This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft File: vPPYLGBpUlW7VE_xoawy2w-xFuU.mft (raw, json) Hash identifier: xAgM7C9nGyHaxidukpO29twReU83qdUVVyq4AEKtyio= Subject key identifier: B5:EE:D3:4D:C0:A5:64:CE:3A:34:6A:6D:85:F7:2F:36:84:29:0A:BF Authority key identifier: BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5 Certificate issuer: /CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5 Certificate serial: 019B2408108395755D62AB645580654C4CA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft Manifest number: FF Signing time: Mon 15 Dec 2025 22:01:06 +0000 Manifest this update: Mon 15 Dec 2025 22:01:06 +0000 Manifest next update: Tue 16 Dec 2025 22:01:06 +0000 Files and hashes: 1: d59ifLeoofn7-UvWX5Z_heEmW3w.roa (hash: myKQPKzA+B6pXm0I1iyKz0J47S4IH4zVCcxURKYGIbw=) 2: vPPYLGBpUlW7VE_xoawy2w-xFuU.crl (hash: TIkIkCJAfjTNEjikphypFEV158tltsOd8bwGYPsvwYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:10:83:95:75:5d:62:ab:64:55:80:65:4c:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5 Validity Not Before: Dec 15 22:01:06 2025 GMT Not After : Dec 16 22:01:06 2025 GMT Subject: CN=b5eed34dc0a564ce3a346a6d85f72f3684290abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:ce:97:10:5c:86:d5:c1:a8:fa:b9:d4:15: 92:76:fe:3a:4e:6e:cd:fd:d9:79:dd:8e:c0:98:ec: 84:f0:04:5c:a1:60:aa:f1:56:0f:f0:f3:d2:91:ae: ff:99:da:b0:9b:e4:d3:8d:9f:b7:dc:e7:31:2e:a0: 9f:88:4e:5c:fd:e3:75:e9:a8:99:d0:3c:37:4e:2a: 53:c0:98:80:e2:0e:9f:e3:0d:b5:10:22:ea:89:ac: 85:9b:49:92:f5:9f:22:d9:7a:f9:92:29:e5:74:bc: 58:18:72:d2:23:30:f4:be:83:a6:fc:85:3e:b7:2f: ac:a4:66:82:ca:ca:0d:69:6b:22:e7:84:d7:8e:a3: 51:ea:d5:4b:c9:79:cf:d6:85:4c:39:0a:ef:39:19: 56:e2:4b:65:51:4f:70:b1:ea:b2:e5:3e:09:77:a0: 96:81:cf:87:6a:96:b7:30:cb:00:2a:23:87:06:24: 7e:e1:25:65:a0:92:a9:73:58:48:99:6d:70:8a:9c: b1:19:45:58:64:36:b4:f4:b3:da:88:6d:04:1e:2b: 71:f1:38:dd:52:3f:de:ec:9b:3b:cb:58:6c:2c:90: 4d:95:c5:55:df:ca:24:48:75:e1:ff:28:6a:71:d3: 1b:28:99:1d:d1:bb:ff:36:16:7a:c3:69:9f:fb:02: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EE:D3:4D:C0:A5:64:CE:3A:34:6A:6D:85:F7:2F:36:84:29:0A:BF X509v3 Authority Key Identifier: keyid:BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ec:68:e3:bc:24:11:b6:54:b3:05:d6:ee:4d:63:bc:af:03: 7f:67:f9:91:a5:a0:e6:47:4f:69:e1:10:2e:e2:26:c4:e6:21: 06:dd:c6:d6:3a:60:59:8e:a9:56:56:03:c2:d7:5f:d2:a9:a9: 4c:89:95:99:36:e3:c7:67:b4:db:93:14:55:e4:c1:46:43:79: 30:6c:52:6a:35:eb:ce:bf:9f:bc:c4:1b:e7:c9:b9:e8:8e:cc: 01:83:f6:5c:97:47:69:a9:d4:9d:ee:e3:be:42:c5:a8:d4:6c: 58:ed:2c:47:ce:cd:ad:3b:dd:4d:12:26:89:4c:b6:11:57:15: f6:a9:58:0a:41:f4:28:a3:f3:97:1c:5f:5d:c3:d5:57:98:48: 2e:37:77:9d:16:6c:25:d1:79:8b:a1:af:c8:8d:2e:e0:dd:19: b3:ff:b4:8d:29:c4:e1:6b:d9:5b:1a:62:0b:c2:83:b8:42:0e: 7b:69:2d:d7:de:54:30:97:ea:6a:be:18:43:07:89:9e:8e:04: 7e:94:83:50:25:54:a6:e7:d9:26:02:88:d7:6c:91:70:72:ca: dd:c0:4a:30:a3:6c:b7:e2:a8:84:16:23:45:2f:42:d2:2b:eb: 62:61:23:fb:c3:e5:58:af:63:c4:ac:d6:0f:aa:13:93:38:ef: 0c:c1:b8:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCBCDlXVdYqtkVYBlTEygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjNkODJjNjA2OTUyNTViYjU0NGZmMWExYWMzMmRiMGZi MTE2ZTUwHhcNMjUxMjE1MjIwMTA2WhcNMjUxMjE2MjIwMTA2WjAzMTEwLwYDVQQD EyhiNWVlZDM0ZGMwYTU2NGNlM2EzNDZhNmQ4NWY3MmYzNjg0MjkwYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohPOlxBchtXBqPq51BWSdv46Tm7N /dl53Y7AmOyE8ARcoWCq8VYP8PPSka7/mdqwm+TTjZ+33OcxLqCfiE5c/eN16aiZ 0Dw3TipTwJiA4g6f4w21ECLqiayFm0mS9Z8i2Xr5kinldLxYGHLSIzD0voOm/IU+ ty+spGaCysoNaWsi54TXjqNR6tVLyXnP1oVMOQrvORlW4ktlUU9wseqy5T4Jd6CW gc+Hapa3MMsAKiOHBiR+4SVloJKpc1hImW1wipyxGUVYZDa09LPaiG0EHitx8Tjd Uj/e7Js7y1hsLJBNlcVV38okSHXh/yhqcdMbKJkd0bv/NhZ6w2mf+wJ1UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXu003ApWTOOjRqbYX3LzaEKQq/MB8GA1UdIwQY MBaAFLzz2CxgaVJVu1RP8aGsMtsPsRblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lYTkxZjktYmIxMi00NTQ0LTliMmYt ZTU3MDM2OWVlMDNiLzEvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9lYTkxZjktYmIxMi00NTQ0LTliMmYtZTU3MDM2OWVlMDNi LzEvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARexo47wk EbZUswXW7k1jvK8Df2f5kaWg5kdPaeEQLuImxOYhBt3G1jpgWY6pVlYDwtdf0qmp TImVmTbjx2e025MUVeTBRkN5MGxSajXrzr+fvMQb58m56I7MAYP2XJdHaanUne7j vkLFqNRsWO0sR87NrTvdTRImiUy2EVcV9qlYCkH0KKPzlxxfXcPVV5hILjd3nRZs JdF5i6GvyI0u4N0Zs/+0jSnE4WvZWxpiC8KDuEIOe2kt195UMJfqar4YQweJno4E fpSDUCVUpufZJgKI12yRcHLK3cBKMKNst+KohBYjRS9C0ivrYmEj+8PlWK9jxKzW D6oTkzjvDMG4xQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:22:06 2025 by rpki-client