This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft File: vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft (raw, json) Hash identifier: Sb7bENKTnBg3wgvH6e0lM4tIfQKlq9aCrAXLcqNsNQE= Subject key identifier: F8:3A:1B:0D:29:C8:75:0D:BD:25:7E:8A:D5:1E:06:80:76:5E:E5:5E Authority key identifier: BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA Certificate issuer: /CN=be3119f4d953e760221acffeed3a4d7827d0e7ca Certificate serial: 019B59ACCF9BCDD7A2CC81FD3BB4928F73D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft Manifest number: B1 Signing time: Fri 26 Dec 2025 08:00:55 +0000 Manifest this update: Fri 26 Dec 2025 08:00:55 +0000 Manifest next update: Sat 27 Dec 2025 08:00:55 +0000 Files and hashes: 1: vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl (hash: 7MzMwCObsdFEsCLPksMhw5DPYCno3TYDX2qA5V7by1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:cf:9b:cd:d7:a2:cc:81:fd:3b:b4:92:8f:73:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3119f4d953e760221acffeed3a4d7827d0e7ca Validity Not Before: Dec 26 08:00:55 2025 GMT Not After : Dec 27 08:00:55 2025 GMT Subject: CN=f83a1b0d29c8750dbd257e8ad51e0680765ee55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:90:23:6a:75:41:7a:13:ad:a1:09:8d:a4:96: 4e:63:2d:be:63:ab:9e:85:1c:83:6e:a5:b4:4d:4b: 6c:79:81:cf:7f:ff:09:06:60:0a:80:24:bc:d9:7a: ea:93:de:43:cb:c3:72:02:99:a8:98:4a:01:66:d9: d0:e8:04:9e:d0:e2:ad:d7:5d:a7:e4:93:dd:ea:f5: f3:c5:39:65:ea:66:87:ac:a8:d5:b0:ae:71:2e:38: 55:11:b1:a7:57:b3:e7:39:0a:c4:21:c4:83:8a:df: 75:ac:4d:27:c6:22:35:2a:2e:f1:36:79:c9:da:1e: 05:a4:29:4f:6a:b1:4d:71:45:61:06:a2:25:7a:33: 2f:a8:9b:e3:de:13:fc:d8:b5:71:6a:9c:d1:95:fb: bf:d7:61:30:de:f0:0b:ab:7d:f1:aa:f4:77:4a:f5: 9a:b9:2e:2c:df:02:34:2e:f0:c3:bc:a5:75:f2:9f: 77:76:7e:d6:f5:11:a7:f2:0b:f2:33:42:e7:35:b0: 3f:5b:5a:ca:d1:7f:34:f1:dd:3d:b2:3f:18:0f:e3: 52:f7:1c:0a:29:7e:ba:03:5e:e5:17:d9:7a:89:30: b7:21:64:fd:4a:27:8b:64:2d:fb:0e:ab:63:26:44: 64:c5:11:b8:ed:4d:c4:39:bf:ec:8b:83:eb:15:b4: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:1B:0D:29:C8:75:0D:BD:25:7E:8A:D5:1E:06:80:76:5E:E5:5E X509v3 Authority Key Identifier: keyid:BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d5:b1:75:22:09:7c:e5:9a:2a:d5:b0:d6:6d:a5:0a:2e:d3: af:12:80:68:88:9c:ec:26:03:f6:61:3c:6d:02:2f:4e:43:34: 75:64:ca:83:71:17:10:12:91:37:4a:0e:8e:5b:50:0a:cf:cc: 0f:51:f2:3e:ae:e0:1e:4d:65:1c:ec:ed:ba:4a:89:af:3c:ca: 5c:e6:9c:74:cd:1f:85:02:af:28:3d:7e:06:3c:ed:5a:8c:bd: 2f:90:ff:46:d1:d3:e6:87:87:18:c5:c8:f6:9c:65:36:fe:31: b6:e9:f4:ed:b4:c4:1d:99:33:8a:a3:7f:35:6b:f4:26:ee:b7: 9b:46:64:da:c1:26:88:f4:2d:16:d6:af:2e:53:fa:43:e9:12: c8:14:ab:6d:1e:87:91:1a:22:0a:86:d3:d5:cb:a5:f8:c0:17: 4e:0e:51:07:38:65:3b:59:eb:09:42:4f:3f:20:b1:9c:dc:04: 7c:5c:6b:c7:c1:a8:c2:9b:06:73:75:a2:ed:47:a2:01:75:7c: a9:8b:b5:6a:f1:52:c7:5e:17:c1:ed:4b:49:be:b2:d2:a7:c9: 7b:6d:ec:9f:a5:6b:35:a9:d5:a1:02:13:1e:33:8d:99:29:f0: e5:2a:07:27:27:45:2f:62:4a:5f:40:16:4f:9a:4e:22:5b:94: 12:97:ca:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrM+bzdeizIH9O7SSj3PYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzExOWY0ZDk1M2U3NjAyMjFhY2ZmZWVkM2E0ZDc4Mjdk MGU3Y2EwHhcNMjUxMjI2MDgwMDU1WhcNMjUxMjI3MDgwMDU1WjAzMTEwLwYDVQQD EyhmODNhMWIwZDI5Yzg3NTBkYmQyNTdlOGFkNTFlMDY4MDc2NWVlNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pAjanVBehOtoQmNpJZOYy2+Y6ue hRyDbqW0TUtseYHPf/8JBmAKgCS82Xrqk95Dy8NyApmomEoBZtnQ6ASe0OKt112n 5JPd6vXzxTll6maHrKjVsK5xLjhVEbGnV7PnOQrEIcSDit91rE0nxiI1Ki7xNnnJ 2h4FpClParFNcUVhBqIlejMvqJvj3hP82LVxapzRlfu/12Ew3vALq33xqvR3SvWa uS4s3wI0LvDDvKV18p93dn7W9RGn8gvyM0LnNbA/W1rK0X808d09sj8YD+NS9xwK KX66A17lF9l6iTC3IWT9SieLZC37DqtjJkRkxRG47U3EOb/si4PrFbTP+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg6Gw0pyHUNvSV+itUeBoB2XuVeMB8GA1UdIwQY MBaAFL4xGfTZU+dgIhrP/u06TXgn0OfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpFWjlObFQ1MkFpR3NfLTdUcE5lQ2ZRNThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNDg2YTgtMTFmMS00YzFmLWE2OTUt NDI1MTNkYTQ0ZWU1LzEvdmpFWjlObFQ1MkFpR3NfLTdUcE5lQ2ZRNThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNDg2YTgtMTFmMS00YzFmLWE2OTUtNDI1MTNkYTQ0ZWU1 LzEvdmpFWjlObFQ1MkFpR3NfLTdUcE5lQ2ZRNThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9WxdSIJ fOWaKtWw1m2lCi7TrxKAaIic7CYD9mE8bQIvTkM0dWTKg3EXEBKRN0oOjltQCs/M D1HyPq7gHk1lHOztukqJrzzKXOacdM0fhQKvKD1+BjztWoy9L5D/RtHT5oeHGMXI 9pxlNv4xtun07bTEHZkziqN/NWv0Ju63m0Zk2sEmiPQtFtavLlP6Q+kSyBSrbR6H kRoiCobT1cul+MAXTg5RBzhlO1nrCUJPPyCxnNwEfFxrx8GowpsGc3Wi7UeiAXV8 qYu1avFSx14Xwe1LSb6y0qfJe23sn6VrNanVoQITHjONmSnw5SoHJydFL2JKX0AW T5pOIluUEpfK4A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:25 2025 by rpki-client