This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json) Hash identifier: flipk7mSXbNGyjA2t4idbJPSG4LnHnoVup5cPC05d90= Subject key identifier: 5B:25:34:8A:30:9C:7C:7A:9E:69:2A:41:87:D2:C1:E8:14:BA:F1:BA Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b Certificate serial: 019B34FBBD0021DDF2C22774AD1E05951D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 05:01:11 +0000 Manifest this update: Fri 19 Dec 2025 05:01:11 +0000 Manifest next update: Sat 20 Dec 2025 05:01:11 +0000 Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=) 2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: 8xnBmQbV7oHokubIxHWQ4lxzJcHsCU74yKgh/E9Uu7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:bd:00:21:dd:f2:c2:27:74:ad:1e:05:95:1d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b Validity Not Before: Dec 19 05:01:11 2025 GMT Not After : Dec 20 05:01:11 2025 GMT Subject: CN=5b25348a309c7c7a9e692a4187d2c1e814baf1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:7c:2f:91:8b:b6:28:c8:8a:c8:0f:82:1b: b2:64:e5:46:4f:9f:68:a8:bf:b0:f8:55:51:0b:0c: 62:08:5a:b6:8d:eb:9e:b7:e5:fb:31:20:14:41:27: 46:a6:9a:0e:45:4a:26:8b:70:96:42:da:af:16:4e: b3:05:d0:d2:97:ce:88:4b:62:66:e8:8c:92:c8:cd: fd:df:05:64:9b:21:f4:dc:06:e2:9e:6e:bf:f0:a9: 38:f4:fa:37:74:f9:8c:b7:01:c2:16:0d:aa:ba:e0: 07:23:33:f1:04:c6:28:51:a8:ec:11:0e:9f:39:d3: bf:95:ca:a9:58:17:e3:39:7d:09:77:a4:4b:0d:87: 99:89:e8:c2:4b:29:1e:b5:ba:77:eb:0b:f6:0a:03: 24:25:42:49:14:ea:e2:09:aa:0c:fd:42:5c:ee:6f: 7c:52:a2:2a:2e:5b:5f:3a:42:9c:92:19:c2:10:75: 46:c3:c2:9d:b9:17:fb:0e:c6:3a:d4:31:cc:c9:c6: 0b:7c:83:7b:82:d1:70:e0:a5:79:76:90:cf:1e:85: 50:d7:51:52:62:6c:d2:ec:43:88:8f:45:f9:18:eb: da:58:b1:26:20:5b:52:bf:a7:6b:d1:90:5f:f8:a3: bb:92:cb:77:72:9b:42:fc:ea:51:d8:68:2b:d7:35: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:25:34:8A:30:9C:7C:7A:9E:69:2A:41:87:D2:C1:E8:14:BA:F1:BA X509v3 Authority Key Identifier: keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:0e:f0:35:52:a3:be:03:5d:76:95:87:c3:22:42:2e:15: d6:20:60:8f:93:93:28:01:2d:ef:3e:97:0f:db:57:61:22:d7: b0:a4:c0:22:c2:e2:08:42:5d:61:69:d2:a6:75:e6:b8:40:b1: 1a:23:a3:d4:79:2d:6a:de:0e:ee:69:81:3a:86:aa:f7:ca:dc: d0:99:b9:ab:77:37:88:eb:20:08:fd:63:2a:08:3a:2d:97:60: 56:a8:70:ff:54:4c:8b:77:96:72:db:48:73:01:60:f4:38:55: 27:7a:0b:40:74:fc:cb:39:78:64:3b:c5:f2:2a:12:35:9d:3d: 70:8b:cc:91:d6:7d:e0:3e:09:ec:9a:b9:bc:8e:0d:e3:3d:ca: c2:c7:94:39:d4:9b:85:13:79:53:21:ec:5a:fd:23:52:29:21: c7:8f:dc:d1:cc:d6:8b:15:46:c0:d1:d9:32:c0:e9:e2:29:19: d6:82:8f:f8:1c:38:29:78:b9:9b:8b:05:f0:b3:23:af:1c:69: e2:e5:10:7a:c5:f7:64:6f:d7:03:43:65:b6:bd:68:4e:a2:9c: 6a:f6:4e:6c:ad:60:f5:6e:28:94:5f:9b:57:ee:6d:52:71:de: 0a:49:0d:a1:f3:56:44:d0:33:51:19:b3:74:f4:db:79:55:80: a7:3f:a4:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+70AId3ywid0rR4FlR1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWM0MDVmMTQyZTUzZWI2N2IxYzQ5OTIzYWI3OTVlODQz MjhjOWIwHhcNMjUxMjE5MDUwMTExWhcNMjUxMjIwMDUwMTExWjAzMTEwLwYDVQQD Eyg1YjI1MzQ4YTMwOWM3YzdhOWU2OTJhNDE4N2QyYzFlODE0YmFmMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigp8L5GLtijIisgPghuyZOVGT59o qL+w+FVRCwxiCFq2jeuet+X7MSAUQSdGppoORUomi3CWQtqvFk6zBdDSl86IS2Jm 6IySyM393wVkmyH03Abinm6/8Kk49Po3dPmMtwHCFg2quuAHIzPxBMYoUajsEQ6f OdO/lcqpWBfjOX0Jd6RLDYeZiejCSyketbp36wv2CgMkJUJJFOriCaoM/UJc7m98 UqIqLltfOkKckhnCEHVGw8KduRf7DsY61DHMycYLfIN7gtFw4KV5dpDPHoVQ11FS YmzS7EOIj0X5GOvaWLEmIFtSv6dr0ZBf+KO7kst3cptC/OpR2Ggr1zVnQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFslNIownHx6nmkqQYfSwegUuvG6MB8GA1UdIwQY MBaAFLycQF8ULlPrZ7HEmSOreV6EMoybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iODE2YjktOTFiMC00NmRhLThlNTgt OTE0ODhhMzRmY2M4LzEvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iODE2YjktOTFiMC00NmRhLThlNTgtOTE0ODhhMzRmY2M4 LzEvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFAO8DVS o74DXXaVh8MiQi4V1iBgj5OTKAEt7z6XD9tXYSLXsKTAIsLiCEJdYWnSpnXmuECx GiOj1Hktat4O7mmBOoaq98rc0Jm5q3c3iOsgCP1jKgg6LZdgVqhw/1RMi3eWcttI cwFg9DhVJ3oLQHT8yzl4ZDvF8ioSNZ09cIvMkdZ94D4J7Jq5vI4N4z3KwseUOdSb hRN5UyHsWv0jUikhx4/c0czWixVGwNHZMsDp4ikZ1oKP+Bw4KXi5m4sF8LMjrxxp 4uUQesX3ZG/XA0Nltr1oTqKcavZObK1g9W4olF+bV+5tUnHeCkkNofNWRNAzURmz dPTbeVWApz+kNQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:47 2025 by rpki-client