This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json) Hash identifier: Hf+rmHqlyo7x4JYnwlBcbe6vbWzrCWxOxMAMml6B+oE= Subject key identifier: 8E:6C:F6:68:07:8A:F1:2D:3F:87:FB:80:97:08:2D:29:92:0D:BA:CE Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B38A26A3FDAD1D373A13AB6EAB06BFBB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft Manifest number: 0D64 Signing time: Fri 19 Dec 2025 22:02:06 +0000 Manifest this update: Fri 19 Dec 2025 22:02:06 +0000 Manifest next update: Sat 20 Dec 2025 22:02:06 +0000 Files and hashes: 1: 2uBWQEQ5bCZzxWiTRxSToVgE9dQ.roa (hash: MsldwzQz27lchmlMAHvSH+WOXjpCThCf8Kkip/88G38=) 2: 5yKICj_2gDXyLaLptV_QQPobwBA.roa (hash: ymCwe5qZ4XyCaC4waTVSNvK53llzEbvyfIqHPUqq7zU=) 3: JgoOvXvrswEOgbBkM7mOX2KwPkM.roa (hash: 0lHrFGf5p+iWNP5B3Ka8kAz0C85fbyYK54kTcYnj/rA=) 4: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: F95bQ4k68hF4O1C1+FedzGYyf0qq8oVYo4XGg39pmYM=) 5: Yya9BCiMiFzKZN_sDsecVVDi2Zk.roa (hash: UhT9NHaGPP2E68wfERtie4Og2VNV+Hbwcvvn4QjWbxs=) 6: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=) 7: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=) 8: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:6a:3f:da:d1:d3:73:a1:3a:b6:ea:b0:6b:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Dec 19 22:02:06 2025 GMT Not After : Dec 20 22:02:06 2025 GMT Subject: CN=8e6cf668078af12d3f87fb8097082d29920dbace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:53:0a:4f:60:c3:23:22:ae:27:87:60:02: 9c:29:7c:52:41:a7:44:47:eb:09:28:72:97:72:5f: af:ad:e0:8b:10:f2:16:49:19:9d:28:6f:57:57:1e: c2:23:02:24:e5:68:4e:8f:03:97:f0:5f:d6:12:02: 86:20:c7:09:e8:bd:bd:23:73:95:c6:f1:52:d1:d8: 94:88:25:b5:ef:fa:28:cd:90:ee:08:db:ac:75:85: 13:5d:a3:c7:15:a5:34:8e:60:71:5d:27:f9:22:3b: c8:59:cc:9b:dc:90:30:c7:8b:c8:a0:52:6f:d4:b8: c3:06:e3:e5:61:0a:dc:c4:ef:83:25:af:98:e6:04: ca:34:60:45:7c:9f:18:d6:66:0c:92:27:b8:4e:28: 9b:46:93:d0:79:59:1e:29:6f:72:ed:29:65:3c:26: 0e:d6:85:89:f8:fb:f5:e3:3c:ad:5d:7a:4e:94:b7: 97:18:a7:75:ca:b2:e7:85:4e:76:a5:ab:eb:c4:fd: ce:00:83:42:ad:4a:12:6c:ba:80:95:e5:4a:8e:d3: da:24:64:f7:03:0d:55:c2:8d:2b:66:75:3b:68:78: 81:7a:32:0a:af:dd:5a:e9:b8:14:b9:a7:2c:30:29: fa:af:80:a2:c5:eb:3e:f1:d0:70:50:d1:c8:c0:3f: 86:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:F6:68:07:8A:F1:2D:3F:87:FB:80:97:08:2D:29:92:0D:BA:CE X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d9:31:d4:16:8b:1e:ec:73:cf:c1:cd:24:8c:c1:98:fb:ae: 42:d2:74:dd:46:59:3e:2e:b4:80:f4:6d:32:a4:dc:e0:61:0c: 02:bc:c4:49:94:0d:0d:69:d6:03:ab:01:d3:f3:95:a7:b8:bb: bb:12:f3:ab:4a:04:38:5c:0e:ed:0f:5e:ab:55:b2:74:f4:69: 0a:89:fa:91:8c:a0:7b:1e:ee:b6:fa:38:5a:5e:75:81:37:a1: a8:24:9b:87:b6:b0:b4:0e:9c:b1:e7:db:c6:d3:d2:dc:b6:1c: dc:d6:db:08:c4:9d:7c:0b:10:fc:7d:50:62:5f:8b:eb:ac:94: c8:23:b2:cf:62:61:e0:fa:19:02:06:76:1b:67:bb:1f:4c:c0: 3a:32:af:9b:14:8a:03:97:8a:d8:56:9c:e7:bf:08:e5:53:07: be:23:12:33:a2:33:2d:a8:11:1f:0f:9e:6e:bb:fc:cc:f5:05: 44:7c:ab:f2:e8:53:d0:43:c8:7b:68:1e:5e:d9:24:ad:43:c8: a1:af:d0:1e:c1:27:81:e1:e9:ec:66:87:cc:14:bc:a4:89:92: 35:d7:59:82:3e:7f:9e:c4:59:bb:c3:1c:6b:ee:4e:07:d2:d9: 6f:78:83:c8:9e:ec:e3:3d:14:2d:4f:66:54:8e:94:40:a3:44: d3:9d:5c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4omo/2tHTc6E6tuqwa/uwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjUxMjE5MjIwMjA2WhcNMjUxMjIwMjIwMjA2WjAzMTEwLwYDVQQD Eyg4ZTZjZjY2ODA3OGFmMTJkM2Y4N2ZiODA5NzA4MmQyOTkyMGRiYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp95TCk9gwyMirieHYAKcKXxSQadE R+sJKHKXcl+vreCLEPIWSRmdKG9XVx7CIwIk5WhOjwOX8F/WEgKGIMcJ6L29I3OV xvFS0diUiCW17/oozZDuCNusdYUTXaPHFaU0jmBxXSf5IjvIWcyb3JAwx4vIoFJv 1LjDBuPlYQrcxO+DJa+Y5gTKNGBFfJ8Y1mYMkie4TiibRpPQeVkeKW9y7SllPCYO 1oWJ+Pv14zytXXpOlLeXGKd1yrLnhU52pavrxP3OAINCrUoSbLqAleVKjtPaJGT3 Aw1Vwo0rZnU7aHiBejIKr91a6bgUuacsMCn6r4Cixes+8dBwUNHIwD+GfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5s9mgHivEtP4f7gJcILSmSDbrOMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdkx1BaL Huxzz8HNJIzBmPuuQtJ03UZZPi60gPRtMqTc4GEMArzESZQNDWnWA6sB0/OVp7i7 uxLzq0oEOFwO7Q9eq1WydPRpCon6kYygex7utvo4Wl51gTehqCSbh7awtA6csefb xtPS3LYc3NbbCMSdfAsQ/H1QYl+L66yUyCOyz2Jh4PoZAgZ2G2e7H0zAOjKvmxSK A5eK2Fac578I5VMHviMSM6IzLagRHw+ebrv8zPUFRHyr8uhT0EPIe2geXtkkrUPI oa/QHsEngeHp7GaHzBS8pImSNddZgj5/nsRZu8Mca+5OB9LZb3iDyJ7s4z0ULU9m VI6UQKNE051cpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:54:07 2025 by rpki-client