This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json) Hash identifier: SukY/Mkvc7STT/cfAQtqPBKgMBmN/kVjRSvxcvHL8sE= Subject key identifier: DD:E2:79:36:10:61:C2:F0:54:0A:9F:BC:E9:40:76:F2:9E:21:22:B6 Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb Certificate serial: 019B43C9D9F9793AC287AE5501118AE50872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft Manifest number: 0710 Signing time: Mon 22 Dec 2025 02:01:00 +0000 Manifest this update: Mon 22 Dec 2025 02:01:00 +0000 Manifest next update: Tue 23 Dec 2025 02:01:00 +0000 Files and hashes: 1: IZaawvEL9ufXxBhEx6Rm4LQFHJA.roa (hash: 5TsF6Yr1jfWHgHOHw8f1MLF7osh99wdmNuoVyInqJgM=) 2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: uCB2UTmEOfbdvPZHPq4B2bC7Lg4zmqtw4XsTkEvijfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:d9:f9:79:3a:c2:87:ae:55:01:11:8a:e5:08:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb Validity Not Before: Dec 22 02:01:00 2025 GMT Not After : Dec 23 02:01:00 2025 GMT Subject: CN=dde279361061c2f0540a9fbce94076f29e2122b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:78:dc:70:77:f1:d8:be:86:d0:0e:94:24: c2:2c:f9:d9:d8:e0:6a:0b:94:b3:66:8f:ac:13:91: 81:7e:95:72:04:4c:1d:5e:3a:82:e5:20:db:cd:a8: 2d:cb:89:e3:a1:14:0a:87:8c:6e:89:66:54:c4:32: 19:c0:f7:88:2a:f4:e7:91:aa:ea:0b:9c:d2:08:b7: 95:f0:4e:6f:10:99:35:e0:09:7a:e6:79:ae:50:b9: 7f:c8:1d:9d:27:af:ff:d8:28:fe:91:b5:aa:9b:2c: db:e9:61:63:1e:b6:f9:8a:6a:0b:32:98:1d:30:a3: db:ca:f2:57:fc:5c:a6:56:0f:f2:08:02:61:ab:b1: 25:f7:09:9a:4d:77:d9:5f:4c:9e:d0:ec:dd:70:4f: 90:4f:24:1a:26:7e:7c:cb:d0:38:6f:d8:4f:2d:b0: 4e:94:b5:4a:44:67:3c:29:e0:88:e7:1e:ff:99:13: 04:a7:e6:e7:21:1a:60:42:58:13:c2:25:13:7f:b2: a4:51:d0:6e:8f:8a:3a:73:3d:75:32:cf:de:2b:a2: 01:09:fc:71:03:8f:22:42:f0:ba:43:58:e1:d8:ce: 22:05:9b:55:2b:93:58:dc:4e:cd:09:cd:f3:f2:e2: b3:32:13:37:61:c4:ef:da:fc:8b:ab:cf:82:a6:00: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:79:36:10:61:C2:F0:54:0A:9F:BC:E9:40:76:F2:9E:21:22:B6 X509v3 Authority Key Identifier: keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6e:51:34:33:9c:22:41:99:42:c8:29:b4:33:1c:b6:87:d6: f6:2c:db:9a:46:92:dd:1f:5a:5a:0e:49:16:ef:92:07:f2:a1: d7:66:2d:e6:43:05:6e:d8:34:93:87:b0:1a:b0:56:06:8d:4a: ef:64:03:6a:02:54:b3:c5:21:31:76:9a:d2:65:21:b1:93:8d: aa:49:ce:a0:8b:44:8b:27:a4:c3:53:64:6d:4e:91:a4:ec:1d: 55:a2:ba:93:bc:05:ad:75:19:a3:e4:4e:6d:0c:36:8f:cd:a1: e3:92:c6:eb:86:ec:bf:de:ed:f5:c2:65:ab:52:69:54:f4:15: 21:11:79:1a:69:27:5e:ac:e8:45:08:c9:cd:22:49:dd:a1:07: 60:46:7c:0c:65:ef:62:5d:10:9f:ed:56:51:f3:97:a0:36:1f: be:29:85:4c:96:fa:ce:1f:bb:29:88:47:ff:af:d2:3e:80:51: b2:b0:be:51:16:bb:7f:9e:3f:d0:88:2e:f6:cf:9a:ec:d9:6c: 19:cb:a8:1a:09:03:aa:5e:b8:5b:e5:96:e0:23:62:f6:b5:40: 83:61:f0:59:df:ad:10:0b:ef:3d:66:30:6a:48:4f:d2:40:56: 65:b0:94:6f:b0:76:eb:38:4a:04:c5:0e:dc:2a:fa:d1:44:fd: 9e:26:06:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDydn5eTrCh65VARGK5QhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjQ5NzA0N2YyMGQ2ZjcwOGQ3ZGI0MjU1N2I2OThmYmZi M2Q4ZmIwHhcNMjUxMjIyMDIwMTAwWhcNMjUxMjIzMDIwMTAwWjAzMTEwLwYDVQQD EyhkZGUyNzkzNjEwNjFjMmYwNTQwYTlmYmNlOTQwNzZmMjllMjEyMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a543HB38di+htAOlCTCLPnZ2OBq C5SzZo+sE5GBfpVyBEwdXjqC5SDbzagty4njoRQKh4xuiWZUxDIZwPeIKvTnkarq C5zSCLeV8E5vEJk14Al65nmuULl/yB2dJ6//2Cj+kbWqmyzb6WFjHrb5imoLMpgd MKPbyvJX/FymVg/yCAJhq7El9wmaTXfZX0ye0OzdcE+QTyQaJn58y9A4b9hPLbBO lLVKRGc8KeCI5x7/mRMEp+bnIRpgQlgTwiUTf7KkUdBuj4o6cz11Ms/eK6IBCfxx A48iQvC6Q1jh2M4iBZtVK5NY3E7NCc3z8uKzMhM3YcTv2vyLq8+CpgChDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3ieTYQYcLwVAqfvOlAdvKeISK2MB8GA1UdIwQY MBaAFL1klwR/INb3CNfbQlV7aY+/s9j7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUt ODJhMTA3YzRhN2UyLzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUtODJhMTA3YzRhN2Uy LzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC25RNDOc IkGZQsgptDMctofW9izbmkaS3R9aWg5JFu+SB/Kh12Yt5kMFbtg0k4ewGrBWBo1K 72QDagJUs8UhMXaa0mUhsZONqknOoItEiyekw1NkbU6RpOwdVaK6k7wFrXUZo+RO bQw2j82h45LG64bsv97t9cJlq1JpVPQVIRF5GmknXqzoRQjJzSJJ3aEHYEZ8DGXv Yl0Qn+1WUfOXoDYfvimFTJb6zh+7KYhH/6/SPoBRsrC+URa7f54/0Igu9s+a7Nls GcuoGgkDql64W+WW4CNi9rVAg2HwWd+tEAvvPWYwakhP0kBWZbCUb7B26zhKBMUO 3Cr60UT9niYG8A== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:50 2025 by rpki-client