This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft File: vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json) Hash identifier: uEVr8CVZkVA5tH4hvkipI4K9EII3VvA5L+upFYZpco0= Subject key identifier: 59:02:C1:36:DE:7F:A5:08:03:4C:84:F4:4E:8B:E8:7D:E9:3F:36:E4 Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034 Certificate serial: 019B25BFCEC6E9ACDE8E9E4EF2397BF237E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft Manifest number: 017D Signing time: Tue 16 Dec 2025 06:01:25 +0000 Manifest this update: Tue 16 Dec 2025 06:01:25 +0000 Manifest next update: Wed 17 Dec 2025 06:01:25 +0000 Files and hashes: 1: NjeNoaMkokSwdxi651vJsIPZGPI.roa (hash: WuO4Ddldp2DFr/NBzaE03YGgYfOWTLEgomsbtANaXbM=) 2: dH1EdCv4F3zFBiGZJ_XAaJoKuB8.roa (hash: uO4JYjbK0aD9KVhI/8JLgIx8rPTIvs6HrJy/vrwJ/Vc=) 3: dpMRXq6ywyTgHrIH5zbYgzRL198.roa (hash: aTBcNVIvwowBJeKwi3Yf02sPJ620zjhuLByuimPY8vQ=) 4: gQgIF6hIvUfhurtQ198iONedcik.roa (hash: mEQuGKFly8SftvXJQdCvoLlNzQ9krMcgDUnKbr3nnLo=) 5: siIZExuS_GeAC_7yAg0fTn4ysPQ.roa (hash: YHIFiD7L5rHkCWAOSvuE1uPY3FwCVAc7u7VpZj5jlLg=) 6: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: zFcZ4jucrPvSKXriHsPYlO+OTs4m7ZmSurbc5vHBsHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:ce:c6:e9:ac:de:8e:9e:4e:f2:39:7b:f2:37:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034 Validity Not Before: Dec 16 06:01:25 2025 GMT Not After : Dec 17 06:01:25 2025 GMT Subject: CN=5902c136de7fa508034c84f44e8be87de93f36e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:a0:e9:b2:03:b1:62:7c:10:00:f2:22:99: 1f:d8:12:4d:a8:16:49:2d:ef:d4:e9:30:16:dc:9e: 7c:0b:28:31:1a:2f:42:f9:e5:9e:c7:09:e9:3b:fa: d4:4c:32:4f:94:08:23:07:18:2f:7f:f9:e9:9a:06: f3:e2:27:21:a4:15:a0:99:9c:27:66:38:7f:85:e4: 37:c2:ca:7e:79:e9:df:46:a2:b9:b6:cf:00:a5:9f: f6:c5:42:06:ee:1b:a3:4c:b6:04:ff:3b:a0:3a:d8: 5a:32:65:1e:c3:5b:97:23:1a:78:98:c9:10:45:a6: 7d:e6:c0:83:12:45:ae:4c:e8:d9:0c:fa:a0:07:35: 0b:8c:21:40:bc:18:10:d4:9b:d6:a8:bb:b9:0f:23: ec:53:03:80:19:e8:82:17:bb:a6:9f:a1:e6:40:54: 21:7d:5f:59:48:d1:20:f0:43:d1:5e:2c:f9:7f:2b: a4:b1:d9:81:91:8b:aa:ef:84:0f:ef:11:e5:a6:dd: c4:d0:30:e6:8b:99:40:94:35:f9:c4:89:fb:5a:ae: d0:69:41:1b:d0:d0:b3:ee:18:81:e3:7a:4b:d5:44: 67:d9:92:4d:9a:5d:c1:1f:d7:47:fb:5e:d2:6d:45: 52:b1:a9:19:16:c2:bb:84:7b:b7:50:f9:4e:2c:a1: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:02:C1:36:DE:7F:A5:08:03:4C:84:F4:4E:8B:E8:7D:E9:3F:36:E4 X509v3 Authority Key Identifier: keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:64:cf:95:76:e1:17:84:a4:4e:7e:2d:4e:e9:3b:7b:91:54: a1:d1:5d:e1:6e:23:e5:14:d9:ce:fd:df:7a:73:77:2c:54:5f: bf:7d:7a:be:9a:72:3e:0e:d5:4d:ec:eb:42:b3:dd:02:1c:43: cc:4a:28:83:01:ca:d3:0c:c9:db:50:85:06:00:7f:53:12:3c: a0:da:c7:bd:5e:15:05:14:6b:07:02:b2:4e:38:07:05:14:52: 17:7a:ce:9a:e0:50:69:6c:1e:02:dd:91:45:a0:a9:af:ba:34: fc:e8:8d:f0:78:1f:2e:62:5a:e5:b4:b1:28:f1:3f:50:05:93: 5f:8f:22:17:51:c5:46:93:59:c0:3a:4c:68:87:9c:e3:b7:cc: df:25:76:8f:e6:37:9c:50:38:fa:70:27:f4:57:80:68:a6:36: 49:a7:3e:79:e6:cd:f4:62:f0:df:28:6a:41:19:2d:2c:3b:b7: d7:ab:1c:fe:6a:21:bb:fa:b7:2d:47:a9:81:99:46:fb:1d:78: 4b:50:14:07:9b:8d:76:3d:23:68:45:15:a9:e3:9b:b5:90:ef: 46:5e:10:23:ba:ec:29:e6:51:8a:cf:0d:68:8e:b5:9c:78:0c: 88:20:c8:87:01:1b:95:80:b8:5b:6e:c6:0b:cb:6f:16:a2:1f: fb:1f:43:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv87G6azejp5O8jl78jfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0 ZGIwMzQwHhcNMjUxMjE2MDYwMTI1WhcNMjUxMjE3MDYwMTI1WjAzMTEwLwYDVQQD Eyg1OTAyYzEzNmRlN2ZhNTA4MDM0Yzg0ZjQ0ZThiZTg3ZGU5M2YzNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ug6bIDsWJ8EADyIpkf2BJNqBZJ Le/U6TAW3J58CygxGi9C+eWexwnpO/rUTDJPlAgjBxgvf/npmgbz4ichpBWgmZwn Zjh/heQ3wsp+eenfRqK5ts8ApZ/2xUIG7hujTLYE/zugOthaMmUew1uXIxp4mMkQ RaZ95sCDEkWuTOjZDPqgBzULjCFAvBgQ1JvWqLu5DyPsUwOAGeiCF7umn6HmQFQh fV9ZSNEg8EPRXiz5fyuksdmBkYuq74QP7xHlpt3E0DDmi5lAlDX5xIn7Wq7QaUEb 0NCz7hiB43pL1URn2ZJNml3BH9dH+17SbUVSsakZFsK7hHu3UPlOLKFdxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkCwTbef6UIA0yE9E6L6H3pPzbkMB8GA1UdIwQY MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt NDJiYmYxYTZhNjViLzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGTPlXbh F4SkTn4tTuk7e5FUodFd4W4j5RTZzv3fenN3LFRfv316vppyPg7VTezrQrPdAhxD zEoogwHK0wzJ21CFBgB/UxI8oNrHvV4VBRRrBwKyTjgHBRRSF3rOmuBQaWweAt2R RaCpr7o0/OiN8HgfLmJa5bSxKPE/UAWTX48iF1HFRpNZwDpMaIec47fM3yV2j+Y3 nFA4+nAn9FeAaKY2Sac+eebN9GLw3yhqQRktLDu316sc/mohu/q3LUepgZlG+x14 S1AUB5uNdj0jaEUVqeObtZDvRl4QI7rsKeZRis8NaI61nHgMiCDIhwEblYC4W27G C8tvFqIf+x9DeA== -----END CERTIFICATE-----Generated at Tue Dec 16 13:41:26 2025 by rpki-client