This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json) Hash identifier: 26xYP+8gSxDJJgMGLvh/k9Z2OmyTBVmzDeZF27CMU+s= Subject key identifier: C9:FB:A9:CD:4C:72:B4:03:2B:0D:D0:2F:0D:4E:A3:AE:D7:A6:EF:DA Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c Certificate serial: 019B11258E2B94A18D8F298248168ABB199B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft Manifest number: 0307 Signing time: Fri 12 Dec 2025 06:00:32 +0000 Manifest this update: Fri 12 Dec 2025 06:00:32 +0000 Manifest next update: Sat 13 Dec 2025 06:00:32 +0000 Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: 6W9Ksyzdy6hmyMQsCNDfDzvUiiAz3UGlMU80c7ryxi0=) 2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:8e:2b:94:a1:8d:8f:29:82:48:16:8a:bb:19:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c Validity Not Before: Dec 12 06:00:32 2025 GMT Not After : Dec 13 06:00:32 2025 GMT Subject: CN=c9fba9cd4c72b4032b0dd02f0d4ea3aed7a6efda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:e3:6d:13:37:cd:a2:11:65:c7:ed:18:47: 63:72:bd:74:56:f9:53:82:3c:ce:57:1b:65:b7:36: 63:1b:e1:bb:eb:37:ce:44:80:18:64:2b:17:dd:c4: 73:36:00:44:17:45:57:7e:c9:b7:72:e6:95:82:1b: 8d:cd:01:c0:16:47:4d:1a:c9:6a:0b:c5:16:f7:d7: b1:1e:f1:96:bf:99:68:2a:57:47:c7:1d:be:c8:19: f3:53:75:cc:48:10:05:70:f8:aa:41:39:af:e3:72: b8:84:f0:e8:ff:9a:c2:5d:69:65:ee:14:c3:b1:d2: da:e5:10:0a:26:7f:f0:7c:fe:07:d9:c6:ff:4c:46: d1:f1:f4:91:49:6f:ea:58:d0:cd:91:58:bb:26:c0: e3:3c:c1:d4:1b:a6:12:ff:2a:6c:35:2f:9c:ec:64: 42:52:f1:ae:f3:8e:bb:ce:c5:c2:d8:36:76:63:0a: a8:d6:d3:b5:17:67:16:88:38:2f:7d:21:53:d4:01: 0e:52:28:00:67:62:8a:f3:2e:bc:9a:a4:f2:b2:5b: 30:72:20:67:b1:8d:0f:8e:9c:5b:42:95:ad:f1:99: e4:fb:e0:a0:34:c6:c9:50:e3:b2:46:4f:f4:cd:a9: 29:df:cc:5c:a1:dc:f3:71:a0:7a:ec:47:4c:ae:e4: 0d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FB:A9:CD:4C:72:B4:03:2B:0D:D0:2F:0D:4E:A3:AE:D7:A6:EF:DA X509v3 Authority Key Identifier: keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:88:3c:d0:8f:75:5a:cc:73:17:94:70:1a:80:5b:10:83:f3: d6:51:50:f3:09:10:0a:52:09:d8:81:47:f0:a7:6a:cf:99:f8: a5:0b:ce:4a:b6:99:da:3c:18:3e:7f:05:8b:5c:21:dd:83:0a: 66:76:d5:a1:79:82:c1:b4:42:85:88:63:24:8b:35:06:53:ee: 42:04:4e:01:93:29:5e:c5:a4:6c:f3:f9:69:2d:df:dc:a2:b9: dd:74:de:8d:cf:2e:e6:45:70:02:0a:10:8a:4a:e3:b8:6d:8d: bd:fa:f0:d6:7c:7a:35:5a:da:ad:26:9a:fd:cf:1a:42:bc:19: 89:14:79:ae:1a:fe:36:fb:a5:b0:2c:13:0d:37:18:8b:15:98: 84:a2:cd:9d:90:22:74:d7:b5:28:de:5a:f8:2b:4d:f8:71:0e: d9:5e:3d:9c:4b:00:5e:94:ba:fc:21:d6:42:38:53:bd:7b:4a: 5e:67:95:ef:96:80:e9:96:86:6a:05:92:cb:b1:36:bc:c4:31: 11:86:62:17:52:76:0c:01:cd:2e:77:c8:f5:4a:19:c9:b7:9d: a0:43:ee:92:21:12:0f:e4:fc:88:77:c8:d0:cf:96:3f:d2:a1: 64:3b:c5:f7:2a:94:20:bc:ba:b3:4b:35:df:4d:e7:f0:04:8f: 0f:3a:e1:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJY4rlKGNjymCSBaKuxmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz MDkwOGMwHhcNMjUxMjEyMDYwMDMyWhcNMjUxMjEzMDYwMDMyWjAzMTEwLwYDVQQD EyhjOWZiYTljZDRjNzJiNDAzMmIwZGQwMmYwZDRlYTNhZWQ3YTZlZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmujjbRM3zaIRZcftGEdjcr10VvlT gjzOVxtltzZjG+G76zfORIAYZCsX3cRzNgBEF0VXfsm3cuaVghuNzQHAFkdNGslq C8UW99exHvGWv5loKldHxx2+yBnzU3XMSBAFcPiqQTmv43K4hPDo/5rCXWll7hTD sdLa5RAKJn/wfP4H2cb/TEbR8fSRSW/qWNDNkVi7JsDjPMHUG6YS/ypsNS+c7GRC UvGu8467zsXC2DZ2Ywqo1tO1F2cWiDgvfSFT1AEOUigAZ2KK8y68mqTyslswciBn sY0PjpxbQpWt8Znk++CgNMbJUOOyRk/0zakp38xcodzzcaB67EdMruQNIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn7qc1McrQDKw3QLw1Oo67Xpu/aMB8GA1UdIwQY MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYg80I91 WsxzF5RwGoBbEIPz1lFQ8wkQClIJ2IFH8Kdqz5n4pQvOSraZ2jwYPn8Fi1wh3YMK ZnbVoXmCwbRChYhjJIs1BlPuQgROAZMpXsWkbPP5aS3f3KK53XTejc8u5kVwAgoQ ikrjuG2Nvfrw1nx6NVrarSaa/c8aQrwZiRR5rhr+NvulsCwTDTcYixWYhKLNnZAi dNe1KN5a+CtN+HEO2V49nEsAXpS6/CHWQjhTvXtKXmeV75aA6ZaGagWSy7E2vMQx EYZiF1J2DAHNLnfI9UoZybedoEPukiESD+T8iHfI0M+WP9KhZDvF9yqUILy6s0s1 303n8ASPDzrhBQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:01:00 2025 by rpki-client