This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json) Hash identifier: IB7a1kOn/YHIC8oU1NUUFxll64ZrRZoUbyHlejL2lnE= Subject key identifier: E2:5C:CE:81:8F:AE:61:67:E3:A7:9B:62:47:59:E0:82:E0:9F:0A:83 Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa Certificate serial: 019B5A88C081D422C3B10C9F04338ED75410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft Manifest number: 092E Signing time: Fri 26 Dec 2025 12:01:10 +0000 Manifest this update: Fri 26 Dec 2025 12:01:10 +0000 Manifest next update: Sat 27 Dec 2025 12:01:10 +0000 Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=) 2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: sIRuwDeChYVVYPQD4Ugc6yr8vOG++KKc34KAdE1ijbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c0:81:d4:22:c3:b1:0c:9f:04:33:8e:d7:54:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa Validity Not Before: Dec 26 12:01:10 2025 GMT Not After : Dec 27 12:01:10 2025 GMT Subject: CN=e25cce818fae6167e3a79b624759e082e09f0a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:ef:9b:ac:9d:00:61:f3:02:b0:1f:36:1a: 6e:26:4e:a3:46:12:80:31:94:9e:d3:59:07:1d:17: 3d:b7:d1:64:1d:67:29:aa:d7:5a:40:3d:4c:ca:07: 7c:cd:37:a3:a0:81:34:16:fa:51:fa:e4:4e:c9:1f: 85:89:05:32:d6:de:9d:48:9d:ae:2a:11:30:00:30: b3:73:14:94:ce:40:b5:78:a3:7c:2a:28:f8:48:bf: e2:f4:9c:c5:05:b0:57:23:61:a9:3f:fc:4f:6d:f7: 0a:a8:94:f0:3c:b1:25:21:28:9c:8a:a4:a8:d9:f9: d3:ab:b8:4b:43:4f:ee:1a:56:d5:b3:77:f2:d6:0c: 4f:29:a3:d5:ab:f0:6b:56:a8:96:27:b4:6b:c6:d3: d0:68:79:0d:af:48:52:c1:4c:f3:73:a6:19:7b:59: e0:9a:e0:30:13:0c:18:94:ab:c3:6b:e6:30:84:44: 00:81:9f:db:f2:ea:40:5d:81:0a:f5:b9:d4:9b:05: e1:a6:a6:34:17:56:4a:52:bf:83:61:7b:87:9e:5c: fa:b2:e6:4d:66:2b:94:b9:04:58:bc:5e:4b:a4:73: 36:8f:de:2d:cc:95:fa:10:29:0f:5a:ae:8c:63:19: 72:f9:39:44:a4:fc:96:30:7d:39:0c:b9:a3:7d:37: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5C:CE:81:8F:AE:61:67:E3:A7:9B:62:47:59:E0:82:E0:9F:0A:83 X509v3 Authority Key Identifier: keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6a:e4:71:07:b1:93:9b:b4:36:69:af:2b:36:73:a7:8c:fe: 6a:e8:be:52:7b:a9:ff:1f:72:88:f2:10:de:b5:e9:dd:27:93: 1d:d8:e9:a5:c7:9d:80:47:b7:56:50:9b:e2:32:33:0e:38:0a: e8:a6:27:bb:65:21:cd:93:e0:bf:b8:c7:c5:70:d3:b9:fd:1c: a3:76:3d:f5:9b:61:20:2a:7e:52:b2:89:4f:7d:54:49:b6:64: 2d:b9:9c:b0:de:c8:59:f3:e0:e0:7e:48:c7:73:33:f4:45:48: da:a2:f7:c5:c0:e6:b6:cd:c5:a3:c6:ed:76:cb:96:2b:5c:d6: 43:d4:19:00:e0:50:4d:09:c4:10:04:df:87:36:b4:04:84:37: 7a:f2:e3:8c:26:b6:d6:36:58:44:56:8b:de:5a:3e:3e:09:8f: 00:36:9b:c2:1b:2f:5c:14:a3:cc:ce:e0:e4:90:1d:98:6a:52: f1:cc:63:c7:9e:d1:73:29:45:96:16:99:0f:1f:80:2b:19:aa: db:e8:c4:11:63:f6:d8:70:dc:01:37:dc:6a:b0:dd:9a:6b:04: 47:14:1b:54:26:e9:1d:79:25:c7:8f:48:02:a9:1c:48:32:44: 62:12:0a:7b:fa:2f:e8:2d:ae:32:42:0f:41:4e:94:6b:64:b5: 56:59:20:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMCB1CLDsQyfBDOO11QQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh MjQ5YWEwHhcNMjUxMjI2MTIwMTEwWhcNMjUxMjI3MTIwMTEwWjAzMTEwLwYDVQQD EyhlMjVjY2U4MThmYWU2MTY3ZTNhNzliNjI0NzU5ZTA4MmUwOWYwYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH/vm6ydAGHzArAfNhpuJk6jRhKA MZSe01kHHRc9t9FkHWcpqtdaQD1Mygd8zTejoIE0FvpR+uROyR+FiQUy1t6dSJ2u KhEwADCzcxSUzkC1eKN8Kij4SL/i9JzFBbBXI2GpP/xPbfcKqJTwPLElISiciqSo 2fnTq7hLQ0/uGlbVs3fy1gxPKaPVq/BrVqiWJ7RrxtPQaHkNr0hSwUzzc6YZe1ng muAwEwwYlKvDa+YwhEQAgZ/b8upAXYEK9bnUmwXhpqY0F1ZKUr+DYXuHnlz6suZN ZiuUuQRYvF5LpHM2j94tzJX6ECkPWq6MYxly+TlEpPyWMH05DLmjfTdN2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJczoGPrmFn46ebYkdZ4ILgnwqDMB8GA1UdIwQY MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct ZmViMGU1MTVjMDJjLzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmrkcQex k5u0NmmvKzZzp4z+aui+Unup/x9yiPIQ3rXp3SeTHdjppcedgEe3VlCb4jIzDjgK 6KYnu2UhzZPgv7jHxXDTuf0co3Y99ZthICp+UrKJT31USbZkLbmcsN7IWfPg4H5I x3Mz9EVI2qL3xcDmts3Fo8btdsuWK1zWQ9QZAOBQTQnEEATfhza0BIQ3evLjjCa2 1jZYRFaL3lo+PgmPADabwhsvXBSjzM7g5JAdmGpS8cxjx57RcylFlhaZDx+AKxmq 2+jEEWP22HDcATfcarDdmmsERxQbVCbpHXklx49IAqkcSDJEYhIKe/ov6C2uMkIP QU6Ua2S1VlkgZw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:56 2025 by rpki-client