This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json) Hash identifier: Nd6rUkFY5fmewjGdxNGmyAlEW+q3DJdIkGr2lygh1hc= Subject key identifier: 0A:11:C9:6F:FA:44:6A:B2:96:04:56:7E:0D:33:17:43:50:FC:B1:EE Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507 Certificate serial: 019B0F3797E6D87A5545CA6D3F4199CF0ADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 21:01:00 +0000 Manifest this update: Thu 11 Dec 2025 21:01:00 +0000 Manifest next update: Fri 12 Dec 2025 21:01:00 +0000 Files and hashes: 1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=) 2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: hsAjIagWGViN8BSPSqo+fkQHn0WYpXdXlJ/cS0y1sCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:97:e6:d8:7a:55:45:ca:6d:3f:41:99:cf:0a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507 Validity Not Before: Dec 11 21:01:00 2025 GMT Not After : Dec 12 21:01:00 2025 GMT Subject: CN=0a11c96ffa446ab29604567e0d33174350fcb1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:75:ae:be:da:1f:5b:b8:db:b5:c2:c3:6f: f1:63:8e:0c:6f:a3:51:d9:52:08:be:71:cc:bf:4b: 56:31:43:4a:d9:2c:2d:18:a3:52:ef:00:51:cc:c5: 3a:cd:c7:86:9b:a6:91:42:32:31:31:5d:6b:ef:df: fd:39:a1:39:8d:63:45:9d:40:11:a4:31:2d:5b:c1: 62:26:fc:bb:19:48:7b:2b:11:06:91:1b:d7:01:3d: 48:57:1c:d6:90:21:32:88:a3:d5:df:d7:a9:8c:10: d1:bd:0a:22:50:c3:b4:af:cb:4c:c5:64:56:fa:98: f2:56:01:b1:0d:99:a1:2e:b4:b2:8b:3a:8c:a3:7f: 14:18:e5:17:71:ba:00:9e:f4:4d:ed:00:ce:f0:c8: 69:e8:ca:2b:70:cf:52:83:46:bc:fc:0a:12:b4:2a: 44:9e:78:02:bc:7c:87:43:e1:0c:06:0c:9d:3e:d6: c6:22:cc:18:20:d4:fd:40:9b:38:6f:9d:7e:ce:b6: 84:17:c2:bd:d5:53:2f:5d:fc:73:2e:51:aa:63:22: 75:a4:4f:98:5d:1b:17:a3:02:a0:b8:2c:76:fa:37: 9d:6f:00:e2:cb:b0:2d:d7:55:da:25:ca:bb:55:cc: db:7a:5e:d6:0a:91:13:58:53:64:15:0d:29:e1:5c: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:C9:6F:FA:44:6A:B2:96:04:56:7E:0D:33:17:43:50:FC:B1:EE X509v3 Authority Key Identifier: keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:15:7e:b1:85:71:c3:b3:0c:e1:02:85:6c:8a:f3:25:5e:64: bf:18:27:e8:4f:41:1e:5d:24:ab:ad:09:a5:85:a1:8d:07:ac: 80:69:d7:1b:02:ce:cc:c3:3c:24:fe:81:c2:84:4e:84:cc:8a: 0d:fc:fa:f8:05:62:9c:16:57:49:da:14:22:25:83:89:a1:2a: 79:21:ba:cc:12:1e:51:ea:8d:5d:07:01:73:b1:b5:18:56:2f: 79:92:5b:82:34:51:82:b3:36:dd:ef:12:34:ba:6c:93:91:5f: 1f:af:57:e7:5f:6e:63:1e:0d:4b:0f:77:cf:b3:46:6d:2f:1f: e4:af:3e:3d:32:f2:6e:4d:5c:c2:39:75:e4:64:c9:49:d4:da: a0:ed:15:3e:1c:44:34:ef:c9:b7:ea:3c:43:d9:b2:a8:38:f4: fe:9b:80:e3:6e:83:58:80:f3:6c:e0:4b:e7:2d:6a:00:cf:be: f3:ad:74:1f:cc:18:bf:72:2f:bf:bd:8c:2f:11:2d:e6:c8:2d: b4:17:8f:3f:e6:5a:90:95:b2:46:5d:eb:66:09:97:e7:13:84: 4e:26:9d:db:e2:37:a4:57:78:9d:00:0f:c8:3d:83:9c:50:70: 4b:38:bc:6d:b0:4f:36:56:1f:5e:05:cf:20:3a:a1:c5:54:d6: 1b:7e:3b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5fm2HpVRcptP0GZzwrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2M1NGQxZWRjYTY5MmY0NGM5ZGEzODM0MDJjMjRmZGU3 MjM1MDcwHhcNMjUxMjExMjEwMTAwWhcNMjUxMjEyMjEwMTAwWjAzMTEwLwYDVQQD EygwYTExYzk2ZmZhNDQ2YWIyOTYwNDU2N2UwZDMzMTc0MzUwZmNiMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRp1rr7aH1u427XCw2/xY44Mb6NR 2VIIvnHMv0tWMUNK2SwtGKNS7wBRzMU6zceGm6aRQjIxMV1r79/9OaE5jWNFnUAR pDEtW8FiJvy7GUh7KxEGkRvXAT1IVxzWkCEyiKPV39epjBDRvQoiUMO0r8tMxWRW +pjyVgGxDZmhLrSyizqMo38UGOUXcboAnvRN7QDO8Mhp6MorcM9Sg0a8/AoStCpE nngCvHyHQ+EMBgydPtbGIswYINT9QJs4b51+zraEF8K91VMvXfxzLlGqYyJ1pE+Y XRsXowKguCx2+jedbwDiy7At11XaJcq7Vczbel7WCpETWFNkFQ0p4VyVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoRyW/6RGqylgRWfg0zF0NQ/LHuMB8GA1UdIwQY MBaAFL48VNHtymkvRMnaODQCwk/ecjUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQt YzM0OTUzZWRjN2U1LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQtYzM0OTUzZWRjN2U1 LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRV+sYVx w7MM4QKFbIrzJV5kvxgn6E9BHl0kq60JpYWhjQesgGnXGwLOzMM8JP6BwoROhMyK Dfz6+AVinBZXSdoUIiWDiaEqeSG6zBIeUeqNXQcBc7G1GFYveZJbgjRRgrM23e8S NLpsk5FfH69X519uYx4NSw93z7NGbS8f5K8+PTLybk1cwjl15GTJSdTaoO0VPhxE NO/Jt+o8Q9myqDj0/puA426DWIDzbOBL5y1qAM++8610H8wYv3Ivv72MLxEt5sgt tBePP+ZakJWyRl3rZgmX5xOETiad2+I3pFd4nQAPyD2DnFBwSzi8bbBPNlYfXgXP IDqhxVTWG347MQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:05 2025 by rpki-client