This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft File: viVOG1zUUoaN8uGZLYjQdgn8TJI.mft (raw, json) Hash identifier: WDPyCwuSAeratvuN6jnKn5SsKGG3k5jBNwmDZbaHMZY= Subject key identifier: 2D:52:4D:05:A3:17:2E:88:2E:95:49:74:13:C8:E7:74:B9:52:5F:B3 Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92 Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92 Certificate serial: 019B5261321B4D6446BF2282A4A78D155E32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft Manifest number: 14D7 Signing time: Wed 24 Dec 2025 22:01:00 +0000 Manifest this update: Wed 24 Dec 2025 22:01:00 +0000 Manifest next update: Thu 25 Dec 2025 22:01:00 +0000 Files and hashes: 1: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (hash: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=) 2: viVOG1zUUoaN8uGZLYjQdgn8TJI.crl (hash: lcqIOd4FuDpcq+ZY8WCG6+r8HrXfpCyZWfurfNYWHIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:32:1b:4d:64:46:bf:22:82:a4:a7:8d:15:5e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92 Validity Not Before: Dec 24 22:01:00 2025 GMT Not After : Dec 25 22:01:00 2025 GMT Subject: CN=2d524d05a3172e882e95497413c8e774b9525fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:97:c0:81:b7:ba:a8:c4:2b:10:af:4b:22: 7d:d7:b2:94:78:b8:73:e2:57:c3:f0:9c:64:a8:4c: a7:a4:58:ad:00:9e:ff:5e:84:db:70:45:99:18:06: cf:4b:f1:2e:05:25:bb:8f:b1:5d:6e:1d:77:d5:73: fe:b7:24:77:57:84:94:cc:11:6b:7d:c0:22:1d:fd: 1e:e1:ff:91:4f:53:34:43:22:35:69:fa:db:e8:93: 06:65:07:ba:20:d2:c1:e6:77:d3:21:24:e0:af:8d: b5:18:13:23:6f:89:0f:8d:51:60:e2:04:9d:93:c8: 51:eb:ef:52:4c:46:74:74:fb:a7:f6:0c:77:22:de: 46:ef:c5:8c:61:50:8c:10:ae:c2:92:8b:b6:1d:64: 61:7a:53:43:25:2d:f5:bb:ae:b0:f7:6d:6f:6e:e7: db:0d:d8:76:3d:d6:0b:20:02:8d:77:f9:fc:86:6b: c5:fa:b7:7e:64:7e:53:cd:86:4f:5d:ac:c5:c3:b8: fe:09:83:5b:60:5f:7f:e6:07:67:d4:26:39:4b:0c: ef:53:43:3e:a6:4d:e1:77:e1:30:4d:65:f1:63:0a: dd:34:e9:1a:c0:2c:4b:41:1e:c5:bd:16:60:16:67: 0d:d9:65:56:f9:15:c8:bf:40:e0:81:19:ab:d5:00: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:52:4D:05:A3:17:2E:88:2E:95:49:74:13:C8:E7:74:B9:52:5F:B3 X509v3 Authority Key Identifier: keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:39:aa:cf:de:76:4d:a8:32:1d:7b:7a:f2:04:02:4a:0d:5b: 4d:2a:b0:8a:b3:0e:d4:1b:a2:86:16:b9:2d:82:d0:eb:cb:16: b9:7e:79:b8:ae:bd:b9:67:f0:92:a5:e0:16:33:6b:21:ba:7f: 40:72:ec:c8:ff:34:b5:3d:dc:5d:e1:67:72:87:1a:c3:3b:19: 17:72:47:9f:84:5f:7e:e4:aa:e9:eb:82:c2:fe:90:0c:9e:a0: a3:cb:e1:4e:ad:58:96:54:44:4e:24:1e:ee:fb:31:b7:51:27: a2:83:be:a4:d5:e0:e4:6d:24:45:55:08:5e:f4:24:42:1e:f8: 46:8d:b9:1e:d7:e5:26:ab:f3:4d:7e:aa:78:02:a2:9c:ed:86: 85:c5:0d:d7:84:9f:7a:62:17:8b:9d:aa:ba:b3:73:d3:2c:4a: 01:b6:4f:f9:91:73:62:6c:3d:fa:36:f0:cf:8f:51:a7:5c:b8: 9d:e8:cf:c3:2d:86:2a:ab:50:7f:82:cf:26:25:e1:56:b3:c2: 6f:59:f5:53:52:9b:2f:b1:80:f2:e9:7b:6b:c6:91:3f:fc:56: 35:eb:af:c0:b8:80:6e:2f:6b:2b:2d:b8:25:ea:2a:e8:81:21: 69:4d:83:42:5a:c5:09:5c:92:de:6b:cd:a1:64:7b:1c:62:f2: c2:bf:4c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYTIbTWRGvyKCpKeNFV4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMjU0ZTFiNWNkNDUyODY4ZGYyZTE5OTJkODhkMDc2MDlm YzRjOTIwHhcNMjUxMjI0MjIwMTAwWhcNMjUxMjI1MjIwMTAwWjAzMTEwLwYDVQQD EygyZDUyNGQwNWEzMTcyZTg4MmU5NTQ5NzQxM2M4ZTc3NGI5NTI1ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpOXwIG3uqjEKxCvSyJ917KUeLhz 4lfD8JxkqEynpFitAJ7/XoTbcEWZGAbPS/EuBSW7j7Fdbh131XP+tyR3V4SUzBFr fcAiHf0e4f+RT1M0QyI1afrb6JMGZQe6INLB5nfTISTgr421GBMjb4kPjVFg4gSd k8hR6+9STEZ0dPun9gx3It5G78WMYVCMEK7Ckou2HWRhelNDJS31u66w921vbufb Ddh2PdYLIAKNd/n8hmvF+rd+ZH5TzYZPXazFw7j+CYNbYF9/5gdn1CY5SwzvU0M+ pk3hd+EwTWXxYwrdNOkawCxLQR7FvRZgFmcN2WVW+RXIv0DggRmr1QDUbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1STQWjFy6ILpVJdBPI53S5Ul+zMB8GA1UdIwQY MBaAFL4lThtc1FKGjfLhmS2I0HYJ/EySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDIt NDJjZjVkNTFlNDE4LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDItNDJjZjVkNTFlNDE4 LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDmqz952 TagyHXt68gQCSg1bTSqwirMO1Buihha5LYLQ68sWuX55uK69uWfwkqXgFjNrIbp/ QHLsyP80tT3cXeFncocawzsZF3JHn4RffuSq6euCwv6QDJ6go8vhTq1YllRETiQe 7vsxt1EnooO+pNXg5G0kRVUIXvQkQh74Ro25HtflJqvzTX6qeAKinO2GhcUN14Sf emIXi52qurNz0yxKAbZP+ZFzYmw9+jbwz49Rp1y4nejPwy2GKqtQf4LPJiXhVrPC b1n1U1KbL7GA8ul7a8aRP/xWNeuvwLiAbi9rKy24Jeoq6IEhaU2DQlrFCVyS3mvN oWR7HGLywr9MUw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:30:33 2025 by rpki-client