This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json) Hash identifier: v1hmrJwZL5+ELzsQY4+oPF3mzxfTmgfzHn44Esqf1bI= Subject key identifier: 98:05:35:4E:C8:9A:F7:43:89:93:2F:11:ED:B7:4F:13:44:62:55:72 Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Certificate serial: 019AABA79A40A1B6A8F6D2F2724258C06887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft Manifest number: 151D Signing time: Sat 22 Nov 2025 13:01:19 +0000 Manifest this update: Sat 22 Nov 2025 13:01:19 +0000 Manifest next update: Sun 23 Nov 2025 13:01:19 +0000 Files and hashes: 1: 1-qiVqOjBXOScQyOmQsUr-NwkTzY.roa (hash: QQhk5ltrGxYiRgdxzHLo3yY2s4Qbc99+8Eg2CHCARqY=) 2: Ft0ZB8OyXDqdHuA2ecKptesJxaA.roa (hash: TiOljuv3CctqH89ZzFnB7S3NUxP1dkyAC3xa+TMiJAY=) 3: R9qZ8Nd4AyiumQCYagXJI1cdjJk.roa (hash: LseYWFgGf5p0B/ygA2vm5MY1yPEkvBvDwKu8LwSap5c=) 4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: FQ2wMXdfB43snkZf9thOkQEGpBwhR1zcT6rhmkfgEEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:9a:40:a1:b6:a8:f6:d2:f2:72:42:58:c0:68:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Validity Not Before: Nov 22 13:01:19 2025 GMT Not After : Nov 23 13:01:19 2025 GMT Subject: CN=9805354ec89af74389932f11edb74f1344625572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:70:16:af:a1:e0:e1:73:12:97:1a:20:42: aa:77:e6:c0:63:64:26:31:a5:00:04:ee:fe:88:92: 0b:ca:70:f4:87:8e:89:de:8e:29:a8:89:67:a0:b5: 6b:66:5a:30:ba:b9:6d:33:48:dc:84:15:2e:af:46: fb:4f:2c:db:4a:a2:5f:c9:44:81:5a:49:71:13:1d: 25:ce:66:25:12:ba:7d:24:8c:e8:cc:9c:9e:8d:09: 8b:bb:2b:b4:ad:2e:b5:f9:dc:ad:3b:2c:a9:39:6d: 91:ab:fd:90:27:ea:d4:13:72:c0:79:c7:9e:52:bb: c7:c8:6c:6e:c2:20:ee:0e:f1:c3:2b:d7:f9:cb:5a: 0b:ee:a2:eb:9d:af:a1:0c:6f:66:17:59:ce:c0:63: 5b:58:41:71:98:f7:93:a4:3f:c3:ab:cb:6b:93:2d: b7:39:f6:cb:e5:21:30:67:d6:5e:50:9c:51:e4:6a: c0:c1:3d:93:a3:d2:ea:7b:0d:df:a7:c3:e2:47:d8: be:6f:07:43:aa:dd:a4:4e:c8:b9:ae:45:c2:b9:a0: 8a:07:d6:2f:20:d7:14:8a:7d:20:34:e6:15:29:6b: 00:6d:82:fe:52:73:62:23:48:a8:1b:49:a5:27:ed: 2e:6d:0b:05:98:af:4d:94:0a:9c:9f:9c:97:72:35: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:05:35:4E:C8:9A:F7:43:89:93:2F:11:ED:B7:4F:13:44:62:55:72 X509v3 Authority Key Identifier: keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c1:19:10:47:d8:98:f9:7f:a5:cf:13:c7:c2:72:4e:76:8a: 2f:e6:5b:19:de:ae:1a:eb:30:cc:27:cc:1b:d6:ad:f9:b5:a3: cb:4d:0c:42:39:6a:14:82:8b:c7:63:94:fb:cc:45:06:68:c4: 86:b3:46:6f:fe:63:1d:e1:a2:f1:75:19:ee:b8:cc:84:72:e0: 1f:15:b0:d9:14:a7:7e:a3:90:de:3b:ab:85:3b:45:5b:46:55: a9:f8:0f:03:24:92:a2:d2:ed:b7:6e:9c:4d:ff:5b:7a:a6:30: 58:0b:25:8b:cf:9a:f3:7f:a4:15:1c:14:0a:5a:cb:9e:c6:a6: 42:45:1a:e3:7f:59:c1:a8:00:7b:e0:13:57:96:79:4d:8a:ef: e8:a4:fc:dd:b0:f7:66:89:ff:7f:b9:ef:f7:84:dd:e4:b5:ff: e5:49:bb:11:52:ed:17:af:13:ce:0d:71:0a:a4:50:1e:6e:59: bb:41:95:a1:bb:78:39:44:d8:44:dd:9f:72:e8:9c:12:e2:f0: ad:e4:c7:33:b4:9e:8e:f7:e5:1b:64:a1:38:0b:e9:e5:21:fc: 64:39:1d:1b:6b:05:41:13:4a:46:f8:ae:1a:8b:82:1e:c6:9f: 19:e1:bb:27:28:e4:90:e0:ae:7f:00:a3:09:b3:7c:fd:c7:ce: 29:2c:1e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrp5pAobao9tLyckJYwGiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjE0Mzk5NmRmZWZmNWY0OWNkMmIwOWI5NDFkMGQ1ZTU3 OGIzZmYwHhcNMjUxMTIyMTMwMTE5WhcNMjUxMTIzMTMwMTE5WjAzMTEwLwYDVQQD Eyg5ODA1MzU0ZWM4OWFmNzQzODk5MzJmMTFlZGI3NGYxMzQ0NjI1NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDFwFq+h4OFzEpcaIEKqd+bAY2Qm MaUABO7+iJILynD0h46J3o4pqIlnoLVrZlowurltM0jchBUur0b7TyzbSqJfyUSB WklxEx0lzmYlErp9JIzozJyejQmLuyu0rS61+dytOyypOW2Rq/2QJ+rUE3LAecee UrvHyGxuwiDuDvHDK9f5y1oL7qLrna+hDG9mF1nOwGNbWEFxmPeTpD/Dq8trky23 OfbL5SEwZ9ZeUJxR5GrAwT2To9Lqew3fp8PiR9i+bwdDqt2kTsi5rkXCuaCKB9Yv INcUin0gNOYVKWsAbYL+UnNiI0ioG0mlJ+0ubQsFmK9NlAqcn5yXcjXQ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgFNU7ImvdDiZMvEe23TxNEYlVyMB8GA1UdIwQY MBaAFL2xQ5lt/v9fSc0rCblB0NXleLP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTkt ZmMyOWNhYTVkYjdhLzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTktZmMyOWNhYTVkYjdh LzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsEZEEfY mPl/pc8Tx8JyTnaKL+ZbGd6uGuswzCfMG9at+bWjy00MQjlqFIKLx2OU+8xFBmjE hrNGb/5jHeGi8XUZ7rjMhHLgHxWw2RSnfqOQ3jurhTtFW0ZVqfgPAySSotLtt26c Tf9beqYwWAsli8+a83+kFRwUClrLnsamQkUa439ZwagAe+ATV5Z5TYrv6KT83bD3 Zon/f7nv94Td5LX/5Um7EVLtF68Tzg1xCqRQHm5Zu0GVobt4OUTYRN2fcuicEuLw reTHM7SejvflG2ShOAvp5SH8ZDkdG2sFQRNKRviuGouCHsafGeG7JyjkkOCufwCj CbN8/cfOKSwerQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:05 2025 by rpki-client