This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json) Hash identifier: gpZUbdR8S40rzWirhNnYy9veX0gWEBTWvu0DonUyfDI= Subject key identifier: 57:8C:4C:2C:E5:2A:39:33:FA:39:72:32:A9:7F:26:8A:FD:5E:5E:C8 Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Certificate serial: 019B2BF91287BA05262E174D2C8E7F834FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft Manifest number: 1451 Signing time: Wed 17 Dec 2025 11:01:41 +0000 Manifest this update: Wed 17 Dec 2025 11:01:41 +0000 Manifest next update: Thu 18 Dec 2025 11:01:41 +0000 Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=) 2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=) 3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: HM3WpLHfEhYHPiWpZ50Zx8oF0+VORzWxDE2bM3H4wpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:12:87:ba:05:26:2e:17:4d:2c:8e:7f:83:4f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Validity Not Before: Dec 17 11:01:41 2025 GMT Not After : Dec 18 11:01:41 2025 GMT Subject: CN=578c4c2ce52a3933fa397232a97f268afd5e5ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:ca:0a:3e:6f:30:d1:1a:9e:fd:77:68:2a: be:a8:5d:b0:2d:d8:97:02:c1:41:8b:f7:84:c7:2a: 70:6a:ce:fe:82:3e:e0:1f:d1:2a:6c:ce:70:2d:8b: b7:dd:f0:fd:dd:3b:85:54:93:27:cf:2c:99:e0:8c: e6:1e:f0:f7:ce:51:2b:5f:2b:f7:49:22:80:58:0c: 0c:f0:60:99:76:53:5f:6d:d6:9a:9c:0f:ab:e0:d2: 7c:47:58:5d:bb:d0:e9:81:85:95:49:f7:6a:f7:72: 3b:b8:c8:fe:e1:25:8f:a5:6e:8d:3d:bb:bb:6c:9d: 84:99:21:8c:28:87:bd:b9:30:e8:97:70:e5:14:48: dd:67:10:9c:ce:ac:d4:3b:a7:f7:4c:98:fd:bd:02: 71:88:5d:11:01:59:46:58:c8:28:f0:e4:d3:27:19: d6:f0:38:90:4e:76:94:d2:64:be:eb:ee:da:96:c4: 4e:98:16:0d:f2:74:bb:67:a6:44:ef:3b:d8:cc:11: 8b:98:78:d5:01:5d:4f:ee:a0:40:2e:22:f7:67:60: 9a:37:25:41:d7:0c:85:b6:92:ca:48:3c:db:25:ab: 7f:14:ac:ec:d6:58:35:6a:c3:8b:e1:63:2e:d9:5f: f7:5f:7a:85:21:fa:13:5f:8c:d8:d2:f1:74:b5:fd: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8C:4C:2C:E5:2A:39:33:FA:39:72:32:A9:7F:26:8A:FD:5E:5E:C8 X509v3 Authority Key Identifier: keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:05:a3:5a:61:38:76:89:41:2f:c4:50:2e:79:72:63:b4:7d: 3f:9f:b0:3e:2d:21:1d:f1:52:e1:0e:9c:99:41:26:5e:e6:24: af:28:5f:6b:ad:9f:b1:82:c3:7d:ec:a0:56:22:6b:7f:71:6b: 24:05:c6:b5:6c:c0:2e:8e:5a:a2:2a:a6:d8:5c:a7:65:76:7b: 71:ea:3f:07:40:55:db:32:f2:63:5c:a4:72:56:d4:65:bf:9f: 10:18:88:7a:7e:f9:65:e9:f0:8a:5a:0a:c9:59:93:d6:c9:1b: a1:0d:92:65:76:84:e0:08:30:7c:83:d1:c8:9b:79:41:76:06: 78:e4:bf:f9:09:09:31:d8:6e:57:ef:89:46:0a:55:28:00:f7: e0:6c:ca:7f:27:85:e5:96:43:16:20:b1:12:61:52:80:7e:08: a2:c6:46:23:fb:b4:61:fc:01:57:bb:e6:08:22:15:88:ac:a9: 68:c6:53:93:0b:f5:8b:5c:2d:0c:96:aa:af:dc:65:8a:40:d5: cd:83:75:42:27:25:6a:d9:38:ad:84:32:95:25:a8:00:f6:53: da:f3:dd:8c:39:a9:0e:01:68:94:8f:f0:6f:05:8b:2a:a6:56: 70:4f:07:9f:e4:d5:60:d7:19:4f:e9:05:1f:17:3e:a8:6f:a4: 2f:6c:90:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+RKHugUmLhdNLI5/g0+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk NDRlN2IwHhcNMjUxMjE3MTEwMTQxWhcNMjUxMjE4MTEwMTQxWjAzMTEwLwYDVQQD Eyg1NzhjNGMyY2U1MmEzOTMzZmEzOTcyMzJhOTdmMjY4YWZkNWU1ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumjKCj5vMNEanv13aCq+qF2wLdiX AsFBi/eExypwas7+gj7gH9EqbM5wLYu33fD93TuFVJMnzyyZ4IzmHvD3zlErXyv3 SSKAWAwM8GCZdlNfbdaanA+r4NJ8R1hdu9DpgYWVSfdq93I7uMj+4SWPpW6NPbu7 bJ2EmSGMKIe9uTDol3DlFEjdZxCczqzUO6f3TJj9vQJxiF0RAVlGWMgo8OTTJxnW 8DiQTnaU0mS+6+7alsROmBYN8nS7Z6ZE7zvYzBGLmHjVAV1P7qBALiL3Z2CaNyVB 1wyFtpLKSDzbJat/FKzs1lg1asOL4WMu2V/3X3qFIfoTX4zY0vF0tf0rLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeMTCzlKjkz+jlyMql/Jor9Xl7IMB8GA1UdIwQY MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt YjVlMGU0YzMzMTVjLzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwWjWmE4 dolBL8RQLnlyY7R9P5+wPi0hHfFS4Q6cmUEmXuYkryhfa62fsYLDfeygViJrf3Fr JAXGtWzALo5aoiqm2FynZXZ7ceo/B0BV2zLyY1ykclbUZb+fEBiIen75ZenwiloK yVmT1skboQ2SZXaE4AgwfIPRyJt5QXYGeOS/+QkJMdhuV++JRgpVKAD34GzKfyeF 5ZZDFiCxEmFSgH4IosZGI/u0YfwBV7vmCCIViKypaMZTkwv1i1wtDJaqr9xlikDV zYN1Qiclatk4rYQylSWoAPZT2vPdjDmpDgFolI/wbwWLKqZWcE8Hn+TVYNcZT+kF Hxc+qG+kL2yQmw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:09:29 2025 by rpki-client