This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft File: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json) Hash identifier: 0w37m4vMYcRgw8Mmf3c5MX7N6HxVsUYy2q+T/WPMpOw= Subject key identifier: 26:6A:1E:2C:B0:29:03:8F:D5:C5:1B:D7:0F:B0:2B:7F:55:D6:B7:1A Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71 Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471 Certificate serial: 019B5A1AA43F2A18D0D2F8C3AB5F0CB0F44F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft Manifest number: 16ED Signing time: Fri 26 Dec 2025 10:00:53 +0000 Manifest this update: Fri 26 Dec 2025 10:00:53 +0000 Manifest next update: Sat 27 Dec 2025 10:00:53 +0000 Files and hashes: 1: 2NhKjFbuAMp_doRz4AUPYRbSyEU.roa (hash: IgIsz5WqF9AXjPzeVD1tKo5xC9L3dTvcfnef5uQtbKI=) 2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: HANr8tcDaeSXqYCx7cLjdv+VN5xMdZY0yKVuZbXFoCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a4:3f:2a:18:d0:d2:f8:c3:ab:5f:0c:b0:f4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471 Validity Not Before: Dec 26 10:00:53 2025 GMT Not After : Dec 27 10:00:53 2025 GMT Subject: CN=266a1e2cb029038fd5c51bd70fb02b7f55d6b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:ef:7e:fb:e1:6f:c3:87:7b:29:52:f3:52: 22:45:85:6f:c1:ef:16:87:0e:de:bf:2a:17:52:c4: 8e:f5:21:ee:0d:bc:5f:40:e4:e5:56:ae:f3:74:96: 61:6c:d5:10:44:24:40:d8:ed:5b:ec:81:72:7d:f2: b3:18:91:6b:36:28:81:94:fc:d5:3e:8f:d3:45:01: fe:30:0e:54:de:23:2f:09:1f:89:c2:3e:6f:8e:a8: b3:92:52:9d:d6:1b:96:0d:95:01:dd:f2:b4:c8:bd: 00:cf:0c:31:a7:88:1c:78:7a:26:18:54:af:00:f3: c5:d3:0e:b6:e9:61:5a:47:14:5d:af:c3:78:2c:28: c6:4a:88:e1:43:85:7a:9c:cb:8a:bc:da:09:f2:f9: e6:be:ca:e9:7c:76:f7:ac:e3:ed:ec:cb:ea:79:50: b4:66:7e:13:ca:76:7b:6c:a5:ab:fa:1d:0b:da:00: f7:35:83:3a:2a:44:9a:18:5e:c7:99:66:00:f1:3e: 3c:04:86:d2:1a:5b:81:94:0d:86:7c:48:af:76:d1: 97:79:c5:c7:0c:f0:b8:83:2d:5c:6d:ac:be:0f:9c: 95:37:15:ac:3f:c0:37:41:8a:88:51:34:98:71:cd: be:54:f7:e5:72:d0:df:4a:45:2f:24:04:bd:38:12: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6A:1E:2C:B0:29:03:8F:D5:C5:1B:D7:0F:B0:2B:7F:55:D6:B7:1A X509v3 Authority Key Identifier: keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a6:28:12:11:8e:74:6a:24:c1:73:41:ca:42:21:d8:de:5e: 62:fc:56:ce:78:df:29:80:d2:5c:a3:72:fb:15:e5:b0:b0:57: 34:b6:63:d0:0c:42:f2:76:78:bc:68:81:e0:20:cd:22:8b:8f: e1:f4:b5:22:ef:e1:99:37:89:b5:b4:51:04:f1:34:62:c4:92: ee:83:bb:02:2f:33:b2:4b:cc:ac:1c:3f:36:09:66:3d:9e:13: 06:dd:9f:1e:af:9f:44:af:3e:08:7b:f0:b4:80:37:40:fd:9c: df:ad:ff:05:ae:b0:07:30:d2:8a:7a:f0:32:ca:83:15:92:2d: ed:0c:cc:ff:1e:48:2a:3b:1b:8b:be:c3:b3:f1:f9:2d:d5:ae: 6a:40:ba:e8:46:43:69:71:d3:d7:40:09:5f:bf:d8:ca:73:f4: 6a:19:2c:99:bf:c5:42:95:4e:90:3b:30:54:ae:3c:43:67:0e: 85:3d:07:4d:3a:5e:10:1a:f9:a0:b6:d7:17:9a:7a:4e:94:90: 32:42:68:31:40:23:74:47:cb:f9:b5:a0:72:a3:61:df:5d:f4: 9d:23:58:de:e0:b7:f0:f3:f2:36:a8:89:92:c8:23:be:2c:6e: be:ed:a6:92:ae:ba:2e:a0:f1:ab:f6:77:e0:16:43:7c:51:2d: 27:28:29:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqQ/KhjQ0vjDq18MsPRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTNkMGJiNDIyYjBiY2E3MDY3MTZjMjBmN2FkNThkZDI3 NjU0NzEwHhcNMjUxMjI2MTAwMDUzWhcNMjUxMjI3MTAwMDUzWjAzMTEwLwYDVQQD EygyNjZhMWUyY2IwMjkwMzhmZDVjNTFiZDcwZmIwMmI3ZjU1ZDZiNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yzvfvvhb8OHeylS81IiRYVvwe8W hw7evyoXUsSO9SHuDbxfQOTlVq7zdJZhbNUQRCRA2O1b7IFyffKzGJFrNiiBlPzV Po/TRQH+MA5U3iMvCR+Jwj5vjqizklKd1huWDZUB3fK0yL0Azwwxp4gceHomGFSv APPF0w626WFaRxRdr8N4LCjGSojhQ4V6nMuKvNoJ8vnmvsrpfHb3rOPt7MvqeVC0 Zn4TynZ7bKWr+h0L2gD3NYM6KkSaGF7HmWYA8T48BIbSGluBlA2GfEivdtGXecXH DPC4gy1cbay+D5yVNxWsP8A3QYqIUTSYcc2+VPflctDfSkUvJAS9OBIwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZqHiywKQOP1cUb1w+wK39V1rcaMB8GA1UdIwQY MBaAFL2j0LtCKwvKcGcWwg961Y3SdlRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEt ZjIzMjgzNjAxNzY0LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mOGE0NmUtYmRmZC00ZGY2LTgyNjEtZjIzMjgzNjAxNzY0 LzEvdmFQUXUwSXJDOHB3WnhiQ0QzclZqZEoyVkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKYoEhGO dGokwXNBykIh2N5eYvxWznjfKYDSXKNy+xXlsLBXNLZj0AxC8nZ4vGiB4CDNIouP 4fS1Iu/hmTeJtbRRBPE0YsSS7oO7Ai8zskvMrBw/NglmPZ4TBt2fHq+fRK8+CHvw tIA3QP2c363/Ba6wBzDSinrwMsqDFZIt7QzM/x5IKjsbi77Ds/H5LdWuakC66EZD aXHT10AJX7/YynP0ahksmb/FQpVOkDswVK48Q2cOhT0HTTpeEBr5oLbXF5p6TpSQ MkJoMUAjdEfL+bWgcqNh3130nSNY3uC38PPyNqiJksgjvixuvu2mkq66LqDxq/Z3 4BZDfFEtJygpcA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:05 2025 by rpki-client