This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json) Hash identifier: VgSrlQYlyZ2uzBe9s0+KGnBW6YoTBd7o517+WQXjxvM= Subject key identifier: 9E:F4:A0:28:38:3B:A5:4F:4A:39:86:B8:29:77:2B:53:61:82:1E:9C Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Certificate serial: 019B405C16B8EBCD925FDC91CA6490DF5C04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft Manifest number: 0B8B Signing time: Sun 21 Dec 2025 10:02:15 +0000 Manifest this update: Sun 21 Dec 2025 10:02:15 +0000 Manifest next update: Mon 22 Dec 2025 10:02:15 +0000 Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=) 2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=) 3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=) 4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: gp3vNpLmyq0u1/WqrwVYXjiMLzy49LDBQeOLsUzdYfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:16:b8:eb:cd:92:5f:dc:91:ca:64:90:df:5c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Validity Not Before: Dec 21 10:02:15 2025 GMT Not After : Dec 22 10:02:15 2025 GMT Subject: CN=9ef4a028383ba54f4a3986b829772b5361821e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:4f:8c:55:66:4d:64:c1:94:69:73:bf:fc: 73:c9:fa:b5:33:07:61:b2:dc:c4:2a:9a:3a:af:1c: 85:ec:16:4f:bc:c4:95:2a:ec:57:8d:bd:ab:db:e9: fd:03:dd:f5:7e:a3:3b:44:c2:b6:39:87:83:4e:22: f3:29:b3:86:d2:c9:08:41:12:73:59:93:9d:b9:65: 48:8e:88:3d:3f:1d:41:88:e6:11:35:3d:48:35:5e: ad:32:18:52:57:07:5c:75:dc:a0:82:2e:b1:52:2b: 0c:5b:2d:a5:ba:72:b4:10:d6:06:e2:62:41:94:6e: c4:90:38:ca:32:c8:1e:19:11:35:48:70:69:bf:40: fa:d1:7e:bb:de:a8:2a:d2:1d:35:6f:27:13:42:ec: 17:79:84:3b:d7:26:e9:0d:4b:b5:ca:cb:23:a3:76: 4b:d3:ea:f8:8f:36:4d:82:e1:1e:11:93:ca:39:97: 3f:6b:05:5d:0f:57:da:48:66:c2:d7:d1:22:3b:a1: 89:eb:98:03:7d:ae:c6:eb:2b:86:0a:90:85:b8:24: 44:3f:68:04:72:31:8a:7b:30:9f:e3:7d:1b:10:29: f6:ac:3b:03:3f:e9:3f:28:b7:e3:13:60:fd:16:13: 2a:26:00:18:d0:38:21:f2:bf:6b:14:fd:92:4f:82: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F4:A0:28:38:3B:A5:4F:4A:39:86:B8:29:77:2B:53:61:82:1E:9C X509v3 Authority Key Identifier: keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:86:8c:15:41:ea:45:ba:2d:87:90:1c:3e:46:54:f2:9e:f8: 84:96:bf:ac:33:b4:76:3c:e8:9c:73:95:ea:2b:95:d8:32:0c: c9:a4:d4:af:79:01:25:6a:98:d2:45:ec:a2:ce:2a:80:5d:fa: 7e:4c:0a:42:06:0b:23:e7:18:bf:ab:06:7e:6c:6c:a5:e1:76: a7:d9:be:01:02:92:c4:a6:8a:c1:b6:e9:3d:c3:9b:2d:7d:a1: 7c:53:d7:e5:24:cf:45:d3:c6:8e:6d:fe:fb:24:b9:c9:02:7a: 31:97:12:8e:90:6a:6b:3b:87:44:e1:e5:c9:c7:6b:d9:09:68: 34:d9:33:57:28:5c:f6:bf:41:ae:7b:9b:31:da:a4:27:16:3c: 3b:d3:ae:19:0c:c0:cf:d8:c2:cc:b6:ed:b6:83:00:8b:48:07: 2d:ac:e1:9c:81:13:b1:14:d6:e7:bf:28:b4:94:50:76:7b:f9: 0d:46:be:8f:5e:53:ec:be:ac:ef:62:44:a1:da:8e:62:41:c3: 2d:da:72:aa:6d:0b:21:2c:d2:0a:ee:9e:91:f8:80:c9:54:45: 1b:c0:ad:65:e4:33:18:6a:60:84:7c:b5:9b:b8:d2:1e:8d:07: e6:8e:5e:05:75:4b:20:99:de:12:2a:3c:3c:0f:1a:f2:cd:bd: 20:a3:d8:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBa4682SX9yRymSQ31wEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzdjNzBmMWM2N2VjYTE3NzVhNzA5YzkyMzVkNmEyZjU1 NTE2YjgwHhcNMjUxMjIxMTAwMjE1WhcNMjUxMjIyMTAwMjE1WjAzMTEwLwYDVQQD Eyg5ZWY0YTAyODM4M2JhNTRmNGEzOTg2YjgyOTc3MmI1MzYxODIxZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR9PjFVmTWTBlGlzv/xzyfq1Mwdh stzEKpo6rxyF7BZPvMSVKuxXjb2r2+n9A931fqM7RMK2OYeDTiLzKbOG0skIQRJz WZOduWVIjog9Px1BiOYRNT1INV6tMhhSVwdcddyggi6xUisMWy2lunK0ENYG4mJB lG7EkDjKMsgeGRE1SHBpv0D60X673qgq0h01bycTQuwXeYQ71ybpDUu1yssjo3ZL 0+r4jzZNguEeEZPKOZc/awVdD1faSGbC19EiO6GJ65gDfa7G6yuGCpCFuCREP2gE cjGKezCf430bECn2rDsDP+k/KLfjE2D9FhMqJgAY0Dgh8r9rFP2ST4KNyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ70oCg4O6VPSjmGuCl3K1Nhgh6cMB8GA1UdIwQY MBaAFL43xw8cZ+yhd1pwnJI11qL1VRa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQt YzhlYjA4Y2U5MDg5LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQtYzhlYjA4Y2U5MDg5 LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIaMFUHq Rboth5AcPkZU8p74hJa/rDO0djzonHOV6iuV2DIMyaTUr3kBJWqY0kXsos4qgF36 fkwKQgYLI+cYv6sGfmxspeF2p9m+AQKSxKaKwbbpPcObLX2hfFPX5STPRdPGjm3+ +yS5yQJ6MZcSjpBqazuHROHlycdr2QloNNkzVyhc9r9BrnubMdqkJxY8O9OuGQzA z9jCzLbttoMAi0gHLazhnIETsRTW578otJRQdnv5DUa+j15T7L6s72JEodqOYkHD Ldpyqm0LISzSCu6ekfiAyVRFG8CtZeQzGGpghHy1m7jSHo0H5o5eBXVLIJneEio8 PA8a8s29IKPY3A== -----END CERTIFICATE-----Generated at Sun Dec 21 18:06:33 2025 by rpki-client