This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json) Hash identifier: AHkOYfNqjX5Q/UwQ32CN0aguhW48cKf6J18VdNNVo2w= Subject key identifier: EA:72:8B:5A:9E:39:D3:D5:F0:3E:9C:42:86:6B:03:64:1D:31:9F:2A Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Certificate serial: 019B3E6E20347B80306AF6E934DA7E3D24EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft Manifest number: 0B8A Signing time: Sun 21 Dec 2025 01:02:43 +0000 Manifest this update: Sun 21 Dec 2025 01:02:43 +0000 Manifest next update: Mon 22 Dec 2025 01:02:43 +0000 Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=) 2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=) 3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=) 4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: v3jq4m98hEHwlJSM79CZR4kpYMoCJa4NAjSAAUQ/pAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:20:34:7b:80:30:6a:f6:e9:34:da:7e:3d:24:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Validity Not Before: Dec 21 01:02:43 2025 GMT Not After : Dec 22 01:02:43 2025 GMT Subject: CN=ea728b5a9e39d3d5f03e9c42866b03641d319f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:39:ce:2f:b5:3f:31:8b:35:44:27:ee:d7: 4a:db:e3:03:4b:c9:61:71:2f:92:d3:71:57:3b:15: a3:7d:1e:da:83:24:b6:c6:79:cc:db:05:c9:d4:31: 9f:4c:02:b8:f0:50:d6:6f:e7:fe:eb:bd:25:62:a6: 7c:60:01:7a:af:50:3c:f1:6f:1f:83:d6:30:7d:f8: 35:63:a7:cd:a0:7f:70:f2:a8:05:f2:24:a0:ff:db: 7c:14:89:12:2c:78:74:d1:db:e9:28:03:7c:2e:8b: e0:cd:67:e7:aa:30:d6:5c:26:ae:0f:4c:b2:84:09: 1f:0c:0d:5b:2b:e0:83:8b:ae:d0:fb:eb:d4:af:60: 22:81:9e:eb:47:6f:ba:09:83:4d:29:d3:df:12:2b: 0e:0f:b4:6b:4c:3c:97:b2:18:9b:65:dd:b3:cb:05: 86:bc:f3:0c:e9:ac:c5:5d:2a:06:a6:92:63:32:f8: c6:40:df:f8:65:34:6b:6b:14:00:64:3e:1f:4e:42: 2b:8f:83:aa:68:f3:83:68:78:3d:b0:b3:28:ba:71: c9:c7:52:31:c9:3a:7e:06:73:6b:40:e9:7b:60:d6: 19:6c:72:2d:ce:da:c0:31:e5:7b:63:31:01:02:0d: 6e:69:10:a1:40:fb:2a:df:de:88:ba:c5:e0:88:31: cf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:8B:5A:9E:39:D3:D5:F0:3E:9C:42:86:6B:03:64:1D:31:9F:2A X509v3 Authority Key Identifier: keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:c8:c4:58:ab:1b:3b:c3:dd:a1:58:6e:8c:38:ea:77:77: cc:53:3c:cc:7b:e4:58:58:ba:b0:c2:07:d4:5f:fd:d7:71:0a: dc:1e:91:3e:10:6d:c0:8e:0d:05:a2:83:77:a4:7b:d5:ad:b5: 7c:9f:d6:b1:c4:d3:03:0c:bc:25:41:6b:ef:b8:16:86:5f:02: 52:88:00:47:d7:bb:c2:53:a0:37:38:ef:f3:4b:58:1e:98:d6: 66:53:b9:51:a2:51:fa:28:a8:de:d8:a1:e3:e5:f4:4d:9d:b8: 52:1b:ab:5e:e5:53:41:06:ff:ad:ab:ab:1f:e3:73:7f:c2:7f: 2d:1e:e1:39:49:e1:20:d5:34:18:68:b2:0d:0a:74:9d:df:ee: 35:b2:01:cf:37:d0:0b:f9:e5:3f:9e:35:a7:ab:5b:5e:73:ce: fd:6d:4f:ee:69:72:bf:5c:1c:23:07:13:1c:28:a7:e3:af:fa: b9:d4:f6:ca:aa:65:48:1a:3b:75:14:16:2d:35:a0:8c:36:d6: ea:16:a8:74:fa:5b:73:32:8f:16:38:8e:9d:b3:6e:ee:ae:08: d7:e7:2b:60:66:64:4d:a7:a8:c8:0c:be:16:8e:23:1f:1d:09: db:b6:5e:23:2d:20:56:24:44:6c:5e:04:be:fb:df:71:e5:97: 0c:e6:39:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+biA0e4AwavbpNNp+PSTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzdjNzBmMWM2N2VjYTE3NzVhNzA5YzkyMzVkNmEyZjU1 NTE2YjgwHhcNMjUxMjIxMDEwMjQzWhcNMjUxMjIyMDEwMjQzWjAzMTEwLwYDVQQD EyhlYTcyOGI1YTllMzlkM2Q1ZjAzZTljNDI4NjZiMDM2NDFkMzE5ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+k5zi+1PzGLNUQn7tdK2+MDS8lh cS+S03FXOxWjfR7agyS2xnnM2wXJ1DGfTAK48FDWb+f+670lYqZ8YAF6r1A88W8f g9Ywffg1Y6fNoH9w8qgF8iSg/9t8FIkSLHh00dvpKAN8LovgzWfnqjDWXCauD0yy hAkfDA1bK+CDi67Q++vUr2AigZ7rR2+6CYNNKdPfEisOD7RrTDyXshibZd2zywWG vPMM6azFXSoGppJjMvjGQN/4ZTRraxQAZD4fTkIrj4OqaPODaHg9sLMounHJx1Ix yTp+BnNrQOl7YNYZbHItztrAMeV7YzEBAg1uaRChQPsq396IusXgiDHPmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpyi1qeOdPV8D6cQoZrA2QdMZ8qMB8GA1UdIwQY MBaAFL43xw8cZ+yhd1pwnJI11qL1VRa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQt YzhlYjA4Y2U5MDg5LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQtYzhlYjA4Y2U5MDg5 LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1vIxFir GzvD3aFYbow46nd3zFM8zHvkWFi6sMIH1F/913EK3B6RPhBtwI4NBaKDd6R71a21 fJ/WscTTAwy8JUFr77gWhl8CUogAR9e7wlOgNzjv80tYHpjWZlO5UaJR+iio3tih 4+X0TZ24UhurXuVTQQb/raurH+Nzf8J/LR7hOUnhINU0GGiyDQp0nd/uNbIBzzfQ C/nlP541p6tbXnPO/W1P7mlyv1wcIwcTHCin46/6udT2yqplSBo7dRQWLTWgjDbW 6haodPpbczKPFjiOnbNu7q4I1+crYGZkTaeoyAy+Fo4jHx0J27ZeIy0gViREbF4E vvvfceWXDOY5lg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:55 2025 by rpki-client