This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json) Hash identifier: ktftJcfw69MT8RV5AEjRyH1BFOer4p5PkrWULSvxSI4= Subject key identifier: 5F:BD:EB:43:AB:B3:04:42:A1:9D:8E:0C:60:E3:23:FD:A8:28:ED:41 Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b Certificate serial: 019B6354A7C0DB9608CA5AE23AC8E8C9696B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 05:00:50 +0000 Manifest this update: Sun 28 Dec 2025 05:00:50 +0000 Manifest next update: Mon 29 Dec 2025 05:00:50 +0000 Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=) 2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: uX/CUWpB/RNehK2GUUoMWdocNBpTHwq/CSK6LXWggPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:a7:c0:db:96:08:ca:5a:e2:3a:c8:e8:c9:69:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b Validity Not Before: Dec 28 05:00:50 2025 GMT Not After : Dec 29 05:00:50 2025 GMT Subject: CN=5fbdeb43abb30442a19d8e0c60e323fda828ed41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:07:bc:9f:0c:c1:cb:34:c9:88:6d:f4:46: 6d:d5:84:31:1b:45:3c:06:80:1d:50:d6:24:5e:79: 39:55:4c:b6:9f:62:8d:1d:0d:d7:1f:4b:bd:7b:e5: ec:86:46:ac:c7:05:7f:3b:7d:54:da:13:63:41:c4: 4f:76:8b:ff:98:a3:2c:fd:a3:f8:84:62:ce:f1:d3: bb:83:0e:ac:42:ec:83:43:06:55:67:6c:68:3f:79: 51:b7:e4:e1:79:e0:38:25:2a:b6:1b:f2:73:53:e4: 66:8a:54:d1:cc:28:37:29:49:7e:5a:4a:4b:ba:0b: 8e:ef:65:ba:e9:64:82:b8:98:c2:52:0c:4a:5a:64: be:16:eb:4a:54:81:c2:fe:02:a2:43:9f:75:d6:35: a7:29:ea:68:d3:e6:29:05:d3:01:82:65:9d:d3:6f: e5:12:a6:d0:0e:9c:3e:19:ab:b2:82:31:25:10:2c: 52:59:87:75:3f:02:2f:d8:f0:b8:92:87:2b:d6:d9: c4:13:19:0f:d2:d9:23:a9:4a:c1:5f:98:4d:08:c8: 1d:f8:14:44:4f:f4:ee:ae:72:e6:5b:d3:77:2f:6a: d4:50:6a:ff:69:c3:20:c1:04:b7:99:37:0d:88:95: 5b:d5:5b:78:c8:9f:f0:e4:c5:73:50:e4:59:53:ad: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BD:EB:43:AB:B3:04:42:A1:9D:8E:0C:60:E3:23:FD:A8:28:ED:41 X509v3 Authority Key Identifier: keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ea:fa:af:f2:fc:35:81:31:da:ed:9f:c8:59:72:f3:d4:2e: 33:5a:ac:63:9a:a9:2b:3f:e9:bb:4b:3d:51:9b:f2:b2:09:d3: c8:ba:63:c8:ca:9e:f8:df:c9:87:85:3e:00:c7:dc:ce:3e:48: 63:51:e9:75:eb:06:9c:26:0b:a3:a9:8b:9f:18:ef:71:60:c5: 4f:c4:e7:09:17:cf:a1:f6:6f:d7:8d:c4:5c:f5:b9:39:04:76: c2:0f:75:1b:1e:71:09:75:38:53:a1:23:fb:35:4b:6b:bf:d3: 1f:6d:38:1b:ff:d7:2e:3b:14:14:ec:14:d2:9a:b1:8b:f7:89: bc:dc:0d:b7:d0:b8:2b:da:ec:84:89:e7:b1:59:e2:ea:38:3c: 8a:bc:f7:cd:2e:17:4b:50:0e:50:2a:cd:c0:52:c5:56:d5:9b: 88:5b:41:cd:d2:8b:9f:9c:b1:e4:73:ee:ea:dc:58:d6:e0:cf: bd:9c:1f:36:3d:a4:2e:39:1c:7a:5f:fb:c0:1d:64:f6:09:8c: 5c:46:7e:91:02:f6:45:e5:56:e5:6c:35:a6:a7:cf:80:3c:8f: 02:63:9c:4c:23:45:87:f0:ce:a3:ef:b2:92:1e:4c:6f:7a:68: f1:1a:8f:e1:d8:bc:7e:25:f1:61:69:43:fc:e4:97:48:7d:5c: 7c:91:04:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVKfA25YIylriOsjoyWlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWM0MDVmMTQyZTUzZWI2N2IxYzQ5OTIzYWI3OTVlODQz MjhjOWIwHhcNMjUxMjI4MDUwMDUwWhcNMjUxMjI5MDUwMDUwWjAzMTEwLwYDVQQD Eyg1ZmJkZWI0M2FiYjMwNDQyYTE5ZDhlMGM2MGUzMjNmZGE4MjhlZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/oHvJ8Mwcs0yYht9EZt1YQxG0U8 BoAdUNYkXnk5VUy2n2KNHQ3XH0u9e+XshkasxwV/O31U2hNjQcRPdov/mKMs/aP4 hGLO8dO7gw6sQuyDQwZVZ2xoP3lRt+TheeA4JSq2G/JzU+RmilTRzCg3KUl+WkpL uguO72W66WSCuJjCUgxKWmS+FutKVIHC/gKiQ5911jWnKepo0+YpBdMBgmWd02/l EqbQDpw+GauygjElECxSWYd1PwIv2PC4kocr1tnEExkP0tkjqUrBX5hNCMgd+BRE T/TurnLmW9N3L2rUUGr/acMgwQS3mTcNiJVb1Vt4yJ/w5MVzUORZU62CrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+960OrswRCoZ2ODGDjI/2oKO1BMB8GA1UdIwQY MBaAFLycQF8ULlPrZ7HEmSOreV6EMoybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iODE2YjktOTFiMC00NmRhLThlNTgt OTE0ODhhMzRmY2M4LzEvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iODE2YjktOTFiMC00NmRhLThlNTgtOTE0ODhhMzRmY2M4 LzEvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOr6r/L8 NYEx2u2fyFly89QuM1qsY5qpKz/pu0s9UZvysgnTyLpjyMqe+N/Jh4U+AMfczj5I Y1HpdesGnCYLo6mLnxjvcWDFT8TnCRfPofZv143EXPW5OQR2wg91Gx5xCXU4U6Ej +zVLa7/TH204G//XLjsUFOwU0pqxi/eJvNwNt9C4K9rshInnsVni6jg8irz3zS4X S1AOUCrNwFLFVtWbiFtBzdKLn5yx5HPu6txY1uDPvZwfNj2kLjkcel/7wB1k9gmM XEZ+kQL2ReVW5Ww1pqfPgDyPAmOcTCNFh/DOo++ykh5Mb3po8RqP4di8fiXxYWlD /OSXSH1cfJEE7g== -----END CERTIFICATE-----Generated at Sun Dec 28 10:50:47 2025 by rpki-client