This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json) Hash identifier: Gj+fhXRdsXcZAgjDBOo5Rb6DmGTetMIz9gWhELC6EoA= Subject key identifier: AC:F0:48:91:DE:AB:3A:D6:8A:30:BC:24:2B:87:D0:8B:8F:47:C5:0F Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162 Certificate serial: 019B3CEBCBE1650D8AF0DC5CA6750DA3C190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 18:00:44 +0000 Manifest this update: Sat 20 Dec 2025 18:00:44 +0000 Manifest next update: Sun 21 Dec 2025 18:00:44 +0000 Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=) 2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: hNX2BILBfKgEh+f7/AynRbjb0aW+sl0/ZfZzlHU9/7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:cb:e1:65:0d:8a:f0:dc:5c:a6:75:0d:a3:c1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd92eae9e11699e4ce710580519776c300296162 Validity Not Before: Dec 20 18:00:44 2025 GMT Not After : Dec 21 18:00:44 2025 GMT Subject: CN=acf04891deab3ad68a30bc242b87d08b8f47c50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:de:8e:9b:b9:b7:7e:06:0d:9f:79:ac:50: d1:e9:24:2e:65:7c:49:72:4b:e3:de:ba:0e:e4:46: 57:bc:2d:36:96:30:50:44:a7:45:8d:5c:7b:c4:70: b8:87:bd:7e:c8:c8:1c:55:93:44:ed:ce:d3:61:71: 0b:b7:78:c6:ba:b0:54:a6:37:7c:16:b2:21:f9:1d: 2a:2c:35:cc:f0:92:60:ce:17:6a:ba:bc:eb:60:5d: 34:4b:28:7b:9f:9d:37:37:77:dc:40:7c:60:60:9e: 25:19:87:f0:7a:78:a6:c1:6b:d3:bf:e9:2a:bd:31: ef:8d:ca:01:93:1f:d1:b8:00:a8:16:d0:b2:12:e1: cf:3c:a7:2f:eb:40:4c:a8:79:24:ed:d9:5a:6b:f5: e7:8e:7c:5c:0e:99:12:cb:67:84:fd:84:4b:76:b0: 46:1a:19:76:39:16:45:cc:3b:08:4c:82:ca:d6:6f: 1b:79:63:51:0a:e6:85:f7:1d:e6:dc:57:5c:fa:d8: 8f:78:52:22:86:4f:2d:36:bf:20:f8:b9:90:86:b8: 06:bd:2e:0f:45:52:00:f5:e1:ac:1f:6b:1e:83:7a: 91:e6:35:c7:c4:6c:6c:f9:69:20:21:52:ca:2d:c0: 3c:b6:6b:5d:76:a0:71:a4:24:b1:c0:7c:c9:74:c4: 56:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F0:48:91:DE:AB:3A:D6:8A:30:BC:24:2B:87:D0:8B:8F:47:C5:0F X509v3 Authority Key Identifier: keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:58:c1:d7:ea:9e:4d:af:7e:22:88:da:7d:42:00:81:d4:1b: e8:02:ba:75:8b:99:c1:55:4b:9d:88:9a:18:b2:16:ad:45:6f: f7:11:e0:d1:03:c6:a9:54:35:d5:7a:85:4e:2a:92:8d:08:de: aa:5d:df:a5:03:4d:cc:e1:11:d4:16:f8:51:05:44:13:87:52: 27:62:99:55:ab:44:a7:fc:fc:99:1e:05:97:25:24:3f:ed:a1: 85:4c:16:1f:1c:00:60:da:ab:0a:23:a4:90:20:c3:a2:aa:2b: 4d:1f:82:2e:6b:41:31:70:47:8e:83:7d:6f:61:53:b2:46:11: aa:82:25:42:81:e6:ad:ca:03:65:be:c7:0a:41:94:07:7d:6a: b4:67:70:59:ae:46:eb:00:0d:a0:00:0a:65:80:44:66:12:d7: ee:ae:31:cf:fb:fa:a7:12:6a:e4:9f:21:c4:9d:ef:a4:d1:cf: 87:71:30:15:25:5c:66:33:d6:7e:5d:2f:de:41:9e:be:2a:88: 28:7c:92:a1:07:33:e8:c9:61:e5:2d:85:17:df:08:34:2f:1e: 30:06:d9:d0:d8:45:d1:50:19:03:01:e2:23:7c:5a:0c:65:49: 42:ce:51:a5:67:67:cc:db:0b:cb:77:ee:9a:a8:e4:72:ef:51: 23:66:0f:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868vhZQ2K8NxcpnUNo8GQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTJlYWU5ZTExNjk5ZTRjZTcxMDU4MDUxOTc3NmMzMDAy OTYxNjIwHhcNMjUxMjIwMTgwMDQ0WhcNMjUxMjIxMTgwMDQ0WjAzMTEwLwYDVQQD EyhhY2YwNDg5MWRlYWIzYWQ2OGEzMGJjMjQyYjg3ZDA4YjhmNDdjNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDejpu5t34GDZ95rFDR6SQuZXxJ ckvj3roO5EZXvC02ljBQRKdFjVx7xHC4h71+yMgcVZNE7c7TYXELt3jGurBUpjd8 FrIh+R0qLDXM8JJgzhdqurzrYF00Syh7n503N3fcQHxgYJ4lGYfwenimwWvTv+kq vTHvjcoBkx/RuACoFtCyEuHPPKcv60BMqHkk7dlaa/XnjnxcDpkSy2eE/YRLdrBG Ghl2ORZFzDsITILK1m8beWNRCuaF9x3m3Fdc+tiPeFIihk8tNr8g+LmQhrgGvS4P RVIA9eGsH2seg3qR5jXHxGxs+WkgIVLKLcA8tmtddqBxpCSxwHzJdMRWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzwSJHeqzrWijC8JCuH0IuPR8UPMB8GA1UdIwQY MBaAFL2S6unhFpnkznEFgFGXdsMAKWFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2Qt YzhhOWNhYTNiYmU5LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2QtYzhhOWNhYTNiYmU5 LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVjB1+qe Ta9+IojafUIAgdQb6AK6dYuZwVVLnYiaGLIWrUVv9xHg0QPGqVQ11XqFTiqSjQje ql3fpQNNzOER1Bb4UQVEE4dSJ2KZVatEp/z8mR4FlyUkP+2hhUwWHxwAYNqrCiOk kCDDoqorTR+CLmtBMXBHjoN9b2FTskYRqoIlQoHmrcoDZb7HCkGUB31qtGdwWa5G 6wANoAAKZYBEZhLX7q4xz/v6pxJq5J8hxJ3vpNHPh3EwFSVcZjPWfl0v3kGeviqI KHySoQcz6Mlh5S2FF98INC8eMAbZ0NhF0VAZAwHiI3xaDGVJQs5RpWdnzNsLy3fu mqjkcu9RI2YPtw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:23:36 2025 by rpki-client