This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft File: vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json) Hash identifier: qbKACaxfmU+zEpr3OCnXMn3zmd1PpG7BoMpOHWMySQQ= Subject key identifier: 3E:57:DD:D8:B4:99:2C:69:DE:BC:B6:F3:04:38:95:58:1D:FC:BA:E5 Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75 Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575 Certificate serial: 019B5ABFD796A19BFDEF97AEC31A29FA6F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft Manifest number: 0BD1 Signing time: Fri 26 Dec 2025 13:01:20 +0000 Manifest this update: Fri 26 Dec 2025 13:01:20 +0000 Manifest next update: Sat 27 Dec 2025 13:01:20 +0000 Files and hashes: 1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=) 2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: xYNi405nESnrAP5uRdH154IpfLeYArSPyptrCVtDAjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d7:96:a1:9b:fd:ef:97:ae:c3:1a:29:fa:6f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575 Validity Not Before: Dec 26 13:01:20 2025 GMT Not After : Dec 27 13:01:20 2025 GMT Subject: CN=3e57ddd8b4992c69debcb6f3043895581dfcbae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:55:06:82:41:61:4e:a1:90:31:ae:8d:57: 64:10:3c:67:be:66:36:ca:a9:35:ad:78:99:64:d0: b5:62:26:01:0b:f6:53:5f:5b:0b:51:69:47:8a:06: 13:9d:74:c8:02:35:a3:a3:48:b6:a6:20:75:9b:05: b8:af:ae:33:46:12:3c:ae:48:1f:4b:95:f8:b8:69: 6e:b3:1d:49:da:1d:29:45:98:57:2e:11:c5:75:dc: 6a:ac:e2:23:4d:40:4c:46:49:7d:3d:03:9d:52:b2: e6:1d:df:e3:50:70:07:bd:36:9e:ec:b2:e2:ec:6b: 82:f2:1f:83:32:01:ae:3e:ad:b0:01:53:cc:20:16: 46:ed:85:b8:04:cf:a3:26:87:f8:b1:0d:7b:c6:08: 46:73:53:5e:06:ea:e4:a4:63:b5:75:47:0e:8e:a3: d0:bf:79:2f:5e:ab:b9:4e:83:7b:62:02:89:9b:72: 01:cd:32:6b:45:b9:9a:7d:21:5d:21:2d:27:3c:39: 06:5a:97:ca:34:44:d8:e6:2d:a6:f0:66:e4:b0:f5: 7a:5e:cc:1b:5e:5d:ac:a2:ae:dc:a7:c6:35:1b:13: 7b:52:e4:24:63:81:78:ce:a4:6e:5c:9c:d6:0b:a2: 1d:bc:2f:7f:f6:6c:6a:8a:79:ee:e9:ca:d5:42:25: bc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:57:DD:D8:B4:99:2C:69:DE:BC:B6:F3:04:38:95:58:1D:FC:BA:E5 X509v3 Authority Key Identifier: keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:62:d0:8d:d1:46:b9:51:df:02:82:17:9b:c3:8d:b5:8c:33: c2:7c:30:a0:5e:9a:1e:a1:66:1f:e5:11:9c:7e:ed:4f:a8:86: 60:75:55:0f:15:7a:c2:33:83:d3:78:c8:fb:9c:8e:a1:6e:ce: b6:7f:87:6a:61:e5:ce:55:e4:2c:4d:4c:04:93:3e:d6:4b:78: 1f:c1:aa:d8:79:35:eb:c5:b6:d1:a6:ed:46:bd:42:64:2c:69: 6c:0b:12:4e:05:58:ea:86:e4:40:ab:cb:fe:96:52:59:2e:5a: d4:7d:fb:8a:fd:e8:48:7f:92:1e:61:aa:2b:00:35:ce:34:9d: 43:46:9f:da:e0:f0:4a:69:c6:c7:7b:fa:2f:54:ce:f0:3a:fb: 4f:35:35:c6:d2:91:a1:36:af:5c:23:9f:b1:43:5f:51:ff:a7: 0f:e0:ba:29:6c:3a:8c:15:e4:37:c1:2e:a7:bb:6a:a2:e5:44: 11:00:50:69:fc:54:21:51:be:fc:b4:44:eb:5a:70:53:5a:3d: 36:ad:6e:9d:6e:9b:d7:49:5d:a5:1f:0c:d7:ca:5f:fe:c3:fe: d4:a9:b4:d2:74:26:90:a0:16:b2:8e:92:ab:57:27:94:5f:38: e4:24:79:05:3a:34:cb:21:cc:e2:43:ac:b3:ac:28:8c:1a:2f: 6d:66:7a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9eWoZv975euwxop+m8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTkxMTM0MzIyNjIyOWQyMDNlYTMyNmE5ZDY5ZDRmYzM0 NmM1NzUwHhcNMjUxMjI2MTMwMTIwWhcNMjUxMjI3MTMwMTIwWjAzMTEwLwYDVQQD EygzZTU3ZGRkOGI0OTkyYzY5ZGViY2I2ZjMwNDM4OTU1ODFkZmNiYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAxVBoJBYU6hkDGujVdkEDxnvmY2 yqk1rXiZZNC1YiYBC/ZTX1sLUWlHigYTnXTIAjWjo0i2piB1mwW4r64zRhI8rkgf S5X4uGlusx1J2h0pRZhXLhHFddxqrOIjTUBMRkl9PQOdUrLmHd/jUHAHvTae7LLi 7GuC8h+DMgGuPq2wAVPMIBZG7YW4BM+jJof4sQ17xghGc1NeBurkpGO1dUcOjqPQ v3kvXqu5ToN7YgKJm3IBzTJrRbmafSFdIS0nPDkGWpfKNETY5i2m8GbksPV6Xswb Xl2soq7cp8Y1GxN7UuQkY4F4zqRuXJzWC6IdvC9/9mxqinnu6crVQiW8hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5X3di0mSxp3ry28wQ4lVgd/LrlMB8GA1UdIwQY MBaAFL0ZETQyJiKdID6jJqnWnU/DRsV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZTdkMTAtMjQzZi00N2I1LWFmYzQt MzU2ZWU5Nzc2MTUzLzEvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85ZTdkMTAtMjQzZi00N2I1LWFmYzQtMzU2ZWU5Nzc2MTUz LzEvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2LQjdFG uVHfAoIXm8ONtYwzwnwwoF6aHqFmH+URnH7tT6iGYHVVDxV6wjOD03jI+5yOoW7O tn+HamHlzlXkLE1MBJM+1kt4H8Gq2Hk168W20abtRr1CZCxpbAsSTgVY6obkQKvL /pZSWS5a1H37iv3oSH+SHmGqKwA1zjSdQ0af2uDwSmnGx3v6L1TO8Dr7TzU1xtKR oTavXCOfsUNfUf+nD+C6KWw6jBXkN8Eup7tqouVEEQBQafxUIVG+/LRE61pwU1o9 Nq1unW6b10ldpR8M18pf/sP+1Km00nQmkKAWso6Sq1cnlF845CR5BTo0yyHM4kOs s6wojBovbWZ6ZA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:38 2025 by rpki-client