This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json) Hash identifier: rFz+inWVf5AKpZjjgCWi5YNXqmgPt3qN9xHY4EEFF+o= Subject key identifier: D1:2A:CB:4A:A5:4D:7F:72:0F:D2:8F:C4:AB:58:91:17:4E:95:81:18 Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Certificate serial: 019B0F007426D4CFEC7947870A00485FC459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft Manifest number: 1442 Signing time: Thu 11 Dec 2025 20:00:46 +0000 Manifest this update: Thu 11 Dec 2025 20:00:46 +0000 Manifest next update: Fri 12 Dec 2025 20:00:46 +0000 Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=) 2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=) 3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: pkGFXO9xl1z6LXIIlWoKL24tPCfaDISVKBYopRoy1l4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:74:26:d4:cf:ec:79:47:87:0a:00:48:5f:c4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Validity Not Before: Dec 11 20:00:46 2025 GMT Not After : Dec 12 20:00:46 2025 GMT Subject: CN=d12acb4aa54d7f720fd28fc4ab5891174e958118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:32:62:7f:29:6f:7f:2c:b5:97:7f:55:9d: 33:ac:30:dd:e0:88:9a:ce:1c:3a:a8:21:0b:ce:68: 79:3a:48:3f:fd:c0:07:17:12:26:e3:3b:d9:6e:3c: ca:44:9b:13:f1:cc:ad:7c:10:4e:da:9d:e1:77:26: 0e:50:23:03:33:81:a2:d5:66:a0:19:f2:38:64:b4: 86:18:6b:71:fd:b5:26:ab:61:7f:b9:8b:1f:a9:dc: 75:ad:c2:d5:cf:75:13:b9:2d:2c:57:e3:8a:b8:f2: 72:c4:2d:82:1a:0d:8b:cc:a3:d9:16:bf:5c:66:25: 88:48:55:0d:80:18:83:61:93:ea:60:0a:23:ff:f8: 0b:9b:ac:c7:92:3e:2f:69:a3:70:0c:ac:f4:84:93: 57:9e:d2:2f:f7:05:d8:27:2e:cb:57:54:4f:07:bd: 68:4a:18:02:37:e3:81:0c:d2:28:98:7c:b6:35:a2: 01:82:a1:ba:e8:30:14:63:ee:a9:2d:61:51:12:33: 09:64:2d:33:2e:ed:b0:5c:50:ff:8a:29:78:d8:be: e9:db:fd:9b:cb:03:03:1c:ee:dc:cc:7f:24:3c:99: 44:7c:0a:ca:b1:25:bd:db:02:46:bd:45:77:dc:07: 2a:8e:fc:d8:9b:b8:f7:52:3a:0f:36:27:74:62:9b: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2A:CB:4A:A5:4D:7F:72:0F:D2:8F:C4:AB:58:91:17:4E:95:81:18 X509v3 Authority Key Identifier: keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:70:d5:07:a8:f5:5c:39:41:e2:f2:a1:d6:80:60:96:4f:7f: 47:c6:35:e4:83:ad:9f:ef:7f:0e:48:0f:5d:e7:8a:9c:0c:c1: c4:a6:55:ed:79:3e:25:8f:7c:ec:5d:22:92:7f:7a:93:60:81: ea:b9:fa:5e:18:bf:64:bf:4e:a4:b4:f4:a0:c4:0a:00:c7:55: fc:f2:ce:91:16:a9:f1:94:53:9b:ab:c1:94:bc:52:c5:cc:d1: d1:b8:06:d8:ea:19:68:e4:7a:f6:00:f3:38:13:f0:19:6b:1c: 1a:b3:d8:56:47:5a:74:be:61:28:e8:79:c3:d2:56:63:dd:11: f6:74:4b:92:2e:26:51:08:6e:da:02:f9:f1:db:43:e7:59:b9: c9:ad:49:13:b1:5e:3c:f2:9f:a2:1d:39:de:fd:07:b6:eb:e0: 21:6d:5d:1b:21:3f:cf:a0:d6:31:6e:cd:44:2b:6b:1b:f3:cc: bd:80:a3:66:1e:d4:76:fe:79:06:a2:b3:b2:35:39:3e:55:46: ff:36:69:97:d1:85:94:bb:a9:73:59:ec:69:c2:59:40:c2:bf: e1:68:e3:93:c9:95:36:ca:20:f6:66:c5:c8:38:bd:ba:72:69: 38:b4:be:1a:c1:cb:69:78:99:a6:44:38:87:e8:ef:de:d0:27: 67:1a:e0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAHQm1M/seUeHCgBIX8RZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk NDRlN2IwHhcNMjUxMjExMjAwMDQ2WhcNMjUxMjEyMjAwMDQ2WjAzMTEwLwYDVQQD EyhkMTJhY2I0YWE1NGQ3ZjcyMGZkMjhmYzRhYjU4OTExNzRlOTU4MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGYyYn8pb38stZd/VZ0zrDDd4Iia zhw6qCELzmh5Okg//cAHFxIm4zvZbjzKRJsT8cytfBBO2p3hdyYOUCMDM4Gi1Wag GfI4ZLSGGGtx/bUmq2F/uYsfqdx1rcLVz3UTuS0sV+OKuPJyxC2CGg2LzKPZFr9c ZiWISFUNgBiDYZPqYAoj//gLm6zHkj4vaaNwDKz0hJNXntIv9wXYJy7LV1RPB71o ShgCN+OBDNIomHy2NaIBgqG66DAUY+6pLWFREjMJZC0zLu2wXFD/iil42L7p2/2b ywMDHO7czH8kPJlEfArKsSW92wJGvUV33AcqjvzYm7j3UjoPNid0Ypu3/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEqy0qlTX9yD9KPxKtYkRdOlYEYMB8GA1UdIwQY MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt YjVlMGU0YzMzMTVjLzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHDVB6j1 XDlB4vKh1oBglk9/R8Y15IOtn+9/DkgPXeeKnAzBxKZV7Xk+JY987F0ikn96k2CB 6rn6Xhi/ZL9OpLT0oMQKAMdV/PLOkRap8ZRTm6vBlLxSxczR0bgG2OoZaOR69gDz OBPwGWscGrPYVkdadL5hKOh5w9JWY90R9nRLki4mUQhu2gL58dtD51m5ya1JE7Fe PPKfoh053v0HtuvgIW1dGyE/z6DWMW7NRCtrG/PMvYCjZh7Udv55BqKzsjU5PlVG /zZpl9GFlLupc1nsacJZQMK/4Wjjk8mVNsog9mbFyDi9unJpOLS+GsHLaXiZpkQ4 h+jv3tAnZxrghA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:48:12 2025 by rpki-client