This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json) Hash identifier: JmUBA64cb7VyA5d7k3GjaLCYPvrLvPKyep2mXbn0kWQ= Subject key identifier: A2:62:8C:FC:90:08:20:6B:EC:C4:9F:A1:54:AC:A3:B3:89:CC:3A:B0 Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb Certificate serial: 019B2889D400B7C7DBFC8CDA2663A195BCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft Manifest number: 170E Signing time: Tue 16 Dec 2025 19:01:19 +0000 Manifest this update: Tue 16 Dec 2025 19:01:19 +0000 Manifest next update: Wed 17 Dec 2025 19:01:19 +0000 Files and hashes: 1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=) 2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: c3IhDGh08a4wJ5n6SjLtnykFkJtyBSs9R8/XAYxhasw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:d4:00:b7:c7:db:fc:8c:da:26:63:a1:95:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb Validity Not Before: Dec 16 19:01:19 2025 GMT Not After : Dec 17 19:01:19 2025 GMT Subject: CN=a2628cfc9008206becc49fa154aca3b389cc3ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:f5:70:dd:68:3f:66:a4:dc:c9:34:4d:27: 6d:b9:3c:ef:0e:0a:c5:99:3b:fd:86:4e:51:2c:33: 6d:4f:79:bf:8b:82:e9:e4:89:04:0d:86:6d:f7:f5: 95:67:4b:83:4c:ed:9f:f6:81:6d:cf:ea:a4:ec:4b: 1d:69:65:f9:4c:10:44:fa:5b:b8:43:13:7a:09:e9: ec:7b:eb:84:c1:e8:4f:05:da:cd:be:f2:fe:b0:7e: de:c5:7c:0e:c5:72:96:49:dc:b9:1a:64:c9:f3:93: 73:94:74:cf:1d:44:ed:98:a8:82:13:63:46:66:ab: b8:8b:57:bd:8d:74:f4:27:b8:df:a5:61:dd:ac:8a: f8:52:c6:bb:64:f2:df:e9:ae:4a:25:c4:8f:09:b6: a1:97:e2:32:94:af:99:16:40:3c:68:d9:88:7e:86: a9:4a:b1:2f:42:8d:af:c8:19:a8:4b:df:92:2e:ea: c7:28:66:12:06:02:b2:20:b2:1e:92:61:1a:cd:82: d9:cc:a9:a8:15:c5:d3:8d:bf:a1:28:2b:72:4f:84: a8:47:5b:14:5d:5c:70:c9:3e:80:47:e8:06:61:f4: f5:bf:ac:9f:57:24:10:2e:b1:54:ec:14:cb:c6:78: e3:63:10:e9:39:80:05:15:e3:df:67:bf:f1:b2:69: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:62:8C:FC:90:08:20:6B:EC:C4:9F:A1:54:AC:A3:B3:89:CC:3A:B0 X509v3 Authority Key Identifier: keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8f:0b:2c:3c:2d:f3:9c:1e:27:39:a3:e9:7e:dd:a7:a5:20: a3:6a:bd:32:c1:6e:ed:23:e8:4d:e0:98:ee:50:4f:80:90:62: 09:ca:a0:c0:d8:f0:8d:a8:2a:4b:69:e4:c5:bf:48:79:bd:8a: 07:fd:d2:72:9f:ee:34:e5:75:7f:be:92:21:59:c5:2a:54:d7: 89:93:38:33:91:f1:7e:ae:e1:33:98:87:4f:f2:8d:6e:5a:aa: 51:79:76:94:35:a0:d2:08:c4:0c:14:8e:5b:99:9f:34:bf:90: 97:d8:28:c1:88:95:43:d6:22:bc:b3:d8:a0:8d:81:3e:c3:e6: 50:8c:84:ce:5a:bc:63:97:11:c5:fb:b9:5d:f5:29:bf:d5:c4: 5b:96:a2:ce:8a:f6:10:e6:4a:d2:77:26:f7:e1:9f:1c:cd:5e: b5:8a:21:d1:0f:9e:43:43:3c:95:9c:e9:86:03:87:10:01:59: 1d:24:99:ed:e0:c3:e4:20:bd:15:26:31:c4:80:69:66:54:25: 6a:85:41:56:4d:b6:29:98:53:fa:0a:09:c6:43:df:45:24:b8: c6:01:1c:40:71:89:cb:90:01:ca:1e:c5:72:c7:2b:0f:6a:a3: 74:b2:91:f4:a5:b0:f9:aa:db:fe:00:c0:1d:b6:08:9a:c9:fb: d4:6d:d5:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoidQAt8fb/IzaJmOhlbzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjhjMWRhZDkxYTQxMDFjNzE1M2MwZjZkMDE1NjIzOGFk NzQ2YmIwHhcNMjUxMjE2MTkwMTE5WhcNMjUxMjE3MTkwMTE5WjAzMTEwLwYDVQQD EyhhMjYyOGNmYzkwMDgyMDZiZWNjNDlmYTE1NGFjYTNiMzg5Y2MzYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfP1cN1oP2ak3Mk0TSdtuTzvDgrF mTv9hk5RLDNtT3m/i4Lp5IkEDYZt9/WVZ0uDTO2f9oFtz+qk7EsdaWX5TBBE+lu4 QxN6Cense+uEwehPBdrNvvL+sH7exXwOxXKWSdy5GmTJ85NzlHTPHUTtmKiCE2NG Zqu4i1e9jXT0J7jfpWHdrIr4Usa7ZPLf6a5KJcSPCbahl+IylK+ZFkA8aNmIfoap SrEvQo2vyBmoS9+SLurHKGYSBgKyILIekmEazYLZzKmoFcXTjb+hKCtyT4SoR1sU XVxwyT6AR+gGYfT1v6yfVyQQLrFU7BTLxnjjYxDpOYAFFePfZ7/xsmnC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJijPyQCCBr7MSfoVSso7OJzDqwMB8GA1UdIwQY MBaAFL1owdrZGkEBxxU8D20BViOK10a7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2Qt MTM2OWNlZjdhNGNhLzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2QtMTM2OWNlZjdhNGNh LzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo8LLDwt 85weJzmj6X7dp6Ugo2q9MsFu7SPoTeCY7lBPgJBiCcqgwNjwjagqS2nkxb9Ieb2K B/3Scp/uNOV1f76SIVnFKlTXiZM4M5Hxfq7hM5iHT/KNblqqUXl2lDWg0gjEDBSO W5mfNL+Ql9gowYiVQ9YivLPYoI2BPsPmUIyEzlq8Y5cRxfu5XfUpv9XEW5aizor2 EOZK0ncm9+GfHM1etYoh0Q+eQ0M8lZzphgOHEAFZHSSZ7eDD5CC9FSYxxIBpZlQl aoVBVk22KZhT+goJxkPfRSS4xgEcQHGJy5AByh7FcscrD2qjdLKR9KWw+arb/gDA HbYImsn71G3VEg== -----END CERTIFICATE-----Generated at Tue Dec 16 21:23:01 2025 by rpki-client