This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft File: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json) Hash identifier: 6+hSlg9oVFRUMsz+hrcJ8hgxtauoLEle3X0V4zGiPJY= Subject key identifier: 10:A3:13:4C:6D:80:B1:81:13:DF:AD:A2:7A:0A:40:13:A2:D9:1D:C3 Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED Certificate issuer: /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced Certificate serial: 019B3E6C624C5AF9DA8CCE8A5A68BFC48E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:00:48 +0000 Manifest this update: Sun 21 Dec 2025 01:00:48 +0000 Manifest next update: Mon 22 Dec 2025 01:00:48 +0000 Files and hashes: 1: 26eRBtfHaWUq94c0EN14EglvEno.roa (hash: rVQUyz2NEj2yBSOTyg+XToghqiDGJFkQfMW8NYYr5DE=) 2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: UjlO2aQuiI9y+ph8JScLsUkIQ698FwcZyD20Av91w3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:62:4c:5a:f9:da:8c:ce:8a:5a:68:bf:c4:8e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced Validity Not Before: Dec 21 01:00:48 2025 GMT Not After : Dec 22 01:00:48 2025 GMT Subject: CN=10a3134c6d80b18113dfada27a0a4013a2d91dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:c4:b3:03:d0:42:97:b8:18:d3:9a:21:d2: 7e:1d:12:ea:d2:d8:05:7c:a0:c9:42:c0:75:2d:e3: e6:46:bb:42:24:26:70:71:c3:c5:f4:c4:1e:5f:e1: 9c:c9:f3:50:28:9e:9b:44:09:3b:7e:6d:9c:33:cd: 77:5b:f5:f2:1a:fc:90:9f:7c:4d:11:70:74:ac:d8: 74:2c:d3:e7:8e:a5:95:72:9c:10:da:9d:56:f7:86: c7:5d:0c:f4:1b:0d:24:e1:69:3c:0c:dc:98:2c:5c: c7:c3:43:06:49:da:72:92:84:b7:99:f6:84:0f:91: 03:ac:44:d4:ad:33:2a:6b:5a:85:51:5e:a0:86:d7: 48:4f:8e:72:b3:77:cd:2d:fa:01:5b:ec:17:7a:0f: bd:a9:9f:03:b2:fe:fa:a5:5c:e3:6c:15:44:66:bb: c0:01:f2:4c:e5:cb:47:7e:d7:18:08:13:23:fa:a9: f0:52:a0:48:0f:84:a6:db:e4:64:e2:6e:b7:2b:1b: e7:82:6c:11:14:11:97:3d:10:04:b2:63:8a:2c:e7: 0c:66:65:8c:9d:85:fe:49:90:a4:30:07:8c:ae:69: a3:b5:bb:6e:4c:11:20:bb:f6:02:b6:d5:48:3c:b5: cc:73:a3:5a:ca:96:41:52:f5:1f:9d:2d:1e:30:38: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:13:4C:6D:80:B1:81:13:DF:AD:A2:7A:0A:40:13:A2:D9:1D:C3 X509v3 Authority Key Identifier: keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:85:cb:c2:ca:6c:fe:9d:a1:b0:4d:e6:2a:57:f2:ad:d0:04: 9d:dd:c0:60:fc:43:99:a0:e3:ac:cb:ea:eb:00:1b:24:c0:ed: 8d:30:81:44:4c:0e:3f:ad:f8:dc:94:8d:d2:88:80:5b:f0:71: f7:a5:37:9f:a0:4e:ef:00:f8:d2:68:25:47:83:de:11:d6:d5: 6b:18:3d:dd:32:b7:e2:1c:47:7a:b0:0c:a3:ad:20:90:4b:6e: 51:96:4e:de:57:8e:45:ff:e6:40:81:55:ae:89:0a:c9:56:ef: cc:63:11:b0:b1:25:6e:19:5f:6a:e0:7e:bd:8c:4a:c9:e3:7c: c4:95:72:e8:12:e2:80:db:c1:cc:7a:48:b1:ec:68:9e:d9:4e: 06:03:3c:5d:0c:a6:97:a5:82:08:45:5d:69:2f:69:60:4d:a4: 03:ad:08:cc:a1:fd:bd:5b:8d:53:c1:9a:89:ad:14:d6:50:8d: 4f:4b:9c:35:d8:d5:79:b8:fa:7d:8e:d3:d5:b8:60:03:25:f8: 9b:94:82:4d:78:00:60:5d:92:e4:6e:c2:bf:bc:5f:d6:7b:48: 43:16:3d:f1:77:ab:cf:74:a8:20:a0:0a:a9:4e:2e:ab:c6:98: f1:8a:c2:a5:0d:6b:b1:f1:e9:6d:63:09:21:4b:88:33:04:da: e5:a0:12:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bGJMWvnajM6KWmi/xI5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjRlNjI5NGU3ZmU0NjczZjdiYzZmNTdmNDgxMzhlOTU4 ZmNjZWQwHhcNMjUxMjIxMDEwMDQ4WhcNMjUxMjIyMDEwMDQ4WjAzMTEwLwYDVQQD EygxMGEzMTM0YzZkODBiMTgxMTNkZmFkYTI3YTBhNDAxM2EyZDkxZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmvEswPQQpe4GNOaIdJ+HRLq0tgF fKDJQsB1LePmRrtCJCZwccPF9MQeX+GcyfNQKJ6bRAk7fm2cM813W/XyGvyQn3xN EXB0rNh0LNPnjqWVcpwQ2p1W94bHXQz0Gw0k4Wk8DNyYLFzHw0MGSdpykoS3mfaE D5EDrETUrTMqa1qFUV6ghtdIT45ys3fNLfoBW+wXeg+9qZ8Dsv76pVzjbBVEZrvA AfJM5ctHftcYCBMj+qnwUqBID4Sm2+Rk4m63KxvngmwRFBGXPRAEsmOKLOcMZmWM nYX+SZCkMAeMrmmjtbtuTBEgu/YCttVIPLXMc6NaypZBUvUfnS0eMDiPYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCjE0xtgLGBE9+tonoKQBOi2R3DMB8GA1UdIwQY MBaAFLy05ilOf+RnP3vG9X9IE46Vj8ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxUbUtVNV81R2NfZThiMWYwZ1RqcFdQek8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZDRmNTItOWMyOC00NTEyLThjMWEt MGQ1OTdjN2RhOWM4LzEvdkxUbUtVNV81R2NfZThiMWYwZ1RqcFdQek8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZDRmNTItOWMyOC00NTEyLThjMWEtMGQ1OTdjN2RhOWM4 LzEvdkxUbUtVNV81R2NfZThiMWYwZ1RqcFdQek8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIXLwsps /p2hsE3mKlfyrdAEnd3AYPxDmaDjrMvq6wAbJMDtjTCBREwOP6343JSN0oiAW/Bx 96U3n6BO7wD40mglR4PeEdbVaxg93TK34hxHerAMo60gkEtuUZZO3leORf/mQIFV rokKyVbvzGMRsLElbhlfauB+vYxKyeN8xJVy6BLigNvBzHpIsexontlOBgM8XQym l6WCCEVdaS9pYE2kA60IzKH9vVuNU8Gaia0U1lCNT0ucNdjVebj6fY7T1bhgAyX4 m5SCTXgAYF2S5G7Cv7xf1ntIQxY98Xerz3SoIKAKqU4uq8aY8YrCpQ1rsfHpbWMJ IUuIMwTa5aASIg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:53 2025 by rpki-client