This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json) Hash identifier: RqojDxuipBKidtrocZnRCv2v68xSIKg8pz8kk+UUmxo= Subject key identifier: D8:D0:A2:33:1E:2D:70:5E:BB:3E:D0:E9:48:6D:50:2B:82:3F:4B:27 Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Certificate serial: 019B3F7F1E729AC0E09EC23A92B0990516F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft Manifest number: 0D5C Signing time: Sun 21 Dec 2025 06:00:53 +0000 Manifest this update: Sun 21 Dec 2025 06:00:53 +0000 Manifest next update: Mon 22 Dec 2025 06:00:53 +0000 Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=) 2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 25DTCIiRKU8ndNo4UtI5057AfThsOrsm/vpTycX/t1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:1e:72:9a:c0:e0:9e:c2:3a:92:b0:99:05:16:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Validity Not Before: Dec 21 06:00:53 2025 GMT Not After : Dec 22 06:00:53 2025 GMT Subject: CN=d8d0a2331e2d705ebb3ed0e9486d502b823f4b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:5e:87:c8:5a:24:6e:69:12:14:34:5c:db: b6:4a:bb:9f:50:b4:12:6b:17:dc:20:7e:a9:01:4e: bb:bd:51:dc:f4:23:cf:e5:41:ef:75:cc:6c:a2:91: 28:a9:72:74:75:52:3e:5e:93:9e:38:31:98:8c:75: 49:61:16:71:f7:e5:bb:00:60:05:9d:0f:bd:7c:da: 88:a5:8a:97:00:83:77:7f:cf:41:2c:11:bc:42:3a: 86:43:37:75:6c:3b:01:ef:30:10:e4:be:c6:e8:7b: 73:42:53:8f:ca:cc:2f:4b:12:0f:aa:90:74:b9:6d: 9f:ff:27:72:69:3c:e6:c6:58:99:0a:d3:42:c8:66: bf:31:fb:39:bf:78:9b:46:e4:cb:4d:8f:d0:c0:5a: 7f:91:ee:c3:5b:12:65:28:09:ad:10:9a:60:67:8d: 07:d7:18:4d:52:9c:d4:58:94:ec:ef:18:40:43:9b: 77:3f:b2:40:f3:b7:47:10:ca:db:01:4d:d4:fd:e1: b5:2d:07:bc:f9:b7:81:dc:17:c3:f6:16:cc:9c:be: 70:40:36:e5:ff:8b:e0:31:52:c2:97:48:e6:18:45: ce:4b:99:6e:d2:b3:e5:c2:d1:24:18:a2:e9:3f:cf: a7:53:0a:c8:92:7a:17:60:1d:e6:a4:ad:c1:de:b7: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D0:A2:33:1E:2D:70:5E:BB:3E:D0:E9:48:6D:50:2B:82:3F:4B:27 X509v3 Authority Key Identifier: keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:48:09:b7:6a:b1:a9:48:48:54:eb:aa:99:93:b7:0c:29:c0: bb:83:f2:08:ba:c1:a7:05:41:53:87:73:ac:57:5a:56:d4:22: 0b:1c:ca:18:3a:03:fb:a4:b4:85:89:1b:36:12:c4:3a:cb:18: 81:81:99:71:73:bf:64:33:94:e2:85:86:77:a1:d4:4d:a3:53: 9d:16:cd:71:4f:50:ef:d2:4a:ab:0d:86:68:47:e8:63:52:11: af:14:02:cb:c3:b2:3c:9a:02:ee:b0:76:7d:5c:0b:91:6b:83: 83:34:c4:f2:a2:87:30:f2:c9:30:2c:41:bd:34:21:26:69:02: cd:94:a1:98:78:42:0f:57:d0:13:47:0b:af:1a:93:da:f2:8d: 2a:20:e0:4e:d1:d4:13:87:69:b0:dd:9b:86:b6:6d:27:66:2f: 05:85:7d:7e:04:5f:83:07:24:71:f5:c9:2a:66:2c:81:e5:8f: 5c:a5:c2:6f:db:c6:9b:8a:14:43:81:33:51:11:36:6f:4a:15: 82:83:40:cd:1f:31:3c:fc:7c:ce:76:9d:09:37:f8:09:76:37: 78:83:93:f9:9b:7c:fe:84:65:90:3b:ed:b6:89:14:a7:cf:d6: 11:e9:70:b5:8f:06:e6:7f:90:cb:7b:a2:44:de:9c:ae:89:53: fc:44:16:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fx5ymsDgnsI6krCZBRbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5 ZDAxNDgwHhcNMjUxMjIxMDYwMDUzWhcNMjUxMjIyMDYwMDUzWjAzMTEwLwYDVQQD EyhkOGQwYTIzMzFlMmQ3MDVlYmIzZWQwZTk0ODZkNTAyYjgyM2Y0YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24deh8haJG5pEhQ0XNu2SrufULQS axfcIH6pAU67vVHc9CPP5UHvdcxsopEoqXJ0dVI+XpOeODGYjHVJYRZx9+W7AGAF nQ+9fNqIpYqXAIN3f89BLBG8QjqGQzd1bDsB7zAQ5L7G6HtzQlOPyswvSxIPqpB0 uW2f/ydyaTzmxliZCtNCyGa/Mfs5v3ibRuTLTY/QwFp/ke7DWxJlKAmtEJpgZ40H 1xhNUpzUWJTs7xhAQ5t3P7JA87dHEMrbAU3U/eG1LQe8+beB3BfD9hbMnL5wQDbl /4vgMVLCl0jmGEXOS5lu0rPlwtEkGKLpP8+nUwrIknoXYB3mpK3B3rfdiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjQojMeLXBeuz7Q6UhtUCuCP0snMB8GA1UdIwQY MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUgJt2qx qUhIVOuqmZO3DCnAu4PyCLrBpwVBU4dzrFdaVtQiCxzKGDoD+6S0hYkbNhLEOssY gYGZcXO/ZDOU4oWGd6HUTaNTnRbNcU9Q79JKqw2GaEfoY1IRrxQCy8OyPJoC7rB2 fVwLkWuDgzTE8qKHMPLJMCxBvTQhJmkCzZShmHhCD1fQE0cLrxqT2vKNKiDgTtHU E4dpsN2bhrZtJ2YvBYV9fgRfgwckcfXJKmYsgeWPXKXCb9vGm4oUQ4EzURE2b0oV goNAzR8xPPx8znadCTf4CXY3eIOT+Zt8/oRlkDvttokUp8/WEelwtY8G5n+Qy3ui RN6crolT/EQWYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:16:11 2025 by rpki-client