This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json) Hash identifier: 2Spx2/8VGkReUBBYdMjxdtWWr8m9o72DYub4p+20FTM= Subject key identifier: 74:F7:F5:47:75:43:E0:51:20:F7:53:23:58:A5:E0:55:87:C6:36:77 Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Certificate serial: 019B3F7F1149B438B4877737A0FEAF21E8FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft Manifest number: 0A54 Signing time: Sun 21 Dec 2025 06:00:50 +0000 Manifest this update: Sun 21 Dec 2025 06:00:50 +0000 Manifest next update: Mon 22 Dec 2025 06:00:50 +0000 Files and hashes: 1: sxWKrzqIBBqkeo4-v2Jw2EzqS3k.roa (hash: DWZadMWJyiM8F0IG02kO3n/vWw1f6vECk5IkRqLr9qY=) 2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: +Yf/HLuusiI9P165FTrOv39EyicdKfDjUPF4SmhCldo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:11:49:b4:38:b4:87:77:37:a0:fe:af:21:e8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Validity Not Before: Dec 21 06:00:50 2025 GMT Not After : Dec 22 06:00:50 2025 GMT Subject: CN=74f7f5477543e05120f7532358a5e05587c63677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:25:7e:a3:47:3b:d1:67:b6:23:50:9b:96: c6:f6:65:8c:4e:dc:c8:7d:18:8b:3d:40:a1:30:dc: d2:79:e7:8b:89:3a:49:ab:68:46:2f:d0:d6:a4:57: ab:1e:25:12:09:a7:52:1a:af:c0:e8:fc:e0:5c:bc: 15:88:87:60:3f:d7:3a:f8:2d:5d:2c:96:7e:6b:11: f4:8c:73:6d:e0:d9:06:64:c9:ed:00:36:60:63:7b: 86:a0:1e:30:f7:0e:c1:5c:c9:c7:b0:1c:7e:00:1a: ff:45:e7:51:58:ee:cf:ca:2b:b9:57:a5:e2:94:a2: 59:74:ed:8d:6f:13:ac:15:fa:03:20:74:c0:b2:9f: d4:31:17:9b:7a:98:d6:5c:b1:a9:10:2e:db:81:92: ce:ec:e3:dd:0b:b7:15:f0:bc:59:3c:a7:ec:59:15: e3:27:06:b6:9a:e2:fa:b0:76:d1:be:91:d2:3c:28: ed:bd:f4:c2:b6:9c:f4:72:49:4c:a4:5b:03:5e:9e: 2b:38:5c:9f:5d:c6:20:ba:e4:f0:42:0d:df:9c:f0: 7d:88:5a:82:37:c1:a3:fe:09:9e:ce:37:3f:30:66: 4c:54:44:2f:2f:4e:32:15:74:ef:05:56:2b:40:9f: 24:4c:f0:d0:96:3f:be:e2:e7:ef:bc:07:39:86:20: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F7:F5:47:75:43:E0:51:20:F7:53:23:58:A5:E0:55:87:C6:36:77 X509v3 Authority Key Identifier: keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d4:ec:bd:2b:36:1a:99:f5:fb:48:0c:95:96:12:fa:b2:ad: 11:3a:b6:ce:56:eb:35:d4:0d:eb:f4:f7:b5:e5:45:05:cf:8e: 58:a4:4b:ce:c7:0f:41:aa:dc:7b:5d:4e:c9:13:85:0a:bc:50: 58:db:57:8e:bc:65:bf:80:63:be:03:c6:15:53:2f:54:fb:8e: 59:7d:e3:43:8f:09:7f:06:fa:c9:5e:8c:a5:4e:0d:de:ab:99: 38:b2:69:6c:2a:30:e7:d9:9e:4b:02:ab:8f:d4:10:b0:78:ad: b1:3e:a9:39:94:b7:0f:65:57:64:0e:44:ca:b4:54:40:24:c0: b0:48:f4:68:f1:9f:2a:b6:2e:d9:93:80:48:b7:da:a3:ab:b6: 49:47:19:af:c8:b8:b4:9d:09:9e:e9:0a:a3:f5:80:6d:94:f0: a9:e7:19:70:24:5b:e8:d2:48:d8:40:f4:10:2f:a9:f4:79:58: 89:55:8f:68:61:c3:29:b7:31:09:76:57:7c:4a:55:58:e5:a1: fb:c1:0a:c8:09:9a:c4:96:6b:49:39:d3:f9:97:26:cb:c6:8e: c6:81:e9:03:96:4f:5a:ac:5b:ca:8b:b2:c0:b9:5c:ef:03:ce: b8:57:1e:04:dc:48:6b:2c:87:64:10:b6:cd:a3:fd:e8:08:c4: 2e:60:22:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fxFJtDi0h3c3oP6vIej7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGFkMjFhMGE2OWRjMDQxYzRlMTc3MGViMThiYTQzYjZk YjI5Y2UwHhcNMjUxMjIxMDYwMDUwWhcNMjUxMjIyMDYwMDUwWjAzMTEwLwYDVQQD Eyg3NGY3ZjU0Nzc1NDNlMDUxMjBmNzUzMjM1OGE1ZTA1NTg3YzYzNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7UlfqNHO9FntiNQm5bG9mWMTtzI fRiLPUChMNzSeeeLiTpJq2hGL9DWpFerHiUSCadSGq/A6PzgXLwViIdgP9c6+C1d LJZ+axH0jHNt4NkGZMntADZgY3uGoB4w9w7BXMnHsBx+ABr/RedRWO7Pyiu5V6Xi lKJZdO2NbxOsFfoDIHTAsp/UMRebepjWXLGpEC7bgZLO7OPdC7cV8LxZPKfsWRXj Jwa2muL6sHbRvpHSPCjtvfTCtpz0cklMpFsDXp4rOFyfXcYguuTwQg3fnPB9iFqC N8Gj/gmezjc/MGZMVEQvL04yFXTvBVYrQJ8kTPDQlj++4ufvvAc5hiDQZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT39Ud1Q+BRIPdTI1il4FWHxjZ3MB8GA1UdIwQY MBaAFL1K0hoKadwEHE4XcOsYukO22ynOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEt Y2RkNGQ4ZjhkMGQ5LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEtY2RkNGQ4ZjhkMGQ5 LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNTsvSs2 Gpn1+0gMlZYS+rKtETq2zlbrNdQN6/T3teVFBc+OWKRLzscPQarce11OyROFCrxQ WNtXjrxlv4BjvgPGFVMvVPuOWX3jQ48Jfwb6yV6MpU4N3quZOLJpbCow59meSwKr j9QQsHitsT6pOZS3D2VXZA5EyrRUQCTAsEj0aPGfKrYu2ZOASLfao6u2SUcZr8i4 tJ0JnukKo/WAbZTwqecZcCRb6NJI2ED0EC+p9HlYiVWPaGHDKbcxCXZXfEpVWOWh +8EKyAmaxJZrSTnT+Zcmy8aOxoHpA5ZPWqxbyouywLlc7wPOuFceBNxIayyHZBC2 zaP96AjELmAi3g== -----END CERTIFICATE-----Generated at Sun Dec 21 12:58:09 2025 by rpki-client