This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json) Hash identifier: w3EhggiqFJJ/eJ5/4g1kssnI2Dr7X8G7X8giRAzZImM= Subject key identifier: 61:D3:77:E3:96:17:2A:78:B7:3D:10:7C:32:3E:18:C6:B5:78:8D:67 Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b Certificate serial: 019B3833407D0DEFB7C9E7DF1457845A4622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 20:00:41 +0000 Manifest this update: Fri 19 Dec 2025 20:00:41 +0000 Manifest next update: Sat 20 Dec 2025 20:00:41 +0000 Files and hashes: 1: 68bf9tdtZQgGYg3-0B5PInDhCfY.roa (hash: f8IkiTce5GYVcsogjzR0QdHaU5oLadDEov52ZX8Qu0s=) 2: IRSQE14-Tz7sBccAsgZYt7JbvIs.roa (hash: HHWOf34cKB/cnxnIC3HjVQrTDRzDkhRKh2V00sDdnHA=) 3: ZTuZG35aq-_FRZAbaGaaD5vcMwI.roa (hash: ulXglv5m+ng8W6iFQKnfH2V7n7R22IWQlAJ1C+Bod0g=) 4: e7SUl4mSjdeGsAW__A2CvddXoNY.roa (hash: CZDiVjjgs0Krs+aiXIc/FeDFsKFYjTe8hPduuFN8E2k=) 5: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: CQJaq9kVBsssHPQXR2H71Vmfxqx5TeAHoulNKxrPo2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:40:7d:0d:ef:b7:c9:e7:df:14:57:84:5a:46:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b Validity Not Before: Dec 19 20:00:41 2025 GMT Not After : Dec 20 20:00:41 2025 GMT Subject: CN=61d377e396172a78b73d107c323e18c6b5788d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:97:fe:1e:cf:ca:88:67:82:49:d5:ac:64: a8:1c:8d:64:cb:b4:11:62:d9:72:8c:c4:e5:0a:2d: 71:0d:d8:9d:78:83:5d:c7:fe:e2:fc:ee:8e:22:4f: 2c:4e:83:4d:e9:bf:b0:3d:0d:08:22:8a:3a:c0:10: 2c:71:63:3b:93:51:2f:09:fc:dc:80:1e:f2:94:2e: 94:5d:78:0a:00:e6:9f:4a:0d:6b:74:1d:60:d8:c5: 79:65:f5:c3:03:3c:a4:51:4a:fa:4f:1e:0e:9f:78: d0:83:0d:0f:cb:78:81:ba:f9:d7:c0:ad:3e:d3:bb: 68:85:b6:28:68:1c:93:65:09:b5:56:54:9a:90:9e: 50:34:6d:58:08:ee:ef:8b:b0:7d:a7:a2:ce:1a:1c: 62:5c:49:28:a2:26:1a:24:5d:93:77:c4:08:61:bd: 40:a8:91:01:7a:71:1b:a3:bd:19:f1:2f:31:53:49: e9:7b:19:50:c9:16:a4:8a:3f:36:6c:89:e5:35:1d: a6:bb:b2:81:ff:96:89:fa:dc:52:0c:71:8d:48:7d: 71:bb:4b:02:34:5b:15:8e:8a:8e:3b:f4:93:de:01: df:26:95:43:94:26:c1:83:f9:8d:5b:c0:b7:a2:10: 8b:58:d0:a2:b8:04:3c:dd:94:32:0d:14:47:62:3e: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:77:E3:96:17:2A:78:B7:3D:10:7C:32:3E:18:C6:B5:78:8D:67 X509v3 Authority Key Identifier: keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:15:3e:96:d6:73:51:1b:d7:c7:84:ed:ed:04:c5:6a:c3:98: e1:e2:11:80:1c:e4:23:a6:2d:f7:0f:71:5b:df:14:2c:2a:6e: a2:05:ae:45:99:63:95:7f:f9:25:74:31:0b:14:33:5f:f7:42: 83:0c:55:11:88:b4:db:86:c4:77:e7:fb:2f:9f:36:2c:dd:7b: b8:4c:1a:12:f9:f6:03:22:94:09:a6:f4:c0:5f:10:d8:8f:2c: 1e:74:97:3a:5a:72:fd:fd:13:5f:c9:2e:3b:25:fe:0f:1a:38: d7:8e:d0:f7:a1:ff:04:62:84:84:99:12:f0:6f:70:75:ef:dd: 1e:d5:72:98:1e:57:de:6c:1a:ed:df:90:1a:d1:b2:f0:02:2c: 45:d2:14:7f:1f:e6:bf:7b:2c:b7:b5:b1:0d:45:72:7b:f5:29: 0a:b7:55:f0:9b:45:3e:dc:ef:98:e8:e5:dc:91:7b:28:b5:62: 7e:e5:ce:aa:73:5e:1e:e0:a0:53:80:ac:82:51:c8:56:9d:7f: 7e:5b:37:eb:e8:b0:71:93:7c:f3:67:39:bd:fc:6f:10:03:fd: f9:5b:b5:6d:64:d5:4e:c9:b0:6d:90:3c:dc:41:2e:1d:4d:9e: ae:e9:44:0b:8b:c2:73:d1:47:ea:24:8d:a3:7d:e3:07:06:74: 27:2f:d7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M0B9De+3yeffFFeEWkYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4 MDY1MmIwHhcNMjUxMjE5MjAwMDQxWhcNMjUxMjIwMjAwMDQxWjAzMTEwLwYDVQQD Eyg2MWQzNzdlMzk2MTcyYTc4YjczZDEwN2MzMjNlMThjNmI1Nzg4ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTOX/h7PyohngknVrGSoHI1ky7QR YtlyjMTlCi1xDdideINdx/7i/O6OIk8sToNN6b+wPQ0IIoo6wBAscWM7k1EvCfzc gB7ylC6UXXgKAOafSg1rdB1g2MV5ZfXDAzykUUr6Tx4On3jQgw0Py3iBuvnXwK0+ 07tohbYoaByTZQm1VlSakJ5QNG1YCO7vi7B9p6LOGhxiXEkooiYaJF2Td8QIYb1A qJEBenEbo70Z8S8xU0npexlQyRakij82bInlNR2mu7KB/5aJ+txSDHGNSH1xu0sC NFsVjoqOO/ST3gHfJpVDlCbBg/mNW8C3ohCLWNCiuAQ83ZQyDRRHYj4mSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHTd+OWFyp4tz0QfDI+GMa1eI1nMB8GA1UdIwQY MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt YTdhZGU0MzRkNDUxLzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhU+ltZz URvXx4Tt7QTFasOY4eIRgBzkI6Yt9w9xW98ULCpuogWuRZljlX/5JXQxCxQzX/dC gwxVEYi024bEd+f7L582LN17uEwaEvn2AyKUCab0wF8Q2I8sHnSXOlpy/f0TX8ku OyX+Dxo4147Q96H/BGKEhJkS8G9wde/dHtVymB5X3mwa7d+QGtGy8AIsRdIUfx/m v3sst7WxDUVye/UpCrdV8JtFPtzvmOjl3JF7KLVifuXOqnNeHuCgU4CsglHIVp1/ fls36+iwcZN882c5vfxvEAP9+Vu1bWTVTsmwbZA83EEuHU2erulEC4vCc9FH6iSN o33jBwZ0Jy/XwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:59:45 2025 by rpki-client