This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json) Hash identifier: byWvTOpYP6jHYi9UY2BqyGvfUYjkc5Q6noCeCLk1wQA= Subject key identifier: D9:D5:05:37:F4:B8:6C:5D:40:75:4B:86:21:51:CE:38:E3:51:41:D7 Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39 Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39 Certificate serial: 019B59763EA94356273A2A2A7568DD1762E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft Manifest number: 08B2 Signing time: Fri 26 Dec 2025 07:01:20 +0000 Manifest this update: Fri 26 Dec 2025 07:01:20 +0000 Manifest next update: Sat 27 Dec 2025 07:01:20 +0000 Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=) 2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: /39w4KsFbOqeDm2bJVmmuOkP58cZk2j7vwlWB+Tpqu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:3e:a9:43:56:27:3a:2a:2a:75:68:dd:17:62:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39 Validity Not Before: Dec 26 07:01:20 2025 GMT Not After : Dec 27 07:01:20 2025 GMT Subject: CN=d9d50537f4b86c5d40754b862151ce38e35141d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:48:a0:06:61:11:7d:24:c3:ea:30:31:ca: ec:f2:a7:e4:44:2c:c1:8d:1a:4a:f6:17:43:6c:d5: 56:98:cd:d4:f7:5e:87:2f:aa:2a:a9:f1:ea:ed:e7: d2:1d:96:bc:1d:31:87:39:c2:d6:4f:89:4f:09:57: 33:70:c7:23:e5:b3:97:86:d9:48:00:57:df:50:81: 45:5f:73:0b:53:ac:0b:97:21:ea:42:66:ca:ad:24: fc:a5:89:4d:13:47:61:82:b3:22:a3:61:2f:70:d0: 1f:e2:1e:e9:bb:7d:cf:0c:4f:9d:fd:c9:88:09:0c: 5f:e8:32:0c:a5:0b:77:21:aa:48:11:13:a9:bc:cf: a4:48:50:fb:be:ea:64:d4:68:ad:ef:25:f9:9c:2c: fe:82:ba:69:d1:e3:20:01:f2:6a:2d:cb:11:49:0d: c9:bb:d5:5c:48:71:53:84:a1:85:bb:01:ba:6e:83: 80:ed:78:b2:da:e3:dc:d4:26:06:89:77:7b:19:12: 9a:c0:f9:08:ab:39:7a:04:19:c4:8f:1e:a7:8d:5e: 00:a9:6e:7f:88:ea:1f:14:bc:25:54:c6:d0:bc:48: 55:95:64:ad:ad:e2:b9:0d:00:67:ac:d1:c0:88:84: 65:53:16:99:65:bd:14:54:fd:1b:79:fe:9e:3f:c6: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D5:05:37:F4:B8:6C:5D:40:75:4B:86:21:51:CE:38:E3:51:41:D7 X509v3 Authority Key Identifier: keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:40:78:5c:4b:0c:33:c8:19:e7:d9:72:92:1d:0d:88:b8:42: 7c:e6:69:7d:13:66:87:89:e2:00:8c:40:d9:82:5d:fa:2d:d9: 47:05:1f:c4:b5:54:4d:fb:ce:50:84:ac:f2:cb:84:ef:92:8f: 16:2a:51:35:51:99:ea:cc:ab:e9:5c:7f:5f:f7:5b:47:2c:e2: 38:dd:79:4b:9b:24:01:b9:56:f2:42:cd:6f:f9:23:57:48:79: 23:cb:a2:e3:73:af:13:10:4c:d1:35:c1:d5:2f:f3:b3:88:eb: 44:48:30:d9:92:33:da:3c:2c:f1:41:82:2a:00:64:d1:39:0e: 4a:7d:c6:5b:d4:c1:d8:79:0a:8d:46:cb:ba:04:0e:46:15:ad: e1:55:60:80:e2:1f:e0:4b:d3:64:a0:ae:5d:41:6d:e7:fe:9a: 13:19:8b:b3:14:56:52:22:2c:37:90:f5:4c:d4:2e:69:fc:20: 68:92:c2:de:e8:c1:9a:3b:89:4b:ba:88:75:23:eb:99:31:f8: 63:cc:e4:06:ae:ff:1a:60:1b:0a:e8:d5:ce:01:2c:0d:30:cc: 35:94:8f:08:39:29:ae:34:e5:0b:db:87:a3:92:6a:72:0d:43: 14:a6:03:f0:da:1f:7c:98:a6:ee:b5:89:3f:ee:9e:fa:8e:c2: c8:a1:b9:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdj6pQ1YnOioqdWjdF2LjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODVkMzc5MWY1ODM2YzQxNWZmZDM5MWYyZDU4NWM3M2Ri ZWNhMzkwHhcNMjUxMjI2MDcwMTIwWhcNMjUxMjI3MDcwMTIwWjAzMTEwLwYDVQQD EyhkOWQ1MDUzN2Y0Yjg2YzVkNDA3NTRiODYyMTUxY2UzOGUzNTE0MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPtIoAZhEX0kw+owMcrs8qfkRCzB jRpK9hdDbNVWmM3U916HL6oqqfHq7efSHZa8HTGHOcLWT4lPCVczcMcj5bOXhtlI AFffUIFFX3MLU6wLlyHqQmbKrST8pYlNE0dhgrMio2EvcNAf4h7pu33PDE+d/cmI CQxf6DIMpQt3IapIEROpvM+kSFD7vupk1Git7yX5nCz+grpp0eMgAfJqLcsRSQ3J u9VcSHFThKGFuwG6boOA7Xiy2uPc1CYGiXd7GRKawPkIqzl6BBnEjx6njV4AqW5/ iOofFLwlVMbQvEhVlWStreK5DQBnrNHAiIRlUxaZZb0UVP0bef6eP8bF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnVBTf0uGxdQHVLhiFRzjjjUUHXMB8GA1UdIwQY MBaAFLyF03kfWDbEFf/TkfLVhcc9vso5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDct Yjg0MmI5OTA2ODllLzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDctYjg0MmI5OTA2ODll LzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkB4XEsM M8gZ59lykh0NiLhCfOZpfRNmh4niAIxA2YJd+i3ZRwUfxLVUTfvOUISs8suE75KP FipRNVGZ6syr6Vx/X/dbRyziON15S5skAblW8kLNb/kjV0h5I8ui43OvExBM0TXB 1S/zs4jrREgw2ZIz2jws8UGCKgBk0TkOSn3GW9TB2HkKjUbLugQORhWt4VVggOIf 4EvTZKCuXUFt5/6aExmLsxRWUiIsN5D1TNQuafwgaJLC3ujBmjuJS7qIdSPrmTH4 Y8zkBq7/GmAbCujVzgEsDTDMNZSPCDkprjTlC9uHo5Jqcg1DFKYD8NoffJim7rWJ P+6e+o7CyKG58w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:55 2025 by rpki-client