This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json) Hash identifier: JxQAOArlu98zlcZ9j8F9IXNxvZfcxpqyCxqPDhmqcXo= Subject key identifier: A0:D5:D9:82:5C:DF:7E:B1:91:C6:E1:60:6B:C4:5B:D7:AE:99:4C:3D Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0 Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0 Certificate serial: 019B35A0D000C12E7F671751B1319450D072 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft Manifest number: 1715 Signing time: Fri 19 Dec 2025 08:01:29 +0000 Manifest this update: Fri 19 Dec 2025 08:01:29 +0000 Manifest next update: Sat 20 Dec 2025 08:01:29 +0000 Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=) 2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: Xe9JJ1VGNwAQq/XaT6ZRZexzHBG8+K6sF+xWUzSIUBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:d0:00:c1:2e:7f:67:17:51:b1:31:94:50:d0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0 Validity Not Before: Dec 19 08:01:29 2025 GMT Not After : Dec 20 08:01:29 2025 GMT Subject: CN=a0d5d9825cdf7eb191c6e1606bc45bd7ae994c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:48:1c:e5:f3:9d:36:12:cb:32:40:06:62: 9d:6e:06:0b:75:8f:bf:44:a5:af:45:16:5d:0a:d7: ca:f8:a9:e1:9a:10:49:00:60:3e:80:5d:24:10:18: f2:d1:f4:0d:9f:68:2d:53:ff:60:f4:68:c0:05:7f: de:43:fc:ee:aa:93:e0:fb:36:b7:30:1a:f6:59:28: ab:b3:c7:ca:b6:c0:94:ed:8b:89:86:52:a7:9e:e4: a7:e5:b4:44:20:22:9b:e7:f7:56:df:30:7e:12:fd: 99:d5:54:53:0c:4e:e2:33:b5:87:34:81:84:ad:c7: bf:b4:3d:cf:00:15:93:1a:66:19:53:9c:ab:54:8d: fe:53:48:da:64:a3:b1:3e:8a:6a:02:d2:a1:12:d7: 45:59:74:35:ec:d3:82:dc:2d:4e:94:52:9c:2e:bb: 62:c3:9b:92:15:87:c9:dd:80:24:60:d6:18:df:16: 87:bb:bc:2c:ac:fd:23:9c:46:94:2c:6e:72:84:3c: e4:d9:15:e1:d8:56:20:24:6c:c1:5f:ff:f1:ee:ad: 7a:d6:85:38:c9:a2:bd:4f:32:db:fd:9f:66:b7:8a: e6:d6:de:34:11:0d:87:8a:f0:90:19:0f:5b:38:25: 5f:8a:f6:be:01:21:10:70:24:6c:40:d8:70:56:b6: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D5:D9:82:5C:DF:7E:B1:91:C6:E1:60:6B:C4:5B:D7:AE:99:4C:3D X509v3 Authority Key Identifier: keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e6:d4:58:53:f2:40:1f:85:b9:71:9f:72:5f:82:5b:c1:a9: b3:30:ab:4a:81:4a:7a:c8:37:ac:c1:27:26:89:df:d9:53:9d: ee:79:44:00:94:6f:3b:90:7b:42:dd:7d:e4:f7:f0:0f:3f:1b: 07:bf:94:a6:6e:08:65:8b:4a:d2:e5:30:b9:b6:55:be:28:0c: 16:9d:4c:e1:c9:46:05:db:99:79:24:d5:5d:f5:72:7b:7e:ff: 17:1c:bf:9e:76:cc:6d:1c:e2:47:f2:4d:ab:5b:66:5c:b9:58: a3:bb:6c:3c:0d:af:9a:eb:c9:1c:b2:3b:c1:74:d5:50:26:19: 0e:ed:bf:ff:90:a7:4c:f0:65:21:03:97:ea:53:39:a7:5f:73: 64:20:20:b9:61:f2:63:52:9f:4b:c6:d0:bb:5e:98:2d:05:72: c2:13:1a:0b:87:d2:4a:26:97:2f:e7:ef:4a:49:a6:a2:7b:9c: 7c:86:33:3f:8d:af:1a:41:12:c0:a6:53:84:c3:fb:63:00:21: db:f5:ae:59:55:0c:8e:de:1f:08:5c:a1:10:9a:4d:de:30:b1: b9:05:b9:dc:5c:33:b4:66:21:61:20:44:35:95:22:6c:ce:0c: fc:e7:7f:4c:7b:07:e4:79:f2:b0:71:a0:b2:1b:8d:30:11:a8: 6e:22:25:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oNAAwS5/ZxdRsTGUUNByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWEwZmMwMTJlZmI4OTY1MGE3N2U2ZmJkMTJkY2FiZGE0 MjhjYjAwHhcNMjUxMjE5MDgwMTI5WhcNMjUxMjIwMDgwMTI5WjAzMTEwLwYDVQQD EyhhMGQ1ZDk4MjVjZGY3ZWIxOTFjNmUxNjA2YmM0NWJkN2FlOTk0YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LlIHOXznTYSyzJABmKdbgYLdY+/ RKWvRRZdCtfK+KnhmhBJAGA+gF0kEBjy0fQNn2gtU/9g9GjABX/eQ/zuqpPg+za3 MBr2WSirs8fKtsCU7YuJhlKnnuSn5bREICKb5/dW3zB+Ev2Z1VRTDE7iM7WHNIGE rce/tD3PABWTGmYZU5yrVI3+U0jaZKOxPopqAtKhEtdFWXQ17NOC3C1OlFKcLrti w5uSFYfJ3YAkYNYY3xaHu7wsrP0jnEaULG5yhDzk2RXh2FYgJGzBX//x7q161oU4 yaK9TzLb/Z9mt4rm1t40EQ2HivCQGQ9bOCVfiva+ASEQcCRsQNhwVrZHmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDV2YJc336xkcbhYGvEW9eumUw9MB8GA1UdIwQY MBaAFFcaD8AS77iWUKd+b70S3KvaQoywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUt OGI0OWRhYjE2NmE0LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUtOGI0OWRhYjE2NmE0 LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMebUWFPy QB+FuXGfcl+CW8GpszCrSoFKesg3rMEnJonf2VOd7nlEAJRvO5B7Qt195PfwDz8b B7+Upm4IZYtK0uUwubZVvigMFp1M4clGBduZeSTVXfVye37/Fxy/nnbMbRziR/JN q1tmXLlYo7tsPA2vmuvJHLI7wXTVUCYZDu2//5CnTPBlIQOX6lM5p19zZCAguWHy Y1KfS8bQu16YLQVywhMaC4fSSiaXL+fvSkmmonucfIYzP42vGkESwKZThMP7YwAh 2/WuWVUMjt4fCFyhEJpN3jCxuQW53FwztGYhYSBENZUibM4M/Od/THsH5HnysHGg shuNMBGobiIl7w== -----END CERTIFICATE-----Generated at Fri Dec 19 13:50:32 2025 by rpki-client