This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json) Hash identifier: sQhcKi+osdayqZithYw7hh65Emfo01sZGgPzoY8MzFo= Subject key identifier: 39:65:21:A9:CF:BA:69:5C:3F:48:82:31:77:25:86:81:79:54:F4:83 Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39 Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39 Certificate serial: 019B6CC5F8ECD63113C1DB2D6944289EE83A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft Manifest number: 08BC Signing time: Tue 30 Dec 2025 01:01:12 +0000 Manifest this update: Tue 30 Dec 2025 01:01:12 +0000 Manifest next update: Wed 31 Dec 2025 01:01:12 +0000 Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=) 2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: L5DrkEBzRNj/t3acItvM0U0wJ9z8bLI73oY2D2t2C9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:f8:ec:d6:31:13:c1:db:2d:69:44:28:9e:e8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39 Validity Not Before: Dec 30 01:01:12 2025 GMT Not After : Dec 31 01:01:12 2025 GMT Subject: CN=396521a9cfba695c3f488231772586817954f483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:b5:05:f2:a4:93:3f:40:95:1c:a0:15:a9: 06:48:61:09:bc:d2:23:ee:c1:3f:73:b7:b8:3d:84: 93:6f:87:cc:c0:22:ec:48:14:ec:5f:ee:d6:1f:10: 46:dc:57:10:c7:11:b7:e5:62:ee:5b:93:12:58:e0: 5a:94:e2:15:ae:13:a8:6b:53:7b:9b:aa:b9:c4:eb: 47:58:18:35:7c:df:43:2a:85:95:d6:7c:79:52:89: b0:b0:06:f5:de:ad:31:e4:3f:97:59:fa:b9:5a:ee: a3:cb:e0:5d:2e:16:4f:2d:78:24:b9:68:ac:fd:f4: 88:3d:5c:62:1c:1f:cf:eb:9e:74:b4:b6:9e:46:20: 98:24:3f:6b:ff:ee:d4:0b:55:ee:6b:e2:1e:20:6b: 16:c8:4e:92:bb:7d:a6:1c:96:58:9c:0a:4d:ff:08: 06:14:b1:b0:ed:1f:12:9a:19:04:b2:23:58:ad:40: ba:7e:da:50:05:9c:c7:ac:af:c9:2a:19:8b:b1:ee: 4b:40:95:c3:11:ae:ba:6b:52:4f:bc:0f:98:c6:08: 46:62:e0:87:fc:97:f3:52:1e:df:4a:5b:30:27:b5: 94:a0:42:fe:05:4c:ba:d8:b2:f3:8a:f0:a3:54:a7: 3d:19:7b:e3:b7:d5:4b:45:1f:03:ef:9d:b5:29:d8: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:21:A9:CF:BA:69:5C:3F:48:82:31:77:25:86:81:79:54:F4:83 X509v3 Authority Key Identifier: keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2b:2c:c2:0c:4b:fc:64:13:be:da:e1:db:f4:18:e2:82:a2: fe:ac:e6:c4:0e:14:37:00:ad:13:fc:b8:e7:38:81:2b:7d:22: da:cf:88:3b:3b:7a:b1:e7:0d:a2:6e:c6:80:63:9b:35:c8:b5: 79:ba:91:5b:17:fa:a4:44:71:e3:32:b3:3d:e4:ef:31:63:e2: e4:ff:f9:41:1b:38:03:53:a9:80:48:66:54:f4:a8:7b:65:64: a8:2d:1c:61:d5:cb:c5:0d:91:5d:80:fa:d2:2f:bb:6f:ac:38: b8:5f:1e:cb:18:78:ae:87:83:b6:62:0b:90:7f:8a:7f:9f:36: fe:68:fc:67:01:3e:c0:65:50:6b:5c:39:ab:fd:3c:76:66:5e: 83:2e:59:11:5c:67:ad:ec:fe:5c:39:a7:e9:82:e1:fe:ba:f6: b2:c9:1f:22:36:2d:98:36:94:2c:40:34:7e:13:a1:1c:15:83: 1c:65:12:c2:52:11:1e:7c:52:d6:66:af:af:08:f4:0e:de:a2: 63:73:2a:2c:fb:9d:48:5c:55:dc:b4:4c:08:b6:69:2f:63:3a: d4:6c:49:01:6f:0d:6e:00:5f:4d:63:67:ba:bf:d7:eb:bf:52: b9:b1:85:83:f6:87:d8:fc:66:74:c3:65:77:2c:56:63:99:18: a7:89:90:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxfjs1jETwdstaUQonug6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODVkMzc5MWY1ODM2YzQxNWZmZDM5MWYyZDU4NWM3M2Ri ZWNhMzkwHhcNMjUxMjMwMDEwMTEyWhcNMjUxMjMxMDEwMTEyWjAzMTEwLwYDVQQD EygzOTY1MjFhOWNmYmE2OTVjM2Y0ODgyMzE3NzI1ODY4MTc5NTRmNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOa1BfKkkz9AlRygFakGSGEJvNIj 7sE/c7e4PYSTb4fMwCLsSBTsX+7WHxBG3FcQxxG35WLuW5MSWOBalOIVrhOoa1N7 m6q5xOtHWBg1fN9DKoWV1nx5UomwsAb13q0x5D+XWfq5Wu6jy+BdLhZPLXgkuWis /fSIPVxiHB/P6550tLaeRiCYJD9r/+7UC1Xua+IeIGsWyE6Su32mHJZYnApN/wgG FLGw7R8SmhkEsiNYrUC6ftpQBZzHrK/JKhmLse5LQJXDEa66a1JPvA+YxghGYuCH /JfzUh7fSlswJ7WUoEL+BUy62LLzivCjVKc9GXvjt9VLRR8D7521KdhiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDllIanPumlcP0iCMXclhoF5VPSDMB8GA1UdIwQY MBaAFLyF03kfWDbEFf/TkfLVhcc9vso5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDct Yjg0MmI5OTA2ODllLzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDctYjg0MmI5OTA2ODll LzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqysswgxL /GQTvtrh2/QY4oKi/qzmxA4UNwCtE/y45ziBK30i2s+IOzt6secNom7GgGObNci1 ebqRWxf6pERx4zKzPeTvMWPi5P/5QRs4A1OpgEhmVPSoe2VkqC0cYdXLxQ2RXYD6 0i+7b6w4uF8eyxh4roeDtmILkH+Kf582/mj8ZwE+wGVQa1w5q/08dmZegy5ZEVxn rez+XDmn6YLh/rr2sskfIjYtmDaULEA0fhOhHBWDHGUSwlIRHnxS1mavrwj0Dt6i Y3MqLPudSFxV3LRMCLZpL2M61GxJAW8NbgBfTWNnur/X679SubGFg/aH2PxmdMNl dyxWY5kYp4mQxw== -----END CERTIFICATE-----Generated at Tue Dec 30 09:41:43 2025 by rpki-client