This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json) Hash identifier: 1jr7ozp56ybrrliKKDdA1gXHXmutCglyBZibTZACiHA= Subject key identifier: 75:D3:2A:DF:D5:8C:AF:34:4A:EB:89:B8:76:2E:56:5D:BC:60:23:60 Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9 Certificate serial: 019B42EE82EA41034B9227287842EEDCDB69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft Manifest number: 1293 Signing time: Sun 21 Dec 2025 22:01:25 +0000 Manifest this update: Sun 21 Dec 2025 22:01:25 +0000 Manifest next update: Mon 22 Dec 2025 22:01:25 +0000 Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=) 2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: PoI1mJ/klUJQIBJmyb+hT/zSJ5YMIc6gsYfO5r02TTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:82:ea:41:03:4b:92:27:28:78:42:ee:dc:db:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9 Validity Not Before: Dec 21 22:01:25 2025 GMT Not After : Dec 22 22:01:25 2025 GMT Subject: CN=75d32adfd58caf344aeb89b8762e565dbc602360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:48:4c:7d:0e:60:fd:65:d3:18:3f:33:69: 13:a4:e5:4d:f0:fe:b9:70:59:17:21:2c:11:1f:58: 35:22:0f:00:5a:db:7c:64:d6:aa:5e:13:5c:ea:96: 02:73:53:10:6e:81:5c:3d:ca:93:c3:d5:5b:e1:25: c9:4b:8e:05:d1:d8:58:51:3c:d3:69:0a:1f:d6:e0: 54:bd:a0:91:a8:a6:69:30:b0:ac:be:d2:64:c0:7d: 70:b2:de:5b:c6:3e:f8:2c:05:cd:49:22:cb:de:a5: f8:88:75:8d:fd:57:4f:1a:cf:8b:46:53:51:e9:c8: 24:33:57:c6:ae:63:23:3c:f1:64:57:52:d4:45:b0: 01:07:c3:56:59:bd:e9:b1:e7:a1:65:4f:e0:d0:50: 0a:64:c5:41:e6:cf:3d:87:aa:d0:c9:dc:4b:c5:fe: b9:b0:40:a0:35:8a:dd:cf:6c:4d:f8:6a:fe:dc:c0: 5b:ae:3d:d1:b8:9e:f7:59:05:ee:f3:04:8f:99:22: 65:f7:d0:5f:c5:93:15:5d:09:4e:15:5c:aa:71:61: d0:5a:9e:67:0c:c8:e6:45:85:ad:05:42:0b:09:45: 72:58:b8:f4:a9:95:b6:7a:9a:24:6f:bf:4b:7a:a7: c7:e3:d0:49:06:9a:72:65:c6:1d:74:e2:5a:fc:7c: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D3:2A:DF:D5:8C:AF:34:4A:EB:89:B8:76:2E:56:5D:BC:60:23:60 X509v3 Authority Key Identifier: keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3e:e5:d8:e3:a6:30:ae:f1:50:b4:31:75:43:09:6c:6b:27: 26:d1:86:e6:7e:0c:0b:a4:5b:5d:34:a8:7d:13:d1:dc:e3:1e: 05:aa:b8:4c:04:86:4a:05:72:24:4a:f0:55:63:d2:5c:bd:32: 24:2f:ff:ee:77:dc:db:8a:93:a0:58:35:fc:b1:65:8d:1c:4b: 30:66:64:0d:2b:8f:35:9a:27:86:16:f6:0d:6a:2b:b5:23:33: 6d:6c:f5:62:1b:93:61:b2:60:3d:a4:cc:fb:90:c4:51:4a:d8: 42:4b:71:3e:85:98:3d:1e:8d:5a:88:7d:c3:5e:c1:48:9d:4c: e8:a5:4c:e2:44:35:ae:a0:c4:06:ff:88:94:73:55:8a:c1:c2: 51:bd:0c:a9:f2:3f:93:e2:b5:da:0d:6a:80:87:57:ae:f8:f7: a9:db:2b:92:be:f5:d1:81:bc:2b:b1:dc:67:cf:68:e5:3e:c6: 74:ca:8b:9f:0f:72:4a:c2:bf:d9:ce:b2:79:a1:04:e0:dd:24: 34:c8:8b:72:02:21:88:f6:1a:a8:22:4e:74:5a:2b:e8:c3:08: 3b:21:38:d1:31:d1:e0:bf:8c:a5:95:19:1a:b7:34:a3:f6:ac: 0a:75:4c:29:83:a1:6d:0a:c5:3d:57:a8:0c:c9:14:65:c2:09: 0f:04:28:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7oLqQQNLkicoeELu3NtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjYzNjY3OTczMjM4YjE4NGQ5ZWVmZDM2YmJmMzgxMGJh NGI2ZDkwHhcNMjUxMjIxMjIwMTI1WhcNMjUxMjIyMjIwMTI1WjAzMTEwLwYDVQQD Eyg3NWQzMmFkZmQ1OGNhZjM0NGFlYjg5Yjg3NjJlNTY1ZGJjNjAyMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJBITH0OYP1l0xg/M2kTpOVN8P65 cFkXISwRH1g1Ig8AWtt8ZNaqXhNc6pYCc1MQboFcPcqTw9Vb4SXJS44F0dhYUTzT aQof1uBUvaCRqKZpMLCsvtJkwH1wst5bxj74LAXNSSLL3qX4iHWN/VdPGs+LRlNR 6cgkM1fGrmMjPPFkV1LURbABB8NWWb3pseehZU/g0FAKZMVB5s89h6rQydxLxf65 sECgNYrdz2xN+Gr+3MBbrj3RuJ73WQXu8wSPmSJl99BfxZMVXQlOFVyqcWHQWp5n DMjmRYWtBUILCUVyWLj0qZW2epokb79LeqfH49BJBppyZcYddOJa/Hyr6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXTKt/VjK80SuuJuHYuVl28YCNgMB8GA1UdIwQY MBaAFLxmNmeXMjixhNnu/Ta784ELpLbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQt OWYwMGM3MjYyMGY2LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQtOWYwMGM3MjYyMGY2 LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj7l2OOm MK7xULQxdUMJbGsnJtGG5n4MC6RbXTSofRPR3OMeBaq4TASGSgVyJErwVWPSXL0y JC//7nfc24qToFg1/LFljRxLMGZkDSuPNZonhhb2DWortSMzbWz1YhuTYbJgPaTM +5DEUUrYQktxPoWYPR6NWoh9w17BSJ1M6KVM4kQ1rqDEBv+IlHNVisHCUb0MqfI/ k+K12g1qgIdXrvj3qdsrkr710YG8K7HcZ89o5T7GdMqLnw9ySsK/2c6yeaEE4N0k NMiLcgIhiPYaqCJOdFor6MMIOyE40THR4L+MpZUZGrc0o/asCnVMKYOhbQrFPVeo DMkUZcIJDwQoPQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:59:58 2025 by rpki-client