This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json) Hash identifier: MZJwfzG8XLdk7enNnHHgL3D4HugBm4XlfD9pLHRbNkU= Subject key identifier: C0:4A:C8:88:55:CC:1F:10:49:CB:E3:92:4A:61:09:E3:81:38:2F:29 Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Certificate serial: 019B3BD933B855AA4E822BDF2B2C86C37982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 13:00:48 +0000 Manifest this update: Sat 20 Dec 2025 13:00:48 +0000 Manifest next update: Sun 21 Dec 2025 13:00:48 +0000 Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=) 2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=) 3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: yu6Er7n/cy4ABmCiovLHHy1wO238Oq+dysytnNBC6v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:33:b8:55:aa:4e:82:2b:df:2b:2c:86:c3:79:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Validity Not Before: Dec 20 13:00:48 2025 GMT Not After : Dec 21 13:00:48 2025 GMT Subject: CN=c04ac88855cc1f1049cbe3924a6109e381382f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:42:87:80:b3:9a:34:7d:56:b5:d5:66:61: 7c:75:ae:c3:21:c6:40:2b:15:16:ee:d9:c8:9e:f8: ce:dd:4a:e8:e8:ab:02:fd:89:7a:e4:11:fd:0a:77: 11:0a:9c:5e:20:68:f9:22:ec:c6:7d:7e:58:99:5b: 08:99:74:fe:fd:13:f4:78:ce:d8:f6:06:9a:56:b0: 35:ee:28:ab:50:5f:82:47:42:fa:0a:9a:7d:d1:59: 10:98:85:2b:6e:bc:87:ad:91:fb:ae:ac:cc:9b:fb: 58:fc:a1:ad:3d:14:f8:e2:75:f5:43:c3:58:f7:b0: ea:91:64:f9:ad:e6:ba:88:df:1b:66:2c:d1:82:5b: 47:ed:b6:3c:3c:9b:d4:ca:64:cf:15:44:0a:aa:48: 10:10:c1:91:1e:15:64:79:53:77:61:81:ea:ce:81: 39:df:d6:a2:65:f8:30:15:85:11:ca:60:d6:c5:a5: 9d:39:89:d7:cc:7b:54:60:3e:9f:b6:da:9c:c6:e2: e9:39:00:06:65:7d:62:8a:5d:6c:f9:78:67:b6:39: 13:58:37:ca:b5:12:19:0e:40:3d:cf:5b:cb:ec:45: 19:2e:06:1b:09:2d:2e:e3:b4:44:40:bf:07:57:24: 9d:4d:88:97:98:fd:0b:03:0d:bd:77:15:85:30:92: d2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4A:C8:88:55:CC:1F:10:49:CB:E3:92:4A:61:09:E3:81:38:2F:29 X509v3 Authority Key Identifier: keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:09:55:c4:8d:a4:24:7b:e8:4e:b5:41:03:2f:6e:8b:5a:bd: 2e:ba:2a:60:0c:75:4b:61:ac:fe:61:f8:67:73:dc:b2:e9:dd: af:0e:98:0c:cd:ec:c4:e1:03:f7:e6:c1:ba:45:32:46:a5:8c: e6:80:d5:ac:fa:40:0c:72:26:c3:7f:a9:d9:87:93:9a:71:2b: 18:d5:9f:b5:80:04:cc:91:98:0f:cd:42:bc:41:97:5c:47:11: 13:78:be:e0:6f:cb:05:61:2f:7f:2b:50:f7:ce:5f:a1:9d:54: 06:45:df:6c:65:90:80:ea:cd:04:32:5f:94:62:2f:35:d1:0a: 83:1d:c5:35:c6:f2:e1:10:e0:8c:54:0c:d2:10:87:bf:1c:89: 91:63:3d:51:3c:86:f6:ee:ad:8a:41:e8:40:4f:01:ed:a0:ea: 0b:75:52:fb:70:8c:ee:80:ea:cb:07:ad:31:42:83:29:b9:ff: 1a:03:5c:66:3e:33:82:77:c5:1f:27:19:b5:99:99:d7:8f:0d: 0f:d0:96:41:2f:94:f9:57:d4:aa:ac:53:a7:70:04:aa:ea:1a: a0:19:12:2c:0e:a8:b3:c3:56:9b:c1:e9:fb:b3:5e:8b:a8:90: 64:18:7b:83:b1:3a:cc:3f:25:7c:95:da:26:02:61:84:de:69: bb:76:1e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72TO4VapOgivfKyyGw3mCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5 ZTk0YTIwHhcNMjUxMjIwMTMwMDQ4WhcNMjUxMjIxMTMwMDQ4WjAzMTEwLwYDVQQD EyhjMDRhYzg4ODU1Y2MxZjEwNDljYmUzOTI0YTYxMDllMzgxMzgyZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKZCh4CzmjR9VrXVZmF8da7DIcZA KxUW7tnInvjO3Uro6KsC/Yl65BH9CncRCpxeIGj5IuzGfX5YmVsImXT+/RP0eM7Y 9gaaVrA17iirUF+CR0L6Cpp90VkQmIUrbryHrZH7rqzMm/tY/KGtPRT44nX1Q8NY 97DqkWT5rea6iN8bZizRgltH7bY8PJvUymTPFUQKqkgQEMGRHhVkeVN3YYHqzoE5 39aiZfgwFYURymDWxaWdOYnXzHtUYD6fttqcxuLpOQAGZX1iil1s+XhntjkTWDfK tRIZDkA9z1vL7EUZLgYbCS0u47REQL8HVySdTYiXmP0LAw29dxWFMJLSvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBKyIhVzB8QScvjkkphCeOBOC8pMB8GA1UdIwQY MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1 LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGglVxI2k JHvoTrVBAy9ui1q9LroqYAx1S2Gs/mH4Z3Pcsundrw6YDM3sxOED9+bBukUyRqWM 5oDVrPpADHImw3+p2YeTmnErGNWftYAEzJGYD81CvEGXXEcRE3i+4G/LBWEvfytQ 985foZ1UBkXfbGWQgOrNBDJflGIvNdEKgx3FNcby4RDgjFQM0hCHvxyJkWM9UTyG 9u6tikHoQE8B7aDqC3VS+3CM7oDqywetMUKDKbn/GgNcZj4zgnfFHycZtZmZ148N D9CWQS+U+VfUqqxTp3AEquoaoBkSLA6os8NWm8Hp+7Nei6iQZBh7g7E6zD8lfJXa JgJhhN5pu3YeMw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:39:43 2025 by rpki-client