This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json) Hash identifier: Pvxg6O+3owKS7/+efnK/bIO+HoPV3PlvmXJM9jbchps= Subject key identifier: 42:37:FC:A3:A2:93:EE:73:90:C4:83:66:33:50:58:8F:E1:48:BB:1B Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e Certificate serial: 019B37578F56094AC3B49FDFA193ABF05F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft Manifest number: 126E Signing time: Fri 19 Dec 2025 16:00:43 +0000 Manifest this update: Fri 19 Dec 2025 16:00:43 +0000 Manifest next update: Sat 20 Dec 2025 16:00:43 +0000 Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=) 2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: MQl2ISMb9/Cq6oaFSin7zTvoZp72Ay3Z+2owCVFr4ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:8f:56:09:4a:c3:b4:9f:df:a1:93:ab:f0:5f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e Validity Not Before: Dec 19 16:00:43 2025 GMT Not After : Dec 20 16:00:43 2025 GMT Subject: CN=4237fca3a293ee7390c483663350588fe148bb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:7a:bd:21:58:ef:df:2c:fb:46:9e:9c:5c: 4e:d6:83:5e:47:4f:08:b8:85:59:6a:06:05:23:89: 54:5c:ac:36:f1:4b:64:5f:b3:f3:67:f9:b0:9f:46: b5:ad:75:12:1d:36:a8:6d:2d:53:98:ae:45:a3:65: 9e:8b:c2:73:47:48:a5:b4:ec:59:6e:a6:cd:c2:68: e9:3b:ba:c2:5b:e7:98:b4:ff:c1:f7:e9:27:26:13: f9:2a:73:42:49:0e:4c:9d:58:7e:ac:ad:0b:e7:12: 1b:45:c7:6b:95:6f:a8:e5:ec:e1:a4:00:aa:49:96: 66:4a:7e:ba:79:33:c9:11:41:89:0f:4c:34:f6:ac: cb:70:35:cf:1f:ac:37:86:cc:cc:ca:f7:67:7d:d6: 59:8a:95:b7:80:ff:70:9e:56:8a:06:bd:f6:da:a7: 08:0c:58:26:3c:6e:1b:68:66:b0:53:ef:98:2a:97: 1a:6c:69:b0:02:67:97:62:b9:28:d9:c9:a2:4b:b2: 3c:32:a4:e2:af:23:4e:40:e8:74:dd:0a:e1:ef:39: 9f:47:70:4f:27:54:f1:d6:e1:c8:10:2d:28:21:24: 61:76:4d:44:97:ff:af:8f:10:49:e4:5e:9e:54:0a: 91:12:a8:3e:61:f0:06:7b:f4:af:ee:7d:9a:ad:08: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:FC:A3:A2:93:EE:73:90:C4:83:66:33:50:58:8F:E1:48:BB:1B X509v3 Authority Key Identifier: keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a0:e6:2c:6a:e2:f0:80:a4:aa:8d:b4:19:b5:fb:ad:d5:a3: f7:64:e2:81:fd:32:56:4d:f5:c5:f2:ca:09:5c:de:68:08:bb: 20:e0:68:87:85:fc:82:93:69:ad:d0:1a:8d:de:e5:39:60:00: 24:0e:33:46:c7:8b:c1:41:15:8e:fe:63:ba:a7:25:ba:d4:98: 45:99:ca:bc:03:44:16:33:78:47:87:1e:0b:b6:1b:e3:67:55: cf:3f:21:dc:20:ea:91:50:60:6f:43:1a:da:49:c1:f5:41:c4: 38:65:b6:10:67:34:95:3a:2c:39:a1:26:b8:d5:30:6a:3f:d3: e6:a8:9f:14:f7:37:6e:92:24:c1:5f:4a:bd:1f:00:41:fc:1b: d7:82:de:a4:41:ce:8b:19:20:2e:47:bc:67:17:86:33:5c:d3: f2:94:56:8b:a6:7a:f1:9e:af:f0:72:fa:8c:b6:be:e6:4e:43: 5b:20:18:f1:69:2b:54:34:c7:17:4d:35:17:8b:ab:5b:fe:61: 30:0a:fc:31:cb:aa:05:d9:30:40:24:a1:84:08:f6:22:37:c5: b1:30:6a:58:8a:33:ce:18:69:0c:9b:1b:20:12:a2:76:27:31: 7c:ba:bf:c2:5a:8b:98:d5:84:6e:2d:53:a6:b5:0e:bb:01:15: ec:1a:b5:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V49WCUrDtJ/foZOr8F+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MWM3Y2NjNTIzNzY3ODczNzQwOTJlYWZhYzI2MjNlMDU3 MWE4MWUwHhcNMjUxMjE5MTYwMDQzWhcNMjUxMjIwMTYwMDQzWjAzMTEwLwYDVQQD Eyg0MjM3ZmNhM2EyOTNlZTczOTBjNDgzNjYzMzUwNTg4ZmUxNDhiYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrF6vSFY798s+0aenFxO1oNeR08I uIVZagYFI4lUXKw28UtkX7PzZ/mwn0a1rXUSHTaobS1TmK5Fo2Wei8JzR0iltOxZ bqbNwmjpO7rCW+eYtP/B9+knJhP5KnNCSQ5MnVh+rK0L5xIbRcdrlW+o5ezhpACq SZZmSn66eTPJEUGJD0w09qzLcDXPH6w3hszMyvdnfdZZipW3gP9wnlaKBr322qcI DFgmPG4baGawU++YKpcabGmwAmeXYrko2cmiS7I8MqTiryNOQOh03Qrh7zmfR3BP J1Tx1uHIEC0oISRhdk1El/+vjxBJ5F6eVAqREqg+YfAGe/Sv7n2arQjVjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI3/KOik+5zkMSDZjNQWI/hSLsbMB8GA1UdIwQY MBaAFFYcfMxSN2eHN0CS6vrCYj4FcageMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQt YzE3MDA5MTI4M2ViLzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQtYzE3MDA5MTI4M2Vi LzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6DmLGri 8ICkqo20GbX7rdWj92Tigf0yVk31xfLKCVzeaAi7IOBoh4X8gpNprdAajd7lOWAA JA4zRseLwUEVjv5juqclutSYRZnKvANEFjN4R4ceC7Yb42dVzz8h3CDqkVBgb0Ma 2knB9UHEOGW2EGc0lTosOaEmuNUwaj/T5qifFPc3bpIkwV9KvR8AQfwb14LepEHO ixkgLke8ZxeGM1zT8pRWi6Z68Z6v8HL6jLa+5k5DWyAY8WkrVDTHF001F4urW/5h MAr8McuqBdkwQCShhAj2IjfFsTBqWIozzhhpDJsbIBKidicxfLq/wlqLmNWEbi1T prUOuwEV7Bq1vw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:56:37 2025 by rpki-client