This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json) Hash identifier: 6Rc3vzPdFjcIAqMbTs6eJBHbXI25tyfWYD/HLPr/ObE= Subject key identifier: E2:07:64:2F:4A:D9:83:4A:CA:85:82:DE:21:C1:7A:91:34:A4:95:CA Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45 Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945 Certificate serial: 019B3AFD749C0E3D165860FD9CE1BC81B0B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft Manifest number: 09B0 Signing time: Sat 20 Dec 2025 09:00:47 +0000 Manifest this update: Sat 20 Dec 2025 09:00:47 +0000 Manifest next update: Sun 21 Dec 2025 09:00:47 +0000 Files and hashes: 1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=) 2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: 1eP0+pCc6meYjwamn/acvnfBMusSxvPYOWEgW8SQaeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:74:9c:0e:3d:16:58:60:fd:9c:e1:bc:81:b0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945 Validity Not Before: Dec 20 09:00:47 2025 GMT Not After : Dec 21 09:00:47 2025 GMT Subject: CN=e207642f4ad9834aca8582de21c17a9134a495ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:c4:4d:8a:9c:0d:41:b2:c3:09:64:64:c6: d5:eb:28:de:d4:e1:eb:62:53:d7:ea:d9:ac:79:0d: 9c:6b:e8:56:cc:0a:0e:9e:4d:79:2f:93:c2:1c:ed: bb:a5:5f:0b:93:cb:b5:2d:cf:9a:16:98:83:a5:cc: 3d:3f:d0:b2:0e:5a:a9:9e:05:1b:d5:f3:59:fe:34: 0b:42:2b:63:51:0c:78:8d:9b:ad:36:fa:45:48:86: 67:cf:8b:99:c2:f7:78:64:c9:70:c1:24:55:b6:a8: fa:77:37:7c:cd:a7:2b:c2:a2:cc:00:d9:32:dd:1a: d4:7a:0f:7d:36:d4:7f:7d:2c:50:62:d6:d6:6b:78: d1:c7:9a:33:0f:d4:e8:3c:49:64:b8:a5:3d:93:21: 1e:6c:40:28:cc:a7:3a:3d:f4:90:b7:e7:23:10:22: e0:28:50:e6:e8:53:34:22:d3:66:db:8f:fa:b2:8d: 3f:3e:ea:7c:a1:8d:4c:f2:c9:3d:c8:12:e7:05:bc: 9b:24:1d:df:da:57:d1:f7:19:80:38:a9:c6:32:24: fe:7b:34:4e:55:e3:5f:fd:93:54:1b:5a:4c:1b:a5: a7:f5:b9:7d:8b:bc:e7:46:26:d9:bb:a9:22:1c:55: c6:56:94:49:49:34:77:e0:e8:5e:e9:b6:37:43:bc: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:07:64:2F:4A:D9:83:4A:CA:85:82:DE:21:C1:7A:91:34:A4:95:CA X509v3 Authority Key Identifier: keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3d:fa:fb:59:d8:73:2f:c2:98:03:2e:d0:3e:c5:5f:e2:15: 70:55:54:c0:8a:d6:62:20:97:36:ad:1a:ac:51:9f:48:ca:ab: c3:f0:89:7f:ec:6b:3d:3d:83:7e:5f:db:d0:78:f1:b5:12:77: cc:7b:c0:95:a8:e7:1d:d1:b2:49:f2:08:f3:be:df:a5:99:dd: 46:fa:12:05:57:49:79:5c:a5:95:ee:f4:ed:ef:00:bc:2f:22: 3e:55:0e:75:59:b3:59:88:f8:a4:18:ff:3b:52:2c:f6:04:cd: bf:2f:83:e4:09:ed:29:5e:7d:e1:a0:6c:2e:01:08:92:47:12: 3e:ad:1f:3f:c4:ba:a5:94:99:ed:fa:85:ef:e0:0e:53:a7:cf: 6d:6d:4f:64:bb:d8:c4:3e:70:d8:b6:63:e4:9f:d1:f2:33:a0: 0d:1f:bf:6d:12:e9:92:f6:5d:9e:6d:b7:af:05:6e:6b:2d:8c: 4f:57:43:90:01:fc:c1:fd:63:c7:67:68:94:07:20:41:8e:be: af:4b:f0:61:b5:a5:8e:35:4f:d5:8c:a5:31:56:92:42:b1:df: 58:6a:ba:e4:7f:db:2e:2a:f4:63:6a:d0:4c:fd:0f:ab:79:f7: 92:54:b6:34:ea:2d:60:bb:8b:2d:b8:f9:64:fe:38:e8:96:80: a3:ec:83:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/XScDj0WWGD9nOG8gbC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWVlNGE4MWZmMzYwZmUwMGMzYTFmMGRhZTMwZTI2ZTEy ODA5NDUwHhcNMjUxMjIwMDkwMDQ3WhcNMjUxMjIxMDkwMDQ3WjAzMTEwLwYDVQQD EyhlMjA3NjQyZjRhZDk4MzRhY2E4NTgyZGUyMWMxN2E5MTM0YTQ5NWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f/ETYqcDUGywwlkZMbV6yje1OHr YlPX6tmseQ2ca+hWzAoOnk15L5PCHO27pV8Lk8u1Lc+aFpiDpcw9P9CyDlqpngUb 1fNZ/jQLQitjUQx4jZutNvpFSIZnz4uZwvd4ZMlwwSRVtqj6dzd8zacrwqLMANky 3RrUeg99NtR/fSxQYtbWa3jRx5ozD9ToPElkuKU9kyEebEAozKc6PfSQt+cjECLg KFDm6FM0ItNm24/6so0/Pup8oY1M8sk9yBLnBbybJB3f2lfR9xmAOKnGMiT+ezRO VeNf/ZNUG1pMG6Wn9bl9i7znRibZu6kiHFXGVpRJSTR34Ohe6bY3Q7y87wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIHZC9K2YNKyoWC3iHBepE0pJXKMB8GA1UdIwQY MBaAFL2u5Kgf82D+AMOh8NrjDibhKAlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMt MjcwYzhiNWEwOTIzLzEvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMtMjcwYzhiNWEwOTIz LzEvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT36+1nY cy/CmAMu0D7FX+IVcFVUwIrWYiCXNq0arFGfSMqrw/CJf+xrPT2Dfl/b0HjxtRJ3 zHvAlajnHdGySfII877fpZndRvoSBVdJeVylle707e8AvC8iPlUOdVmzWYj4pBj/ O1Is9gTNvy+D5AntKV594aBsLgEIkkcSPq0fP8S6pZSZ7fqF7+AOU6fPbW1PZLvY xD5w2LZj5J/R8jOgDR+/bRLpkvZdnm23rwVuay2MT1dDkAH8wf1jx2dolAcgQY6+ r0vwYbWljjVP1YylMVaSQrHfWGq65H/bLir0Y2rQTP0Pq3n3klS2NOotYLuLLbj5 ZP446JaAo+yDSg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:51:35 2025 by rpki-client