This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json) Hash identifier: 2tvZwvQiKHjz1dOIt6FKE9xuXWCPSimwhmkMfB6M4ao= Subject key identifier: C3:DF:52:A3:A6:ED:B1:6C:60:74:41:B1:76:53:71:54:E0:34:18:9D Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d Certificate serial: 019B41DB06EA0BA3C67775E42170CD532D22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 17:00:31 +0000 Manifest this update: Sun 21 Dec 2025 17:00:31 +0000 Manifest next update: Mon 22 Dec 2025 17:00:31 +0000 Files and hashes: 1: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=) 2: VJMTsLB0DoA7dIhG-PlGlwqEhfg.roa (hash: zqcr9YUGQTYEQLg2JeQTvIegn0/uHC3qCTzqhOaEtjE=) 3: fyx1ny3-_FInDq0dmTByBfBn0j8.roa (hash: oB7Zx3DOWzJhigoLM671xc6bT3MSHf/pGnlfM7WSuvs=) 4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: fnOMV7h3gY63SYf6jS2ag1/+8ZYO7pne0NHQefo86tE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:06:ea:0b:a3:c6:77:75:e4:21:70:cd:53:2d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d Validity Not Before: Dec 21 17:00:31 2025 GMT Not After : Dec 22 17:00:31 2025 GMT Subject: CN=c3df52a3a6edb16c607441b176537154e034189d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:0c:67:e7:58:71:83:60:cf:af:d0:d4:1e: 6d:e2:74:18:78:a9:1e:43:72:72:02:03:42:6a:e3: 74:37:fb:0b:30:dd:6f:82:02:05:b5:63:bf:5d:7b: 28:16:b3:16:16:f7:12:a9:84:1d:45:da:4b:5d:3b: 24:5b:67:7e:65:fa:9c:01:dc:e1:24:db:28:10:8f: 67:9a:b2:d2:60:9e:76:0e:ca:eb:bb:45:06:a4:b1: 85:9f:67:2c:aa:63:a5:3d:a3:a9:54:94:3c:7e:30: 94:f6:12:af:c6:f6:db:a1:63:9b:c3:f3:14:a0:9e: 74:c9:bc:8d:4a:52:30:a7:0d:cc:fc:d1:57:9e:49: 84:80:73:72:6e:27:0a:b6:6c:da:fe:3d:96:88:49: a8:d8:d2:8f:aa:1c:8d:5d:41:47:d9:d5:f1:90:56: a3:65:66:41:70:fa:08:3e:d2:42:ed:2c:0d:10:96: 24:a4:f6:d0:14:93:3c:05:88:08:d4:b9:b4:a5:41: 02:fb:bb:7d:9e:f7:e7:60:a7:6b:ea:60:42:2f:88: 60:60:f6:a1:ca:ab:3f:ca:f9:d2:5c:51:1d:ed:1e: a9:18:44:9f:2a:d5:d9:24:bd:be:6e:52:c0:f4:6d: 16:88:87:b1:38:0f:2b:9c:55:f0:a0:9f:e2:48:ec: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DF:52:A3:A6:ED:B1:6C:60:74:41:B1:76:53:71:54:E0:34:18:9D X509v3 Authority Key Identifier: keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d2:83:db:77:75:e4:cc:af:bb:54:0c:b5:d6:94:c8:55:0e: 2a:42:7d:8e:8e:73:9b:66:3e:b2:3b:f9:ef:d3:fb:22:24:2e: be:76:1d:70:dd:c1:b6:79:62:a0:92:69:a2:84:d9:7c:a6:e1: 06:ae:7b:1e:2c:05:ff:82:93:41:1d:1e:8d:8e:7c:46:ba:75: 20:e1:87:2e:44:83:5e:e7:24:7f:f2:b2:a8:68:91:62:0d:30: ca:13:59:bd:43:44:e1:c2:0b:34:f7:e4:89:77:ee:ad:38:8e: ed:35:d2:eb:59:ff:8c:07:a3:6f:3c:b4:f2:57:38:4e:7c:71: 7f:fa:8a:df:fa:a4:30:f3:3c:1a:5c:eb:2e:66:f0:d0:42:28: d3:98:80:4c:6c:28:e5:74:d7:8a:e6:4b:63:58:63:40:82:5f: 30:cd:34:50:70:15:2d:1f:2c:2f:f6:0f:29:22:39:df:12:d1: 5d:56:83:fb:81:67:ba:19:14:64:ab:12:fb:d1:30:6b:97:ce: cc:37:f9:53:a4:f4:be:7e:0d:af:bf:95:80:c2:c7:0d:8c:28: dc:5b:0f:eb:b7:6d:59:3b:92:22:3d:81:e1:bc:e8:a8:3a:38: b2:a3:6c:4e:9f:d1:f7:0e:92:69:ae:ce:97:3e:eb:87:b3:fe: dd:34:98:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2wbqC6PGd3XkIXDNUy0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm MTU4N2QwHhcNMjUxMjIxMTcwMDMxWhcNMjUxMjIyMTcwMDMxWjAzMTEwLwYDVQQD EyhjM2RmNTJhM2E2ZWRiMTZjNjA3NDQxYjE3NjUzNzE1NGUwMzQxODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr28MZ+dYcYNgz6/Q1B5t4nQYeKke Q3JyAgNCauN0N/sLMN1vggIFtWO/XXsoFrMWFvcSqYQdRdpLXTskW2d+ZfqcAdzh JNsoEI9nmrLSYJ52Dsrru0UGpLGFn2csqmOlPaOpVJQ8fjCU9hKvxvbboWObw/MU oJ50ybyNSlIwpw3M/NFXnkmEgHNybicKtmza/j2WiEmo2NKPqhyNXUFH2dXxkFaj ZWZBcPoIPtJC7SwNEJYkpPbQFJM8BYgI1Lm0pUEC+7t9nvfnYKdr6mBCL4hgYPah yqs/yvnSXFEd7R6pGESfKtXZJL2+blLA9G0WiIexOA8rnFXwoJ/iSOzjxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPfUqOm7bFsYHRBsXZTcVTgNBidMB8GA1UdIwQY MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt MDk5MGNlNzQ4MWU3LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3 LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNKD23d1 5Myvu1QMtdaUyFUOKkJ9jo5zm2Y+sjv579P7IiQuvnYdcN3BtnlioJJpooTZfKbh Bq57HiwF/4KTQR0ejY58Rrp1IOGHLkSDXuckf/KyqGiRYg0wyhNZvUNE4cILNPfk iXfurTiO7TXS61n/jAejbzy08lc4Tnxxf/qK3/qkMPM8GlzrLmbw0EIo05iATGwo 5XTXiuZLY1hjQIJfMM00UHAVLR8sL/YPKSI53xLRXVaD+4FnuhkUZKsS+9Ewa5fO zDf5U6T0vn4Nr7+VgMLHDYwo3FsP67dtWTuSIj2B4bzoqDo4sqNsTp/R9w6Saa7O lz7rh7P+3TSYZA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:37 2025 by rpki-client