This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json) Hash identifier: shohAT6eddO5TtnvXDwqr5l4mahrv9itvUaNMgLGPjM= Subject key identifier: 68:81:5E:A8:8A:FC:83:FF:02:92:9A:2A:9B:A0:18:3E:1D:68:9B:72 Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978 Certificate serial: 019B451354F108C2868522208676B9F263AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft Manifest number: 17EB Signing time: Mon 22 Dec 2025 08:00:53 +0000 Manifest this update: Mon 22 Dec 2025 08:00:53 +0000 Manifest next update: Tue 23 Dec 2025 08:00:53 +0000 Files and hashes: 1: 1-RxRYOWF8Da3pE3ZrbsP6R3Zj-0.roa (hash: TsOzqhF2prS7qgWPaaNWV3WwD3aGAkIyffrH+VNvf1k=) 2: 8lacBmVZsphFu0d-DTUjjbuS8oc.roa (hash: c2zm9p5x65urWg2J1m1vDTWXpjxdW+8WhoVhZA8O5rg=) 3: YJ-AtaN-sFyM0u7_IYYRHrhslpQ.roa (hash: 8L2JOWpp8ODt1ijnUyg6XruASgyQTxKsYir/kGA2dxs=) 4: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: DtxgzZBBk5EC//7bWzqhugVHFtFMWWqfXRAXZLD6ICY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:54:f1:08:c2:86:85:22:20:86:76:b9:f2:63:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978 Validity Not Before: Dec 22 08:00:53 2025 GMT Not After : Dec 23 08:00:53 2025 GMT Subject: CN=68815ea88afc83ff02929a2a9ba0183e1d689b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:0b:f5:6b:2e:a3:f9:96:ed:c4:de:3b:28: 9e:9d:62:21:cf:77:13:f9:bb:da:c6:e3:a9:97:aa: bd:31:6e:c9:33:8d:34:53:ab:2d:24:99:89:e8:cc: 24:13:a9:44:82:4d:1d:ff:21:07:ed:e2:62:35:be: b8:40:51:46:fb:0b:d5:37:0f:53:5d:39:d5:21:ff: 41:ea:43:4c:e4:84:32:6f:45:25:8e:2a:43:21:d7: 40:64:f2:b3:81:bc:27:01:6f:fd:ef:58:7e:1f:80: f2:ac:31:4d:59:dd:0c:c8:a5:ec:1f:c3:e4:68:61: d2:82:7a:04:d1:b7:29:55:c1:1c:9f:08:b6:0d:e2: 66:c9:e8:8c:ed:67:33:41:03:f3:6c:36:c9:ca:4d: 21:7a:fe:96:85:d3:e2:fb:84:cc:d5:47:72:82:ef: 31:3c:9b:02:8c:45:59:7b:3c:55:4b:89:16:1e:b6: 57:e0:ab:1e:dd:59:c7:87:70:08:52:0b:1a:7b:a8: 4a:6b:81:af:31:44:30:fb:ae:95:7f:a7:0b:b5:f2: 5c:2c:0a:20:39:f5:2d:fb:9d:fa:1d:4b:af:c2:9d: 6f:5d:d1:50:b2:25:40:ff:79:e5:dd:c6:ad:83:7f: 3f:d3:a2:ce:b3:1c:f2:d4:b1:d3:02:dc:55:6b:f9: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:81:5E:A8:8A:FC:83:FF:02:92:9A:2A:9B:A0:18:3E:1D:68:9B:72 X509v3 Authority Key Identifier: keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:86:02:7a:b6:ce:a8:2e:ee:39:68:19:78:97:b5:8c:50:9e: 8e:9c:48:0d:85:e6:54:05:90:ec:d0:fa:9d:8c:f2:8d:07:ea: 7c:37:2d:3b:0d:17:99:c1:f7:67:aa:1a:81:8b:f6:fe:df:a7: 18:35:29:80:e1:c7:71:f0:bb:c5:51:84:7b:cd:a5:6e:cf:97: 2f:b9:ef:3f:bc:1b:2a:57:bd:a4:a3:a7:27:dd:e4:48:9d:25: b6:a4:08:c2:a6:6a:3a:b2:1c:c5:bb:c6:be:f5:29:31:ef:16: 63:70:66:f1:13:74:a8:7b:f0:8c:71:23:64:5f:60:8a:3b:16: c4:2f:ba:ee:55:86:78:d2:8b:03:62:a6:9d:3c:39:7a:7d:57: 80:f3:43:d9:ba:50:b4:bf:b7:1a:21:f9:6a:70:b6:39:ce:a8: ba:4f:a3:36:43:f7:b9:8c:74:76:d0:c7:27:61:25:6d:6c:9a: d6:2c:23:c4:69:de:65:c7:3d:b0:bd:a9:a7:9a:13:27:0e:11: 58:56:37:6d:ce:00:76:30:b7:89:28:b8:f8:16:e6:91:62:a4: 14:93:ad:37:56:9f:81:94:a1:2b:d9:3d:06:66:a2:da:43:12: fc:72:86:7b:19:31:ea:0d:73:3d:ad:52:bf:ed:33:6a:7d:d3: ad:c2:57:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE1TxCMKGhSIghna58mOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl ZGU5NzgwHhcNMjUxMjIyMDgwMDUzWhcNMjUxMjIzMDgwMDUzWjAzMTEwLwYDVQQD Eyg2ODgxNWVhODhhZmM4M2ZmMDI5MjlhMmE5YmEwMTgzZTFkNjg5YjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDAL9Wsuo/mW7cTeOyienWIhz3cT +bvaxuOpl6q9MW7JM400U6stJJmJ6MwkE6lEgk0d/yEH7eJiNb64QFFG+wvVNw9T XTnVIf9B6kNM5IQyb0UljipDIddAZPKzgbwnAW/971h+H4DyrDFNWd0MyKXsH8Pk aGHSgnoE0bcpVcEcnwi2DeJmyeiM7WczQQPzbDbJyk0hev6WhdPi+4TM1Udygu8x PJsCjEVZezxVS4kWHrZX4Kse3VnHh3AIUgsae6hKa4GvMUQw+66Vf6cLtfJcLAog OfUt+536HUuvwp1vXdFQsiVA/3nl3catg38/06LOsxzy1LHTAtxVa/l6bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiBXqiK/IP/ApKaKpugGD4daJtyMB8GA1UdIwQY MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt NDZhNDNlZjAyMjFiLzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYYCerbO qC7uOWgZeJe1jFCejpxIDYXmVAWQ7ND6nYzyjQfqfDctOw0XmcH3Z6oagYv2/t+n GDUpgOHHcfC7xVGEe82lbs+XL7nvP7wbKle9pKOnJ93kSJ0ltqQIwqZqOrIcxbvG vvUpMe8WY3Bm8RN0qHvwjHEjZF9gijsWxC+67lWGeNKLA2KmnTw5en1XgPND2bpQ tL+3GiH5anC2Oc6ouk+jNkP3uYx0dtDHJ2ElbWya1iwjxGneZcc9sL2pp5oTJw4R WFY3bc4AdjC3iSi4+BbmkWKkFJOtN1afgZShK9k9Bmai2kMS/HKGexkx6g1zPa1S v+0zan3TrcJX4g== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:48 2025 by rpki-client