This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json) Hash identifier: HHi1Koiee6Pz6Y4udMcpRvtAolzdiG2Jv98hwIk04v8= Subject key identifier: DD:E0:00:49:1D:27:9F:37:AA:DB:F5:56:10:B2:23:3B:88:A5:9F:68 Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Certificate serial: 019B334464FADA600758E67BA8398807A937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 21:01:18 +0000 Manifest this update: Thu 18 Dec 2025 21:01:18 +0000 Manifest next update: Fri 19 Dec 2025 21:01:18 +0000 Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=) 2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: iwFGqivhMxGyrT4uv2kY361MH3f4PZVhqbBEvn+bYXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:64:fa:da:60:07:58:e6:7b:a8:39:88:07:a9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Validity Not Before: Dec 18 21:01:18 2025 GMT Not After : Dec 19 21:01:18 2025 GMT Subject: CN=dde000491d279f37aadbf55610b2233b88a59f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:12:b1:55:db:54:95:92:ed:d2:85:97:32: fb:d0:60:66:a0:f7:b7:05:60:74:9d:92:57:71:c2: ae:65:66:52:83:b3:e3:51:60:87:c8:ef:71:ac:94: 9f:bd:1a:ce:11:82:d2:70:11:17:50:54:5c:d7:30: b9:39:f9:d0:d0:ac:da:9c:76:25:90:4a:49:85:ec: 31:71:b3:25:3d:c5:74:49:bf:03:46:f8:ef:a7:a7: 2a:48:9d:87:9b:78:58:ff:2f:49:43:4a:aa:48:da: be:f9:e3:5e:bf:ef:43:1e:e7:ce:f6:ed:09:79:93: 90:e2:55:7b:4c:7d:82:af:65:8b:37:24:f5:c3:31: 3c:2c:ff:48:f4:66:28:f6:03:c8:2c:e4:16:79:73: 1a:a4:ed:85:75:fd:2c:55:ab:4e:e4:3f:93:e8:62: 14:a2:07:64:68:24:53:8a:42:d4:d8:b4:51:88:5a: 5b:b1:23:ea:11:12:dc:a8:3e:61:9d:cb:02:e3:f8: 40:7a:1b:17:bb:d6:90:05:01:b7:6a:72:97:a0:5a: 36:45:21:43:7c:ef:d2:b8:a4:93:27:39:6a:47:55: 29:e0:c1:05:3c:54:bc:15:70:56:09:b6:f6:87:8f: a2:65:1f:d0:f6:b7:76:c8:28:78:e0:f0:52:05:bf: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E0:00:49:1D:27:9F:37:AA:DB:F5:56:10:B2:23:3B:88:A5:9F:68 X509v3 Authority Key Identifier: keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:07:b2:7a:3e:22:66:3a:9c:ee:76:8f:3e:76:4a:d5:d8: 69:c1:57:8c:29:7b:8c:a6:92:d3:99:a3:76:b1:b0:44:55:94: 60:dd:28:a4:52:4a:75:3b:a2:04:13:bf:a2:9a:20:d0:25:c2: d6:9a:f5:d5:bb:fd:47:79:43:14:49:e5:a9:6e:b4:bd:8c:9a: 98:bd:92:22:03:b8:af:3d:e2:35:cd:ee:75:58:28:e5:ab:84: 86:2c:c6:e8:8e:d4:60:3f:38:a9:03:ce:c7:ad:7a:26:6f:76: 77:ff:2a:80:01:36:16:d0:ff:24:44:68:73:0f:6c:4c:ec:98: bc:b7:dd:bc:e9:d5:d1:25:31:1b:10:97:0c:c1:92:55:10:fd: ca:0b:16:83:77:4e:ff:01:7e:d7:20:83:32:c1:1e:c0:9f:c0: 4d:12:01:73:ef:75:ad:85:39:4b:19:24:3c:f5:f5:3f:85:16: 6c:b5:94:cf:6b:ef:4c:8c:2c:df:05:7d:ae:48:32:10:b0:38: 4a:42:63:f9:67:ff:1a:0d:7f:78:fb:89:af:c1:71:da:18:4b: cf:f6:d8:7b:cb:9c:97:3a:87:01:79:74:d0:6a:3e:ec:ec:a8: 53:63:6f:b6:26:53:be:34:39:53:65:8a:ad:3d:42:1e:26:2a: 07:a3:99:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRGT62mAHWOZ7qDmIB6k3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi ZGU3MGUwHhcNMjUxMjE4MjEwMTE4WhcNMjUxMjE5MjEwMTE4WjAzMTEwLwYDVQQD EyhkZGUwMDA0OTFkMjc5ZjM3YWFkYmY1NTYxMGIyMjMzYjg4YTU5ZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPASsVXbVJWS7dKFlzL70GBmoPe3 BWB0nZJXccKuZWZSg7PjUWCHyO9xrJSfvRrOEYLScBEXUFRc1zC5OfnQ0KzanHYl kEpJhewxcbMlPcV0Sb8DRvjvp6cqSJ2Hm3hY/y9JQ0qqSNq++eNev+9DHufO9u0J eZOQ4lV7TH2Cr2WLNyT1wzE8LP9I9GYo9gPILOQWeXMapO2Fdf0sVatO5D+T6GIU ogdkaCRTikLU2LRRiFpbsSPqERLcqD5hncsC4/hAehsXu9aQBQG3anKXoFo2RSFD fO/SuKSTJzlqR1Up4MEFPFS8FXBWCbb2h4+iZR/Q9rd2yCh44PBSBb9kXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3gAEkdJ583qtv1VhCyIzuIpZ9oMB8GA1UdIwQY MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt MTM1YzQwMjE3Yjg2LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2 LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2UHsno+ ImY6nO52jz52StXYacFXjCl7jKaS05mjdrGwRFWUYN0opFJKdTuiBBO/opog0CXC 1pr11bv9R3lDFEnlqW60vYyamL2SIgO4rz3iNc3udVgo5auEhizG6I7UYD84qQPO x616Jm92d/8qgAE2FtD/JERocw9sTOyYvLfdvOnV0SUxGxCXDMGSVRD9ygsWg3dO /wF+1yCDMsEewJ/ATRIBc+91rYU5SxkkPPX1P4UWbLWUz2vvTIws3wV9rkgyELA4 SkJj+Wf/Gg1/ePuJr8Fx2hhLz/bYe8uclzqHAXl00Go+7OyoU2NvtiZTvjQ5U2WK rT1CHiYqB6OZgA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:59 2025 by rpki-client