This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json) Hash identifier: RKzZchFJFT7WV3snlKrk7Ny1lyW+48zzVKzInF8GEX8= Subject key identifier: 5D:F3:3E:62:97:E3:55:CF:38:BB:0A:76:F3:0B:19:E6:39:13:F1:29 Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45 Certificate serial: 019B4626BBD308FF737623C724414986525E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft Manifest number: 1008 Signing time: Mon 22 Dec 2025 13:01:42 +0000 Manifest this update: Mon 22 Dec 2025 13:01:42 +0000 Manifest next update: Tue 23 Dec 2025 13:01:42 +0000 Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: wAojlpIpY/O7Dwa99h897xEMP9XrZDbhGBj5nD8NwNw=) 2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:bb:d3:08:ff:73:76:23:c7:24:41:49:86:52:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45 Validity Not Before: Dec 22 13:01:42 2025 GMT Not After : Dec 23 13:01:42 2025 GMT Subject: CN=5df33e6297e355cf38bb0a76f30b19e63913f129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:97:d4:dd:db:72:c5:77:fe:20:bf:b9:34: 18:0b:04:0c:ba:e9:f8:4c:e0:9c:7a:e2:17:f6:d4: 39:ec:1d:e6:14:88:5a:45:32:76:b9:e6:d4:cd:f5: dc:0e:6e:6c:94:d1:c6:e6:ef:3a:a0:f9:f0:c9:56: 54:ed:36:96:70:68:2c:e2:e8:38:67:3b:75:f4:d6: b9:e2:11:e9:2a:75:62:0c:b4:b8:fc:a5:d2:67:b0: b8:0f:12:12:d2:ea:f1:45:75:09:6b:ab:bf:80:0a: 2f:60:0b:36:99:5c:85:40:bc:6b:df:9f:c6:fb:f5: d1:fa:10:49:77:1f:64:a8:f4:29:ff:22:5d:04:4e: 22:dc:41:a8:53:a0:f8:8f:93:50:96:ef:33:64:a3: 91:77:3b:21:03:00:db:2c:00:c9:cd:8c:3a:bb:8e: f7:ce:41:53:53:b5:5f:62:ef:67:4e:5f:83:a4:e2: a7:35:98:a3:c8:63:34:f6:7e:5e:42:f0:89:4f:cc: 48:9e:e9:b2:6d:8a:66:8f:2f:4f:6f:bb:34:54:44: b6:71:af:d4:c5:ec:55:f8:7d:3a:56:01:51:e3:cd: 54:2e:9e:c8:95:d2:39:d8:a6:81:18:98:a4:87:63: 4e:5e:e2:7d:30:a3:f1:7a:be:17:6d:cd:d9:1e:a5: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F3:3E:62:97:E3:55:CF:38:BB:0A:76:F3:0B:19:E6:39:13:F1:29 X509v3 Authority Key Identifier: keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9c:7a:9a:6b:8e:a7:ec:86:3c:8c:ec:3f:88:2f:a8:1c:c1: 55:8c:4d:e6:3a:3c:dd:f6:6d:c9:14:9a:b7:80:30:35:0e:29: 84:76:4f:b5:70:6d:e3:d2:da:4a:9e:30:24:4e:8b:29:65:0c: 07:85:70:f1:9c:56:c4:8d:2d:1d:db:de:18:89:b2:46:f3:6f: 3f:7c:df:8f:f4:34:51:b7:c9:ae:11:48:b4:76:7a:9f:91:4b: 25:e2:b0:63:b2:fd:5d:f6:cc:c4:06:e5:9f:35:20:16:b8:b7: 40:cc:f2:bf:d3:75:d0:a2:47:c2:e2:6c:b8:4f:e1:f5:cb:13: d8:72:ad:53:a6:ec:c6:e9:f9:6e:4b:08:ea:b7:99:67:25:cc: de:07:95:92:19:b4:0b:ca:0c:16:f1:87:4a:f2:70:83:bd:29: 9e:17:7c:9e:06:00:c6:dc:1b:b2:f2:aa:aa:19:c1:cb:77:e0: 18:8e:44:49:b9:61:49:99:f9:0a:53:ab:4b:3d:68:da:f0:78: 34:ac:07:16:df:4f:e3:36:ab:22:82:84:a5:6b:b0:2d:fc:58: 61:1f:b4:50:76:f3:5f:ab:26:c7:5f:c7:1c:e5:88:ab:af:95: 13:7a:42:3f:ea:30:0a:19:64:54:52:37:85:2c:8f:8b:ae:8b: e9:da:7b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJrvTCP9zdiPHJEFJhlJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTQ1NjY0OTY5MmU2MDU2NmRlMDA4ZTEyNmJiZGQxZDJl YmVkNDUwHhcNMjUxMjIyMTMwMTQyWhcNMjUxMjIzMTMwMTQyWjAzMTEwLwYDVQQD Eyg1ZGYzM2U2Mjk3ZTM1NWNmMzhiYjBhNzZmMzBiMTllNjM5MTNmMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydyX1N3bcsV3/iC/uTQYCwQMuun4 TOCceuIX9tQ57B3mFIhaRTJ2uebUzfXcDm5slNHG5u86oPnwyVZU7TaWcGgs4ug4 Zzt19Na54hHpKnViDLS4/KXSZ7C4DxIS0urxRXUJa6u/gAovYAs2mVyFQLxr35/G +/XR+hBJdx9kqPQp/yJdBE4i3EGoU6D4j5NQlu8zZKORdzshAwDbLADJzYw6u473 zkFTU7VfYu9nTl+DpOKnNZijyGM09n5eQvCJT8xInumybYpmjy9Pb7s0VES2ca/U xexV+H06VgFR481ULp7IldI52KaBGJikh2NOXuJ9MKPxer4Xbc3ZHqV8CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3zPmKX41XPOLsKdvMLGeY5E/EpMB8GA1UdIwQY MBaAFFcUVmSWkuYFZt4AjhJrvdHS6+1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgt MDRjOGYzZWVjZWViLzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgtMDRjOGYzZWVjZWVi LzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpx6mmuO p+yGPIzsP4gvqBzBVYxN5jo83fZtyRSat4AwNQ4phHZPtXBt49LaSp4wJE6LKWUM B4Vw8ZxWxI0tHdveGImyRvNvP3zfj/Q0UbfJrhFItHZ6n5FLJeKwY7L9XfbMxAbl nzUgFri3QMzyv9N10KJHwuJsuE/h9csT2HKtU6bsxun5bksI6reZZyXM3geVkhm0 C8oMFvGHSvJwg70pnhd8ngYAxtwbsvKqqhnBy3fgGI5ESblhSZn5ClOrSz1o2vB4 NKwHFt9P4zarIoKEpWuwLfxYYR+0UHbzX6smx1/HHOWIq6+VE3pCP+owChlkVFI3 hSyPi66L6dp7zA== -----END CERTIFICATE-----Generated at Mon Dec 22 18:38:59 2025 by rpki-client