This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json) Hash identifier: eh/A9x3bIEZVJyLgPDJ2GY3PohKjvTMumA2lH0z01Zs= Subject key identifier: E2:55:37:94:2F:4F:57:A0:F0:B3:32:60:C0:7A:14:19:83:AB:73:6D Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace Certificate serial: 019B3F7F239B615955FA7E86095054C07778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft Manifest number: 021E Signing time: Sun 21 Dec 2025 06:00:55 +0000 Manifest this update: Sun 21 Dec 2025 06:00:55 +0000 Manifest next update: Mon 22 Dec 2025 06:00:55 +0000 Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=) 2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=) 3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: MDo31rPZ7ttT3Jvg8SUnc1Q3Ll1GLf0UBZeL00Oo1R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:23:9b:61:59:55:fa:7e:86:09:50:54:c0:77:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace Validity Not Before: Dec 21 06:00:55 2025 GMT Not After : Dec 22 06:00:55 2025 GMT Subject: CN=e25537942f4f57a0f0b33260c07a141983ab736d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f4:b1:71:c7:83:35:c2:9c:8f:e5:cc:5d:8a: bb:b9:86:62:72:ae:be:18:63:8f:c4:90:59:58:12: be:93:8f:4c:7a:c6:fc:ae:64:0e:71:42:66:cf:f6: 1c:9d:b2:bc:d2:b3:ce:d1:c4:f5:4c:bb:f5:0c:44: 00:83:7a:38:b5:b1:b3:c0:f5:3e:3e:79:06:1d:c4: 2e:4c:1b:50:c1:78:37:ae:5d:0f:0c:18:50:3e:b5: 7b:fb:12:1d:67:d9:43:ea:ac:a8:ca:17:17:24:04: 2e:ef:80:46:ce:2a:9b:72:c1:42:1f:3c:d5:de:f5: 89:12:6d:1f:2c:17:8b:ee:30:4b:4e:fb:e9:49:de: f7:c6:47:6e:44:ec:66:12:6c:af:f6:cb:a7:75:ad: d6:4a:8a:cf:1a:e9:30:8c:31:2a:31:83:2f:99:63: 71:d2:0f:93:d0:0e:bf:48:cc:a3:e5:ed:ac:e9:47: a9:b1:28:e1:48:f7:aa:f1:e4:09:96:78:b7:8d:cd: 7a:d2:e4:e4:cf:9c:b6:6c:94:59:e5:24:a8:4d:55: 54:58:bc:2c:40:1d:c7:c9:d1:80:f2:2a:83:f5:0b: 85:bd:31:52:8a:48:d0:6b:d5:60:e4:61:4f:c6:55: d0:82:e9:c5:9c:2c:b9:5e:9b:23:89:cf:31:cf:11: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:55:37:94:2F:4F:57:A0:F0:B3:32:60:C0:7A:14:19:83:AB:73:6D X509v3 Authority Key Identifier: keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b8:e3:9a:c8:b2:bb:06:b2:f5:17:a2:0b:d0:f0:e9:56:62: b4:4b:e6:d4:bb:48:56:04:c7:1f:1d:cb:21:3a:2c:bc:fe:2a: 2f:14:73:1a:be:a9:dd:11:b2:e6:a6:3c:f8:85:59:e6:5b:56: 5c:00:54:8e:dd:62:0b:4a:67:cd:03:b5:fc:ed:39:42:9e:c7: 72:f6:b6:ba:ac:0a:63:e8:cb:9c:39:3d:12:d5:75:15:2d:3a: 61:2c:17:47:59:7f:89:d0:d9:f9:75:bf:1e:15:a3:ba:97:d9: 1c:e6:0b:be:c4:29:53:f4:57:57:da:fb:3a:e1:d8:ad:2c:29: 7e:6d:eb:9e:d2:b0:b5:d6:74:26:9a:49:c7:40:d1:85:1c:df: e4:9b:9a:e4:00:82:e3:f0:18:cd:f5:3c:ad:71:bd:b4:3e:16: 92:13:43:e4:25:dc:62:1c:a2:3f:64:a8:8d:d0:d5:1a:8a:25: 93:98:b7:b4:8e:11:88:16:0f:e8:fe:c2:35:be:40:f7:75:77: 12:12:5c:64:67:95:4e:3c:6d:1c:dd:09:13:cf:be:bb:ad:63: 45:70:aa:59:e8:a6:74:ca:1b:9b:69:62:06:47:ee:13:35:b0: c3:63:77:94:60:59:be:f9:67:09:eb:18:dd:90:68:ed:9a:6b: dc:d9:85:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fyObYVlV+n6GCVBUwHd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNzM3NDdmNzhiZDMyOGQwYWUxYzg5MTcxYjM4MWFhMTkw MTFhY2UwHhcNMjUxMjIxMDYwMDU1WhcNMjUxMjIyMDYwMDU1WjAzMTEwLwYDVQQD EyhlMjU1Mzc5NDJmNGY1N2EwZjBiMzMyNjBjMDdhMTQxOTgzYWI3MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vSxcceDNcKcj+XMXYq7uYZicq6+ GGOPxJBZWBK+k49Mesb8rmQOcUJmz/YcnbK80rPO0cT1TLv1DEQAg3o4tbGzwPU+ PnkGHcQuTBtQwXg3rl0PDBhQPrV7+xIdZ9lD6qyoyhcXJAQu74BGziqbcsFCHzzV 3vWJEm0fLBeL7jBLTvvpSd73xkduROxmEmyv9sunda3WSorPGukwjDEqMYMvmWNx 0g+T0A6/SMyj5e2s6UepsSjhSPeq8eQJlni3jc160uTkz5y2bJRZ5SSoTVVUWLws QB3HydGA8iqD9QuFvTFSikjQa9Vg5GFPxlXQgunFnCy5Xpsjic8xzxHq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJVN5QvT1eg8LMyYMB6FBmDq3NtMB8GA1UdIwQY MBaAFL1zdH94vTKNCuHIkXGzgaoZARrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAt NWJkYmY2Zjg0N2Y5LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hNTU1NTMtMjk3NS00MjQ0LWIyNjAtNWJkYmY2Zjg0N2Y5 LzEvdlhOMGYzaTlNbzBLNGNpUmNiT0JxaGtCR3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrjjmsiy uway9ReiC9Dw6VZitEvm1LtIVgTHHx3LITosvP4qLxRzGr6p3RGy5qY8+IVZ5ltW XABUjt1iC0pnzQO1/O05Qp7Hcva2uqwKY+jLnDk9EtV1FS06YSwXR1l/idDZ+XW/ HhWjupfZHOYLvsQpU/RXV9r7OuHYrSwpfm3rntKwtdZ0JppJx0DRhRzf5Jua5ACC 4/AYzfU8rXG9tD4WkhND5CXcYhyiP2SojdDVGoolk5i3tI4RiBYP6P7CNb5A93V3 EhJcZGeVTjxtHN0JE8++u61jRXCqWeimdMobm2liBkfuEzWww2N3lGBZvvlnCesY 3ZBo7Zpr3NmF+w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:04 2025 by rpki-client