This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json) Hash identifier: dwmILtMbDHR9h2LVa1ex/8KECrDbUSgGdpRzHWNRBjw= Subject key identifier: A0:24:46:89:BF:BE:EB:94:6E:9A:CD:53:29:B3:E4:64:91:11:13:F6 Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0 Certificate serial: 019B48F023618F21BDC432232AF1A005D8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft Manifest number: 1171 Signing time: Tue 23 Dec 2025 02:00:55 +0000 Manifest this update: Tue 23 Dec 2025 02:00:55 +0000 Manifest next update: Wed 24 Dec 2025 02:00:55 +0000 Files and hashes: 1: K7bdbq2NQi5Og3pBR0VNiKqzF3o.roa (hash: Y5TCg/QVPxm4ctwH0Vu0TBEdMj0uZUrfAJN0ICvLjOc=) 2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: zWaCJ4L6P8XpARu9GhyKfm8NxZm9TWaGW5Svlm3DM64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:23:61:8f:21:bd:c4:32:23:2a:f1:a0:05:d8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0 Validity Not Before: Dec 23 02:00:55 2025 GMT Not After : Dec 24 02:00:55 2025 GMT Subject: CN=a0244689bfbeeb946e9acd5329b3e464911113f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:b5:fb:e1:54:b5:5e:2a:b9:a1:bc:60:23: 7e:bb:56:06:17:c4:f2:ed:76:46:f0:8e:64:6c:df: 56:20:d5:27:c4:e5:83:3d:d3:9e:a0:07:7d:73:00: 69:55:2c:ad:b9:b9:34:dd:fd:16:94:3a:26:c7:3f: e5:51:cf:6d:a7:d6:f0:6f:30:4a:07:20:5a:12:b7: 49:6b:c7:d0:43:83:01:b8:c4:c8:e1:58:48:16:69: 59:0e:a8:87:15:63:dd:d1:0e:74:ed:d7:60:b7:72: d7:4c:9c:87:94:0e:fa:d1:4c:66:df:9e:d6:d6:1a: 34:81:dd:59:e3:6b:c5:30:d4:ae:4b:13:86:11:b2: c8:d8:d0:52:c8:bf:fa:e3:69:f7:51:c2:03:eb:2d: 4a:f7:11:78:43:3c:dd:7c:a2:90:3a:da:e4:18:ce: df:e9:61:af:93:e9:b3:ff:76:7a:8d:94:0f:dd:b7: f7:75:bd:b8:7f:95:12:22:d0:c5:8e:68:8f:2a:46: bc:9f:dd:9c:c3:6e:17:59:b0:c3:f1:0f:f9:9b:4b: e7:93:c3:5f:03:60:41:b9:04:9b:dd:46:2f:93:51: d9:d7:0f:d6:f8:23:1e:1c:56:dc:ed:3d:a2:be:d9: 82:61:a7:2d:95:56:a0:bd:dd:b8:05:cd:a3:a8:bf: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:24:46:89:BF:BE:EB:94:6E:9A:CD:53:29:B3:E4:64:91:11:13:F6 X509v3 Authority Key Identifier: keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:29:75:62:b7:17:b0:f8:d8:02:31:2d:6b:ef:b5:32:0d:c7: 0b:3d:96:2a:8b:40:bf:84:1d:27:b3:70:44:57:eb:91:21:67: 62:54:19:96:cd:89:f8:d6:e1:d5:23:0c:40:2f:46:f6:42:42: d3:a8:b7:b9:be:66:b1:0a:ed:18:1f:05:f8:f8:d2:df:7d:57: 63:c8:8e:91:d4:b2:b7:72:9f:71:1a:ef:f4:9e:b0:3b:a6:c0: 13:f5:93:eb:ac:29:45:7c:2d:06:e1:cd:12:50:ae:b7:80:78: 03:d3:eb:94:9d:a5:bb:c4:21:b7:2c:3c:f8:e4:a2:b5:52:d0: 77:07:24:72:cf:8f:96:61:16:62:da:24:95:79:aa:c1:02:9c: 03:01:61:9e:6b:29:27:f3:d9:b7:d3:6a:49:46:3f:e8:b8:ff: 04:b0:fa:da:97:0c:65:0f:4c:93:63:d0:88:89:5f:2a:6d:90: f0:9e:36:47:39:cd:3f:27:c6:7c:df:dd:63:3f:12:ed:83:17: 26:a4:d3:32:2e:4a:fa:f2:5c:51:6c:99:21:c8:ca:c2:42:dd: df:8f:ff:6b:17:ae:3b:2b:e4:ac:de:e9:65:d9:50:fb:a0:d0: 01:14:ed:d0:a3:9f:68:97:83:12:00:fd:57:31:b2:6d:57:6f: eb:b3:71:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8CNhjyG9xDIjKvGgBdi6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMThlMmQ5ZjUwOWM5ZDNiNDU1MTEyYWEyODhkMzM2MTg1 ODAxYTAwHhcNMjUxMjIzMDIwMDU1WhcNMjUxMjI0MDIwMDU1WjAzMTEwLwYDVQQD EyhhMDI0NDY4OWJmYmVlYjk0NmU5YWNkNTMyOWIzZTQ2NDkxMTExM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jy1++FUtV4quaG8YCN+u1YGF8Ty 7XZG8I5kbN9WINUnxOWDPdOeoAd9cwBpVSytubk03f0WlDomxz/lUc9tp9bwbzBK ByBaErdJa8fQQ4MBuMTI4VhIFmlZDqiHFWPd0Q507ddgt3LXTJyHlA760Uxm357W 1ho0gd1Z42vFMNSuSxOGEbLI2NBSyL/642n3UcID6y1K9xF4QzzdfKKQOtrkGM7f 6WGvk+mz/3Z6jZQP3bf3db24f5USItDFjmiPKka8n92cw24XWbDD8Q/5m0vnk8Nf A2BBuQSb3UYvk1HZ1w/W+CMeHFbc7T2ivtmCYactlVagvd24Bc2jqL8/GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAkRom/vuuUbprNUymz5GSRERP2MB8GA1UdIwQY MBaAFL4Y4tn1CcnTtFURKqKI0zYYWAGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYt MmNhMGU1YzEwNGZkLzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYtMmNhMGU1YzEwNGZk LzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyl1YrcX sPjYAjEta++1Mg3HCz2WKotAv4QdJ7NwRFfrkSFnYlQZls2J+Nbh1SMMQC9G9kJC 06i3ub5msQrtGB8F+PjS331XY8iOkdSyt3KfcRrv9J6wO6bAE/WT66wpRXwtBuHN ElCut4B4A9PrlJ2lu8Qhtyw8+OSitVLQdwckcs+PlmEWYtoklXmqwQKcAwFhnmsp J/PZt9NqSUY/6Lj/BLD62pcMZQ9Mk2PQiIlfKm2Q8J42RznNPyfGfN/dYz8S7YMX JqTTMi5K+vJcUWyZIcjKwkLd34//axeuOyvkrN7pZdlQ+6DQARTt0KOfaJeDEgD9 VzGybVdv67NxEA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:50:37 2025 by rpki-client