This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft File: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json) Hash identifier: 4WmB0BFqjpZgbmD12vieagOKzfKOVgGALQQnY7gAqdU= Subject key identifier: 54:BF:7E:2D:A7:1D:D2:40:42:F2:70:7F:D7:34:A2:2B:47:98:30:B1 Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a Certificate serial: 019B183B0EBFE66DAE9DE592EDED4FAB2CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft Manifest number: 0D86 Signing time: Sat 13 Dec 2025 15:01:22 +0000 Manifest this update: Sat 13 Dec 2025 15:01:22 +0000 Manifest next update: Sun 14 Dec 2025 15:01:22 +0000 Files and hashes: 1: 15i89b2ooCC5Wqcsjg2SBUg3A40.roa (hash: lZ5oTep+frYUK0lIlk9v0/P+KqGOWHdfH+9b58myH+w=) 2: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=) 3: IncQidH1EmOM3JDy5YVCBk0c4NE.roa (hash: nhq9/WaK4JTE9KAnd8mPqXQNZIF7TP9W57FIRXqjj1I=) 4: bsoFucu-95ojdd6HT9b5aZ5Yd6Y.roa (hash: kZjsCbYuva/6RQ5ML3HFlqXPFZ0iOYZfcyVyzLw6dDg=) 5: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=) 6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: 8ae/leX5TRxJDn00/+tbXabUhZnsE57rDATIoPsoIsM=) 7: wmgMC-Q6JuN93VgNPFr0Kgc7Ccw.roa (hash: f3Jy9HVFL90ndYeuF9Ld4iOUbDw2OjbP9NnJ95IlJxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3b:0e:bf:e6:6d:ae:9d:e5:92:ed:ed:4f:ab:2c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a Validity Not Before: Dec 13 15:01:22 2025 GMT Not After : Dec 14 15:01:22 2025 GMT Subject: CN=54bf7e2da71dd24042f2707fd734a22b479830b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:f4:a8:91:31:87:98:f2:06:1e:a2:32:05: cc:6f:97:1f:d7:9c:62:2a:f0:58:36:b0:c7:d8:f2: a9:7f:be:e7:e9:ae:9a:f6:ab:90:c0:5a:a6:53:4e: 1d:a2:bd:3e:c5:f5:6f:bc:fa:f9:8d:b6:ce:a9:51: 94:3a:af:d3:63:df:0a:9c:b5:ea:6a:da:e2:7c:f4: 6b:1c:1d:9e:fa:d2:fa:3e:98:25:9a:88:dd:c5:71: ab:91:4a:25:f4:1e:5b:c5:89:de:3d:f8:c0:31:da: 29:7c:aa:60:0c:e3:51:1b:a8:e8:f0:e2:7d:13:be: e2:59:dd:24:23:44:58:03:7c:d4:99:7a:32:9e:5d: 26:b1:37:1f:80:df:b1:75:f3:89:44:42:89:0a:2c: 2d:dd:2b:85:1a:a7:4a:81:80:19:b4:55:6f:43:fc: 29:07:52:dd:7c:7e:2a:94:e1:ab:c6:2c:d0:2a:fe: 23:88:2b:8c:13:c5:f8:7c:da:9c:61:b4:29:ad:a6: 8d:fb:0f:cc:6e:2e:ea:21:6a:f2:86:1b:dd:b3:b5: fa:c2:46:a2:99:58:c0:51:7a:a8:bb:ef:a1:8c:23: a6:f3:1e:67:91:83:d8:28:21:9e:50:cd:4a:9a:31: e7:b1:eb:3a:c7:de:c9:43:af:52:42:65:bb:fc:32: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:7E:2D:A7:1D:D2:40:42:F2:70:7F:D7:34:A2:2B:47:98:30:B1 X509v3 Authority Key Identifier: keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:52:cf:25:95:e7:c9:9e:89:3d:3a:71:38:85:c2:cb:a9:85: ff:a8:40:e3:4c:bd:2f:6c:89:b8:30:cb:e8:a8:8a:f3:84:75: 32:0f:cb:74:e2:8d:2c:c2:7a:0d:66:2d:4e:a1:0f:e2:15:8d: 86:04:11:cd:38:25:2b:c3:0e:4e:db:45:fa:4c:d7:1d:78:d8: c3:66:4f:3e:c6:48:e6:a9:13:90:5c:aa:80:a0:99:66:1b:41: 4a:02:b4:17:83:2c:f9:14:66:27:33:37:f1:9c:c3:71:0d:d6: 32:08:dd:2c:4d:e3:43:d3:70:bc:f9:44:d1:70:6f:56:3c:49: 08:ce:86:0f:6d:7b:46:5e:6d:45:96:30:fc:e3:16:96:b7:3f: bf:59:47:29:a4:a2:13:04:91:cf:55:41:50:fe:ff:ac:db:7f: 10:58:18:b7:87:71:0c:e0:7a:a0:88:6b:21:bb:15:30:57:ec: ee:9a:a0:6f:bb:e8:36:dc:cc:7f:44:a4:57:e8:70:fc:82:93: 5d:08:20:70:37:94:ec:34:a0:82:51:be:bd:f3:82:e8:19:d9: 86:0b:00:41:a3:17:4b:5e:72:b2:ea:18:02:4a:06:f2:aa:2b: 22:ad:ba:96:43:9b:db:ae:62:e2:09:7c:da:1b:f7:2b:f8:25: 22:5d:71:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYOw6/5m2uneWS7e1PqyzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4 ZTcxNmEwHhcNMjUxMjEzMTUwMTIyWhcNMjUxMjE0MTUwMTIyWjAzMTEwLwYDVQQD Eyg1NGJmN2UyZGE3MWRkMjQwNDJmMjcwN2ZkNzM0YTIyYjQ3OTgzMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmob0qJExh5jyBh6iMgXMb5cf15xi KvBYNrDH2PKpf77n6a6a9quQwFqmU04dor0+xfVvvPr5jbbOqVGUOq/TY98KnLXq atrifPRrHB2e+tL6PpglmojdxXGrkUol9B5bxYnePfjAMdopfKpgDONRG6jo8OJ9 E77iWd0kI0RYA3zUmXoynl0msTcfgN+xdfOJREKJCiwt3SuFGqdKgYAZtFVvQ/wp B1LdfH4qlOGrxizQKv4jiCuME8X4fNqcYbQpraaN+w/Mbi7qIWryhhvds7X6wkai mVjAUXqou++hjCOm8x5nkYPYKCGeUM1KmjHnses6x97JQ69SQmW7/DIF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS/fi2nHdJAQvJwf9c0oitHmDCxMB8GA1UdIwQY MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct YzEzMzFmNDlmYzA5LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5 LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFLPJZXn yZ6JPTpxOIXCy6mF/6hA40y9L2yJuDDL6KiK84R1Mg/LdOKNLMJ6DWYtTqEP4hWN hgQRzTglK8MOTttF+kzXHXjYw2ZPPsZI5qkTkFyqgKCZZhtBSgK0F4Ms+RRmJzM3 8ZzDcQ3WMgjdLE3jQ9NwvPlE0XBvVjxJCM6GD217Rl5tRZYw/OMWlrc/v1lHKaSi EwSRz1VBUP7/rNt/EFgYt4dxDOB6oIhrIbsVMFfs7pqgb7voNtzMf0SkV+hw/IKT XQggcDeU7DSgglG+vfOC6BnZhgsAQaMXS15ysuoYAkoG8qorIq26lkOb265i4gl8 2hv3K/glIl1xaA== -----END CERTIFICATE-----Generated at Sat Dec 13 22:18:44 2025 by rpki-client