This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json) Hash identifier: 4Y3ZY9ETMBgwVLPpyF9qT7L9/DlINRQZnFGCZ48Dft0= Subject key identifier: D1:08:BB:30:4B:FF:9B:A9:45:00:D8:5E:16:43:47:5E:03:ED:01:4F Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1 Certificate serial: 019B0E92AF6AC50336EB082FE8933162101B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft Manifest number: 0CC8 Signing time: Thu 11 Dec 2025 18:00:52 +0000 Manifest this update: Thu 11 Dec 2025 18:00:52 +0000 Manifest next update: Fri 12 Dec 2025 18:00:52 +0000 Files and hashes: 1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=) 2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: nMkRFm9Go8m54Ar6RpaRRUJBcTq+9iuaBGOx6gDEM6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:af:6a:c5:03:36:eb:08:2f:e8:93:31:62:10:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1 Validity Not Before: Dec 11 18:00:52 2025 GMT Not After : Dec 12 18:00:52 2025 GMT Subject: CN=d108bb304bff9ba94500d85e1643475e03ed014f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:8d:cd:e5:03:d6:8f:30:81:53:72:b5:5f: 27:6c:70:53:9d:d4:73:47:25:b8:0f:5f:b2:cd:94: 2a:22:c3:1c:8c:ff:19:49:8c:dc:4e:18:8d:a2:a3: 4f:fb:55:8d:c9:09:6f:01:59:73:c8:53:68:ac:fe: ca:95:b8:77:4d:99:ca:43:ed:8d:24:f3:a1:2d:a8: 22:0d:23:8b:ea:80:24:c0:55:79:70:69:d2:36:14: 05:a6:96:36:91:bf:08:9b:1b:b5:cc:f6:6f:5f:e9: 37:c4:d5:71:93:ce:8c:cd:c4:04:65:f1:d9:fa:8d: 8e:c7:11:a1:c4:31:b2:9b:50:0f:42:11:bc:6d:ef: 68:0e:53:3c:fd:9f:34:20:64:b9:4d:18:c1:8a:50: d8:f3:11:17:d9:95:45:88:b5:6a:cd:b8:2a:db:49: fe:32:fe:85:af:9b:d7:2a:91:b4:85:8f:a6:39:31: 3a:5d:14:4c:f0:82:c5:f2:fa:a3:cb:db:02:0c:18: 94:64:26:80:03:31:55:2a:8f:c1:4b:5e:a0:ba:9a: dd:e2:3c:36:97:af:ef:8f:52:3e:78:ab:b2:85:5c: 94:3d:61:81:da:24:ed:e0:b4:0f:79:55:76:55:91: 81:fa:bd:6e:ca:11:11:07:72:4b:d6:ff:44:2e:e3: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:08:BB:30:4B:FF:9B:A9:45:00:D8:5E:16:43:47:5E:03:ED:01:4F X509v3 Authority Key Identifier: keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e8:ce:25:2f:87:f0:5b:58:b7:07:e5:f9:09:94:6f:1a:e9: 51:86:3a:ea:89:68:48:21:15:d5:2f:d9:1d:d0:15:1c:9b:40: 94:45:bf:a4:75:7b:b0:22:59:a8:50:a4:f9:a8:0c:3e:c3:83: a5:7c:4c:31:15:b2:d6:fd:bd:cf:01:7a:e0:fc:da:19:24:07: 7e:4e:57:f0:a7:7d:29:ef:ab:b6:ff:d6:d3:84:1c:4f:df:2b: 78:c9:3c:de:46:48:00:d8:c5:8a:b2:6d:b0:88:16:63:ec:87: 8e:5d:df:17:7c:15:e5:20:80:52:08:3c:f0:a7:2f:d7:c0:4b: 75:b1:c3:4c:0a:94:87:5d:bb:c7:b5:06:61:8d:fb:88:54:19: e5:d1:33:2a:c8:d7:50:45:b3:ad:80:1c:62:9c:f4:4a:01:4e: 76:e0:b9:cb:a8:cb:1f:c4:54:fd:6d:0d:0f:b5:f8:39:eb:25: 5c:a7:46:da:70:f6:8a:96:c1:05:99:6a:24:a8:69:1a:ab:a5: 92:7a:48:bf:22:2f:83:08:f5:ab:2b:1d:be:6c:46:f1:fd:c5: 16:61:e5:3f:8d:2a:92:5d:8d:8a:ed:0a:aa:46:19:d0:99:c6: 62:30:72:6b:91:fe:5a:d9:b4:05:16:f5:a2:66:e9:b9:05:90: 76:3d:83:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkq9qxQM26wgv6JMxYhAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjViMzBkYWQ3NGFjNzY5ZDRiNWIzMjMxMmRhOGZhODFh YjMzZDEwHhcNMjUxMjExMTgwMDUyWhcNMjUxMjEyMTgwMDUyWjAzMTEwLwYDVQQD EyhkMTA4YmIzMDRiZmY5YmE5NDUwMGQ4NWUxNjQzNDc1ZTAzZWQwMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfiNzeUD1o8wgVNytV8nbHBTndRz RyW4D1+yzZQqIsMcjP8ZSYzcThiNoqNP+1WNyQlvAVlzyFNorP7Klbh3TZnKQ+2N JPOhLagiDSOL6oAkwFV5cGnSNhQFppY2kb8Imxu1zPZvX+k3xNVxk86MzcQEZfHZ +o2OxxGhxDGym1APQhG8be9oDlM8/Z80IGS5TRjBilDY8xEX2ZVFiLVqzbgq20n+ Mv6Fr5vXKpG0hY+mOTE6XRRM8ILF8vqjy9sCDBiUZCaAAzFVKo/BS16guprd4jw2 l6/vj1I+eKuyhVyUPWGB2iTt4LQPeVV2VZGB+r1uyhERB3JL1v9ELuNtCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEIuzBL/5upRQDYXhZDR14D7QFPMB8GA1UdIwQY MBaAFL5lsw2tdKx2nUtbMjEtqPqBqzPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmIt NTEwY2ZhNDU1NjQwLzEvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmItNTEwY2ZhNDU1NjQw LzEvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiejOJS+H 8FtYtwfl+QmUbxrpUYY66oloSCEV1S/ZHdAVHJtAlEW/pHV7sCJZqFCk+agMPsOD pXxMMRWy1v29zwF64PzaGSQHfk5X8Kd9Ke+rtv/W04QcT98reMk83kZIANjFirJt sIgWY+yHjl3fF3wV5SCAUgg88Kcv18BLdbHDTAqUh127x7UGYY37iFQZ5dEzKsjX UEWzrYAcYpz0SgFOduC5y6jLH8RU/W0ND7X4OeslXKdG2nD2ipbBBZlqJKhpGqul knpIvyIvgwj1qysdvmxG8f3FFmHlP40qkl2Niu0KqkYZ0JnGYjBya5H+Wtm0BRb1 ombpuQWQdj2DlQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:25:16 2025 by rpki-client