This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft File: vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json) Hash identifier: +7oX/KjfNb9firVwLrt8Uu/6Vq7nd/p3xy3y7dbuFRg= Subject key identifier: BA:75:AE:54:D0:AB:16:78:61:23:22:9D:82:F4:E5:95:A9:D9:8F:70 Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF Certificate issuer: /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf Certificate serial: 019B73DAA99719B6F40D9C84A49943F2D694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft Manifest number: 17A6 Signing time: Wed 31 Dec 2025 10:01:08 +0000 Manifest this update: Wed 31 Dec 2025 10:01:08 +0000 Manifest next update: Thu 01 Jan 2026 10:01:08 +0000 Files and hashes: 1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=) 2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: 9oK/sEgrB6okiWjQflh9Xvb99ONARxZov619xFE08QU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:da:a9:97:19:b6:f4:0d:9c:84:a4:99:43:f2:d6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf Validity Not Before: Dec 31 10:01:08 2025 GMT Not After : Jan 1 10:01:08 2026 GMT Subject: CN=ba75ae54d0ab16786123229d82f4e595a9d98f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6e:9a:64:77:5f:d0:9b:32:27:63:c9:ff:1c: 98:17:7c:b1:1a:cc:16:54:be:b2:ea:8e:b8:95:02: 09:22:d7:a7:d2:b2:fe:43:3a:fa:17:c5:40:c2:07: ae:d2:06:b6:18:36:2c:3d:9f:dc:01:57:50:37:1e: ed:a3:cb:ca:01:3d:3e:95:a8:a0:10:1c:38:46:8f: 3d:6d:7f:bf:2a:85:77:9c:b9:c6:9b:51:42:0b:81: a1:d3:b3:88:da:d4:c1:35:12:68:54:c0:c1:40:ab: 26:ed:1a:cb:36:81:2f:d5:17:25:2e:25:3d:78:24: 85:9d:26:09:ab:5a:f5:7c:62:2c:ae:46:c5:4d:e3: fa:b4:fa:f5:ad:cf:6b:64:8b:e8:96:2f:83:3b:4a: ec:d1:2c:fe:7c:e4:3c:3c:2f:76:17:5e:fe:48:5d: 57:6c:1a:5f:f8:62:42:87:10:7d:ce:9b:70:a0:27: 3a:75:a7:20:06:9c:35:89:b6:14:3a:ae:7e:26:89: 62:15:bf:74:40:76:a2:e3:98:91:4e:8f:4d:43:86: 53:72:a8:d9:16:c0:c7:98:d3:11:c2:a0:27:aa:ea: a9:0f:cf:bd:81:11:08:01:78:6f:90:e7:03:5d:59: 46:19:c5:1f:57:af:91:c3:8e:76:6d:5d:8b:88:99: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:75:AE:54:D0:AB:16:78:61:23:22:9D:82:F4:E5:95:A9:D9:8F:70 X509v3 Authority Key Identifier: keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:aa:d8:77:cb:fe:ff:aa:aa:51:36:23:ae:7c:ac:19:a0:c4: 95:92:a6:fa:8c:b5:18:2f:3b:b1:7d:dc:5b:ae:41:2e:e0:cc: e3:30:a7:45:a4:e8:82:56:7f:e0:e3:fe:31:05:96:25:33:c9: 16:d8:07:1f:5e:39:b8:98:b4:88:70:d3:80:58:81:08:df:16: 14:f3:9f:8d:b2:c3:55:18:97:ee:e3:9b:b9:b9:69:0e:98:0a: 98:e5:fd:f3:b1:cc:3e:da:b9:ab:c2:8e:d8:a7:6d:06:d6:f5: da:eb:47:9a:f7:f5:4d:50:b7:a3:5a:b2:4d:3a:76:ad:fc:11: 4c:b3:11:80:cd:3b:b4:65:04:58:70:4b:15:e7:f8:a5:d3:92: 38:b7:f5:c1:4a:b7:95:71:ab:47:47:ad:18:92:53:13:08:0f: 59:ec:68:45:1b:ed:16:c2:95:bf:d9:da:99:9e:cc:24:ee:c0: 38:01:b8:5c:32:2c:dc:01:da:b8:7d:85:80:7d:99:86:1e:9c: 81:39:99:30:44:92:f5:1e:6f:d8:ee:8f:57:27:c8:e3:2e:2b: 26:28:f3:fe:45:ba:88:5b:6a:6e:b5:e1:9e:4a:fc:1c:7f:9d: 2a:a5:b6:2a:97:fa:5e:6f:d1:98:79:a0:d2:7d:00:01:e0:f4: 11:79:25:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtz2qmXGbb0DZyEpJlD8taUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNmFhNzM2MmQzNjc5MmNiY2ZhODM2MDliNWQ3NWNjOTY1 ZjNmYWYwHhcNMjUxMjMxMTAwMTA4WhcNMjYwMTAxMTAwMTA4WjAzMTEwLwYDVQQD EyhiYTc1YWU1NGQwYWIxNjc4NjEyMzIyOWQ4MmY0ZTU5NWE5ZDk4ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA726aZHdf0JsyJ2PJ/xyYF3yxGswW VL6y6o64lQIJIten0rL+Qzr6F8VAwgeu0ga2GDYsPZ/cAVdQNx7to8vKAT0+laig EBw4Ro89bX+/KoV3nLnGm1FCC4Gh07OI2tTBNRJoVMDBQKsm7RrLNoEv1RclLiU9 eCSFnSYJq1r1fGIsrkbFTeP6tPr1rc9rZIvoli+DO0rs0Sz+fOQ8PC92F17+SF1X bBpf+GJChxB9zptwoCc6dacgBpw1ibYUOq5+JoliFb90QHai45iRTo9NQ4ZTcqjZ FsDHmNMRwqAnquqpD8+9gREIAXhvkOcDXVlGGcUfV6+Rw452bV2LiJnIfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp1rlTQqxZ4YSMinYL05ZWp2Y9wMB8GA1UdIwQY MBaAFL1qpzYtNnksvPqDYJtddcyWXz+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mOWE4ZWMtZjU4Mi00NzVjLThjYzkt ZDVjODYzNWJlYzg4LzEvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mOWE4ZWMtZjU4Mi00NzVjLThjYzktZDVjODYzNWJlYzg4 LzEvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqrYd8v+ /6qqUTYjrnysGaDElZKm+oy1GC87sX3cW65BLuDM4zCnRaToglZ/4OP+MQWWJTPJ FtgHH145uJi0iHDTgFiBCN8WFPOfjbLDVRiX7uObublpDpgKmOX987HMPtq5q8KO 2KdtBtb12utHmvf1TVC3o1qyTTp2rfwRTLMRgM07tGUEWHBLFef4pdOSOLf1wUq3 lXGrR0etGJJTEwgPWexoRRvtFsKVv9namZ7MJO7AOAG4XDIs3AHauH2FgH2Zhh6c gTmZMESS9R5v2O6PVyfI4y4rJijz/kW6iFtqbrXhnkr8HH+dKqW2Kpf6Xm/RmHmg 0n0AAeD0EXklSA== -----END CERTIFICATE-----Generated at Wed Dec 31 13:28:57 2025 by rpki-client