This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft File: vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json) Hash identifier: XTZ1/tyAqTJj/F1hhDmGD+R8De6l3kV7HdcKhZhGACE= Subject key identifier: 52:55:2F:AE:A4:1F:10:0F:FA:D9:74:9E:DA:3C:82:8C:AF:A6:1E:63 Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D Certificate issuer: /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d Certificate serial: 019B5A51A40B010B950478F8C60D35C2A701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft Manifest number: 06EF Signing time: Fri 26 Dec 2025 11:00:58 +0000 Manifest this update: Fri 26 Dec 2025 11:00:58 +0000 Manifest next update: Sat 27 Dec 2025 11:00:58 +0000 Files and hashes: 1: 0mezxsUX4q6nwfHNel9WWB_Brao.roa (hash: cM9upUcEP9+yZQjw/tmDzQZgWLtHsK18dVAiOO9hG6U=) 2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: XIPTcxCm/aqxHOk+ALMwJSeAB8wGee9stACWG608W+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a4:0b:01:0b:95:04:78:f8:c6:0d:35:c2:a7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d Validity Not Before: Dec 26 11:00:58 2025 GMT Not After : Dec 27 11:00:58 2025 GMT Subject: CN=52552faea41f100ffad9749eda3c828cafa61e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:c5:b4:23:bd:64:f8:ab:cb:55:bc:04:a2: f1:e0:e4:35:db:02:3a:b1:7a:8f:ec:30:c3:fe:af: 6e:18:7b:94:2f:c4:49:f5:17:6b:38:1f:b1:42:dc: 48:19:63:05:fd:b2:2e:88:14:3e:95:34:09:1e:bd: fb:45:d7:b7:6a:a6:31:6f:7b:ee:63:b4:d9:1c:2c: ce:89:a8:91:61:4f:c7:20:12:54:6d:a8:f6:9b:50: 7f:f7:5f:d6:45:5a:c4:6b:cd:3c:d0:ae:7f:3a:72: bb:55:71:de:1c:ab:7a:71:5c:cc:cd:46:77:31:3e: 0c:53:d4:f8:6c:e8:e2:16:a8:98:94:f1:de:51:e6: 21:e1:8b:94:d4:37:7a:2f:90:f5:df:2f:90:83:68: 37:4c:e7:95:5b:3d:0b:b1:c1:f7:a4:b7:ee:ae:90: 06:18:c0:86:9f:16:bd:5d:3a:28:ea:eb:11:6f:60: 82:d8:49:84:94:48:98:46:f2:4b:02:ba:17:3c:b2: 9e:72:6f:1b:15:0a:3e:70:83:0c:6d:42:20:a4:9e: 18:c8:50:b9:98:48:ad:bb:46:25:98:7d:83:0b:26: 0c:df:26:a9:82:4f:1e:18:ac:ee:51:80:1b:9b:74: 5b:70:5c:58:a4:f1:f9:7e:d2:4b:c0:b5:74:7d:d4: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:55:2F:AE:A4:1F:10:0F:FA:D9:74:9E:DA:3C:82:8C:AF:A6:1E:63 X509v3 Authority Key Identifier: keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ec:3d:f4:81:c5:06:cc:fa:3d:ff:df:86:a1:cd:ca:8f:5a: 45:a5:98:a0:b8:59:82:18:38:e3:d5:91:18:71:3f:7a:1d:f8: 47:c4:22:0f:99:07:e1:08:71:28:8a:33:da:95:c4:d2:93:48: fd:db:b9:6c:c8:b2:55:28:68:8b:4e:23:a8:f8:e5:c7:a4:a4: ab:2f:ee:2b:f2:1d:fc:b6:2d:ab:b4:40:fa:94:bb:54:cb:59: 13:b7:c2:f6:ab:7f:e8:ce:97:fb:36:ac:86:46:7c:f5:b4:1b: 5c:5f:2c:4d:f4:be:0e:d9:f8:9a:0b:a6:44:23:00:e3:1b:ca: 76:16:60:6c:d7:bc:4c:18:7a:d2:93:6d:78:1d:0d:ad:45:79: cc:a9:9d:3a:36:7d:d2:83:d8:1c:3e:dc:7f:e0:77:e9:23:47: 48:56:5a:71:a0:f7:61:cd:a6:ec:ce:2f:67:b7:ff:6e:b1:30: 9a:94:19:04:6e:9f:29:fd:ac:0a:e8:05:70:7e:66:77:cb:b7: 38:aa:74:24:55:b0:63:05:36:e5:bc:ef:c7:b8:c9:4e:62:af: a0:32:0e:6b:ef:b3:b9:31:8a:c0:55:ac:e6:e6:86:56:e8:eb: 79:77:85:5f:09:85:d5:8b:c2:20:ca:ac:23:e0:de:ef:25:1f: d2:fc:5e:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUaQLAQuVBHj4xg01wqcBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzUwNjA2OTE0MzMzZjdiZmMyYzBkMWY4ZDNjM2U0Yjcy YTMwMmQwHhcNMjUxMjI2MTEwMDU4WhcNMjUxMjI3MTEwMDU4WjAzMTEwLwYDVQQD Eyg1MjU1MmZhZWE0MWYxMDBmZmFkOTc0OWVkYTNjODI4Y2FmYTYxZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu7FtCO9ZPiry1W8BKLx4OQ12wI6 sXqP7DDD/q9uGHuUL8RJ9RdrOB+xQtxIGWMF/bIuiBQ+lTQJHr37Rde3aqYxb3vu Y7TZHCzOiaiRYU/HIBJUbaj2m1B/91/WRVrEa8080K5/OnK7VXHeHKt6cVzMzUZ3 MT4MU9T4bOjiFqiYlPHeUeYh4YuU1Dd6L5D13y+Qg2g3TOeVWz0LscH3pLfurpAG GMCGnxa9XToo6usRb2CC2EmElEiYRvJLAroXPLKecm8bFQo+cIMMbUIgpJ4YyFC5 mEitu0YlmH2DCyYM3yapgk8eGKzuUYAbm3RbcFxYpPH5ftJLwLV0fdRTmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJVL66kHxAP+tl0nto8goyvph5jMB8GA1UdIwQY MBaAFL01BgaRQzP3v8LA0fjTw+S3KjAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRVR0JwRkRNX2Vfd3NEUi1OUEQ1TGNxTUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGM5ZDctMTY4Zi00ZTEwLWI1YTEt Y2RjOGY5YmJjMzcyLzEvdlRVR0JwRkRNX2Vfd3NEUi1OUEQ1TGNxTUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mMGM5ZDctMTY4Zi00ZTEwLWI1YTEtY2RjOGY5YmJjMzcy LzEvdlRVR0JwRkRNX2Vfd3NEUi1OUEQ1TGNxTUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+w99IHF Bsz6Pf/fhqHNyo9aRaWYoLhZghg449WRGHE/eh34R8QiD5kH4QhxKIoz2pXE0pNI /du5bMiyVShoi04jqPjlx6Skqy/uK/Id/LYtq7RA+pS7VMtZE7fC9qt/6M6X+zas hkZ89bQbXF8sTfS+Dtn4mgumRCMA4xvKdhZgbNe8TBh60pNteB0NrUV5zKmdOjZ9 0oPYHD7cf+B36SNHSFZacaD3Yc2m7M4vZ7f/brEwmpQZBG6fKf2sCugFcH5md8u3 OKp0JFWwYwU25bzvx7jJTmKvoDIOa++zuTGKwFWs5uaGVujreXeFXwmF1YvCIMqs I+De7yUf0vxeyA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:23 2025 by rpki-client