This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft File: vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json) Hash identifier: MH9Rp6FEnp3+6fH91oIQE72A6fYSyRmOqdrX1i7rqvk= Subject key identifier: 83:59:7C:3F:F7:6F:8A:D5:49:8C:43:84:EB:FE:22:3E:CF:93:2B:E6 Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Certificate serial: 019B390F1C7429A3576E6C4F127594BBECB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft Manifest number: 0C1D Signing time: Sat 20 Dec 2025 00:00:50 +0000 Manifest this update: Sat 20 Dec 2025 00:00:50 +0000 Manifest next update: Sun 21 Dec 2025 00:00:50 +0000 Files and hashes: 1: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (hash: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=) 2: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: LdLTr57cF27gxiFL/k0MWPPgmi0ODBxF6ItuDTFJE1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:1c:74:29:a3:57:6e:6c:4f:12:75:94:bb:ec:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Validity Not Before: Dec 20 00:00:50 2025 GMT Not After : Dec 21 00:00:50 2025 GMT Subject: CN=83597c3ff76f8ad5498c4384ebfe223ecf932be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:43:2b:88:5a:27:15:f1:9f:49:a9:94:f5: 30:aa:2c:c5:fa:de:7a:11:6f:9c:5b:3f:af:5c:94: 52:c6:dc:a2:90:4e:ae:86:53:b1:27:6a:41:3a:aa: 17:a4:89:e5:51:8d:b7:23:ee:11:ed:7b:93:61:4d: d2:52:f5:ad:f1:7f:d9:b8:61:0d:36:e7:b8:3e:10: 21:e4:09:9f:7c:e1:02:bb:50:b9:7b:be:57:9a:5b: 5f:0c:cd:75:11:1e:63:e9:8f:ec:49:71:e5:f7:a9: 2e:00:3a:1e:dc:40:97:80:9e:2b:80:27:21:ed:9c: ca:e8:6a:d6:d3:7a:ed:ee:fa:af:8e:c5:dd:b0:33: b1:ba:5c:23:8b:cb:66:53:41:8a:e7:77:65:47:52: 8e:67:e5:87:39:4d:df:16:af:d1:b8:75:d5:88:ab: b8:08:0c:cd:46:b9:28:a1:f1:f8:44:20:b6:2d:9e: 98:4f:bc:22:24:08:80:f0:07:7c:8f:60:61:8d:2a: bf:0c:b0:57:ef:7b:8b:d9:5c:0a:d6:d6:4a:1b:4c: fc:fe:2d:20:45:7d:93:e0:bb:b1:ce:16:1c:e9:03: 7a:59:2b:f5:de:f5:5f:55:8e:25:2e:c0:d2:84:49: cb:96:6f:24:ea:bc:06:1b:15:29:36:ec:11:46:f0: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:59:7C:3F:F7:6F:8A:D5:49:8C:43:84:EB:FE:22:3E:CF:93:2B:E6 X509v3 Authority Key Identifier: keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:89:9f:4c:e3:2c:02:ca:55:60:47:26:22:ec:db:6c:e1:ca: 8f:82:4b:06:23:ca:fd:20:ab:47:9e:d3:7d:21:82:b2:8f:dd: 1b:f8:5f:01:0c:34:cf:4c:08:f1:70:2c:89:0c:64:e8:9b:6f: da:80:b6:51:ac:c7:ed:b2:5e:0f:78:e4:2f:27:27:bc:e2:a8: 04:9c:16:01:20:8b:90:b4:5e:91:56:2b:9f:23:fb:ac:a6:87: 0e:6a:fd:d9:4e:65:09:e5:36:71:b8:00:35:bf:ff:5c:00:31: 07:bf:cc:5e:dd:9a:ba:ea:96:bc:af:5a:87:60:6b:57:9e:f4: ae:6d:b8:4e:9e:ff:b3:eb:6e:c6:65:30:c6:6f:b0:24:21:dc: 51:1b:1d:24:b6:55:bd:8e:8e:5e:db:fe:e2:b9:e1:b2:a8:62: 7e:1f:17:9d:56:1e:f7:ac:c2:4e:15:d7:26:01:ed:85:1f:8c: a6:0b:e3:2b:1e:e2:63:d6:db:e3:62:5b:c7:06:ac:24:92:ff: 43:26:c3:36:71:92:f4:2b:4a:cc:8b:a6:dd:b4:86:20:73:0b: 36:c5:2c:27:28:66:6e:22:f5:75:e6:1b:ac:6d:73:c7:74:42: 9a:03:4d:9b:0c:db:e4:8a:c7:2e:bc:11:93:6a:e3:19:d4:05: 0f:b4:8c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dxx0KaNXbmxPEnWUu+y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTU3NzliYzhiMGJiZTVlNTdhMDc3NTViMTMyOGE1N2M5 Y2FkNjAwHhcNMjUxMjIwMDAwMDUwWhcNMjUxMjIxMDAwMDUwWjAzMTEwLwYDVQQD Eyg4MzU5N2MzZmY3NmY4YWQ1NDk4YzQzODRlYmZlMjIzZWNmOTMyYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxhDK4haJxXxn0mplPUwqizF+t56 EW+cWz+vXJRSxtyikE6uhlOxJ2pBOqoXpInlUY23I+4R7XuTYU3SUvWt8X/ZuGEN Nue4PhAh5AmffOECu1C5e75XmltfDM11ER5j6Y/sSXHl96kuADoe3ECXgJ4rgCch 7ZzK6GrW03rt7vqvjsXdsDOxulwji8tmU0GK53dlR1KOZ+WHOU3fFq/RuHXViKu4 CAzNRrkoofH4RCC2LZ6YT7wiJAiA8Ad8j2BhjSq/DLBX73uL2VwK1tZKG0z8/i0g RX2T4LuxzhYc6QN6WSv13vVfVY4lLsDShEnLlm8k6rwGGxUpNuwRRvA9JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINZfD/3b4rVSYxDhOv+Ij7PkyvmMB8GA1UdIwQY MBaAFL5Vd5vIsLvl5XoHdVsTKKV8nK1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMt YjE4ZDllNzFjMTZhLzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMtYjE4ZDllNzFjMTZh LzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYmfTOMs AspVYEcmIuzbbOHKj4JLBiPK/SCrR57TfSGCso/dG/hfAQw0z0wI8XAsiQxk6Jtv 2oC2UazH7bJeD3jkLycnvOKoBJwWASCLkLRekVYrnyP7rKaHDmr92U5lCeU2cbgA Nb//XAAxB7/MXt2auuqWvK9ah2BrV570rm24Tp7/s+tuxmUwxm+wJCHcURsdJLZV vY6OXtv+4rnhsqhifh8XnVYe96zCThXXJgHthR+MpgvjKx7iY9bb42JbxwasJJL/ QybDNnGS9CtKzIum3bSGIHMLNsUsJyhmbiL1deYbrG1zx3RCmgNNmwzb5IrHLrwR k2rjGdQFD7SMQw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:03:06 2025 by rpki-client