This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft File: v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json) Hash identifier: WhUgmsiVMTqhNdOFQr5vaFQFdKAusqfEwXKdqCsp3CU= Subject key identifier: 2F:25:00:A5:02:BC:54:3F:6B:32:17:69:A0:30:F4:19:50:1F:F5:8D Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe Certificate serial: 019B4F970F360E22537FCF98DDBF7CFD0D2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft Manifest number: 17D1 Signing time: Wed 24 Dec 2025 09:00:58 +0000 Manifest this update: Wed 24 Dec 2025 09:00:58 +0000 Manifest next update: Thu 25 Dec 2025 09:00:58 +0000 Files and hashes: 1: BxktpTM0O4l-7Qywr4XGaTh7fCQ.roa (hash: Dp10pRUrJQYwQwB7pFjXetXyeK3jB7q+R/i/kEK18qU=) 2: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (hash: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=) 3: NbAa7vVuxBOczxUdgmV7yv_ihIM.roa (hash: FlSF6xU/X8MrL4smxRaqnNW5wgIas1ZABWQxPw3TwRw=) 4: ZTvZSbWIWloIdqV37DbtQi07aIY.roa (hash: lQEka4orv2/BKmCxU3FSbBYnm+siKkoc02AVPM16hvk=) 5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: 0GH2AgB0Xbcsky6tXtFqzpnEvFI1d83je+6dDJs6HCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:0f:36:0e:22:53:7f:cf:98:dd:bf:7c:fd:0d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe Validity Not Before: Dec 24 09:00:58 2025 GMT Not After : Dec 25 09:00:58 2025 GMT Subject: CN=2f2500a502bc543f6b321769a030f419501ff58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:c4:71:33:e5:84:0e:15:7d:37:63:89:a3: 8c:a5:48:45:dd:40:fb:5c:e0:2a:09:cf:e4:86:96: e5:c4:4e:74:be:cc:b7:55:74:b8:9f:a2:fb:6d:ba: 78:37:b9:9b:9c:aa:e5:11:34:d5:99:f5:fe:20:e5: 61:78:b6:31:3d:a4:7c:a3:32:5d:d1:6b:e7:a2:a3: 2c:53:7a:7d:3a:37:b1:e9:6c:0a:b5:76:29:92:3f: 7a:ac:c1:d4:f4:75:3d:05:47:31:f5:90:e4:4c:f0: f9:96:cd:de:f4:4a:87:92:96:6c:18:5c:e0:c8:ac: 8f:5a:2e:1d:55:14:88:51:3c:45:84:aa:0e:99:b8: a6:43:d6:9c:80:26:11:8f:89:80:08:72:7e:9f:1a: 9d:d6:12:e3:9f:c2:e7:6e:7d:ba:5f:ab:68:53:32: 7c:b4:d1:e6:f6:cb:9c:3a:d4:84:b3:09:15:71:9a: 64:ac:e4:ef:03:98:9a:25:a9:02:67:ff:32:1a:a4: a2:b7:22:c2:d8:67:6e:e1:18:f2:e3:90:03:8c:d4: 04:e5:5d:7d:e5:fc:ee:1b:e7:2e:07:0d:43:8a:f2: 45:a9:7d:9b:b7:df:21:65:c3:d4:98:8e:fa:c7:6f: ac:ba:00:39:59:15:64:80:48:c1:dc:0e:02:a1:7d: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:25:00:A5:02:BC:54:3F:6B:32:17:69:A0:30:F4:19:50:1F:F5:8D X509v3 Authority Key Identifier: keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:da:c1:08:6e:ab:1e:d2:bd:34:46:db:de:1a:e7:20:73:d0: 2b:65:c8:33:7b:b0:38:e2:04:60:fc:6e:6f:ce:9e:50:81:3e: 53:3b:09:71:3a:07:26:53:e3:8c:ad:77:11:7a:17:bd:d2:78: a5:62:ad:9c:c9:80:71:80:b8:70:63:09:c8:9f:42:e6:e7:75: f7:a3:59:63:af:74:d9:df:63:64:be:ca:0f:6e:19:6b:6f:88: e9:89:07:7b:0b:bc:c3:01:8d:18:af:fa:bc:1d:dc:0d:0b:36: 01:6c:30:5f:e8:39:c5:7f:0b:02:3c:66:86:51:f2:a4:b5:57: 96:c8:d5:fb:3b:fb:9b:8e:15:62:31:d5:f3:e3:61:c4:79:54: 6f:d7:f1:69:d7:25:7a:ac:73:73:60:3c:a4:a4:82:e4:8b:ce: 15:34:f5:34:93:c2:f2:d1:55:a4:ee:18:75:00:75:6c:24:33: 65:fd:7e:33:b9:b7:43:44:35:cc:64:0c:77:e9:07:12:7d:d6: 41:31:8d:03:35:ff:29:1b:5a:dd:ae:c5:35:f1:9e:9d:80:6b: 86:36:6a:91:6d:a2:6f:a4:3d:e6:20:52:3b:d8:90:20:fa:77: c6:55:34:ac:cc:e5:4d:80:24:e5:ac:ab:62:47:b3:94:a4:38: 31:ca:91:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlw82DiJTf8+Y3b98/Q0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTlmMTJjOTZiYTIwNjgzYWZmNWM5NThiZmFkOGU0YzU3 N2Y3ZmUwHhcNMjUxMjI0MDkwMDU4WhcNMjUxMjI1MDkwMDU4WjAzMTEwLwYDVQQD EygyZjI1MDBhNTAyYmM1NDNmNmIzMjE3NjlhMDMwZjQxOTUwMWZmNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEbEcTPlhA4VfTdjiaOMpUhF3UD7 XOAqCc/khpblxE50vsy3VXS4n6L7bbp4N7mbnKrlETTVmfX+IOVheLYxPaR8ozJd 0WvnoqMsU3p9Ojex6WwKtXYpkj96rMHU9HU9BUcx9ZDkTPD5ls3e9EqHkpZsGFzg yKyPWi4dVRSIUTxFhKoOmbimQ9acgCYRj4mACHJ+nxqd1hLjn8Lnbn26X6toUzJ8 tNHm9sucOtSEswkVcZpkrOTvA5iaJakCZ/8yGqSityLC2Gdu4Rjy45ADjNQE5V19 5fzuG+cuBw1DivJFqX2bt98hZcPUmI76x2+sugA5WRVkgEjB3A4CoX0DtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8lAKUCvFQ/azIXaaAw9BlQH/WNMB8GA1UdIwQY MBaAFL/p8SyWuiBoOv9clYv62OTFd/f+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQt Zjc4MjBjNWU5NjZhLzEvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQtZjc4MjBjNWU5NjZh LzEvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9rBCG6r HtK9NEbb3hrnIHPQK2XIM3uwOOIEYPxub86eUIE+UzsJcToHJlPjjK13EXoXvdJ4 pWKtnMmAcYC4cGMJyJ9C5ud196NZY6902d9jZL7KD24Za2+I6YkHewu8wwGNGK/6 vB3cDQs2AWwwX+g5xX8LAjxmhlHypLVXlsjV+zv7m44VYjHV8+NhxHlUb9fxadcl eqxzc2A8pKSC5IvOFTT1NJPC8tFVpO4YdQB1bCQzZf1+M7m3Q0Q1zGQMd+kHEn3W QTGNAzX/KRta3a7FNfGenYBrhjZqkW2ib6Q95iBSO9iQIPp3xlU0rMzlTYAk5ayr YkezlKQ4McqRBA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:07:52 2025 by rpki-client