This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json) Hash identifier: OApn3upneWgKZ9P2f8YMAoQz9hthSI6eo92dMxh42r8= Subject key identifier: A5:44:01:C2:7A:DF:18:8C:4E:E7:66:3C:EA:D7:46:21:09:41:BA:AF Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b Certificate serial: 019B0F37522025ED72D70AD1F95CDE4A91B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft Manifest number: 0BFD Signing time: Thu 11 Dec 2025 21:00:42 +0000 Manifest this update: Thu 11 Dec 2025 21:00:42 +0000 Manifest next update: Fri 12 Dec 2025 21:00:42 +0000 Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=) 2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=) 3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: QxW9T/PTZMgeHSg+ImkHXKK6GCX9gUthS5cwDJYXa1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:52:20:25:ed:72:d7:0a:d1:f9:5c:de:4a:91:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b Validity Not Before: Dec 11 21:00:42 2025 GMT Not After : Dec 12 21:00:42 2025 GMT Subject: CN=a54401c27adf188c4ee7663cead746210941baaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:b1:85:34:96:81:97:5f:36:30:ea:d6:63: 05:89:df:6d:90:80:06:38:8d:8b:5a:1e:61:50:8c: 19:f0:1a:67:85:6c:6d:70:56:bf:28:19:f0:b7:42: e4:cf:67:e6:48:f3:0b:8a:6d:ec:40:4d:d7:ed:23: 2a:f4:d4:8c:0d:2c:64:e6:e1:56:bd:44:d2:e2:21: 3a:51:32:73:20:68:f3:4b:97:66:f1:5a:5f:45:9f: c5:cf:ce:2a:b1:48:df:60:31:10:8c:77:ca:ac:1c: 6b:25:6b:b3:af:ea:af:65:f8:db:99:86:bf:52:98: 66:dd:d8:9a:d7:26:9a:fa:e3:5c:2e:53:51:11:c2: 92:22:0d:15:4b:fe:6f:2d:16:1e:0f:e7:45:18:ff: fd:8c:ab:99:64:b7:93:a7:5d:ac:40:bd:91:17:e6: 19:9b:da:a7:d4:6b:0d:2b:dc:23:fb:63:a9:0b:86: dd:ed:27:0f:69:56:48:1f:5c:8a:e4:05:a9:f0:e2: b0:bf:c5:32:c4:dc:f4:ff:81:25:f7:54:aa:c3:99: 94:ae:09:49:14:e3:fb:35:77:a0:75:bf:34:21:19: 3c:38:45:27:09:ed:02:f8:af:2d:df:f5:e8:60:61: b3:84:c9:29:16:ca:f9:56:de:95:32:e6:4d:6d:a6: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:01:C2:7A:DF:18:8C:4E:E7:66:3C:EA:D7:46:21:09:41:BA:AF X509v3 Authority Key Identifier: keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:77:dc:0c:4e:69:5e:5e:04:0d:30:13:e6:b2:90:ec:fb:be: 85:cd:e6:a1:b4:f1:02:22:22:7e:f1:a4:ce:84:ec:42:4a:aa: 16:f2:5b:cf:9a:a1:52:9c:8b:a5:20:83:5a:24:fd:ae:91:07: 7e:9a:32:d0:92:a7:f4:04:22:61:9c:49:d2:d8:71:da:61:ef: 90:8e:4a:e2:66:97:0d:15:08:2a:4d:f3:65:1a:9f:6c:a3:f4: b0:e7:02:22:df:e8:53:71:d5:65:36:57:9b:e0:29:0e:d3:70: f4:ec:84:a9:9d:8f:68:10:8e:71:5b:59:76:94:71:94:c6:1c: fe:1b:0d:2e:4c:21:26:f4:81:c2:a0:56:e3:61:3e:bd:43:7c: be:bb:8c:f3:38:c7:81:e4:ff:7b:f9:44:81:9e:52:a9:6f:6e: 40:c8:eb:03:2e:bd:2e:e5:17:db:be:87:a3:d0:36:ff:4a:92: 8e:be:9d:3a:e3:9b:0e:09:6d:fa:f8:17:4c:17:b8:93:d7:4d: 9e:eb:52:6e:46:b8:fc:22:ba:51:01:ff:c8:c2:d4:8d:2c:2b: 7b:59:6e:11:da:fc:83:d7:92:c7:3a:49:02:0c:ad:ec:77:8a: 01:b1:4d:1b:93:70:b2:bc:32:f7:c9:56:e5:ed:d1:c2:b4:ba: 9b:0a:15:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1IgJe1y1wrR+VzeSpGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz MjliMmIwHhcNMjUxMjExMjEwMDQyWhcNMjUxMjEyMjEwMDQyWjAzMTEwLwYDVQQD EyhhNTQ0MDFjMjdhZGYxODhjNGVlNzY2M2NlYWQ3NDYyMTA5NDFiYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ICxhTSWgZdfNjDq1mMFid9tkIAG OI2LWh5hUIwZ8BpnhWxtcFa/KBnwt0Lkz2fmSPMLim3sQE3X7SMq9NSMDSxk5uFW vUTS4iE6UTJzIGjzS5dm8VpfRZ/Fz84qsUjfYDEQjHfKrBxrJWuzr+qvZfjbmYa/ Uphm3dia1yaa+uNcLlNREcKSIg0VS/5vLRYeD+dFGP/9jKuZZLeTp12sQL2RF+YZ m9qn1GsNK9wj+2OpC4bd7ScPaVZIH1yK5AWp8OKwv8UyxNz0/4El91Sqw5mUrglJ FOP7NXegdb80IRk8OEUnCe0C+K8t3/XoYGGzhMkpFsr5Vt6VMuZNbaY5iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVEAcJ63xiMTudmPOrXRiEJQbqvMB8GA1UdIwQY MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3 LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHfcDE5p Xl4EDTAT5rKQ7Pu+hc3mobTxAiIifvGkzoTsQkqqFvJbz5qhUpyLpSCDWiT9rpEH fpoy0JKn9AQiYZxJ0thx2mHvkI5K4maXDRUIKk3zZRqfbKP0sOcCIt/oU3HVZTZX m+ApDtNw9OyEqZ2PaBCOcVtZdpRxlMYc/hsNLkwhJvSBwqBW42E+vUN8vruM8zjH geT/e/lEgZ5SqW9uQMjrAy69LuUX276Ho9A2/0qSjr6dOuObDglt+vgXTBe4k9dN nutSbka4/CK6UQH/yMLUjSwre1luEdr8g9eSxzpJAgyt7HeKAbFNG5Nwsrwy98lW 5e3RwrS6mwoV3w== -----END CERTIFICATE-----Generated at Fri Dec 12 02:29:11 2025 by rpki-client