This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: DOz0PeOfse/DVHWjlFdRerb72qepdemuZ4/N919Jlmk= Subject key identifier: 4F:90:AE:85:29:45:4A:0E:04:2D:F8:B0:17:06:10:EB:8A:2C:1B:09 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B3AC6510221AE44ED3A408D15AF2382B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 1260 Signing time: Sat 20 Dec 2025 08:00:33 +0000 Manifest this update: Sat 20 Dec 2025 08:00:33 +0000 Manifest next update: Sun 21 Dec 2025 08:00:33 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: J42E1RbvxDPZN8hSUtuVzEgWEQ8.roa (hash: yHzZkI8WBsUDrg6tstr8yujQqJ7rIkiUvhkoKj5fkYs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: VcrKSPRD1jDM5kaUAw1ioLXhAOk.roa (hash: eNzbRmmC/9sIdHRfkHk4xbZUfKs2OrL0ZWQwzAnSARk=) 8: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: nuFNh3uYapcAfpehwqLhQApA0ukD+6MeF9lqko9eoak=) 9: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 10: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 11: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 12: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:51:02:21:ae:44:ed:3a:40:8d:15:af:23:82:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Dec 20 08:00:33 2025 GMT Not After : Dec 21 08:00:33 2025 GMT Subject: CN=4f90ae8529454a0e042df8b0170610eb8a2c1b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:37:eb:4e:43:29:ad:b9:f7:a6:4a:f2:cf: 37:75:45:72:df:6b:ff:98:5a:94:e3:22:8b:9b:3d: 4a:40:14:fc:28:b1:06:2b:72:cc:7f:39:56:dd:77: fe:41:22:2c:bf:d8:49:0a:c0:8d:35:a2:1d:03:16: 01:d5:92:b1:8b:9a:39:bb:d7:1c:c8:75:84:8f:dd: 56:64:d6:27:b8:7f:10:01:67:d1:dd:0c:48:7e:01: 97:45:d5:83:e1:2f:6e:ee:7a:56:18:81:ea:3c:23: b9:2b:75:b5:e1:71:28:e8:e4:ad:79:e0:9b:f9:83: 96:45:9d:56:b3:f1:69:2b:56:9b:ee:a2:26:ce:82: 99:c9:1c:a7:00:12:01:1a:e3:d4:87:3d:a1:62:72: 8c:e7:fe:75:ec:a3:99:c2:0d:8e:ed:3a:29:de:44: da:b2:41:f5:14:9c:f6:d4:aa:56:0b:2f:75:fd:21: 43:36:cb:ad:fe:dd:12:e9:b8:3f:c6:6c:c0:8a:62: 1c:b8:3f:13:21:84:e9:26:fb:e7:78:a6:07:6a:ff: ce:8c:1a:2f:f2:aa:09:ef:2a:3a:82:7c:47:7d:27: 18:f1:4f:f1:1a:90:70:fa:68:01:83:14:f8:83:c9: 8f:3d:c9:23:1f:a2:7c:0d:c5:7a:09:35:05:81:b0: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:AE:85:29:45:4A:0E:04:2D:F8:B0:17:06:10:EB:8A:2C:1B:09 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8a:02:2e:7c:fc:ee:dc:91:d4:b6:e6:44:c1:31:27:5c:a7: a1:0e:8a:fa:92:62:14:6d:c5:aa:ad:13:38:6b:a0:50:b6:15: e0:b6:96:23:3b:db:34:fb:19:42:7c:60:3c:65:6b:35:44:94: 57:29:91:e7:31:d0:1a:21:20:46:e6:9e:f0:1f:39:c7:82:8e: 53:a7:2c:f0:41:5a:18:57:e8:e9:0a:ec:d9:2a:d5:34:b4:8a: b2:11:fa:3d:45:f8:f1:b7:7e:7b:33:6e:2d:83:bf:3e:27:2c: c7:6e:80:f9:e9:54:1b:ee:b0:a2:46:fb:a7:7f:b5:10:ae:a7: 3f:99:34:39:7e:57:7b:2c:3c:ed:b4:ee:8b:2a:1f:67:6c:bf: 8a:07:56:59:eb:05:00:3f:19:71:00:79:e4:4c:9b:ed:18:ad: 66:ef:e0:17:01:c6:5b:d0:d9:bd:81:34:2e:89:b8:54:35:db: fd:62:1c:61:95:24:d0:4b:6e:97:a1:19:e6:3e:7e:35:01:2f: 05:c4:9a:a6:8e:23:98:01:28:99:95:24:99:49:5b:12:c2:0e: 10:c0:9d:31:bc:b6:3c:50:c2:40:6e:1a:c3:a3:3a:85:fa:38: e6:15:4c:3f:72:66:11:c9:7a:39:e4:c6:4f:aa:0d:2d:f9:76: 5e:a4:b3:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xlECIa5E7TpAjRWvI4KzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUxMjIwMDgwMDMzWhcNMjUxMjIxMDgwMDMzWjAzMTEwLwYDVQQD Eyg0ZjkwYWU4NTI5NDU0YTBlMDQyZGY4YjAxNzA2MTBlYjhhMmMxYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcA3605DKa2596ZK8s83dUVy32v/ mFqU4yKLmz1KQBT8KLEGK3LMfzlW3Xf+QSIsv9hJCsCNNaIdAxYB1ZKxi5o5u9cc yHWEj91WZNYnuH8QAWfR3QxIfgGXRdWD4S9u7npWGIHqPCO5K3W14XEo6OSteeCb +YOWRZ1Ws/FpK1ab7qImzoKZyRynABIBGuPUhz2hYnKM5/517KOZwg2O7Top3kTa skH1FJz21KpWCy91/SFDNsut/t0S6bg/xmzAimIcuD8TIYTpJvvneKYHav/OjBov 8qoJ7yo6gnxHfScY8U/xGpBw+mgBgxT4g8mPPckjH6J8DcV6CTUFgbBpUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+QroUpRUoOBC34sBcGEOuKLBsJMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIoCLnz8 7tyR1LbmRMExJ1ynoQ6K+pJiFG3Fqq0TOGugULYV4LaWIzvbNPsZQnxgPGVrNUSU VymR5zHQGiEgRuae8B85x4KOU6cs8EFaGFfo6Qrs2SrVNLSKshH6PUX48bd+ezNu LYO/Picsx26A+elUG+6wokb7p3+1EK6nP5k0OX5Xeyw87bTuiyofZ2y/igdWWesF AD8ZcQB55Eyb7RitZu/gFwHGW9DZvYE0Lom4VDXb/WIcYZUk0Etul6EZ5j5+NQEv BcSapo4jmAEomZUkmUlbEsIOEMCdMby2PFDCQG4aw6M6hfo45hVMP3JmEcl6OeTG T6oNLfl2XqSzVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:56:06 2025 by rpki-client