This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json) Hash identifier: uXoIsvDNrp2Jklif7qvK2gHXOUq/UpYZRrVVnkpBFPY= Subject key identifier: 2F:0B:CD:41:3F:32:40:78:BC:1D:61:93:16:2B:A4:5E:78:66:4D:75 Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Certificate serial: 019B0C3717503D8D34B638502C2258054EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 07:01:35 +0000 Manifest this update: Thu 11 Dec 2025 07:01:35 +0000 Manifest next update: Fri 12 Dec 2025 07:01:35 +0000 Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=) 2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: LWiMN4H+UhP5rK8F1iWwJSb51/NXlCj0YW/PuOrlaFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:37:17:50:3d:8d:34:b6:38:50:2c:22:58:05:4e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Validity Not Before: Dec 11 07:01:35 2025 GMT Not After : Dec 12 07:01:35 2025 GMT Subject: CN=2f0bcd413f324078bc1d6193162ba45e78664d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:60:33:54:0d:8e:42:fc:45:b3:8d:ea:5d: db:8d:be:f9:91:03:11:bd:c8:c4:4e:d7:2b:9a:e5: 7b:f9:be:4e:74:86:2f:cc:95:43:1d:5f:b9:0d:c8: f6:19:4b:7c:8f:50:9f:96:67:7a:66:88:38:bc:8a: 68:62:02:80:f1:1d:85:38:d1:37:77:86:dc:68:5a: 90:76:03:81:4e:e9:9e:02:94:85:18:fb:b2:d7:ef: 9e:13:33:a1:c3:e7:60:89:2a:9d:f0:d8:59:f2:b6: a8:f7:b7:67:01:ab:75:03:1b:5e:86:8c:fe:e0:18: df:79:4f:a8:91:f3:f1:06:a6:af:3a:ce:fe:0a:4b: 02:40:6c:40:6a:8e:d6:69:fb:fc:27:81:75:a7:07: aa:0d:3c:db:47:b7:f4:77:ed:b6:35:e4:f5:cd:81: 20:88:03:ff:6c:ca:e9:c9:03:95:89:88:53:93:b9: 28:f8:60:8e:ef:cc:8a:53:34:14:a6:0a:40:04:e7: 45:f1:bf:05:46:bb:29:ce:36:af:82:d4:7a:69:44: 5c:80:cc:39:4f:8f:28:9a:cb:f3:cb:1b:90:c1:a4: a7:c1:54:30:2e:07:f3:1d:80:4a:4d:0a:72:26:6e: a3:c7:e5:b2:fa:ae:3f:1e:31:a4:35:9c:b0:ae:7a: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:CD:41:3F:32:40:78:BC:1D:61:93:16:2B:A4:5E:78:66:4D:75 X509v3 Authority Key Identifier: keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d7:1f:76:14:d0:1f:df:12:68:a1:47:d9:75:b1:2f:b5:75: 59:58:f5:e7:5e:c9:a4:1b:56:90:71:58:d1:3e:50:02:03:e8: e9:79:bd:70:c8:3a:5d:18:ec:a6:38:2a:14:26:e6:20:bc:af: cb:44:bd:48:ed:b9:7d:b2:12:ee:42:73:d2:68:92:12:47:07: 1d:4f:a8:79:55:5e:cc:25:81:89:6c:cb:05:59:eb:9d:6c:11: 0b:02:1b:a2:e4:e1:b5:b8:2a:64:aa:8f:d2:63:09:f6:c2:7c: 7f:c4:52:5b:a7:2b:9e:d2:7f:cb:ca:27:60:e6:4f:ec:25:63: d3:42:b1:5c:19:dd:da:0c:ed:3a:48:5f:4e:1c:fe:6e:64:ca: cd:e8:ab:c2:c1:4c:eb:65:97:f3:84:5a:9c:11:ca:3d:c1:a3: 40:fb:31:07:34:81:66:ac:c8:79:fa:97:77:93:89:35:74:5f: b9:a3:30:be:21:f6:7f:65:21:c4:a2:f6:eb:46:04:2e:73:9f: 7e:2a:a3:28:8a:6b:ca:3e:02:20:09:49:81:18:11:62:84:35: d0:e4:21:ae:10:2a:c1:02:b2:15:5c:c7:84:eb:5f:8f:df:92: db:ca:30:99:35:97:9b:00:fc:49:ec:04:17:46:1f:ae:a3:a3: 8e:a4:3f:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMNxdQPY00tjhQLCJYBU7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZWM4YzczMmFhNDNlZjBiMzliZDM0ZDE0MGZkZDNhNzNh ZWRiNzkwHhcNMjUxMjExMDcwMTM1WhcNMjUxMjEyMDcwMTM1WjAzMTEwLwYDVQQD EygyZjBiY2Q0MTNmMzI0MDc4YmMxZDYxOTMxNjJiYTQ1ZTc4NjY0ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yVgM1QNjkL8RbON6l3bjb75kQMR vcjETtcrmuV7+b5OdIYvzJVDHV+5Dcj2GUt8j1Cflmd6Zog4vIpoYgKA8R2FONE3 d4bcaFqQdgOBTumeApSFGPuy1++eEzOhw+dgiSqd8NhZ8rao97dnAat1Axtehoz+ 4BjfeU+okfPxBqavOs7+CksCQGxAao7Wafv8J4F1pweqDTzbR7f0d+22NeT1zYEg iAP/bMrpyQOViYhTk7ko+GCO78yKUzQUpgpABOdF8b8FRrspzjavgtR6aURcgMw5 T48omsvzyxuQwaSnwVQwLgfzHYBKTQpyJm6jx+Wy+q4/HjGkNZywrnrJfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8LzUE/MkB4vB1hkxYrpF54Zk11MB8GA1UdIwQY MBaAFLzsjHMqpD7ws5vTTRQP3Tpzrtt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYt YzQwYzBkYmUxZGUwLzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYtYzQwYzBkYmUxZGUw LzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9cfdhTQ H98SaKFH2XWxL7V1WVj1517JpBtWkHFY0T5QAgPo6Xm9cMg6XRjspjgqFCbmILyv y0S9SO25fbIS7kJz0miSEkcHHU+oeVVezCWBiWzLBVnrnWwRCwIbouThtbgqZKqP 0mMJ9sJ8f8RSW6crntJ/y8onYOZP7CVj00KxXBnd2gztOkhfThz+bmTKzeirwsFM 62WX84RanBHKPcGjQPsxBzSBZqzIefqXd5OJNXRfuaMwviH2f2UhxKL260YELnOf fiqjKIpryj4CIAlJgRgRYoQ10OQhrhAqwQKyFVzHhOtfj9+S28owmTWXmwD8SewE F0YfrqOjjqQ/Mw== -----END CERTIFICATE-----Generated at Thu Dec 11 17:50:40 2025 by rpki-client