:1D:87:F2:17:27:C1:4D X509v3 Authority Key Identifier: keyid:BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:30:77:8a:fc:fb:67:db:73:de:5e:d8:d3:ee:55:15:4e:95: 27:7a:20:4e:5b:f9:7f:c7:b7:03:5a:9c:be:d1:6c:10:48:e1: 29:de:12:ce:66:b2:bb:ec:ee:3f:cd:e3:7d:73:f6:71:53:a7: 2a:07:ab:fa:ce:6a:88:f2:d1:1a:fb:0d:b3:48:21:61:35:96: 4a:03:68:71:ee:dc:fa:55:26:4d:c8:b4:19:c0:d9:91:78:5c: 03:99:5a:4a:b0:9d:38:f3:7f:d5:b0:7a:30:03:82:55:2d:02: 21:bd:f5:0c:7d:1e:bc:5b:15:b2:9d:2c:26:e8:1e:4d:cf:9c: 2a:02:c0:f7:8d:97:8e:80:17:ad:3c:a6:ac:fc:18:7a:f6:84: ae:54:45:df:33:39:0e:2d:fe:7f:f8:a1:2d:f4:af:d8:c3:5a: fa:d0:92:11:a1:fc:b3:f0:6a:fd:8e:d9:32:dd:d0:73:d0:67: 40:83:2b:63:e7:11:b0:63:0b:7e:0f:e5:94:6d:76:05:e3:e1: 23:f5:74:47:ab:eb:71:3b:4b:05:87:d1:2b:9f:8e:96:03:6b: e0:1a:b7:3e:97:99:a8:82:b9:ec:1b:d0:2d:be:60:53:50:ea: 0c:7a:18:ba:8f:fe:a8:d3:0c:51:9b:b3:4b:6f:e0:52:57:05: 55:5e:80:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZutaQ/FoAPAUb7W8g48R+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZmQ2ZmNkNTE2ZGRiYjAxMDJmNWIwMzIzYTI2YzBlZDdm NjhjMjIwHhcNMjUxMjEzMjIwMDMzWhcNMjUxMjE0MjIwMDMzWjAzMTEwLwYDVQQD EyhmNGMyMzE1ZGE2N2M5NmRiODkzODJmMmUxODFkODdmMjE3MjdjMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDycgjlHepHu0RtsJdXk4spSwZzR BRXPcYB7qZsM6GeZrWFy7vAM34pasciDaXPBqNly4DfajNKbRnWz6pG+8Bgzf3Ew DdSDz41Gs2sE2GK/ByB6mjxnKHo0NEsTmQdvUQIlp35sld1eYNtlRCq3+aZeOC8w ToRKLYZOd6+r1FZQLZ6zxdaFhXMAGNY16y+XgGIbAewxUkLKu24bb47XUiA3Lsdo 3ctDeRGgSnNG4s9T6mMMI0WyZLLd46EdmCkwavlblCEGEK3+Ed8q3Eo4bTk9kb73 fnKqDo4BPUmbtbATGOgkE2yYhMlUs0wtxWLZJWVNi5XAt2uGBbkrWrGVHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTCMV2mfJbbiTgvLhgdh/IXJ8FNMB8GA1UdIwQY MBaAFL/9b81RbduwEC9bAyOibA7X9owiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl8xdnpWRnQyN0FRTDFzREk2SnNEdGYyakNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lOWUwZGUtZGYxYS00MzA2LTg3YzAt OGFiZjFjYjlkNmNiLzEvdl8xdnpWRnQyN0FRTDFzREk2SnNEdGYyakNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lOWUwZGUtZGYxYS00MzA2LTg3YzAtOGFiZjFjYjlkNmNi LzEvdl8xdnpWRnQyN0FRTDFzREk2SnNEdGYyakNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTB3ivz7 Z9tz3l7Y0+5VFU6VJ3ogTlv5f8e3A1qcvtFsEEjhKd4Szmayu+zuP83jfXP2cVOn Kger+s5qiPLRGvsNs0ghYTWWSgNoce7c+lUmTci0GcDZkXhcA5laSrCdOPN/1bB6 MAOCVS0CIb31DH0evFsVsp0sJugeTc+cKgLA942XjoAXrTymrPwYevaErlRF3zM5 Di3+f/ihLfSv2MNa+tCSEaH8s/Bq/Y7ZMt3Qc9BnQIMrY+cRsGMLfg/llG12BePh I/V0R6vrcTtLBYfRK5+OlgNr4Bq3PpeZqIK57BvQLb5gU1DqDHoYuo/+qNMMUZuz S2/gUlcFVV6AJQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:41:16 2025 by rpki-client