This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json) Hash identifier: 2eaoM2RHBb/Amzi3oZ54sNbNrwJe20CUP0PC6qovp7A= Subject key identifier: 6A:25:46:79:2D:1D:18:E4:CD:6D:C4:DE:0A:E6:33:D4:7C:4C:29:47 Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Certificate serial: 019B3D599C975DB2C031220ABC7F7169E136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft Manifest number: 0655 Signing time: Sat 20 Dec 2025 20:00:41 +0000 Manifest this update: Sat 20 Dec 2025 20:00:41 +0000 Manifest next update: Sun 21 Dec 2025 20:00:41 +0000 Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=) 2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=) 3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: IrS9CXt1VtLvebghqySKLBI25V0DriWnfu8SglY3sOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:9c:97:5d:b2:c0:31:22:0a:bc:7f:71:69:e1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Validity Not Before: Dec 20 20:00:41 2025 GMT Not After : Dec 21 20:00:41 2025 GMT Subject: CN=6a2546792d1d18e4cd6dc4de0ae633d47c4c2947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:35:30:e4:51:96:e5:2e:76:ab:51:cb:75: 0b:6b:ec:db:9c:bf:fa:7e:af:8c:8b:eb:e3:21:7b: 25:95:79:dd:47:ed:91:9f:f7:bd:5c:7d:ac:ac:fc: 5c:5b:7b:7a:d4:ab:fc:f6:4f:77:56:69:14:0c:7f: 3e:b7:e3:68:61:fc:21:9b:6c:de:4a:85:31:04:bc: 31:1b:ab:6e:60:ed:36:11:b3:04:a8:6b:fa:c6:98: 57:80:6c:c0:47:69:ef:22:f2:6d:3c:61:2d:79:b5: 54:51:b6:72:2c:bc:6d:db:c7:7a:44:76:2f:fb:a7: bd:69:cb:b8:a1:0d:fb:db:e8:64:e6:ca:6d:6f:4c: 71:73:ac:95:da:72:e9:1e:e0:16:25:c5:3b:73:6f: cd:6f:71:6c:30:be:fa:16:a8:5b:95:07:b8:1a:f4: 5d:09:10:ae:8f:e1:48:7c:8b:c3:97:19:ec:ec:77: 4d:69:c9:9d:d9:d8:e3:d0:4f:9f:68:8a:87:85:62: 8a:f1:67:27:c7:7d:11:78:a2:d2:70:ad:30:94:df: 32:d2:c5:92:38:7e:dc:1f:a5:a8:8c:22:ba:6d:75: 7c:d8:6f:41:af:78:ec:86:be:01:5f:51:02:f6:69: 87:df:96:4f:6c:6b:75:3b:dc:ec:e0:6a:4f:3c:be: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:25:46:79:2D:1D:18:E4:CD:6D:C4:DE:0A:E6:33:D4:7C:4C:29:47 X509v3 Authority Key Identifier: keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d0:7b:56:66:25:29:a0:ca:08:49:2a:23:53:cc:05:da:6b: cb:ac:0e:94:c4:ba:7b:ca:f2:96:6f:af:e1:de:5e:ff:eb:6b: c6:79:21:bc:c3:3b:1b:bf:89:3c:49:9f:5f:0d:78:7b:e7:53: 48:da:46:d0:31:cf:66:94:48:f7:ed:8a:38:e1:9f:0e:70:df: aa:e4:a1:9b:ec:7d:ff:63:a1:13:81:38:2d:a8:4f:b1:76:8b: b7:55:81:57:3f:f6:03:f6:20:04:f9:58:0b:bc:2e:11:a6:30: 78:25:b3:ea:af:15:26:9f:32:22:ba:fd:61:7c:aa:71:8b:9f: fe:8c:2d:4a:97:c8:5a:e1:40:9f:43:6b:01:cb:68:3b:b7:a7: ac:df:1b:92:ee:fd:48:9e:c9:25:d3:af:35:d4:10:b8:a9:b5: a0:70:b8:2a:5a:90:30:e7:08:28:e4:d4:01:0d:24:18:fa:48: c9:0e:ea:d6:ef:d8:7f:9c:00:83:dc:f7:f1:c3:ed:1a:83:5d: c4:50:bc:d2:8c:0c:52:9d:a1:a1:09:52:75:f4:7b:92:be:5c: 20:bf:2f:9c:af:37:b9:d2:f6:fc:70:5b:28:39:ce:bd:5e:b2: 11:ce:b1:08:8b:8c:05:ca:50:1c:c7:7b:ec:da:5b:02:98:19: 94:56:5e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZyXXbLAMSIKvH9xaeE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0 MjNkNjgwHhcNMjUxMjIwMjAwMDQxWhcNMjUxMjIxMjAwMDQxWjAzMTEwLwYDVQQD Eyg2YTI1NDY3OTJkMWQxOGU0Y2Q2ZGM0ZGUwYWU2MzNkNDdjNGMyOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm41MORRluUudqtRy3ULa+zbnL/6 fq+Mi+vjIXsllXndR+2Rn/e9XH2srPxcW3t61Kv89k93VmkUDH8+t+NoYfwhm2ze SoUxBLwxG6tuYO02EbMEqGv6xphXgGzAR2nvIvJtPGEtebVUUbZyLLxt28d6RHYv +6e9acu4oQ372+hk5sptb0xxc6yV2nLpHuAWJcU7c2/Nb3FsML76FqhblQe4GvRd CRCuj+FIfIvDlxns7HdNacmd2djj0E+faIqHhWKK8Wcnx30ReKLScK0wlN8y0sWS OH7cH6WojCK6bXV82G9Br3jshr4BX1EC9mmH35ZPbGt1O9zs4GpPPL4DtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGolRnktHRjkzW3E3grmM9R8TClHMB8GA1UdIwQY MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNB7VmYl KaDKCEkqI1PMBdpry6wOlMS6e8rylm+v4d5e/+trxnkhvMM7G7+JPEmfXw14e+dT SNpG0DHPZpRI9+2KOOGfDnDfquShm+x9/2OhE4E4LahPsXaLt1WBVz/2A/YgBPlY C7wuEaYweCWz6q8VJp8yIrr9YXyqcYuf/owtSpfIWuFAn0NrActoO7enrN8bku79 SJ7JJdOvNdQQuKm1oHC4KlqQMOcIKOTUAQ0kGPpIyQ7q1u/Yf5wAg9z38cPtGoNd xFC80owMUp2hoQlSdfR7kr5cIL8vnK83udL2/HBbKDnOvV6yEc6xCIuMBcpQHMd7 7NpbApgZlFZeoA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:18:34 2025 by rpki-client