This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json) Hash identifier: PjOc+GEmCsSaU4IBGBOt2Kpj95GG/lOto/u2mXkS2eY= Subject key identifier: FF:2E:5A:B9:32:D1:BB:48:43:0A:3F:F0:6D:88:D1:D7:B3:C5:6A:26 Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Certificate serial: 019B34C67FC0D2B55773C03214ABD841FC1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft Manifest number: 48 Signing time: Fri 19 Dec 2025 04:03:02 +0000 Manifest this update: Fri 19 Dec 2025 04:03:02 +0000 Manifest next update: Sat 20 Dec 2025 04:03:02 +0000 Files and hashes: 1: 30rO_BdRX1qylu2XkOuDKVnX5kA.roa (hash: bXGCsHFr9AJnwD9C9VsQWa2UE5+/86m77Z5zzSFtsJQ=) 2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: 5imgdpJz34LnFJQApfw7G2Qdw893FHT+vOuXGE6KgIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:7f:c0:d2:b5:57:73:c0:32:14:ab:d8:41:fc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Validity Not Before: Dec 19 04:03:02 2025 GMT Not After : Dec 20 04:03:02 2025 GMT Subject: CN=ff2e5ab932d1bb48430a3ff06d88d1d7b3c56a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b9:7d:bd:0f:f3:87:00:be:db:04:5d:c6:64: af:63:bf:14:3b:a9:b9:90:6b:f5:91:17:af:ac:b6: 85:ba:2a:9e:2e:dd:f4:b0:59:61:da:31:61:46:6e: 77:29:f6:e8:b9:54:5b:a3:3c:d2:f2:55:e4:3a:d7: c7:96:95:a5:73:d3:eb:f2:5b:31:fc:a7:8f:49:5e: d2:db:6e:ea:07:81:ea:31:df:43:a4:c9:d6:7f:59: cb:db:13:73:65:8e:78:76:2f:83:d6:68:9c:54:bd: 7c:d4:30:7c:d1:1d:ac:cd:f4:1c:d6:bc:51:d1:1c: d0:cd:96:dc:61:6b:75:8f:4f:49:34:8c:50:5f:93: ee:72:1b:29:c1:cd:c1:c0:bc:56:49:3e:d8:87:f1: a4:ae:bd:5e:5a:12:0a:5b:52:b4:9d:c1:e6:76:a9: 42:49:3a:27:35:43:ca:9d:b9:07:1f:e0:70:79:f7: 8f:ff:ab:d0:b5:26:28:3b:1f:64:c2:db:bd:9b:69: 95:57:a6:5c:0f:93:15:6f:da:16:c4:42:a2:14:43: 0e:b2:3a:52:03:f0:67:6b:ab:a7:a3:37:e0:01:36: 9f:56:e6:9d:e3:d0:4a:57:45:11:1f:cd:56:1e:c4: ee:f8:f7:69:87:8d:53:0c:1e:f5:a0:04:9b:cd:4b: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2E:5A:B9:32:D1:BB:48:43:0A:3F:F0:6D:88:D1:D7:B3:C5:6A:26 X509v3 Authority Key Identifier: keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e2:96:6d:48:73:1f:89:c3:fe:89:24:27:79:7c:7c:5e:50: 70:d3:41:11:5a:fe:5b:c2:8b:9f:19:31:a0:bc:c4:9d:43:0b: a1:d2:31:7a:0c:69:37:94:de:ca:84:41:3d:98:a0:bc:7a:d8: b3:20:10:29:5b:41:9e:16:82:90:3c:3e:c8:a2:20:14:1d:50: 0f:f9:a1:d2:f5:69:7e:80:0b:4a:69:94:3b:f7:ff:54:71:98: 26:c5:7b:83:ce:8d:72:09:0f:6f:b4:48:c8:87:9b:1c:e0:36: 41:3f:33:26:80:76:85:ef:d6:c0:16:00:60:87:04:8d:aa:13: 65:e2:53:4b:9f:f0:d1:e1:c1:85:47:f7:a4:7b:65:40:e6:48: e3:bb:54:9a:8b:9d:38:f4:94:01:7e:ad:68:ea:d1:71:e1:76: 1f:fd:b6:89:b2:57:a7:77:16:c8:bf:40:8f:84:b4:1f:98:57: d2:12:a6:4e:51:46:26:7d:70:af:29:52:b1:e0:b5:5e:5b:d2: 89:90:6c:60:3e:f4:5b:6a:db:db:3d:c3:e4:ce:a5:8a:8c:7a: a9:90:fc:6a:f4:fd:5f:74:a8:08:21:6c:15:9c:08:51:cc:46: 64:ca:9d:21:fd:f7:de:a4:de:09:da:d2:59:4e:d0:b9:47:e6: ec:53:a1:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xn/A0rVXc8AyFKvYQfwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWM2YWI2YmMyMDZhNTRjNGFiYjM3NDE1ODU4Y2IyZDUz ZDM0OWUwHhcNMjUxMjE5MDQwMzAyWhcNMjUxMjIwMDQwMzAyWjAzMTEwLwYDVQQD EyhmZjJlNWFiOTMyZDFiYjQ4NDMwYTNmZjA2ZDg4ZDFkN2IzYzU2YTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77l9vQ/zhwC+2wRdxmSvY78UO6m5 kGv1kRevrLaFuiqeLt30sFlh2jFhRm53KfbouVRbozzS8lXkOtfHlpWlc9Pr8lsx /KePSV7S227qB4HqMd9DpMnWf1nL2xNzZY54di+D1micVL181DB80R2szfQc1rxR 0RzQzZbcYWt1j09JNIxQX5Puchspwc3BwLxWST7Yh/Gkrr1eWhIKW1K0ncHmdqlC STonNUPKnbkHH+BwefeP/6vQtSYoOx9kwtu9m2mVV6ZcD5MVb9oWxEKiFEMOsjpS A/Bna6unozfgATafVuad49BKV0URH81WHsTu+Pdph41TDB71oASbzUvCQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8uWrky0btIQwo/8G2I0dezxWomMB8GA1UdIwQY MBaAFL1cara8IGpUxKuzdBWFjLLVPTSeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQt NDIzMjNiMjAwOWUzLzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQtNDIzMjNiMjAwOWUz LzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+KWbUhz H4nD/okkJ3l8fF5QcNNBEVr+W8KLnxkxoLzEnUMLodIxegxpN5TeyoRBPZigvHrY syAQKVtBnhaCkDw+yKIgFB1QD/mh0vVpfoALSmmUO/f/VHGYJsV7g86NcgkPb7RI yIebHOA2QT8zJoB2he/WwBYAYIcEjaoTZeJTS5/w0eHBhUf3pHtlQOZI47tUmoud OPSUAX6taOrRceF2H/22ibJXp3cWyL9Aj4S0H5hX0hKmTlFGJn1wrylSseC1XlvS iZBsYD70W2rb2z3D5M6liox6qZD8avT9X3SoCCFsFZwIUcxGZMqdIf333qTeCdrS WU7QuUfm7FOhmQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:30:53 2025 by rpki-client