This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json) Hash identifier: SXFlWfOTnYgCwzUTT78aa1Ddvad637zwgFejxNEGWjY= Subject key identifier: 54:DC:19:CF:1A:12:A5:83:E0:D3:A5:71:68:82:9B:5D:BE:D5:23:4D Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Certificate serial: 019B0F6EEAC39C992CABB8534F29BA4338AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 22:01:25 +0000 Manifest this update: Thu 11 Dec 2025 22:01:25 +0000 Manifest next update: Fri 12 Dec 2025 22:01:25 +0000 Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=) 2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=) 3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: JfG6caDsLiTRrNLUF3UOiinJ+z1NI89PKxDMcNi/DDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:ea:c3:9c:99:2c:ab:b8:53:4f:29:ba:43:38:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Validity Not Before: Dec 11 22:01:25 2025 GMT Not After : Dec 12 22:01:25 2025 GMT Subject: CN=54dc19cf1a12a583e0d3a57168829b5dbed5234d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:43:d5:83:6b:1c:f4:92:d2:d7:56:59:6e: 4b:2a:ba:3e:40:42:b3:af:46:05:97:9b:ef:0d:96: 09:4a:12:25:32:a1:61:b3:fe:12:31:b4:18:6e:57: cd:32:4c:15:b4:70:1e:a4:f5:af:ef:f4:94:0b:c3: f1:0a:d0:e4:82:bb:52:9c:df:c3:e6:de:59:99:b0: 4c:01:a6:b0:c6:68:0b:83:78:3a:f7:80:90:d4:b7: 92:a5:56:1b:df:0e:33:83:b6:7a:e4:a7:cc:84:2d: 42:97:1c:11:3a:a3:4b:bf:a6:e3:cb:57:dd:db:26: d3:80:87:37:cc:27:72:71:c9:5e:7a:70:69:26:71: 5c:81:33:c5:60:b3:16:0f:c4:d3:a1:36:60:ce:68: 6a:f1:9a:bc:16:75:94:a5:c2:34:84:f2:4c:a3:0c: 30:ea:ed:e5:6b:4d:20:26:57:47:0a:40:22:f9:19: ea:39:ab:85:91:82:94:9b:68:c2:9e:08:e6:0a:cb: 32:90:b0:6a:08:01:87:d8:b1:e2:4c:cf:c8:14:b5: 3c:53:8b:e7:8a:49:6a:f2:44:40:30:39:33:22:af: dc:fc:6c:16:9b:0d:54:d8:c9:55:6f:c3:53:47:ef: 61:d3:93:cf:ad:a6:65:15:73:a8:68:be:c9:3c:fd: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DC:19:CF:1A:12:A5:83:E0:D3:A5:71:68:82:9B:5D:BE:D5:23:4D X509v3 Authority Key Identifier: keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9d:6d:ae:5e:31:e3:5b:f5:9e:91:b3:18:68:ee:03:7e:d7: f7:64:95:63:c6:90:c6:b6:f4:88:6c:2d:61:2b:fa:fb:e8:a3: e9:e9:4e:f8:7a:df:fa:21:91:f2:f7:cb:3f:e4:51:e5:7d:a1: 4c:c9:cd:b5:63:11:82:63:98:41:8c:79:3a:a4:4c:87:4a:c0: 0c:d3:80:8d:75:31:cf:f1:0f:0e:37:68:0d:4e:05:ff:4c:d8: ea:a1:0a:54:46:3b:c3:d3:50:dd:ed:63:70:ad:b6:89:0a:0e: fc:27:4f:55:bf:35:26:e5:e5:d5:69:ed:95:b9:70:03:40:98: 6d:e2:29:b2:69:e5:0c:61:f7:e2:60:de:94:51:d9:c7:9c:9c: 0b:69:13:7a:90:f8:0b:6e:9e:f1:8e:31:64:17:c2:8c:d4:a3: ac:0d:1b:da:b7:88:fd:55:02:da:70:57:15:52:18:29:fb:23: 39:90:d4:2a:fe:ca:4a:20:bb:e6:df:00:41:ef:0e:b1:c8:2c: 5b:9a:04:17:37:d2:c7:b8:bd:e6:7b:65:c6:1c:f9:1c:b9:ea: 70:4b:60:55:4c:85:fa:a7:f1:a0:47:44:75:7e:5a:55:e8:9c: 95:9b:a0:09:a3:a0:24:69:a7:eb:99:23:ff:b0:f7:e2:0e:c7: 07:ed:01:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPburDnJksq7hTTym6QzitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5 ZTk0YTIwHhcNMjUxMjExMjIwMTI1WhcNMjUxMjEyMjIwMTI1WjAzMTEwLwYDVQQD Eyg1NGRjMTljZjFhMTJhNTgzZTBkM2E1NzE2ODgyOWI1ZGJlZDUyMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ptD1YNrHPSS0tdWWW5LKro+QEKz r0YFl5vvDZYJShIlMqFhs/4SMbQYblfNMkwVtHAepPWv7/SUC8PxCtDkgrtSnN/D 5t5ZmbBMAaawxmgLg3g694CQ1LeSpVYb3w4zg7Z65KfMhC1ClxwROqNLv6bjy1fd 2ybTgIc3zCdyccleenBpJnFcgTPFYLMWD8TToTZgzmhq8Zq8FnWUpcI0hPJMowww 6u3la00gJldHCkAi+RnqOauFkYKUm2jCngjmCssykLBqCAGH2LHiTM/IFLU8U4vn iklq8kRAMDkzIq/c/GwWmw1U2MlVb8NTR+9h05PPraZlFXOoaL7JPP0LuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTcGc8aEqWD4NOlcWiCm12+1SNNMB8GA1UdIwQY MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1 LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATp1trl4x 41v1npGzGGjuA37X92SVY8aQxrb0iGwtYSv6++ij6elO+Hrf+iGR8vfLP+RR5X2h TMnNtWMRgmOYQYx5OqRMh0rADNOAjXUxz/EPDjdoDU4F/0zY6qEKVEY7w9NQ3e1j cK22iQoO/CdPVb81JuXl1WntlblwA0CYbeIpsmnlDGH34mDelFHZx5ycC2kTepD4 C26e8Y4xZBfCjNSjrA0b2reI/VUC2nBXFVIYKfsjOZDUKv7KSiC75t8AQe8Oscgs W5oEFzfSx7i95ntlxhz5HLnqcEtgVUyF+qfxoEdEdX5aVeiclZugCaOgJGmn65kj /7D34g7HB+0BxQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:37 2025 by rpki-client