This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json) Hash identifier: 2Qv1Sth1j92wYozAPif7qxtC+RBNr1UO3S4HveMQ6EM= Subject key identifier: 4F:04:34:20:F3:47:86:30:0B:B4:14:A3:1C:59:AD:10:0C:D5:87:B7 Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75 Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75 Certificate serial: 019B38A25DC9E7204C1067F012B085E986BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 22:02:03 +0000 Manifest this update: Fri 19 Dec 2025 22:02:03 +0000 Manifest next update: Sat 20 Dec 2025 22:02:03 +0000 Files and hashes: 1: 04aeLB2DOt1K2QS3FV3HPiOFTOY.roa (hash: A0BDulMr2mADVn63DP1McJaXG3hUV8E5IfZVNPfU4eA=) 2: bO2ZdwM21enGaKwe_1iSEPBIIts.roa (hash: uBMm/tJP0uLUJeJM+1YEtRm4BQYL1PFKNrER1Hr5ksk=) 3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: brgfi7v1aOuT0TWNoXaP2n0jpUGUE1HEJjdkXbv839I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:5d:c9:e7:20:4c:10:67:f0:12:b0:85:e9:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75 Validity Not Before: Dec 19 22:02:03 2025 GMT Not After : Dec 20 22:02:03 2025 GMT Subject: CN=4f043420f34786300bb414a31c59ad100cd587b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3b:c9:1e:bd:bd:69:db:e5:a6:12:28:e0:fb: 8b:1e:0a:c2:ad:e0:4e:f8:1b:32:aa:dc:60:95:64: a8:f5:26:0e:13:bf:32:36:b5:9e:79:b8:6c:35:95: 1b:08:8b:45:c6:cb:8e:2b:4e:75:91:c0:3b:59:9c: f9:73:ba:7d:fb:3d:c1:9e:c2:3e:51:29:aa:ae:ef: 2f:37:43:20:fe:52:7c:0f:b1:ee:67:a1:c3:61:33: da:cb:31:b7:e7:1a:02:19:ae:a9:c7:11:4c:d1:e2: d2:29:d2:e5:eb:d5:fd:36:57:b4:e7:b9:15:10:66: 75:ca:8e:5b:7b:25:36:a9:9f:0f:39:0b:32:64:ab: b9:68:65:5d:ea:1d:dc:60:44:88:e2:79:16:fd:57: f3:61:57:cc:b4:ff:e6:c1:e1:60:74:42:4c:82:a5: 7f:02:fa:53:66:ed:9b:6e:99:38:13:d3:4c:0c:00: 88:27:d1:98:fe:d4:60:92:a3:c8:de:57:da:ff:19: d6:5c:b3:34:21:4b:a6:d9:fe:f7:d4:7a:01:c4:31: 89:e2:42:1d:0e:1a:c7:dd:13:6c:c3:45:e8:6a:ae: 1e:2e:8e:8b:90:d3:f8:b1:84:87:79:dc:fa:75:98: 3d:0d:b8:6f:e5:38:c6:b0:26:ca:56:c7:dc:12:e7: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:34:20:F3:47:86:30:0B:B4:14:A3:1C:59:AD:10:0C:D5:87:B7 X509v3 Authority Key Identifier: keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:16:53:bc:a0:79:51:a6:7b:17:ab:d3:22:b8:11:b4:02:5f: 74:0e:39:9e:da:a7:48:0b:55:51:1c:3d:92:02:76:2b:cb:eb: 8f:ea:65:06:6e:63:81:ce:b3:c9:48:08:81:93:4d:56:b5:4a: be:8f:bb:7c:1b:17:ae:e9:98:9e:3b:5a:d9:ee:3f:59:91:82: f5:3a:27:1e:53:39:4c:9a:fd:ad:50:b0:5e:08:05:50:ed:4d: bf:3f:3b:50:ad:4a:e6:ac:c4:3c:f5:d2:2b:3f:8c:75:55:f3: 02:60:79:c0:ed:5e:e7:83:0b:4c:38:55:12:c6:f5:bc:71:e7: e7:ad:24:93:0e:4a:91:24:9d:89:ea:c3:6c:96:73:14:17:8c: 9e:d1:27:23:e1:65:8f:d8:c3:7b:37:12:16:5c:af:be:f1:1d: 54:4d:e7:28:69:26:71:6f:2c:49:ac:d8:fa:8c:ff:8a:19:ad: 80:79:fe:46:a2:f1:38:c0:5d:8f:cd:26:ac:30:2b:da:20:37: 7e:ff:3d:cd:29:0e:29:d0:19:2f:0b:c0:e6:d4:e2:1d:7f:91: 8a:97:7a:fe:fe:f4:6c:38:62:b9:07:46:ab:6c:2c:82:b9:ee: 80:9d:1f:d3:ae:96:5a:47:d5:23:38:db:f3:d5:99:ae:1d:ba: c8:14:f4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ol3J5yBMEGfwErCF6Ya7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNmM0OTdmZjRkNGE4YmI1YTI0YmRkMjA1MTU3NWI0OWEw ODNjNzUwHhcNMjUxMjE5MjIwMjAzWhcNMjUxMjIwMjIwMjAzWjAzMTEwLwYDVQQD Eyg0ZjA0MzQyMGYzNDc4NjMwMGJiNDE0YTMxYzU5YWQxMDBjZDU4N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TvJHr29advlphIo4PuLHgrCreBO +BsyqtxglWSo9SYOE78yNrWeebhsNZUbCItFxsuOK051kcA7WZz5c7p9+z3BnsI+ USmqru8vN0Mg/lJ8D7HuZ6HDYTPayzG35xoCGa6pxxFM0eLSKdLl69X9Nle057kV EGZ1yo5beyU2qZ8POQsyZKu5aGVd6h3cYESI4nkW/VfzYVfMtP/mweFgdEJMgqV/ AvpTZu2bbpk4E9NMDACIJ9GY/tRgkqPI3lfa/xnWXLM0IUum2f731HoBxDGJ4kId DhrH3RNsw0Xoaq4eLo6LkNP4sYSHedz6dZg9Dbhv5TjGsCbKVsfcEuclKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8ENCDzR4YwC7QUoxxZrRAM1Ye3MB8GA1UdIwQY MBaAFL5sSX/01Ki7WiS90gUVdbSaCDx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2It NjVhZTU4YTliZWU4LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2ItNjVhZTU4YTliZWU4 LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBZTvKB5 UaZ7F6vTIrgRtAJfdA45ntqnSAtVURw9kgJ2K8vrj+plBm5jgc6zyUgIgZNNVrVK vo+7fBsXrumYnjta2e4/WZGC9TonHlM5TJr9rVCwXggFUO1Nvz87UK1K5qzEPPXS Kz+MdVXzAmB5wO1e54MLTDhVEsb1vHHn560kkw5KkSSdierDbJZzFBeMntEnI+Fl j9jDezcSFlyvvvEdVE3nKGkmcW8sSazY+oz/ihmtgHn+RqLxOMBdj80mrDAr2iA3 fv89zSkOKdAZLwvA5tTiHX+Ripd6/v70bDhiuQdGq2wsgrnugJ0f066WWkfVIzjb 89WZrh26yBT0JA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:26 2025 by rpki-client