This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json) Hash identifier: L919xxRSFPi7ix/OtA/lhuphAfHxmhDjeZiZnVWeBNQ= Subject key identifier: 19:83:40:FE:1E:22:35:72:C3:5F:48:4C:F7:65:DA:4A:44:D4:5F:4A Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85 Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85 Certificate serial: 019B300BCAF2B1D9E5B47E493A26D031B63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft Manifest number: 158F Signing time: Thu 18 Dec 2025 06:00:37 +0000 Manifest this update: Thu 18 Dec 2025 06:00:37 +0000 Manifest next update: Fri 19 Dec 2025 06:00:37 +0000 Files and hashes: 1: Sf4JDKtmxmTCB0tTVfdGGPNzKJE.roa (hash: TM/ueYP3efRi0gGmWlRzw9T+QccRhYDTBK2qLm6mLxw=) 2: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=) 3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: GwcxRW/h5vBSeEBb7oPapICV862q6mssLNWKplMxyUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:ca:f2:b1:d9:e5:b4:7e:49:3a:26:d0:31:b6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85 Validity Not Before: Dec 18 06:00:37 2025 GMT Not After : Dec 19 06:00:37 2025 GMT Subject: CN=198340fe1e223572c35f484cf765da4a44d45f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:f1:bd:40:e9:28:fd:4d:aa:e5:91:c4:2a: 26:f8:7e:d0:5e:68:1b:29:d7:69:b5:11:8a:4a:e4: d4:e0:3a:ef:d5:d7:9b:83:da:f2:30:4c:08:46:f8: 00:c7:44:cc:d5:8e:5a:cc:96:4e:06:aa:ec:e7:6d: 19:d1:c0:07:d6:89:da:8c:9b:a0:0c:ef:e6:79:ab: b4:5a:72:e7:c4:59:3b:43:35:81:47:63:b5:63:59: 99:c6:59:7a:91:b2:99:92:98:93:2c:8b:55:8c:08: 92:ca:f0:92:d1:70:91:90:71:14:d4:d6:fa:dd:a5: 59:ce:2e:1b:71:c4:d4:03:51:d0:f0:23:a5:b1:84: e8:78:e6:04:33:64:59:13:68:aa:89:74:99:a3:1c: 17:5e:a5:9e:3c:b8:01:9d:91:f3:db:b5:57:97:8b: c6:69:86:ec:aa:37:ed:98:9a:b5:0b:e0:78:98:9f: 9b:0f:3d:a7:a5:15:40:48:fd:fc:f3:78:16:32:53: 37:a6:d0:c9:57:c4:3e:15:84:fd:cb:2e:34:f4:08: e0:63:d9:fb:e3:4b:b0:4f:d9:08:a1:b8:5d:77:93: 99:1b:f5:b8:a7:4a:f5:e0:da:2f:76:cf:4d:b9:1c: 54:97:63:d5:fb:db:c0:12:ee:07:97:92:2a:cb:11: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:40:FE:1E:22:35:72:C3:5F:48:4C:F7:65:DA:4A:44:D4:5F:4A X509v3 Authority Key Identifier: keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a6:54:41:ba:09:d4:d2:94:b5:eb:10:20:8b:85:ba:60:6c: e4:c9:b5:8d:8a:60:e1:31:57:20:12:12:7f:aa:59:fc:ac:9c: 45:e3:14:fc:fa:0c:8d:7f:cb:ac:97:d1:2a:c1:e0:d5:d1:49: a5:a5:54:30:6e:ac:e5:47:f6:e8:55:f2:7b:a8:65:ca:ec:f4: c8:f9:9f:69:94:c2:c0:74:19:a1:aa:21:c8:ca:9f:d9:a2:97: cf:f1:c6:77:1d:cc:ef:b9:5d:17:71:e2:10:f2:42:bf:ee:51: 1d:ec:c6:5b:36:71:0b:5d:85:4c:b4:f6:91:3a:0f:06:4b:a1: 92:95:0a:41:9c:c9:c7:f4:a8:3b:fa:96:cf:9e:0d:1f:b8:78: e3:da:de:0b:e2:71:1d:82:6d:8d:c7:47:ba:02:79:16:c7:1f: 2f:53:3e:5e:2c:50:90:26:5d:9a:0f:b6:0f:d3:e6:56:61:bc: 58:03:ca:7b:19:48:15:22:ec:3d:19:38:d9:ef:d1:76:0c:e8: c8:8c:07:fc:19:a4:66:f5:12:d1:f4:d4:ce:ad:6d:48:b5:82: a4:aa:2f:a6:f9:d7:a3:3c:f2:b5:9a:05:9d:57:85:7b:f4:87: 80:a5:9e:5d:90:fd:7b:ac:85:6c:5f:99:a8:8a:1a:d9:81:15: b9:dd:83:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC8rysdnltH5JOibQMbY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzM2NGJjMzhmNzViMThkNmY2ZWVmMjAzMjA5ZjcxYzI3 NjhkODUwHhcNMjUxMjE4MDYwMDM3WhcNMjUxMjE5MDYwMDM3WjAzMTEwLwYDVQQD EygxOTgzNDBmZTFlMjIzNTcyYzM1ZjQ4NGNmNzY1ZGE0YTQ0ZDQ1ZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MXxvUDpKP1NquWRxCom+H7QXmgb KddptRGKSuTU4Drv1debg9ryMEwIRvgAx0TM1Y5azJZOBqrs520Z0cAH1onajJug DO/meau0WnLnxFk7QzWBR2O1Y1mZxll6kbKZkpiTLItVjAiSyvCS0XCRkHEU1Nb6 3aVZzi4bccTUA1HQ8COlsYToeOYEM2RZE2iqiXSZoxwXXqWePLgBnZHz27VXl4vG aYbsqjftmJq1C+B4mJ+bDz2npRVASP3883gWMlM3ptDJV8Q+FYT9yy409AjgY9n7 40uwT9kIobhdd5OZG/W4p0r14Novds9NuRxUl2PV+9vAEu4Hl5IqyxF1YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmDQP4eIjVyw19ITPdl2kpE1F9KMB8GA1UdIwQY MBaAFL4zZLw491sY1vbu8gMgn3HCdo2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTct MWE2YWM5OGFjNmY5LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTctMWE2YWM5OGFjNmY5 LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqZUQboJ 1NKUtesQIIuFumBs5Mm1jYpg4TFXIBISf6pZ/KycReMU/PoMjX/LrJfRKsHg1dFJ paVUMG6s5Uf26FXye6hlyuz0yPmfaZTCwHQZoaohyMqf2aKXz/HGdx3M77ldF3Hi EPJCv+5RHezGWzZxC12FTLT2kToPBkuhkpUKQZzJx/SoO/qWz54NH7h449reC+Jx HYJtjcdHugJ5FscfL1M+XixQkCZdmg+2D9PmVmG8WAPKexlIFSLsPRk42e/Rdgzo yIwH/BmkZvUS0fTUzq1tSLWCpKovpvnXozzytZoFnVeFe/SHgKWeXZD9e6yFbF+Z qIoa2YEVud2D/w== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:44 2025 by rpki-client