This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json) Hash identifier: GSkL4SoBnalx/FbTLCXjWp0Zbwg5PxoJOBxoCgBGVhs= Subject key identifier: 5C:C2:CE:86:6B:17:85:C0:1A:A3:47:E6:D6:EA:20:55:28:90:F5:D4 Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71 Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471 Certificate serial: 019B42EE5EA449AA1A4C159AFC567A64676E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft Manifest number: 16E1 Signing time: Sun 21 Dec 2025 22:01:16 +0000 Manifest this update: Sun 21 Dec 2025 22:01:16 +0000 Manifest next update: Mon 22 Dec 2025 22:01:16 +0000 Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=) 2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: JO1bcCKWdpRQhHWI4yGoZjX3wTBprmoVOtwg7xAQTn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:5e:a4:49:aa:1a:4c:15:9a:fc:56:7a:64:67:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471 Validity Not Before: Dec 21 22:01:16 2025 GMT Not After : Dec 22 22:01:16 2025 GMT Subject: CN=5cc2ce866b1785c01aa347e6d6ea20552890f5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:00:03:e2:40:6f:aa:80:64:76:5d:f7:0b: e3:13:7c:60:09:ec:7a:f3:3e:75:10:fc:62:eb:95: 8b:91:a4:65:ae:9e:32:c9:36:1f:03:6c:ef:37:c8: e3:5f:64:ad:a6:fc:43:0e:27:81:e1:2f:24:2d:28: ca:19:56:38:4e:fa:ba:ec:be:4c:4e:b4:98:5a:a8: 07:5f:e0:d6:78:51:0b:0f:b9:80:2d:03:f0:9c:cb: e9:8c:00:d9:98:51:d0:18:7b:8f:d0:d0:75:60:a9: 5a:45:36:fa:51:d4:7f:76:c2:93:2a:80:16:76:5c: 4d:9c:bc:6b:a7:08:61:a7:d7:74:82:b8:cd:05:9b: bd:a8:6d:19:79:ba:91:d7:36:59:25:59:24:63:a3: 17:a7:4b:91:ec:3d:16:39:0d:ce:69:4d:7b:c1:b5: fa:41:00:f1:fc:e7:9b:a3:e0:45:cf:e2:5d:e7:0f: 18:85:73:6c:fc:3b:ae:87:36:ab:ea:0b:44:d8:6f: c8:2e:f2:c4:87:85:01:4d:6b:b7:38:96:cc:fd:4f: 26:73:cf:ca:02:8c:92:08:7d:a2:80:07:f4:e5:ec: 5e:f3:b9:6e:f2:e9:d1:95:18:73:65:24:92:55:15: 16:53:1f:71:a5:37:33:f0:dd:40:da:e8:62:e9:1e: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C2:CE:86:6B:17:85:C0:1A:A3:47:E6:D6:EA:20:55:28:90:F5:D4 X509v3 Authority Key Identifier: keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:61:dc:5f:c9:99:3e:cc:87:fe:8c:f5:18:6b:15:f6:9c:8b: 23:2f:60:6c:0e:d5:6c:fe:ab:39:d0:de:5a:86:fd:97:a7:15: 8b:02:4b:c0:d1:9c:6f:ae:08:bf:18:eb:98:e4:30:15:53:9a: b8:50:93:9d:d7:4b:c7:c0:53:13:b3:85:37:c4:e7:ac:96:a5: 32:19:78:34:fe:48:57:d5:11:22:05:d6:e3:bc:ab:b7:bf:ad: 9d:ba:e7:bf:72:87:df:c5:10:2c:86:bd:0d:0e:4b:5f:d5:00: 35:5e:8a:05:aa:8c:f9:31:61:5c:07:78:3f:67:b6:fd:27:c2: fd:a4:a4:d0:b7:8a:6a:be:76:7b:2a:71:f2:2b:35:aa:3a:93: 04:2f:d1:2e:16:72:af:59:9d:9f:8b:b0:5c:f0:ea:8b:fb:f3: 9c:64:db:eb:1d:3c:f7:b4:fc:a6:27:8e:98:7b:15:84:f2:54: fe:e0:49:4d:9d:0c:10:4a:c4:9e:17:7b:b6:df:85:0c:d9:30: 96:ea:4e:32:5b:f3:61:fd:37:46:dc:04:6d:ea:a2:7a:fd:d9: 81:3e:f6:57:66:d7:ee:3c:93:b6:05:0f:e9:2f:db:ac:ff:47: cb:15:5f:86:53:c5:17:17:74:7d:33:9b:e6:24:63:7b:8d:19: 13:23:f6:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7l6kSaoaTBWa/FZ6ZGduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTNkMGJiNDIyYjBiY2E3MDY3MTZjMjBmN2FkNThkZDI3 NjU0NzEwHhcNMjUxMjIxMjIwMTE2WhcNMjUxMjIyMjIwMTE2WjAzMTEwLwYDVQQD Eyg1Y2MyY2U4NjZiMTc4NWMwMWFhMzQ3ZTZkNmVhMjA1NTI4OTBmNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0AAA+JAb6qAZHZd9wvjE3xgCex6 8z51EPxi65WLkaRlrp4yyTYfA2zvN8jjX2StpvxDDieB4S8kLSjKGVY4Tvq67L5M TrSYWqgHX+DWeFELD7mALQPwnMvpjADZmFHQGHuP0NB1YKlaRTb6UdR/dsKTKoAW dlxNnLxrpwhhp9d0grjNBZu9qG0ZebqR1zZZJVkkY6MXp0uR7D0WOQ3OaU17wbX6 QQDx/Oebo+BFz+Jd5w8YhXNs/Duuhzar6gtE2G/ILvLEh4UBTWu3OJbM/U8mc8/K AoySCH2igAf05exe87lu8unRlRhzZSSSVRUWUx9xpTcz8N1A2uhi6R4hRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzCzoZrF4XAGqNH5tbqIFUokPXUMB8GA1UdIwQY MBaAFL2j0LtCKwvKcGcWwg961Y3SdlRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEt ZjIzMjgzNjAxNzY0LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEtZjIzMjgzNjAxNzY0 LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmHcX8mZ PsyH/oz1GGsV9pyLIy9gbA7VbP6rOdDeWob9l6cViwJLwNGcb64IvxjrmOQwFVOa uFCTnddLx8BTE7OFN8TnrJalMhl4NP5IV9URIgXW47yrt7+tnbrnv3KH38UQLIa9 DQ5LX9UANV6KBaqM+TFhXAd4P2e2/SfC/aSk0LeKar52eypx8is1qjqTBC/RLhZy r1mdn4uwXPDqi/vznGTb6x0897T8pieOmHsVhPJU/uBJTZ0MEErEnhd7tt+FDNkw lupOMlvzYf03RtwEbeqiev3ZgT72V2bX7jyTtgUP6S/brP9HyxVfhlPFFxd0fTOb 5iRje40ZEyP2Fg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:25 2025 by rpki-client