This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json) Hash identifier: EdPB620GcNXSMppQQOxCgmC2RJmDNwrMJ/WCFbS7v+c= Subject key identifier: 27:19:DE:86:03:79:C1:09:D2:14:58:29:CD:EB:B0:11:F4:26:E1:8A Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9 Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9 Certificate serial: 019B23D0DEC8FDB94A447BECBE5192497ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft Manifest number: 09E5 Signing time: Mon 15 Dec 2025 21:00:49 +0000 Manifest this update: Mon 15 Dec 2025 21:00:49 +0000 Manifest next update: Tue 16 Dec 2025 21:00:49 +0000 Files and hashes: 1: FSb-Rvye6YoA1Ii-rCKundZ-HD8.roa (hash: wEXQWTLVPy1UwtI4vOgrpyaszSEDzsytRnOaOtWiUUo=) 2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: JtwvdK53uuFyE4p6iMUeE4Ecul1YIk8GzQppTZz4pnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:de:c8:fd:b9:4a:44:7b:ec:be:51:92:49:7e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9 Validity Not Before: Dec 15 21:00:49 2025 GMT Not After : Dec 16 21:00:49 2025 GMT Subject: CN=2719de860379c109d2145829cdebb011f426e18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:df:75:b5:26:7e:b3:8f:ed:69:71:a5:70: 44:3f:4c:dd:ec:0b:0f:69:73:1a:e1:36:12:6d:a6: 26:31:f0:12:49:e2:aa:e8:89:42:0f:dc:9e:de:f6: cf:0f:7c:13:6f:bf:b1:9f:04:c0:5b:e8:7d:91:34: 15:64:cd:04:b2:8b:fc:4e:f8:d4:62:60:ba:cf:f7: 93:99:84:06:22:00:a7:e8:f8:a7:f3:1f:25:70:de: 0f:3d:6c:5b:d3:14:11:da:3b:5f:8f:38:48:74:b7: c7:f5:03:66:4e:65:a4:c3:66:21:05:0f:76:c1:bd: 2d:08:96:6d:05:b1:92:74:37:b6:40:3e:7e:c5:b8: 61:ab:75:59:81:a2:0a:2d:81:dc:60:bf:7f:9e:63: e7:00:f8:63:f3:af:66:fe:76:8e:7e:17:3d:9c:27: 08:43:4d:c1:42:b9:b1:4f:e9:a6:0a:3e:d4:6e:69: b8:7a:72:58:d9:5d:30:83:9c:98:95:af:e1:ca:d4: 4b:ba:ed:4c:ca:29:dc:e7:9e:04:3f:87:dd:28:e1: a7:6b:9f:ec:61:3a:be:62:08:9c:f6:32:89:86:31: 4a:c9:a4:f4:ed:3b:ff:1e:b1:ab:f3:20:bf:24:d0: 43:b6:50:0a:ec:f3:f9:1d:33:2a:a4:2b:46:78:86: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:DE:86:03:79:C1:09:D2:14:58:29:CD:EB:B0:11:F4:26:E1:8A X509v3 Authority Key Identifier: keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d8:ff:90:96:90:a2:73:d2:e0:ba:25:c6:51:da:59:0d:74: d7:af:5d:90:d8:01:9a:41:9f:a2:e5:0d:3d:d8:8d:43:9e:8a: 39:5f:fd:b1:41:3c:5f:30:30:1f:f9:65:da:41:ef:d6:e9:45: 83:eb:f8:aa:19:9b:00:b8:e4:77:fa:73:d1:7b:a8:7a:ad:96: fa:32:0d:e6:74:5c:d3:0a:48:8c:20:a3:df:ad:ed:6b:71:4a: 7b:41:0b:4d:40:65:fe:b6:96:b1:28:8e:9a:b1:58:c8:b3:e2: 40:2e:53:a3:d1:bb:dc:48:2c:fd:fa:1a:2b:69:e4:84:3c:f1: d8:f1:97:a1:8d:85:1b:b5:04:c1:22:19:59:4e:12:4a:7e:8a: 69:66:66:45:87:1f:75:05:c0:d9:90:28:fa:72:78:f3:9a:b1: 8d:30:05:8c:7b:36:75:57:6d:d7:d8:63:ba:e8:f6:af:60:c7: d7:0a:f0:88:23:58:13:8c:f3:85:a4:57:1d:b4:d2:8e:1e:37: 57:0e:9e:fb:1d:40:c7:8d:4a:69:96:77:05:d9:a6:5d:7c:21: de:aa:a6:90:68:f4:eb:d7:e5:ff:61:2b:cf:3e:d8:b0:f3:39: b1:10:3a:a9:0a:33:7d:46:cb:6a:c2:7f:1c:2b:fa:b9:b2:35: 60:0d:82:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0N7I/blKRHvsvlGSSX7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzhlZWIyNmMzOWRmMGYxOTRlNTBkNzY0MTk4ZDkwZTFm M2I1YzkwHhcNMjUxMjE1MjEwMDQ5WhcNMjUxMjE2MjEwMDQ5WjAzMTEwLwYDVQQD EygyNzE5ZGU4NjAzNzljMTA5ZDIxNDU4MjljZGViYjAxMWY0MjZlMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXPfdbUmfrOP7WlxpXBEP0zd7AsP aXMa4TYSbaYmMfASSeKq6IlCD9ye3vbPD3wTb7+xnwTAW+h9kTQVZM0Esov8TvjU YmC6z/eTmYQGIgCn6Pin8x8lcN4PPWxb0xQR2jtfjzhIdLfH9QNmTmWkw2YhBQ92 wb0tCJZtBbGSdDe2QD5+xbhhq3VZgaIKLYHcYL9/nmPnAPhj869m/naOfhc9nCcI Q03BQrmxT+mmCj7Ubmm4enJY2V0wg5yYla/hytRLuu1Myinc554EP4fdKOGna5/s YTq+Ygic9jKJhjFKyaT07Tv/HrGr8yC/JNBDtlAK7PP5HTMqpCtGeIZiEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcZ3oYDecEJ0hRYKc3rsBH0JuGKMB8GA1UdIwQY MBaAFLw47rJsOd8PGU5Q12QZjZDh87XJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82MWIyM2MtYTU4Ni00MmMwLTlkZWQt MDUwZGExMTQ5MWU3LzEvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82MWIyM2MtYTU4Ni00MmMwLTlkZWQtMDUwZGExMTQ5MWU3 LzEvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9j/kJaQ onPS4LolxlHaWQ10169dkNgBmkGfouUNPdiNQ56KOV/9sUE8XzAwH/ll2kHv1ulF g+v4qhmbALjkd/pz0Xuoeq2W+jIN5nRc0wpIjCCj363ta3FKe0ELTUBl/raWsSiO mrFYyLPiQC5To9G73Egs/foaK2nkhDzx2PGXoY2FG7UEwSIZWU4SSn6KaWZmRYcf dQXA2ZAo+nJ485qxjTAFjHs2dVdt19hjuuj2r2DH1wrwiCNYE4zzhaRXHbTSjh43 Vw6e+x1Ax41KaZZ3BdmmXXwh3qqmkGj069fl/2Erzz7YsPM5sRA6qQozfUbLasJ/ HCv6ubI1YA2CQg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:41:12 2025 by rpki-client