This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft File: vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json) Hash identifier: DoxxtahTnoE18BH2zj1rQnAjSibZ+Z5J6vQqTks1NnQ= Subject key identifier: 5B:31:25:5D:19:3B:EE:C0:FE:CA:C5:E0:8B:41:1F:9D:AF:F8:87:A1 Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Certificate serial: 019B416D2B2ACFB3CE48AC9CF2D2DE50928B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft Manifest number: 1323 Signing time: Sun 21 Dec 2025 15:00:32 +0000 Manifest this update: Sun 21 Dec 2025 15:00:32 +0000 Manifest next update: Mon 22 Dec 2025 15:00:32 +0000 Files and hashes: 1: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (hash: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=) 2: mY0BBoyvYX1zorx6Y5fLdEd0tCk.roa (hash: 9FO5ETPVAJGxL50DKTbOEEcsQnQAs0IphL/Zj67O7Wg=) 3: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (hash: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=) 4: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: BcuuZTZJtTgpq36me5Vu6lNwYIcO5fv8Twi8xEe6Jc0=) 5: ytBPPn31Mvouzht94_-1MzPeRlc.roa (hash: g/RoKeMhShlj3ifkf1JZfkpGbYRq1G/ecz/JNNRxoKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:2b:2a:cf:b3:ce:48:ac:9c:f2:d2:de:50:92:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Validity Not Before: Dec 21 15:00:32 2025 GMT Not After : Dec 22 15:00:32 2025 GMT Subject: CN=5b31255d193beec0fecac5e08b411f9daff887a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:f0:7d:f4:b3:c4:72:f5:21:65:ff:29:c0: e4:c9:f1:fd:06:8f:4d:a3:79:6a:2d:2c:42:6b:1d: 1f:b6:87:36:49:c5:cb:d2:7a:83:b7:a5:ed:e9:d5: 88:29:7d:1b:8e:ec:2d:50:0f:e4:d0:40:85:1a:05: dd:80:cf:a2:32:a8:48:4d:a2:bd:4c:02:6c:b7:eb: 54:3b:f2:33:2a:ec:0e:d0:8a:31:a6:05:0f:35:57: b4:33:57:a9:25:95:cd:12:40:2f:ba:dc:c0:c0:92: b4:15:c3:59:8c:c1:b6:8c:e2:37:89:63:e2:7d:ef: ba:d7:ed:70:0e:99:53:4d:70:9d:7e:6b:50:6d:34: 0e:0b:79:4c:3a:1b:10:c8:3e:d5:24:27:fc:39:98: cf:f7:5c:b2:62:62:85:50:96:0f:38:4f:cb:92:cc: 89:a7:6b:2c:83:98:24:6a:eb:f9:40:d5:40:7a:ce: f0:07:4e:53:7b:f4:b6:e7:83:be:a9:39:7c:53:9a: be:b2:22:18:41:f5:4d:e3:df:a0:4b:35:11:a5:63: 25:69:7e:6f:5e:57:af:6f:d0:94:5f:de:85:71:b2: 72:aa:f4:ef:61:d8:24:c2:e9:a7:d7:81:1e:8d:20: 43:f8:68:94:57:b6:e0:ac:6a:f8:5b:d2:0c:b3:a9: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:31:25:5D:19:3B:EE:C0:FE:CA:C5:E0:8B:41:1F:9D:AF:F8:87:A1 X509v3 Authority Key Identifier: keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:04:0f:c8:00:d9:2d:0b:f8:9e:6e:d6:88:d9:e1:de:af:04: 03:f7:03:6e:54:73:f1:b3:89:68:98:27:8f:29:a5:b1:e5:03: 97:7b:e6:95:50:7c:4b:07:df:d1:63:79:da:f9:44:27:7d:1d: d6:04:63:4c:04:ca:31:ea:12:27:1e:00:56:84:92:53:fa:49: 6e:74:c5:dc:5e:df:3e:0e:37:2f:06:ef:a5:a1:32:ae:f4:ec: 2a:9e:d4:f2:9f:32:45:18:07:16:70:91:c0:dc:09:0b:f5:df: 87:72:dc:5d:dd:9b:fc:3f:d1:f1:70:c0:0a:20:b7:13:69:21: 2c:79:86:01:48:d8:22:0e:a4:48:36:a1:88:02:54:3d:60:f0: ca:32:b1:04:ee:a2:63:83:a2:10:28:b5:83:5a:43:62:ee:79: 6f:3c:61:22:8d:3e:46:92:62:17:1b:f9:21:64:b9:3b:38:38: d2:c3:2c:41:01:82:ae:7e:93:72:57:6b:11:c8:e9:fb:19:ad: 3e:27:72:5b:05:d2:69:39:7d:26:3c:ba:b6:c5:0d:18:ad:13: c2:ee:5a:e5:2b:ff:af:86:be:15:a3:24:bf:28:2b:94:f4:27: 80:0d:44:bc:38:f8:4e:df:9d:b2:e3:ec:a0:1e:a0:c0:05:9a: 29:9e:e7:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbSsqz7POSKyc8tLeUJKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMTA3ZTA3OTUyYzA2OTM1OGNkM2Y4MmFhZWNlYjRjNjk0 ODNjYTkwHhcNMjUxMjIxMTUwMDMyWhcNMjUxMjIyMTUwMDMyWjAzMTEwLwYDVQQD Eyg1YjMxMjU1ZDE5M2JlZWMwZmVjYWM1ZTA4YjQxMWY5ZGFmZjg4N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+bwffSzxHL1IWX/KcDkyfH9Bo9N o3lqLSxCax0ftoc2ScXL0nqDt6Xt6dWIKX0bjuwtUA/k0ECFGgXdgM+iMqhITaK9 TAJst+tUO/IzKuwO0IoxpgUPNVe0M1epJZXNEkAvutzAwJK0FcNZjMG2jOI3iWPi fe+61+1wDplTTXCdfmtQbTQOC3lMOhsQyD7VJCf8OZjP91yyYmKFUJYPOE/LksyJ p2ssg5gkauv5QNVAes7wB05Te/S254O+qTl8U5q+siIYQfVN49+gSzURpWMlaX5v Xlevb9CUX96FcbJyqvTvYdgkwumn14EejSBD+GiUV7bgrGr4W9IMs6kS+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsxJV0ZO+7A/srF4ItBH52v+IehMB8GA1UdIwQY MBaAFL8QfgeVLAaTWM0/gqrs60xpSDypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2It NDg2MzNkNzE4NTkwLzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2ItNDg2MzNkNzE4NTkw LzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgQPyADZ LQv4nm7WiNnh3q8EA/cDblRz8bOJaJgnjymlseUDl3vmlVB8Swff0WN52vlEJ30d 1gRjTATKMeoSJx4AVoSSU/pJbnTF3F7fPg43LwbvpaEyrvTsKp7U8p8yRRgHFnCR wNwJC/Xfh3LcXd2b/D/R8XDACiC3E2khLHmGAUjYIg6kSDahiAJUPWDwyjKxBO6i Y4OiECi1g1pDYu55bzxhIo0+RpJiFxv5IWS5Ozg40sMsQQGCrn6TcldrEcjp+xmt PidyWwXSaTl9Jjy6tsUNGK0Twu5a5Sv/r4a+FaMkvygrlPQngA1EvDj4Tt+dsuPs oB6gwAWaKZ7nlQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:26:24 2025 by rpki-client