This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: XU85Xqkp2ANKgofvgvjWdJ5GQNIXOeScGqyN6bjYV1Y= Subject key identifier: A7:3A:64:6D:70:73:EB:2F:16:3E:68:3F:82:57:25:B7:B1:1E:C7:E6 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B36EA436F3F1E44596EE5EF4500137E68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0BDC Signing time: Fri 19 Dec 2025 14:01:20 +0000 Manifest this update: Fri 19 Dec 2025 14:01:20 +0000 Manifest next update: Sat 20 Dec 2025 14:01:20 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: K3+aAW5i9tGEYKN2XOXXjMolb+w72OjOXXSaGEP3LMI=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:43:6f:3f:1e:44:59:6e:e5:ef:45:00:13:7e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Dec 19 14:01:20 2025 GMT Not After : Dec 20 14:01:20 2025 GMT Subject: CN=a73a646d7073eb2f163e683f825725b7b11ec7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:e4:44:1a:c6:b8:4b:b5:62:39:c6:cb:e0: ab:3f:77:77:dd:1f:63:32:87:77:b2:f2:66:16:72: 35:21:da:3a:f8:dc:c3:4e:1f:4e:60:20:0d:e8:7a: 3b:42:8d:e3:a7:a9:70:7f:90:39:dd:05:43:2e:df: 92:d0:96:9f:ec:6c:be:a9:19:c1:23:89:f3:a8:da: 43:62:80:80:bb:5c:4c:0e:ca:23:07:b1:1c:13:3f: c7:1a:82:cd:a7:f7:de:35:d9:54:ac:20:57:a6:c7: 2c:e0:5e:3c:69:49:e2:6b:d0:fc:92:5d:13:52:cd: cf:88:7e:44:fe:38:19:5a:fc:03:09:44:4d:db:1d: f9:bc:fe:da:fb:14:17:3c:16:f3:87:df:52:97:16: a1:df:99:32:4a:db:65:df:1f:11:22:fc:99:f5:8c: 8b:80:72:7f:54:35:35:f5:8b:6c:e2:01:1b:d4:87: fe:8a:ca:a0:c1:e4:a2:83:22:7c:b1:de:5f:d1:ce: de:3a:a1:37:49:05:e3:53:cf:6d:b0:f9:13:e4:7b: ca:16:a2:56:19:40:7f:43:60:26:ee:b7:86:14:dc: db:82:ff:6e:1b:69:9e:4c:0d:7f:41:a3:44:58:fa: ca:fc:ce:66:7c:34:6a:5a:d3:a6:45:78:f8:b8:b0: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3A:64:6D:70:73:EB:2F:16:3E:68:3F:82:57:25:B7:B1:1E:C7:E6 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:67:76:d0:d3:65:69:5c:8d:05:3c:9b:42:68:10:de:85:e3: 4c:a5:e2:70:c5:03:37:d0:a3:1e:1e:a2:35:b4:a5:04:2e:65: 47:5d:3b:38:05:fd:72:b8:2d:93:f2:45:bd:96:cf:63:72:ff: ce:37:2c:3a:60:6c:1c:94:68:f1:3b:1a:40:65:07:9b:13:c0: ff:23:75:57:6d:d8:df:8a:f1:54:34:5d:ac:6d:d0:31:e8:9c: 20:9b:4a:d9:79:d9:d5:98:45:f9:c1:b7:da:ec:e6:aa:26:6c: 35:00:e5:f0:15:97:9b:e5:30:48:13:ef:30:44:0d:75:cb:cf: fb:57:d4:55:2a:2f:8c:13:e1:d0:e8:1b:08:a0:dc:2b:9b:df: 34:9e:61:cb:e8:c4:b1:f3:79:69:08:7a:2e:e9:7f:b9:63:10: 5d:69:d7:2d:d5:e4:9e:2c:48:a4:77:ef:97:74:a7:24:65:da: ed:a3:11:cb:b3:48:57:75:5b:b3:26:fe:cb:b0:ba:57:ab:9a: 66:e9:69:3e:af:83:09:f3:0e:16:99:29:97:d7:5f:41:c5:39: c1:c1:2c:9e:ee:a6:ae:d4:25:bf:0d:f0:8d:1d:46:48:43:55: 20:c9:f5:d0:54:ba:e4:85:40:0a:69:59:1a:1d:75:d8:ef:f7: 89:0f:33:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26kNvPx5EWW7l70UAE35oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUxMjE5MTQwMTIwWhcNMjUxMjIwMTQwMTIwWjAzMTEwLwYDVQQD EyhhNzNhNjQ2ZDcwNzNlYjJmMTYzZTY4M2Y4MjU3MjViN2IxMWVjN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3jkRBrGuEu1YjnGy+CrP3d33R9j Mod3svJmFnI1Ido6+NzDTh9OYCAN6Ho7Qo3jp6lwf5A53QVDLt+S0Jaf7Gy+qRnB I4nzqNpDYoCAu1xMDsojB7EcEz/HGoLNp/feNdlUrCBXpscs4F48aUnia9D8kl0T Us3PiH5E/jgZWvwDCURN2x35vP7a+xQXPBbzh99Slxah35kySttl3x8RIvyZ9YyL gHJ/VDU19Yts4gEb1If+isqgweSigyJ8sd5f0c7eOqE3SQXjU89tsPkT5HvKFqJW GUB/Q2Am7reGFNzbgv9uG2meTA1/QaNEWPrK/M5mfDRqWtOmRXj4uLAu/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc6ZG1wc+svFj5oP4JXJbexHsfmMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWd20NNl aVyNBTybQmgQ3oXjTKXicMUDN9CjHh6iNbSlBC5lR107OAX9crgtk/JFvZbPY3L/ zjcsOmBsHJRo8TsaQGUHmxPA/yN1V23Y34rxVDRdrG3QMeicIJtK2XnZ1ZhF+cG3 2uzmqiZsNQDl8BWXm+UwSBPvMEQNdcvP+1fUVSovjBPh0OgbCKDcK5vfNJ5hy+jE sfN5aQh6Lul/uWMQXWnXLdXknixIpHfvl3SnJGXa7aMRy7NIV3Vbsyb+y7C6V6ua ZulpPq+DCfMOFpkpl9dfQcU5wcEsnu6mrtQlvw3wjR1GSENVIMn10FS65IVACmlZ Gh112O/3iQ8zbA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:23 2025 by rpki-client