This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft File: vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json) Hash identifier: rZGGrqzw90ljXb1oCihPsjHb7C9dtvXjo6MCc42N2Ps= Subject key identifier: F5:CA:E4:69:A6:3F:C3:65:29:F2:6F:84:60:B1:6B:39:83:44:1A:A8 Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87 Certificate issuer: /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87 Certificate serial: 019B07478B57FFC56A4C8517706574676CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft Manifest number: 133A Signing time: Wed 10 Dec 2025 08:01:27 +0000 Manifest this update: Wed 10 Dec 2025 08:01:27 +0000 Manifest next update: Thu 11 Dec 2025 08:01:27 +0000 Files and hashes: 1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=) 2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: S1AQs8HMtiBtwfzfRcmRH4JRAdap5WDYPPWoFEqfgYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:47:8b:57:ff:c5:6a:4c:85:17:70:65:74:67:6c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87 Validity Not Before: Dec 10 08:01:27 2025 GMT Not After : Dec 11 08:01:27 2025 GMT Subject: CN=f5cae469a63fc36529f26f8460b16b3983441aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:7e:89:cc:72:4a:06:ec:41:99:20:7c:d9: 80:fa:ed:92:4e:0a:53:9c:7c:d0:67:d4:61:f1:62: 73:5a:0b:1b:32:2b:7a:85:4e:61:86:1e:4c:bb:8f: c6:cd:f9:da:1f:d5:10:ab:e7:b8:53:98:f1:8c:34: 00:9f:a5:0b:8e:39:8d:2b:44:f3:e0:41:ce:a9:ac: 39:88:b0:56:b4:82:33:64:63:85:4e:a2:70:5b:1d: e4:68:3c:00:9e:d2:95:44:a1:82:ca:7d:3a:55:01: 7f:00:4f:78:e6:fc:99:04:99:1c:34:cd:d5:a5:ec: a0:26:a2:05:2d:13:86:cf:3e:b5:d0:66:5d:b8:da: a9:5d:b8:4e:71:26:e5:be:6f:e9:fe:49:42:86:c0: a0:16:0c:79:b4:48:c1:dc:03:65:6f:54:8d:3c:b3: 77:1f:aa:6c:9e:11:18:56:35:32:ab:5e:0d:f5:75: d5:f6:80:14:e5:ca:16:cf:5a:5e:7a:a2:61:21:0b: 7a:f2:8a:d9:7c:bf:e3:e6:34:a9:fa:c8:25:de:66: e9:1b:29:93:de:a5:57:83:dc:e3:e2:05:19:ed:eb: e8:53:3f:ea:bb:be:75:c3:06:0f:2e:f1:15:d8:61: ad:21:b4:3f:3a:6d:3d:59:9b:a4:0a:8a:d1:0e:fb: e2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CA:E4:69:A6:3F:C3:65:29:F2:6F:84:60:B1:6B:39:83:44:1A:A8 X509v3 Authority Key Identifier: keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bd:54:67:b6:21:6f:80:7f:d3:91:73:b6:38:3f:aa:6d:6d: ad:14:3a:38:48:33:bc:ad:64:9b:94:e6:f9:48:57:1e:cd:cb: c9:ca:58:f5:2c:4d:0a:8b:42:74:64:97:0d:3e:15:4e:13:0e: eb:8b:cb:fa:ea:f5:49:b8:35:90:0b:5f:cb:ec:c3:1c:b8:20: 27:8e:c5:50:33:42:1f:9d:46:59:90:20:1a:d1:3d:10:a3:28: 73:49:04:d1:db:f0:2a:7f:9c:35:a4:18:f3:11:fb:44:42:1b: 7c:2a:fe:7e:00:1f:ae:f7:a3:d7:34:1c:80:f4:05:0a:9f:2f: e0:a7:82:cc:89:43:07:c5:b3:a8:ea:14:62:b3:6b:40:e8:57: bb:e8:e8:ad:95:73:42:5e:09:b1:3c:d3:15:3a:0f:2a:7a:26: 73:3b:9e:81:ea:cb:f0:33:5f:7e:42:1e:d3:27:1b:ac:77:37: 53:e5:a4:9d:b9:7e:23:a8:79:e4:d9:cd:89:38:10:b1:30:9b: 37:89:a5:2c:c8:2e:d3:6f:45:81:e2:0c:07:88:f5:a8:ac:cf: 64:a9:1d:06:61:94:d4:fe:ca:39:53:84:ff:b7:14:3c:3f:aa: 51:6b:b2:f3:f6:64:8a:89:4e:46:3e:3d:c5:ae:bc:48:7d:92: 42:cf:4f:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHR4tX/8VqTIUXcGV0Z2z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzZiNGNhZTA5MGQwZjQ5YzU0ODNmN2IyZjkzZmI5MmZk MGZmODcwHhcNMjUxMjEwMDgwMTI3WhcNMjUxMjExMDgwMTI3WjAzMTEwLwYDVQQD EyhmNWNhZTQ2OWE2M2ZjMzY1MjlmMjZmODQ2MGIxNmIzOTgzNDQxYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8l+icxySgbsQZkgfNmA+u2STgpT nHzQZ9Rh8WJzWgsbMit6hU5hhh5Mu4/GzfnaH9UQq+e4U5jxjDQAn6ULjjmNK0Tz 4EHOqaw5iLBWtIIzZGOFTqJwWx3kaDwAntKVRKGCyn06VQF/AE945vyZBJkcNM3V peygJqIFLROGzz610GZduNqpXbhOcSblvm/p/klChsCgFgx5tEjB3ANlb1SNPLN3 H6psnhEYVjUyq14N9XXV9oAU5coWz1peeqJhIQt68orZfL/j5jSp+sgl3mbpGymT 3qVXg9zj4gUZ7evoUz/qu751wwYPLvEV2GGtIbQ/Om09WZukCorRDvvidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXK5GmmP8NlKfJvhGCxazmDRBqoMB8GA1UdIwQY MBaAFLw2tMrgkND0nFSD97L5P7kv0P+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRhMHl1Q1EwUFNjVklQM3N2a191U19RXzRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMzg5MWYtNGRjNy00ZjRjLWI1MTkt NjEwN2ViN2M0OGQyLzEvdkRhMHl1Q1EwUFNjVklQM3N2a191U19RXzRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMzg5MWYtNGRjNy00ZjRjLWI1MTktNjEwN2ViN2M0OGQy LzEvdkRhMHl1Q1EwUFNjVklQM3N2a191U19RXzRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgL1UZ7Yh b4B/05Fztjg/qm1trRQ6OEgzvK1km5Tm+UhXHs3LycpY9SxNCotCdGSXDT4VThMO 64vL+ur1Sbg1kAtfy+zDHLggJ47FUDNCH51GWZAgGtE9EKMoc0kE0dvwKn+cNaQY 8xH7REIbfCr+fgAfrvej1zQcgPQFCp8v4KeCzIlDB8WzqOoUYrNrQOhXu+jorZVz Ql4JsTzTFToPKnomczuegerL8DNffkIe0ycbrHc3U+Wknbl+I6h55NnNiTgQsTCb N4mlLMgu029FgeIMB4j1qKzPZKkdBmGU1P7KOVOE/7cUPD+qUWuy8/ZkiolORj49 xa68SH2SQs9PIQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:58:59 2025 by rpki-client