This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft File: vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json) Hash identifier: UO3P1/UlgSV1CiELmX4LvoFGycfc1dZl5fZ4VZSpEzk= Subject key identifier: 0A:64:1C:62:E1:68:63:22:CE:3C:11:F9:DB:22:54:A5:43:DD:BD:CD Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034 Certificate serial: 019B3CEC7D11D49F811B74E7223B5D44B183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft Manifest number: 0189 Signing time: Sat 20 Dec 2025 18:01:29 +0000 Manifest this update: Sat 20 Dec 2025 18:01:29 +0000 Manifest next update: Sun 21 Dec 2025 18:01:29 +0000 Files and hashes: 1: NjeNoaMkokSwdxi651vJsIPZGPI.roa (hash: WuO4Ddldp2DFr/NBzaE03YGgYfOWTLEgomsbtANaXbM=) 2: dH1EdCv4F3zFBiGZJ_XAaJoKuB8.roa (hash: uO4JYjbK0aD9KVhI/8JLgIx8rPTIvs6HrJy/vrwJ/Vc=) 3: dpMRXq6ywyTgHrIH5zbYgzRL198.roa (hash: aTBcNVIvwowBJeKwi3Yf02sPJ620zjhuLByuimPY8vQ=) 4: gQgIF6hIvUfhurtQ198iONedcik.roa (hash: mEQuGKFly8SftvXJQdCvoLlNzQ9krMcgDUnKbr3nnLo=) 5: siIZExuS_GeAC_7yAg0fTn4ysPQ.roa (hash: YHIFiD7L5rHkCWAOSvuE1uPY3FwCVAc7u7VpZj5jlLg=) 6: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: 0VAiq+LsT/Pn6WFZJibnzUi+jN3qVgdVSxWG72KlctU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:7d:11:d4:9f:81:1b:74:e7:22:3b:5d:44:b1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034 Validity Not Before: Dec 20 18:01:29 2025 GMT Not After : Dec 21 18:01:29 2025 GMT Subject: CN=0a641c62e1686322ce3c11f9db2254a543ddbdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:7a:29:b7:87:51:94:e9:fb:1c:7d:f3:fd: 00:7b:b9:c6:7d:51:ec:78:4d:c6:36:aa:95:34:80: fb:d1:d0:f6:bf:6b:3c:0b:22:ae:57:c9:14:3a:a8: eb:69:2a:a1:db:cb:ad:44:05:b7:6b:9d:e5:07:d3: 02:6a:40:55:4f:03:e5:51:b4:c1:a5:c7:ea:b1:c8: 7f:f8:79:b6:82:da:de:37:53:1b:34:ea:d0:51:ec: 12:66:93:4c:9f:ba:a5:d1:13:10:27:e2:c8:4d:02: 52:8c:4b:00:45:7b:1e:1a:ce:4d:db:8e:1f:b3:96: 93:41:85:45:28:d6:d0:5a:6b:e2:83:de:a1:bd:f1: 03:64:49:7d:fc:2b:8a:23:b0:17:8b:46:7f:3e:47: e5:0d:3f:80:5e:58:82:85:16:b5:9c:82:fe:e0:ea: f4:cd:fd:82:ec:31:e6:f4:2e:d3:b1:0e:3c:88:43: eb:89:d1:9d:c5:c4:8c:f9:4a:79:c4:5e:8f:4a:cd: 52:e6:16:c0:b0:19:3a:01:cf:16:a1:c1:64:06:43: 22:d6:9d:5f:6d:2b:47:3e:58:c9:0f:f8:2a:d6:11: a6:d9:6d:59:a4:77:b7:8e:93:ba:1d:a2:39:36:95: 97:79:33:6d:a5:23:12:f0:14:89:ce:3b:98:9a:c3: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:1C:62:E1:68:63:22:CE:3C:11:F9:DB:22:54:A5:43:DD:BD:CD X509v3 Authority Key Identifier: keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:da:c6:b6:0c:a9:fa:3b:22:90:5e:16:fe:a7:1f:0b:68:27: aa:ca:b0:a4:16:cc:bf:f4:e4:c1:98:60:fe:c5:74:5f:12:c6: 04:34:c5:eb:fb:94:81:0b:4a:95:91:4f:67:c0:5d:1d:9a:6e: 9c:6e:e5:fa:f1:31:36:d8:bd:16:79:cc:db:5d:15:a6:a6:e9: a9:d4:c1:5d:42:9f:65:c3:a9:b5:0a:ca:8e:8a:f5:15:9b:1f: 3e:7c:3c:aa:7b:b6:8d:92:b3:58:98:dc:36:68:8f:57:ca:58: 4a:62:68:e9:34:88:0f:3f:d0:97:54:c1:5c:ae:aa:19:50:fd: 6f:2c:d9:70:c6:97:d3:2e:82:67:9c:66:ac:f8:10:db:19:4f: 33:07:da:9d:58:cf:19:f7:ec:06:d4:6a:8d:db:9a:cc:76:40: 6f:89:7b:96:29:38:f2:d1:79:79:26:3d:7f:05:9b:7a:00:18: ef:37:a5:3f:8e:f1:f4:5b:72:4c:93:9f:bc:e3:57:ae:fb:28: 70:cb:8c:5d:b4:66:94:65:40:55:4d:2d:db:ce:47:d3:b6:7e: c9:ed:27:ff:86:22:ab:20:a0:df:57:84:0f:e8:83:2f:42:6c: 7e:8a:00:75:67:11:a9:ea:79:40:7c:b8:2c:2b:98:69:a4:7d: ca:d7:b0:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87H0R1J+BG3TnIjtdRLGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0 ZGIwMzQwHhcNMjUxMjIwMTgwMTI5WhcNMjUxMjIxMTgwMTI5WjAzMTEwLwYDVQQD EygwYTY0MWM2MmUxNjg2MzIyY2UzYzExZjlkYjIyNTRhNTQzZGRiZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+B6KbeHUZTp+xx98/0Ae7nGfVHs eE3GNqqVNID70dD2v2s8CyKuV8kUOqjraSqh28utRAW3a53lB9MCakBVTwPlUbTB pcfqsch/+Hm2gtreN1MbNOrQUewSZpNMn7ql0RMQJ+LITQJSjEsARXseGs5N244f s5aTQYVFKNbQWmvig96hvfEDZEl9/CuKI7AXi0Z/PkflDT+AXliChRa1nIL+4Or0 zf2C7DHm9C7TsQ48iEPridGdxcSM+Up5xF6PSs1S5hbAsBk6Ac8WocFkBkMi1p1f bStHPljJD/gq1hGm2W1ZpHe3jpO6HaI5NpWXeTNtpSMS8BSJzjuYmsNfkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApkHGLhaGMizjwR+dsiVKVD3b3NMB8GA1UdIwQY MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt NDJiYmYxYTZhNjViLzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtrGtgyp +jsikF4W/qcfC2gnqsqwpBbMv/TkwZhg/sV0XxLGBDTF6/uUgQtKlZFPZ8BdHZpu nG7l+vExNti9FnnM210VpqbpqdTBXUKfZcOptQrKjor1FZsfPnw8qnu2jZKzWJjc NmiPV8pYSmJo6TSIDz/Ql1TBXK6qGVD9byzZcMaX0y6CZ5xmrPgQ2xlPMwfanVjP GffsBtRqjduazHZAb4l7lik48tF5eSY9fwWbegAY7zelP47x9FtyTJOfvONXrvso cMuMXbRmlGVAVU0t285H07Z+ye0n/4YiqyCg31eED+iDL0JsfooAdWcRqep5QHy4 LCuYaaR9ytewrg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:15:47 2025 by rpki-client