This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json) Hash identifier: 9J/W+G+vEg6IHJXMx//KnUQ77ViG4wlWhxd5dbQ9moY= Subject key identifier: B5:22:7A:19:F3:90:AE:DB:B1:03:FC:4E:16:74:0F:A0:4E:CD:F8:4E Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Certificate serial: 019B451400C460D7E9E531368FB261C545E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft Manifest number: 0659 Signing time: Mon 22 Dec 2025 08:01:37 +0000 Manifest this update: Mon 22 Dec 2025 08:01:37 +0000 Manifest next update: Tue 23 Dec 2025 08:01:37 +0000 Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=) 2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=) 3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: TLitKap4dOL734IDDp7+5X21TAUNNGUFfOvkPyZiAtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:14:00:c4:60:d7:e9:e5:31:36:8f:b2:61:c5:45:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Validity Not Before: Dec 22 08:01:37 2025 GMT Not After : Dec 23 08:01:37 2025 GMT Subject: CN=b5227a19f390aedbb103fc4e16740fa04ecdf84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:9f:74:53:73:d4:44:40:19:96:8a:5b:86: f4:d6:ae:76:28:99:7c:9d:ed:3c:91:5a:b7:f5:77: 5c:39:79:c6:07:5a:84:70:dd:eb:6e:2a:73:2b:b1: 57:57:4d:46:c6:e7:90:80:17:8f:87:26:f1:a4:37: 53:4b:b5:77:37:5e:71:e8:51:d6:79:d8:ea:d8:60: ad:f9:e4:60:56:03:68:52:e2:18:0b:75:fe:d2:2c: 66:22:c6:83:2a:37:67:1c:45:bc:a7:07:3b:2f:70: 0b:bd:97:15:fe:d3:fe:89:b2:48:5c:08:63:af:9f: 06:2d:88:a9:3a:4b:5c:20:04:8d:6a:25:1f:c6:4c: 16:78:34:f4:70:4c:aa:7e:be:d9:93:b1:56:07:9d: cf:50:85:71:48:6f:08:9a:2d:ef:02:13:ff:f6:8d: c3:fe:83:e1:1f:17:5f:54:5f:93:a7:0e:b9:48:9e: d7:cb:61:60:b5:2d:6f:a9:c4:39:23:cf:5d:b0:4a: 03:c7:22:cd:92:29:e6:52:64:6e:6d:76:9b:9e:ea: 02:50:1d:68:db:56:16:6f:3b:f4:a9:f0:44:de:5b: 54:b7:59:99:91:ad:5d:18:7b:e6:18:70:66:39:8e: 1a:01:82:36:e7:d1:0c:b6:43:e6:92:fb:4c:f6:cc: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:22:7A:19:F3:90:AE:DB:B1:03:FC:4E:16:74:0F:A0:4E:CD:F8:4E X509v3 Authority Key Identifier: keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fe:f9:29:6a:b6:5c:e4:74:c0:d0:ad:20:d5:21:04:64:4b: 52:8f:bc:bf:f2:98:6b:4b:06:de:e2:05:0e:ff:ce:f7:47:1e: ed:9d:d2:c5:e3:33:92:22:a9:7a:a1:e1:ad:08:32:66:5e:76: 37:8b:f9:e4:38:1d:1f:32:5d:04:c8:51:a0:ac:8c:d4:81:d8: 41:5c:58:2b:f5:10:e0:8b:50:2a:08:ab:5c:a0:5c:49:53:05: 91:f9:a4:14:7b:89:5d:88:ef:ef:46:ae:7e:63:fa:11:ed:67: d1:37:a8:39:70:f3:aa:ea:63:d9:2c:73:a0:8d:45:02:35:ca: ee:60:74:06:da:63:62:bb:5e:83:ad:1a:f2:07:e7:25:04:08: 64:bb:7a:94:51:ee:8d:f5:19:79:fd:ea:51:14:13:51:17:e8: 39:40:84:86:0f:09:0a:34:2e:b3:c0:95:87:9f:ab:65:e9:98: 78:93:ed:72:7d:28:f8:14:8b:be:d0:ec:0c:64:da:e4:04:b8: 15:cd:3b:f2:e0:79:85:85:0b:4c:b5:a7:7c:b7:ce:73:ee:4b: 34:f2:f1:0e:c7:ea:62:9f:ec:c0:62:3f:5d:06:6b:26:59:7d: 31:10:a6:90:a0:2b:65:95:3b:ae:c3:a9:7b:82:98:55:0d:65: 9d:fb:50:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFFADEYNfp5TE2j7JhxUXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0 MjNkNjgwHhcNMjUxMjIyMDgwMTM3WhcNMjUxMjIzMDgwMTM3WjAzMTEwLwYDVQQD EyhiNTIyN2ExOWYzOTBhZWRiYjEwM2ZjNGUxNjc0MGZhMDRlY2RmODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA2fdFNz1ERAGZaKW4b01q52KJl8 ne08kVq39XdcOXnGB1qEcN3rbipzK7FXV01GxueQgBePhybxpDdTS7V3N15x6FHW edjq2GCt+eRgVgNoUuIYC3X+0ixmIsaDKjdnHEW8pwc7L3ALvZcV/tP+ibJIXAhj r58GLYipOktcIASNaiUfxkwWeDT0cEyqfr7Zk7FWB53PUIVxSG8Imi3vAhP/9o3D /oPhHxdfVF+Tpw65SJ7Xy2FgtS1vqcQ5I89dsEoDxyLNkinmUmRubXabnuoCUB1o 21YWbzv0qfBE3ltUt1mZka1dGHvmGHBmOY4aAYI259EMtkPmkvtM9sx7qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUiehnzkK7bsQP8ThZ0D6BOzfhOMB8GA1UdIwQY MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/75KWq2 XOR0wNCtINUhBGRLUo+8v/KYa0sG3uIFDv/O90ce7Z3SxeMzkiKpeqHhrQgyZl52 N4v55DgdHzJdBMhRoKyM1IHYQVxYK/UQ4ItQKgirXKBcSVMFkfmkFHuJXYjv70au fmP6Ee1n0TeoOXDzqupj2SxzoI1FAjXK7mB0BtpjYrteg60a8gfnJQQIZLt6lFHu jfUZef3qURQTURfoOUCEhg8JCjQus8CVh5+rZemYeJPtcn0o+BSLvtDsDGTa5AS4 Fc078uB5hYULTLWnfLfOc+5LNPLxDsfqYp/swGI/XQZrJll9MRCmkKArZZU7rsOp e4KYVQ1lnftQ/w== -----END CERTIFICATE-----Generated at Mon Dec 22 15:41:54 2025 by rpki-client