This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json) Hash identifier: 1aCeP6EYHYVyN+C1jGUSIYDlCy2M3ufxeEHXvDcVcro= Subject key identifier: 8B:E1:D6:06:73:98:16:63:C8:A5:53:92:37:49:12:C4:68:71:D5:DE Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507 Certificate serial: 019B492730ADCDB0DB80CDDDCE35671E42CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 03:01:03 +0000 Manifest this update: Tue 23 Dec 2025 03:01:03 +0000 Manifest next update: Wed 24 Dec 2025 03:01:03 +0000 Files and hashes: 1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=) 2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: k8JRTN8G0T6tguLApSOvTdgZNZW8sIThuDQPoS3B7/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:30:ad:cd:b0:db:80:cd:dd:ce:35:67:1e:42:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507 Validity Not Before: Dec 23 03:01:03 2025 GMT Not After : Dec 24 03:01:03 2025 GMT Subject: CN=8be1d60673981663c8a55392374912c46871d5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:c7:57:73:e4:00:09:06:ee:9c:eb:1a:a8: 70:98:ef:35:d7:55:bd:7c:81:e3:0c:77:3e:eb:a5: d1:db:80:e5:ef:43:35:25:9a:7b:cf:60:32:a3:2e: da:15:6c:a5:76:f8:2b:08:85:42:13:97:5b:36:8f: 52:ff:a4:04:31:a5:1f:b8:dc:f4:79:88:ee:d9:73: fe:7b:51:40:7f:1c:b3:e9:5c:aa:a1:93:e4:95:9e: f7:80:e4:63:cb:f2:62:52:b6:0d:35:65:5e:aa:ec: ef:e3:0d:3a:89:b6:94:36:9f:7e:a4:3f:9e:7c:01: 75:cd:cc:29:2e:68:73:d9:19:68:b9:6d:50:d9:b3: c8:13:64:1d:74:46:4a:a1:64:7d:93:01:f1:ad:dc: 5a:da:e4:e0:a1:0f:9c:64:da:29:77:ff:0c:b1:44: 00:8f:9c:99:5a:19:02:c7:27:fe:ca:58:39:2b:05: bb:98:a4:d0:ae:0e:2d:7c:99:a9:17:9e:85:ca:78: 6b:52:a1:c9:a8:66:77:de:0a:c6:fc:3d:33:81:00: 59:b9:f3:87:d0:62:f8:8e:2a:7d:fc:51:fb:19:f0: d2:eb:18:c3:c1:a9:e0:04:ae:52:4e:a2:4e:66:d9: eb:42:2a:82:45:8b:70:ae:76:d6:0d:4c:9a:17:64: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E1:D6:06:73:98:16:63:C8:A5:53:92:37:49:12:C4:68:71:D5:DE X509v3 Authority Key Identifier: keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ae:23:06:19:a2:4e:51:8b:82:6f:c8:11:cb:48:eb:dc:61: f1:6f:4e:38:36:c0:69:e7:0c:b5:14:18:d1:ec:3c:6b:80:db: 22:46:2c:8e:35:ef:9d:58:d3:7d:81:73:3e:23:01:56:71:3b: 63:14:8e:0f:b3:7a:9b:59:01:b7:8a:0e:e5:e7:61:d6:3c:7d: eb:9c:35:d1:e9:ce:3f:ca:a5:72:b4:c3:16:a7:ef:f6:55:5e: 67:95:ce:3a:ac:2b:03:64:fb:1c:e6:20:7e:a7:99:1e:61:b7: 67:84:7f:0e:cb:2b:d8:fb:25:8a:43:f0:e6:86:57:79:77:77: f7:84:3e:11:33:86:b8:cc:0c:73:8a:8b:f8:c7:f4:f9:3f:9c: 01:14:07:3d:5b:ef:fd:8e:b0:74:e5:30:43:e1:3b:7f:b7:3d: 23:6d:62:b1:85:d0:b5:d9:14:67:58:af:1e:81:10:b0:d5:88: 98:bc:a9:b4:ad:00:67:7f:09:35:36:6f:c9:b9:c9:58:d5:ce: d0:74:e6:28:2d:68:36:fc:73:0b:e2:23:09:70:cb:5e:ff:40: 34:35:b3:db:51:dd:69:96:32:b6:07:fb:96:f6:90:bf:61:83: 69:2b:14:02:0a:db:af:ac:02:4c:8c:e4:75:a9:6b:ea:07:8f: d2:3a:d3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJzCtzbDbgM3dzjVnHkLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2M1NGQxZWRjYTY5MmY0NGM5ZGEzODM0MDJjMjRmZGU3 MjM1MDcwHhcNMjUxMjIzMDMwMTAzWhcNMjUxMjI0MDMwMTAzWjAzMTEwLwYDVQQD Eyg4YmUxZDYwNjczOTgxNjYzYzhhNTUzOTIzNzQ5MTJjNDY4NzFkNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArezHV3PkAAkG7pzrGqhwmO8111W9 fIHjDHc+66XR24Dl70M1JZp7z2Ayoy7aFWyldvgrCIVCE5dbNo9S/6QEMaUfuNz0 eYju2XP+e1FAfxyz6VyqoZPklZ73gORjy/JiUrYNNWVequzv4w06ibaUNp9+pD+e fAF1zcwpLmhz2RlouW1Q2bPIE2QddEZKoWR9kwHxrdxa2uTgoQ+cZNopd/8MsUQA j5yZWhkCxyf+ylg5KwW7mKTQrg4tfJmpF56FynhrUqHJqGZ33grG/D0zgQBZufOH 0GL4jip9/FH7GfDS6xjDwangBK5STqJOZtnrQiqCRYtwrnbWDUyaF2Rh0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvh1gZzmBZjyKVTkjdJEsRocdXeMB8GA1UdIwQY MBaAFL48VNHtymkvRMnaODQCwk/ecjUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQt YzM0OTUzZWRjN2U1LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQtYzM0OTUzZWRjN2U1 LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAda4jBhmi TlGLgm/IEctI69xh8W9OODbAaecMtRQY0ew8a4DbIkYsjjXvnVjTfYFzPiMBVnE7 YxSOD7N6m1kBt4oO5edh1jx965w10enOP8qlcrTDFqfv9lVeZ5XOOqwrA2T7HOYg fqeZHmG3Z4R/Dssr2PslikPw5oZXeXd394Q+ETOGuMwMc4qL+Mf0+T+cARQHPVvv /Y6wdOUwQ+E7f7c9I21isYXQtdkUZ1ivHoEQsNWImLyptK0AZ38JNTZvybnJWNXO 0HTmKC1oNvxzC+IjCXDLXv9ANDWz21HdaZYytgf7lvaQv2GDaSsUAgrbr6wCTIzk dalr6geP0jrTdQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:07:37 2025 by rpki-client