This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft File: vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft (raw, json) Hash identifier: NeWaNpdNpwKXv1NFtpfwNNCpu300hKCWziiPfRwbizw= Subject key identifier: D1:B4:6E:06:A8:67:6A:4B:A1:BF:3A:0C:BD:E8:A4:1C:05:90:78:17 Authority key identifier: BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4 Certificate issuer: /CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4 Certificate serial: 019B5A5148008D4FD338AA244A6A462F4871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft Manifest number: 0121 Signing time: Fri 26 Dec 2025 11:00:34 +0000 Manifest this update: Fri 26 Dec 2025 11:00:34 +0000 Manifest next update: Sat 27 Dec 2025 11:00:34 +0000 Files and hashes: 1: vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl (hash: WnIqXOOQdlgseD1JuhLy1hDrTnuajAYPTggDOit6n9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:48:00:8d:4f:d3:38:aa:24:4a:6a:46:2f:48:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4 Validity Not Before: Dec 26 11:00:34 2025 GMT Not After : Dec 27 11:00:34 2025 GMT Subject: CN=d1b46e06a8676a4ba1bf3a0cbde8a41c05907817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:f4:f0:b0:74:67:28:df:de:81:45:db:72: 82:14:da:df:65:97:76:cb:06:f9:d8:22:34:ef:98: e0:02:bd:39:4f:5c:ce:1d:ee:28:fb:89:52:22:96: 5e:2b:1c:34:6f:87:ef:05:da:1b:ea:1f:ba:50:36: ac:1f:5c:d0:e1:d3:d2:ca:90:c6:09:f3:be:0f:d6: 0e:16:4e:63:9a:61:a4:a5:39:d6:b6:19:bc:6c:0c: 4f:07:d8:8f:6b:b2:c4:04:46:f2:45:c0:81:55:49: 5f:08:73:9e:27:7f:50:f3:16:d6:1f:1a:49:f3:d9: 8a:67:0c:55:56:8d:01:3d:9d:43:2f:5f:eb:68:65: 1b:8c:40:d2:ac:b4:04:fa:52:17:45:05:b2:17:70: bb:29:0c:9f:cd:2b:21:5d:2c:58:ee:d8:1f:75:1c: f4:5b:99:67:87:f0:be:23:41:5f:2e:7f:a9:f4:91: ac:4d:8f:a5:5a:bf:60:4a:98:a3:95:ce:04:47:e0: fc:a1:8e:a5:4a:6f:fe:d4:0e:1b:3f:72:38:9f:8a: e1:08:38:97:39:06:36:7f:a8:f6:ca:dc:74:28:da: 81:2a:6b:97:93:e0:29:a8:c2:dd:2d:51:34:ac:cb: 39:e1:d1:fb:1e:78:5b:97:51:30:bf:39:31:b7:d3: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B4:6E:06:A8:67:6A:4B:A1:BF:3A:0C:BD:E8:A4:1C:05:90:78:17 X509v3 Authority Key Identifier: keyid:BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b5:e9:15:22:9b:02:13:b4:52:a6:9a:ff:ef:54:34:28:7a: fe:9d:2f:14:7f:3a:7c:41:80:d3:a2:b8:a7:9c:58:9d:f6:33: ff:68:b1:f0:72:5b:24:34:db:18:34:49:fc:84:45:a7:51:06: 2b:e9:b1:5a:7a:79:23:52:cb:9f:68:d5:44:1e:ab:69:83:f4: 9c:62:40:1d:d8:83:b1:54:eb:48:30:2e:91:97:e1:58:64:58: 59:66:33:6b:3b:4f:41:79:92:53:d2:15:cc:99:01:c5:12:99: 1b:09:12:5f:c3:ac:ef:cc:68:2f:7c:b8:0a:c8:28:4b:d6:57: c6:72:c7:03:35:9e:6d:f9:b1:0f:58:56:4a:3f:8c:bc:3e:9a: 65:28:b1:31:47:0d:7f:69:05:e5:44:60:4a:82:5f:25:33:b9: d1:4f:7c:8c:26:6a:dc:e2:40:27:4f:a6:ff:04:5b:27:13:d2: 7e:cd:b3:9b:92:8b:16:25:6f:11:e8:7c:be:56:2a:9e:bf:0f: ee:f8:b7:06:3d:46:fe:7a:94:ff:fc:1f:a8:43:1c:ef:8f:aa: 94:6e:4f:bc:a6:e7:ee:d6:5e:81:77:70:b7:9f:9f:e3:ea:cb: cd:70:65:cc:40:7c:d1:9b:98:b3:2e:44:0a:b6:8a:ef:d5:bc: e8:96:c0:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUgAjU/TOKokSmpGL0hxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZWNiNWM5MjEyMzY1ZDJjYjFiZjcxZDU5ZWEzZTEyM2Vi Y2U2ZDQwHhcNMjUxMjI2MTEwMDM0WhcNMjUxMjI3MTEwMDM0WjAzMTEwLwYDVQQD EyhkMWI0NmUwNmE4Njc2YTRiYTFiZjNhMGNiZGU4YTQxYzA1OTA3ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MP08LB0Zyjf3oFF23KCFNrfZZd2 ywb52CI075jgAr05T1zOHe4o+4lSIpZeKxw0b4fvBdob6h+6UDasH1zQ4dPSypDG CfO+D9YOFk5jmmGkpTnWthm8bAxPB9iPa7LEBEbyRcCBVUlfCHOeJ39Q8xbWHxpJ 89mKZwxVVo0BPZ1DL1/raGUbjEDSrLQE+lIXRQWyF3C7KQyfzSshXSxY7tgfdRz0 W5lnh/C+I0FfLn+p9JGsTY+lWr9gSpijlc4ER+D8oY6lSm/+1A4bP3I4n4rhCDiX OQY2f6j2ytx0KNqBKmuXk+ApqMLdLVE0rMs54dH7Hnhbl1Ewvzkxt9OX8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNG0bgaoZ2pLob86DL3opBwFkHgXMB8GA1UdIwQY MBaAFLzstckhI2XSyxv3HVnqPhI+vObUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk95MXlTRWpaZExMR19jZFdlby1FajY4NXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xNTA1NmUtY2IwYy00OTZlLTg2MmQt Y2EyYjQzNDFhOTVhLzEvdk95MXlTRWpaZExMR19jZFdlby1FajY4NXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xNTA1NmUtY2IwYy00OTZlLTg2MmQtY2EyYjQzNDFhOTVh LzEvdk95MXlTRWpaZExMR19jZFdlby1FajY4NXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbXpFSKb AhO0Uqaa/+9UNCh6/p0vFH86fEGA06K4p5xYnfYz/2ix8HJbJDTbGDRJ/IRFp1EG K+mxWnp5I1LLn2jVRB6raYP0nGJAHdiDsVTrSDAukZfhWGRYWWYzaztPQXmSU9IV zJkBxRKZGwkSX8Os78xoL3y4CsgoS9ZXxnLHAzWebfmxD1hWSj+MvD6aZSixMUcN f2kF5URgSoJfJTO50U98jCZq3OJAJ0+m/wRbJxPSfs2zm5KLFiVvEeh8vlYqnr8P 7vi3Bj1G/nqU//wfqEMc74+qlG5PvKbn7tZegXdwt5+f4+rLzXBlzEB80ZuYsy5E CraK79W86JbAAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:33 2025 by rpki-client