This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json) Hash identifier: Q5n9MPsQFny/sZrPeqMbJ4YSl4/T0pQUqizxp3YNX7w= Subject key identifier: ED:61:0B:F8:6A:69:06:A0:71:D3:12:B4:21:A0:0D:C4:0D:F5:A8:4A Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b Certificate serial: 019B3F7EF9571224CA1ED880C3BF588867E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft Manifest number: 0C16 Signing time: Sun 21 Dec 2025 06:00:44 +0000 Manifest this update: Sun 21 Dec 2025 06:00:44 +0000 Manifest next update: Mon 22 Dec 2025 06:00:44 +0000 Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=) 2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=) 3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: 2IT2MGjRwd9K/Kdwu1JXZVujTSoCq46h6Ij7w22kvvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:f9:57:12:24:ca:1e:d8:80:c3:bf:58:88:67:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b Validity Not Before: Dec 21 06:00:44 2025 GMT Not After : Dec 22 06:00:44 2025 GMT Subject: CN=ed610bf86a6906a071d312b421a00dc40df5a84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:84:56:8c:67:d4:4e:c4:c7:62:b0:46:2e: 15:b5:2b:7e:34:87:3b:e2:da:1b:f0:dc:8c:5d:98: 11:19:aa:23:87:85:df:86:99:fc:21:b2:b5:61:46: 96:69:aa:48:21:03:be:48:55:f0:f0:2e:58:00:78: 2b:2a:99:93:3a:de:6d:5d:14:c3:be:cd:b4:9e:35: e6:01:77:29:a8:79:46:2e:06:30:20:c2:fa:84:b9: 5d:e5:f8:55:65:4c:50:ab:58:28:bd:3e:d1:73:cd: fc:e7:73:74:d5:10:78:99:82:34:3d:85:50:35:60: 2c:ad:04:34:5f:72:a9:64:e5:ac:6b:86:82:5b:46: 2a:ee:58:08:d2:31:d9:90:fc:39:86:af:ca:54:dd: 5c:ce:0d:15:92:12:6b:53:10:63:c3:2c:97:ad:0b: f4:74:43:f1:f8:29:15:54:d2:8f:4f:b5:13:ae:97: c5:38:77:84:c2:d6:f2:48:22:7a:48:11:6d:cc:95: e3:d0:1d:d2:53:5d:af:79:ff:45:55:b9:53:f2:26: 86:a0:75:70:c3:e4:7b:ca:8d:ad:e3:b2:19:52:0a: 44:41:93:da:04:dc:b4:5b:4e:af:96:f5:4d:33:e6: 78:52:64:86:dd:af:c2:27:80:66:cd:98:a8:ae:ab: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:0B:F8:6A:69:06:A0:71:D3:12:B4:21:A0:0D:C4:0D:F5:A8:4A X509v3 Authority Key Identifier: keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8c:bb:90:d1:1c:83:87:8e:cf:9c:ad:8f:0c:80:11:f4:b1: 22:6e:20:6a:25:a6:20:24:cd:0b:f1:62:1c:f2:ba:a3:fa:f0: 51:32:73:3e:15:7e:4c:df:b9:bb:ec:eb:4e:48:43:7d:16:28: 37:71:42:3f:8c:78:e0:6d:8f:fb:05:86:68:05:44:88:fb:e0: 08:03:bf:af:c9:41:d6:f6:49:27:24:e3:d2:3d:51:b1:19:3e: 3f:5e:fd:4c:16:33:bb:76:a7:ae:bc:6d:05:8a:7f:dd:78:d8: 08:51:89:5c:3d:a4:93:da:1e:c4:4c:37:0a:a4:a4:87:22:2b: bb:b5:64:9f:97:ca:f5:a6:64:39:a8:d7:84:93:f7:34:3f:42: 41:4c:ef:39:84:01:17:61:39:26:2f:14:3d:d6:05:4c:61:0f: 4d:e4:9c:da:66:5d:61:91:e7:e9:f7:6c:21:50:03:43:82:9f: d6:6e:9c:24:30:99:a1:60:40:69:1f:88:47:35:29:32:d5:f9: 16:e7:57:0f:3b:ac:3d:bb:f5:5a:c8:10:1b:ce:c7:8c:c9:cc: 9a:7d:c5:22:96:78:9d:9c:92:be:0e:7a:5e:a3:ac:cb:fa:eb: fc:89:71:11:32:31:37:14:34:f6:11:2b:e8:92:90:cc:14:c5: 54:e6:54:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fvlXEiTKHtiAw79YiGfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz MjliMmIwHhcNMjUxMjIxMDYwMDQ0WhcNMjUxMjIyMDYwMDQ0WjAzMTEwLwYDVQQD EyhlZDYxMGJmODZhNjkwNmEwNzFkMzEyYjQyMWEwMGRjNDBkZjVhODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V2EVoxn1E7Ex2KwRi4VtSt+NIc7 4tob8NyMXZgRGaojh4Xfhpn8IbK1YUaWaapIIQO+SFXw8C5YAHgrKpmTOt5tXRTD vs20njXmAXcpqHlGLgYwIML6hLld5fhVZUxQq1govT7Rc83853N01RB4mYI0PYVQ NWAsrQQ0X3KpZOWsa4aCW0Yq7lgI0jHZkPw5hq/KVN1czg0VkhJrUxBjwyyXrQv0 dEPx+CkVVNKPT7UTrpfFOHeEwtbySCJ6SBFtzJXj0B3SU12vef9FVblT8iaGoHVw w+R7yo2t47IZUgpEQZPaBNy0W06vlvVNM+Z4UmSG3a/CJ4BmzZiorqtPbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1hC/hqaQagcdMStCGgDcQN9ahKMB8GA1UdIwQY MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3 LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIy7kNEc g4eOz5ytjwyAEfSxIm4gaiWmICTNC/FiHPK6o/rwUTJzPhV+TN+5u+zrTkhDfRYo N3FCP4x44G2P+wWGaAVEiPvgCAO/r8lB1vZJJyTj0j1RsRk+P179TBYzu3anrrxt BYp/3XjYCFGJXD2kk9oexEw3CqSkhyIru7Vkn5fK9aZkOajXhJP3ND9CQUzvOYQB F2E5Ji8UPdYFTGEPTeSc2mZdYZHn6fdsIVADQ4Kf1m6cJDCZoWBAaR+IRzUpMtX5 FudXDzusPbv1WsgQG87HjMnMmn3FIpZ4nZySvg56XqOsy/rr/IlxETIxNxQ09hEr 6JKQzBTFVOZUuw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:22:21 2025 by rpki-client