This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json) Hash identifier: F1LskO4MV0sq1IVS/sJ/uoaLxqW65Ocdlla7yv/Co6I= Subject key identifier: 04:0B:C1:4D:63:E4:0B:9E:22:D3:EB:16:81:92:30:BD:9E:31:A0:A9 Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Certificate serial: 019B4A714A8687A65E4C96FC54628CE9FF29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft Manifest number: 110E Signing time: Tue 23 Dec 2025 09:01:37 +0000 Manifest this update: Tue 23 Dec 2025 09:01:37 +0000 Manifest next update: Wed 24 Dec 2025 09:01:37 +0000 Files and hashes: 1: 8MA87xtZZH4blNN7ljK8ECsUe7c.roa (hash: x/OfLayawCptHxvyhoaHaoE0ADY/ycq4IXhQCadpAd0=) 2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: fwykk6B59RwQ4Jqp9mQH9pa/1m1oyJd7puOgcMRaHrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:4a:86:87:a6:5e:4c:96:fc:54:62:8c:e9:ff:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Validity Not Before: Dec 23 09:01:37 2025 GMT Not After : Dec 24 09:01:37 2025 GMT Subject: CN=040bc14d63e40b9e22d3eb16819230bd9e31a0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:60:f3:7e:67:80:7c:1f:a4:d8:27:1d:13: d7:fe:9e:f7:54:b3:b4:49:67:d9:ca:7a:7c:22:d0: df:4a:31:ae:34:85:aa:25:53:25:0f:9f:b5:00:02: 6c:b9:16:da:0a:b2:dd:33:83:a5:37:05:19:8f:7e: 32:aa:db:98:a0:3c:60:70:28:c4:d9:3f:40:98:89: 0f:c1:85:dc:c9:05:3d:56:dc:0f:97:16:61:f3:71: 50:6f:c9:a4:40:75:3e:a0:df:e0:d6:f6:c7:29:16: df:29:46:b1:9e:cd:05:73:6f:c1:f6:b9:3e:32:1c: e3:eb:fa:ee:ee:94:31:3d:e3:8d:f5:36:5a:b6:74: 28:c6:92:77:f4:16:0a:43:fc:f9:90:e0:07:02:99: ac:2f:5a:0c:78:b9:fe:93:1a:82:30:47:b3:81:6a: 8a:b0:2f:55:5a:e3:ce:1c:6c:01:69:4e:29:ea:3d: 91:ea:1b:cd:c0:7b:fa:ab:f0:1a:7a:61:38:77:89: 36:8f:18:97:57:eb:bb:cf:c8:06:11:2f:29:ce:2c: 25:af:3f:1b:db:c4:0a:35:55:fa:65:89:ee:2a:d6: 48:d7:1c:23:16:89:0e:3c:97:f1:6e:72:05:e8:09: a2:0d:9d:f4:73:96:d1:78:0e:d0:ac:67:71:33:48: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0B:C1:4D:63:E4:0B:9E:22:D3:EB:16:81:92:30:BD:9E:31:A0:A9 X509v3 Authority Key Identifier: keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:58:49:d2:ca:6e:4b:b9:2d:bf:99:da:2f:32:08:ff:8e: 52:00:3e:d2:64:99:7c:17:88:be:00:62:09:56:44:43:ad:12: 77:ea:ef:cf:1f:44:29:08:36:42:cf:c6:e7:a5:ad:15:3f:f0: f4:b8:91:da:ae:48:10:f6:91:22:cd:17:c3:66:08:24:e2:a0: 8f:84:09:b5:40:11:1d:b4:b8:68:83:c7:f7:94:5b:52:f7:bf: 8b:51:ea:3e:94:5f:fc:80:e2:09:d9:94:a3:04:ec:b2:9e:2e: 1c:71:fc:9c:df:4c:63:91:a3:06:41:0e:b9:bf:07:17:69:92: 30:8c:7f:30:36:f7:7a:6c:9d:b4:70:5f:92:04:73:0d:6a:ec: 8d:b0:28:e9:56:a9:d1:e6:ae:c1:45:06:1e:d5:ea:d3:fb:06: d2:ea:a6:a2:30:08:e0:8b:52:88:f4:7e:6f:ce:86:74:9f:48: 7a:dc:0e:40:b9:0b:7b:fc:3c:fe:7c:4d:7f:cf:9a:0c:79:50: 0e:d6:5a:d5:1a:60:58:96:15:8b:8e:66:bb:f3:f0:6f:8c:db: 1d:ce:b6:5b:09:5f:40:1f:eb:88:86:fb:3e:5d:ab:8d:ca:ea: 4c:b3:1a:da:94:c4:e7:2d:5f:0d:02:bd:9b:6a:98:e4:9b:4f: 2e:5a:e4:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcUqGh6ZeTJb8VGKM6f8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5 ZTU1Y2EwHhcNMjUxMjIzMDkwMTM3WhcNMjUxMjI0MDkwMTM3WjAzMTEwLwYDVQQD EygwNDBiYzE0ZDYzZTQwYjllMjJkM2ViMTY4MTkyMzBiZDllMzFhMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C9g835ngHwfpNgnHRPX/p73VLO0 SWfZynp8ItDfSjGuNIWqJVMlD5+1AAJsuRbaCrLdM4OlNwUZj34yqtuYoDxgcCjE 2T9AmIkPwYXcyQU9VtwPlxZh83FQb8mkQHU+oN/g1vbHKRbfKUaxns0Fc2/B9rk+ Mhzj6/ru7pQxPeON9TZatnQoxpJ39BYKQ/z5kOAHApmsL1oMeLn+kxqCMEezgWqK sC9VWuPOHGwBaU4p6j2R6hvNwHv6q/AaemE4d4k2jxiXV+u7z8gGES8pziwlrz8b 28QKNVX6ZYnuKtZI1xwjFokOPJfxbnIF6AmiDZ30c5bReA7QrGdxM0j8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQLwU1j5AueItPrFoGSML2eMaCpMB8GA1UdIwQY MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt NjBlN2U0NTM5OWU2LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2 LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAectYSdLK bku5Lb+Z2i8yCP+OUgA+0mSZfBeIvgBiCVZEQ60Sd+rvzx9EKQg2Qs/G56WtFT/w 9LiR2q5IEPaRIs0Xw2YIJOKgj4QJtUARHbS4aIPH95RbUve/i1HqPpRf/IDiCdmU owTssp4uHHH8nN9MY5GjBkEOub8HF2mSMIx/MDb3emydtHBfkgRzDWrsjbAo6Vap 0eauwUUGHtXq0/sG0uqmojAI4ItSiPR+b86GdJ9IetwOQLkLe/w8/nxNf8+aDHlQ DtZa1RpgWJYVi45mu/Pwb4zbHc62WwlfQB/riIb7Pl2rjcrqTLMa2pTE5y1fDQK9 m2qY5JtPLlrkcw== -----END CERTIFICATE-----Generated at Tue Dec 23 14:40:20 2025 by rpki-client