This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft File: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json) Hash identifier: e5nIMpq7rN2IeOX1X0TmnUrZ/t5+Gl7JJapB7N2Tzoc= Subject key identifier: 9A:53:0E:D4:E3:07:7B:22:D7:F4:C8:04:42:FB:F5:0D:87:BC:2A:C4 Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a Certificate serial: 019B3532DFFF24027327F6CC942B8E8C3D76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft Manifest number: 0D95 Signing time: Fri 19 Dec 2025 06:01:25 +0000 Manifest this update: Fri 19 Dec 2025 06:01:25 +0000 Manifest next update: Sat 20 Dec 2025 06:01:25 +0000 Files and hashes: 1: 15i89b2ooCC5Wqcsjg2SBUg3A40.roa (hash: lZ5oTep+frYUK0lIlk9v0/P+KqGOWHdfH+9b58myH+w=) 2: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=) 3: IncQidH1EmOM3JDy5YVCBk0c4NE.roa (hash: nhq9/WaK4JTE9KAnd8mPqXQNZIF7TP9W57FIRXqjj1I=) 4: bsoFucu-95ojdd6HT9b5aZ5Yd6Y.roa (hash: kZjsCbYuva/6RQ5ML3HFlqXPFZ0iOYZfcyVyzLw6dDg=) 5: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=) 6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: i86jKGb/rt/OLvqVKJfBmMKlD5QlWSdyHBwytUJetcU=) 7: wmgMC-Q6JuN93VgNPFr0Kgc7Ccw.roa (hash: f3Jy9HVFL90ndYeuF9Ld4iOUbDw2OjbP9NnJ95IlJxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:df:ff:24:02:73:27:f6:cc:94:2b:8e:8c:3d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a Validity Not Before: Dec 19 06:01:25 2025 GMT Not After : Dec 20 06:01:25 2025 GMT Subject: CN=9a530ed4e3077b22d7f4c80442fbf50d87bc2ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:80:b4:3f:2d:f7:c2:05:eb:0b:4e:36:3b: e7:1f:88:49:a1:ac:14:47:c7:01:c9:bf:50:c6:af: 99:86:95:b8:f0:bb:7c:c5:0f:a7:3d:c3:02:31:28: c8:b3:c0:84:f6:02:f1:f3:c4:51:10:76:78:a1:62: 7f:06:a4:c4:1f:3e:48:0f:ca:a1:69:38:38:db:a2: 02:58:5c:6e:81:d9:4d:9c:81:6a:7e:70:60:a0:ea: ee:27:ba:22:1d:6c:05:8a:79:9d:a5:9e:3a:ca:ac: af:b6:b1:85:78:f3:79:86:41:1f:6d:1b:1e:4e:82: 76:51:ed:28:a9:c4:db:28:bd:22:e4:b2:1d:43:ee: bf:7c:08:1e:4e:07:11:08:01:b0:54:b8:69:c4:3c: 6d:06:f3:3b:c8:ed:a4:04:6a:fd:a9:71:c8:78:cd: 9d:14:06:3c:3c:17:ec:31:c9:76:5a:37:96:7a:e1: 55:36:99:8b:a5:90:ca:e4:74:b7:f3:ee:98:af:92: 12:57:93:83:30:01:73:57:ec:6a:6f:65:e6:fc:5d: c5:76:ea:53:7b:0d:a2:9c:0a:85:ea:f5:5b:11:da: 8f:59:7d:18:f6:d7:64:80:c9:ce:09:07:0b:6d:b7: da:cb:98:19:a3:fb:2a:2e:0f:89:61:b1:3c:62:0e: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:53:0E:D4:E3:07:7B:22:D7:F4:C8:04:42:FB:F5:0D:87:BC:2A:C4 X509v3 Authority Key Identifier: keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:50:eb:4e:58:d6:d0:3e:98:4d:66:b6:5e:48:f9:c8:f9:5f: e5:02:11:e8:a5:80:12:87:dd:de:69:0e:f4:69:20:4d:e9:82: d7:b3:3d:06:5e:36:31:1e:00:46:cc:d8:54:6f:1e:6c:58:2d: 2e:2a:dd:db:73:09:29:4c:49:cd:67:f9:c4:97:4c:45:c5:6f: 5b:c6:17:a6:70:a9:e2:b0:a5:70:f2:bb:17:7c:a0:0f:39:de: d2:42:61:19:99:c5:2a:e1:88:f1:a8:b9:c7:4d:38:ad:e8:c1: b2:9c:e3:4e:1f:e3:6d:52:fd:34:b9:ed:d0:e1:c5:99:a3:b8: f9:c4:72:49:73:76:20:e1:12:b3:f1:fb:d1:73:d9:80:5e:e3: 74:0d:2d:cb:03:8d:78:87:45:52:ff:61:2f:e3:e3:9c:a3:b9: 8b:cc:8e:cd:70:d6:28:2e:72:7b:88:d9:e8:89:6b:77:d4:df: d4:f8:2c:65:c2:61:04:4c:ad:4d:e7:39:0d:e9:7a:8b:38:4f: ec:96:9d:6b:1c:6c:78:76:35:16:70:ef:a4:19:44:43:c8:de: f7:db:23:ed:be:26:93:63:41:69:c7:fe:8e:8b:22:e4:a3:d8: 3a:41:20:2e:8a:03:53:ad:6b:58:9c:be:e7:eb:b9:5b:84:09: 04:f1:ce:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mt//JAJzJ/bMlCuOjD12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4 ZTcxNmEwHhcNMjUxMjE5MDYwMTI1WhcNMjUxMjIwMDYwMTI1WjAzMTEwLwYDVQQD Eyg5YTUzMGVkNGUzMDc3YjIyZDdmNGM4MDQ0MmZiZjUwZDg3YmMyYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdaAtD8t98IF6wtONjvnH4hJoawU R8cByb9Qxq+ZhpW48Lt8xQ+nPcMCMSjIs8CE9gLx88RREHZ4oWJ/BqTEHz5ID8qh aTg426ICWFxugdlNnIFqfnBgoOruJ7oiHWwFinmdpZ46yqyvtrGFePN5hkEfbRse ToJ2Ue0oqcTbKL0i5LIdQ+6/fAgeTgcRCAGwVLhpxDxtBvM7yO2kBGr9qXHIeM2d FAY8PBfsMcl2WjeWeuFVNpmLpZDK5HS38+6Yr5ISV5ODMAFzV+xqb2Xm/F3FdupT ew2inAqF6vVbEdqPWX0Y9tdkgMnOCQcLbbfay5gZo/sqLg+JYbE8Yg4t4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpTDtTjB3si1/TIBEL79Q2HvCrEMB8GA1UdIwQY MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct YzEzMzFmNDlmYzA5LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5 LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlDrTljW 0D6YTWa2Xkj5yPlf5QIR6KWAEofd3mkO9GkgTemC17M9Bl42MR4ARszYVG8ebFgt Lird23MJKUxJzWf5xJdMRcVvW8YXpnCp4rClcPK7F3ygDzne0kJhGZnFKuGI8ai5 x004rejBspzjTh/jbVL9NLnt0OHFmaO4+cRySXN2IOESs/H70XPZgF7jdA0tywON eIdFUv9hL+PjnKO5i8yOzXDWKC5ye4jZ6Ilrd9Tf1PgsZcJhBEytTec5Del6izhP 7JadaxxseHY1FnDvpBlEQ8je99sj7b4mk2NBacf+josi5KPYOkEgLooDU61rWJy+ 5+u5W4QJBPHO0g== -----END CERTIFICATE-----Generated at Fri Dec 19 13:37:35 2025 by rpki-client