This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft File: vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json) Hash identifier: +h5oI5UDqwRUGei0pjcjGQzp4U/D889fWo46WjSWA/A= Subject key identifier: F2:EB:BA:88:77:1F:21:C8:E3:27:76:E7:ED:56:D1:CA:96:D7:C6:CA Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95 Certificate issuer: /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495 Certificate serial: 019B5977409113EE2F3BA339670508058EB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft Manifest number: 0716 Signing time: Fri 26 Dec 2025 07:02:26 +0000 Manifest this update: Fri 26 Dec 2025 07:02:26 +0000 Manifest next update: Sat 27 Dec 2025 07:02:26 +0000 Files and hashes: 1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: ttpL/kJEfdpReoZ9Gye3VlEWHRLhQ7RnwnrLE9brZVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:40:91:13:ee:2f:3b:a3:39:67:05:08:05:8e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495 Validity Not Before: Dec 26 07:02:26 2025 GMT Not After : Dec 27 07:02:26 2025 GMT Subject: CN=f2ebba88771f21c8e32776e7ed56d1ca96d7c6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:c4:53:19:2c:07:d5:cf:bf:a7:4b:3e:fb: 40:eb:71:0f:28:0a:9f:b5:8a:6c:23:d3:bb:61:8d: 23:13:d5:33:48:11:ca:9c:e2:36:a4:c0:9e:08:f7: b3:3f:40:fc:e6:db:63:d0:97:5e:30:d1:f2:35:45: a5:2b:c5:4b:b1:ca:20:5a:d6:bf:06:38:9d:fd:7f: 1f:8a:d6:5d:08:75:a9:43:33:77:68:da:f7:a5:89: 07:76:fb:11:77:86:a2:f2:ae:89:dc:68:52:45:88: ff:9e:88:df:ea:dd:4f:ea:f1:86:20:6e:62:35:c3: fb:5c:56:af:e7:12:77:b6:85:86:be:52:01:62:02: 56:f5:34:d6:13:44:6d:b7:55:e2:d4:3b:0a:ee:bf: 87:7a:da:d7:1c:49:b9:fa:04:ce:53:9b:42:cf:45: 2f:06:7a:c9:87:4e:26:16:82:f0:f4:36:b4:d7:72: 14:4e:83:5f:21:38:cf:79:fe:4d:13:c7:e0:d0:17: b7:31:7f:b3:63:a1:9a:b1:08:9f:46:8e:af:8c:e7: 63:15:ac:ce:9c:60:e2:04:7a:cf:8b:4b:f1:5e:25: 80:a5:ff:e9:d7:b3:09:e7:cc:85:d5:ce:86:2f:a2: 8d:f2:67:07:c0:71:54:f0:e7:da:ca:34:b8:8c:49: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EB:BA:88:77:1F:21:C8:E3:27:76:E7:ED:56:D1:CA:96:D7:C6:CA X509v3 Authority Key Identifier: keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e1:13:1b:b5:d6:9b:a9:a8:10:39:13:3c:0a:72:16:75:50: bb:fe:9c:a0:6b:8d:e5:15:a5:0c:d4:9e:cd:ac:6b:d6:c0:5f: 51:c5:c1:ad:f6:6f:30:47:44:ff:46:27:ed:98:8c:cb:28:2f: ae:8c:75:e0:74:18:0a:c2:66:f5:f3:90:65:ac:6d:1b:4f:c9: d3:36:80:22:94:6c:38:e5:d9:fc:01:ae:36:2f:61:05:2c:66: 3e:ab:ca:7b:3e:91:91:42:28:56:e7:5a:8b:66:78:5e:9c:b5: ee:06:fa:d7:f2:5a:91:09:7e:70:2a:d8:bd:00:ec:e4:f2:cf: 05:d4:59:a9:bb:67:96:3a:e3:fc:1c:80:47:7a:8b:b9:17:38: c2:99:59:1c:29:c1:e8:d7:af:9d:5e:b8:ba:b4:57:f5:f9:7f: 53:63:07:c6:0d:65:41:ad:8e:db:21:35:c2:f3:4f:18:25:2a: 22:8d:c8:df:a5:b0:e5:a4:28:39:38:15:d9:b0:09:3c:54:b6: f1:47:8c:d4:3e:d7:71:c8:b2:27:c1:64:e4:63:2e:f8:bb:eb: e5:d4:7c:fd:a1:4b:3b:f7:9a:1a:f6:4d:b4:76:02:d3:97:2a: a8:34:77:38:53:a4:7d:b5:f6:96:0d:97:97:61:54:e5:dc:72: f9:c9:08:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0CRE+4vO6M5ZwUIBY6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMmY3NjhjZmUzODRmOWY4Y2Q5MDNjNjg3ZDg2NTJhYzU0 ZTc0OTUwHhcNMjUxMjI2MDcwMjI2WhcNMjUxMjI3MDcwMjI2WjAzMTEwLwYDVQQD EyhmMmViYmE4ODc3MWYyMWM4ZTMyNzc2ZTdlZDU2ZDFjYTk2ZDdjNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEPEUxksB9XPv6dLPvtA63EPKAqf tYpsI9O7YY0jE9UzSBHKnOI2pMCeCPezP0D85ttj0JdeMNHyNUWlK8VLscogWta/ Bjid/X8fitZdCHWpQzN3aNr3pYkHdvsRd4ai8q6J3GhSRYj/nojf6t1P6vGGIG5i NcP7XFav5xJ3toWGvlIBYgJW9TTWE0Rtt1Xi1DsK7r+HetrXHEm5+gTOU5tCz0Uv BnrJh04mFoLw9Da013IUToNfITjPef5NE8fg0Be3MX+zY6GasQifRo6vjOdjFazO nGDiBHrPi0vxXiWApf/p17MJ58yF1c6GL6KN8mcHwHFU8OfayjS4jEkSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLruoh3HyHI4yd25+1W0cqW18bKMB8GA1UdIwQY MBaAFLwvdoz+OE+fjNkDxofYZSrFTnSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDkt ZWNlYjZkNzIyYTE0LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDktZWNlYjZkNzIyYTE0 LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuETG7XW m6moEDkTPApyFnVQu/6coGuN5RWlDNSezaxr1sBfUcXBrfZvMEdE/0Yn7ZiMyygv rox14HQYCsJm9fOQZaxtG0/J0zaAIpRsOOXZ/AGuNi9hBSxmPqvKez6RkUIoVuda i2Z4Xpy17gb61/JakQl+cCrYvQDs5PLPBdRZqbtnljrj/ByAR3qLuRc4wplZHCnB 6NevnV64urRX9fl/U2MHxg1lQa2O2yE1wvNPGCUqIo3I36Ww5aQoOTgV2bAJPFS2 8UeM1D7XcciyJ8Fk5GMu+Lvr5dR8/aFLO/eaGvZNtHYC05cqqDR3OFOkfbX2lg2X l2FU5dxy+ckIXA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:23 2025 by rpki-client