This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json) Hash identifier: 5PV/oV9xvHJodsty29QB3KumAOSQ0hHXLRsFRmblQSQ= Subject key identifier: E8:82:22:75:F3:8C:6F:2E:23:7B:1E:49:98:E5:A3:A8:3E:E7:36:36 Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90 Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90 Certificate serial: 019B0E5C3D0C342B1B409B3632017320B9BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 17:01:24 +0000 Manifest this update: Thu 11 Dec 2025 17:01:24 +0000 Manifest next update: Fri 12 Dec 2025 17:01:24 +0000 Files and hashes: 1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=) 2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: dTU6HWESnF4hVckbVo52WRgDLSuZoqXyoorYIDo2wWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:3d:0c:34:2b:1b:40:9b:36:32:01:73:20:b9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90 Validity Not Before: Dec 11 17:01:24 2025 GMT Not After : Dec 12 17:01:24 2025 GMT Subject: CN=e8822275f38c6f2e237b1e4998e5a3a83ee73636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:b1:6b:9b:3f:c9:47:b9:58:90:ef:b2:f7: a0:aa:2f:e7:58:7d:4b:ef:c7:8a:55:a9:ce:01:d2: 20:20:0b:fa:cb:d4:27:d7:eb:b0:00:01:21:1a:db: 4d:e6:ad:d4:d8:3c:e3:b4:5d:38:97:de:f4:76:09: 39:28:e8:a2:05:f3:77:d3:fc:79:15:af:24:8c:cf: 3b:dc:43:c6:1d:94:96:38:5b:71:a8:81:5f:f3:05: 8a:b4:37:60:09:66:9f:b7:67:68:15:7a:99:5c:fa: b9:60:64:52:71:f1:82:98:fa:10:ed:4e:73:b0:de: 80:2e:43:a2:47:4e:c3:71:1b:db:3b:0c:d7:d9:ed: a0:cf:34:08:61:d3:65:46:99:df:df:46:10:94:ff: 09:1a:db:2a:e6:84:39:96:2a:b1:aa:ad:e9:51:f1: f9:2e:73:07:7e:31:a4:29:0c:cd:b9:76:54:8e:a1: 0a:10:3b:74:75:fc:d2:98:09:f1:ae:37:cf:6d:e3: 0d:7d:5a:e1:13:92:2c:56:bf:03:cd:36:0a:ea:d4: b9:66:c4:47:13:2f:77:37:50:88:31:f3:80:5b:14: 4d:46:58:c8:17:36:1e:bf:84:ef:3e:b7:a9:56:a1: ff:26:fb:da:3a:7e:26:f7:e1:0f:35:e7:7d:f0:01: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:82:22:75:F3:8C:6F:2E:23:7B:1E:49:98:E5:A3:A8:3E:E7:36:36 X509v3 Authority Key Identifier: keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:3e:d1:a8:94:3b:89:60:e4:fc:40:01:ce:c4:e5:6f:f1: 5b:3f:a0:ef:00:79:f6:ab:b0:47:c8:11:c5:0a:db:7d:40:1a: f7:81:4f:f6:36:d6:b4:d1:3b:ef:87:bb:e6:a1:9d:63:89:30: cf:39:ea:87:0d:ef:06:c4:8f:a5:68:d5:60:74:91:b0:69:5a: a5:5e:ed:06:b9:48:fc:9e:64:38:e9:d8:00:c6:2f:16:c9:7b: 75:4c:20:cd:9b:54:e0:76:c0:08:e6:b0:cd:ee:09:19:9a:06: da:f7:e6:f5:d0:56:83:db:b5:c6:45:8f:20:90:5c:05:dd:10: 78:35:aa:26:be:46:c3:26:e8:50:d9:d2:b6:7d:81:9f:93:fe: ab:44:e9:29:f3:03:86:6a:30:08:06:ca:ac:8e:64:e7:fb:d0: 36:0f:ca:bc:84:18:60:90:2b:64:61:01:89:29:14:30:25:6e: 0c:e8:a0:a3:ce:08:7a:d5:2b:b1:a0:dd:4a:2f:23:a7:74:32: 4a:1d:98:f2:d0:22:08:00:19:d0:e0:9d:b3:c6:7a:50:e2:72: 4c:9e:e3:63:69:94:e3:5f:4b:ff:ad:66:2d:c5:15:ef:2b:01: 47:71:b4:70:23:6b:2f:54:4e:76:6f:1a:3d:ce:8f:92:26:12: 71:f1:c1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXD0MNCsbQJs2MgFzILm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYWY4YmE1OWY3YTNjNWQwMGZlMGFkNDU2NGQ4MDUyNGRm N2ZhOTAwHhcNMjUxMjExMTcwMTI0WhcNMjUxMjEyMTcwMTI0WjAzMTEwLwYDVQQD EyhlODgyMjI3NWYzOGM2ZjJlMjM3YjFlNDk5OGU1YTNhODNlZTczNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xixa5s/yUe5WJDvsvegqi/nWH1L 78eKVanOAdIgIAv6y9Qn1+uwAAEhGttN5q3U2DzjtF04l970dgk5KOiiBfN30/x5 Fa8kjM873EPGHZSWOFtxqIFf8wWKtDdgCWaft2doFXqZXPq5YGRScfGCmPoQ7U5z sN6ALkOiR07DcRvbOwzX2e2gzzQIYdNlRpnf30YQlP8JGtsq5oQ5liqxqq3pUfH5 LnMHfjGkKQzNuXZUjqEKEDt0dfzSmAnxrjfPbeMNfVrhE5IsVr8DzTYK6tS5ZsRH Ey93N1CIMfOAWxRNRljIFzYev4TvPrepVqH/JvvaOn4m9+EPNed98AGZ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiCInXzjG8uI3seSZjlo6g+5zY2MB8GA1UdIwQY MBaAFLyvi6WfejxdAP4K1FZNgFJN9/qQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMDdlOWUtMTMyYS00OGUyLTk1Mzgt OTAyYWVjNDQwNDY0LzEvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kMDdlOWUtMTMyYS00OGUyLTk1MzgtOTAyYWVjNDQwNDY0 LzEvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeI+0aiU O4lg5PxAAc7E5W/xWz+g7wB59quwR8gRxQrbfUAa94FP9jbWtNE774e75qGdY4kw zznqhw3vBsSPpWjVYHSRsGlapV7tBrlI/J5kOOnYAMYvFsl7dUwgzZtU4HbACOaw ze4JGZoG2vfm9dBWg9u1xkWPIJBcBd0QeDWqJr5GwyboUNnStn2Bn5P+q0TpKfMD hmowCAbKrI5k5/vQNg/KvIQYYJArZGEBiSkUMCVuDOigo84IetUrsaDdSi8jp3Qy Sh2Y8tAiCAAZ0OCds8Z6UOJyTJ7jY2mU419L/61mLcUV7ysBR3G0cCNrL1ROdm8a Pc6PkiYScfHBuw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:28 2025 by rpki-client