This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json) Hash identifier: WXy9iDq7Ce5la3AFxnnzetcxuNK+88GiemuXhp5BPMU= Subject key identifier: F2:82:ED:89:1A:2F:0A:EC:64:A5:5C:33:C8:CC:C1:5A:A8:C0:18:90 Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Certificate serial: 019B35D786777F47BC459D8934062EB7D73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft Manifest number: 0A4F Signing time: Fri 19 Dec 2025 09:01:15 +0000 Manifest this update: Fri 19 Dec 2025 09:01:15 +0000 Manifest next update: Sat 20 Dec 2025 09:01:15 +0000 Files and hashes: 1: sxWKrzqIBBqkeo4-v2Jw2EzqS3k.roa (hash: DWZadMWJyiM8F0IG02kO3n/vWw1f6vECk5IkRqLr9qY=) 2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: iw4mLek8HK/HpAFVIU7B+Y/H1ut+YyJSEr3XR7FAzjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:86:77:7f:47:bc:45:9d:89:34:06:2e:b7:d7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Validity Not Before: Dec 19 09:01:15 2025 GMT Not After : Dec 20 09:01:15 2025 GMT Subject: CN=f282ed891a2f0aec64a55c33c8ccc15aa8c01890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:d9:3d:b3:d5:a5:41:41:80:1d:29:03:ed: bd:90:b4:08:6f:5b:68:60:fc:05:6a:fb:a4:24:dd: 90:6e:ad:c3:3c:98:7f:98:01:7c:26:ce:8f:7e:67: 3b:d0:7b:83:d3:3f:d2:02:9d:50:9f:8e:9b:ed:5c: 4e:de:1f:c0:27:5c:93:9b:41:c1:f1:08:15:1e:fa: d3:a1:81:61:67:b9:09:13:42:c0:fc:d4:4d:60:6b: b4:27:5b:31:f2:62:c0:dd:6a:da:a9:dd:02:6e:62: 49:7d:8a:a6:15:9f:7c:d7:d1:5b:2b:8b:91:08:69: 75:2e:51:dc:71:9d:e9:50:2d:c1:76:8a:44:c6:b2: 0f:65:4c:d1:36:9f:d8:b7:df:05:1e:9a:1c:99:0b: ff:12:c5:97:a7:40:55:ca:29:c2:1e:9f:0c:54:8f: 5c:fb:b7:a3:67:84:b5:78:5f:93:95:1d:1c:e2:fe: 8b:71:a1:40:b0:97:d9:ae:ea:c5:07:b8:a3:03:50: 4e:01:d3:c9:ce:a3:82:31:c9:cc:35:ef:7f:45:7a: d1:bc:f1:46:6b:11:82:94:e0:0b:69:68:e2:dd:25: df:29:09:be:87:df:7c:74:82:10:07:e4:ad:ce:2a: 45:93:41:bc:7d:b2:4d:bf:6b:1d:1e:1f:c1:c7:3a: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:82:ED:89:1A:2F:0A:EC:64:A5:5C:33:C8:CC:C1:5A:A8:C0:18:90 X509v3 Authority Key Identifier: keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:df:f0:10:21:46:b2:db:55:61:5a:69:a0:88:aa:49:27:a5: 02:d1:27:44:07:f6:58:ec:1a:9e:e9:06:be:d9:f4:f6:d5:5d: ff:61:79:10:cd:b3:43:f1:92:bb:0c:31:d2:38:49:fe:8e:a3: 35:7e:16:f1:fd:ae:f5:5b:b0:d9:a3:a9:43:f8:79:d8:87:a3: 09:b5:9c:6a:a9:54:7e:24:f4:39:3f:e8:89:5a:38:1d:c3:92: 44:0b:bc:97:d4:b1:c1:e3:b5:61:6a:e9:72:fc:3a:41:ca:45: 1e:3e:9e:e5:45:7f:5e:49:09:b6:f0:5f:eb:f3:fc:0a:18:b0: f8:8a:f0:4c:58:d8:00:1e:8b:ab:f2:75:e7:ab:71:06:76:55: da:8e:3b:70:66:f9:83:f1:f1:f9:39:08:06:33:73:f1:f7:12: 90:45:3a:3a:01:2c:24:ad:96:c9:19:86:48:4a:c3:d3:09:71: 00:fb:25:d3:74:b2:3b:0d:61:37:af:aa:72:f0:f8:25:cd:62: f4:60:2a:3a:15:dd:cb:b5:74:26:0d:ea:c4:11:85:bb:5c:fa: 8c:da:87:37:c8:08:a4:8d:2a:00:b1:3c:f7:95:9a:50:89:8b: 56:bb:6e:11:01:f6:d6:cd:e2:bd:ca:51:a8:7f:cb:e1:32:eb: 04:a0:99:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114Z3f0e8RZ2JNAYut9c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGFkMjFhMGE2OWRjMDQxYzRlMTc3MGViMThiYTQzYjZk YjI5Y2UwHhcNMjUxMjE5MDkwMTE1WhcNMjUxMjIwMDkwMTE1WjAzMTEwLwYDVQQD EyhmMjgyZWQ4OTFhMmYwYWVjNjRhNTVjMzNjOGNjYzE1YWE4YzAxODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5zZPbPVpUFBgB0pA+29kLQIb1to YPwFavukJN2Qbq3DPJh/mAF8Js6Pfmc70HuD0z/SAp1Qn46b7VxO3h/AJ1yTm0HB 8QgVHvrToYFhZ7kJE0LA/NRNYGu0J1sx8mLA3Wraqd0CbmJJfYqmFZ9819FbK4uR CGl1LlHccZ3pUC3BdopExrIPZUzRNp/Yt98FHpocmQv/EsWXp0BVyinCHp8MVI9c +7ejZ4S1eF+TlR0c4v6LcaFAsJfZrurFB7ijA1BOAdPJzqOCMcnMNe9/RXrRvPFG axGClOALaWji3SXfKQm+h998dIIQB+StzipFk0G8fbJNv2sdHh/BxzqA8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKC7YkaLwrsZKVcM8jMwVqowBiQMB8GA1UdIwQY MBaAFL1K0hoKadwEHE4XcOsYukO22ynOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEt Y2RkNGQ4ZjhkMGQ5LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEtY2RkNGQ4ZjhkMGQ5 LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN/wECFG sttVYVppoIiqSSelAtEnRAf2WOwanukGvtn09tVd/2F5EM2zQ/GSuwwx0jhJ/o6j NX4W8f2u9Vuw2aOpQ/h52IejCbWcaqlUfiT0OT/oiVo4HcOSRAu8l9SxweO1YWrp cvw6QcpFHj6e5UV/XkkJtvBf6/P8Chiw+IrwTFjYAB6Lq/J156txBnZV2o47cGb5 g/Hx+TkIBjNz8fcSkEU6OgEsJK2WyRmGSErD0wlxAPsl03SyOw1hN6+qcvD4Jc1i 9GAqOhXdy7V0Jg3qxBGFu1z6jNqHN8gIpI0qALE895WaUImLVrtuEQH21s3ivcpR qH/L4TLrBKCZtQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:39:54 2025 by rpki-client