This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json) Hash identifier: ulkYAOE6MMNw5meSPoRnxLMJgC4NHn8gVLQRJPYSpFA= Subject key identifier: 1A:E4:05:8A:F7:44:CF:19:D7:7D:3B:C6:BD:D2:F6:B6:F5:CB:73:EA Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67 Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567 Certificate serial: 019B1A5FB05F7EB90E23011116B30A8BD225 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft Manifest number: 16F6 Signing time: Sun 14 Dec 2025 01:00:37 +0000 Manifest this update: Sun 14 Dec 2025 01:00:37 +0000 Manifest next update: Mon 15 Dec 2025 01:00:37 +0000 Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=) 2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: I8nFY/qJaHpmaNC4iTvkcDUFPcLw83uIqaNxCvRYGzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:b0:5f:7e:b9:0e:23:01:11:16:b3:0a:8b:d2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567 Validity Not Before: Dec 14 01:00:37 2025 GMT Not After : Dec 15 01:00:37 2025 GMT Subject: CN=1ae4058af744cf19d77d3bc6bdd2f6b6f5cb73ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:54:1c:b1:ad:60:d7:71:01:93:09:70:98: 87:77:cb:26:02:d5:92:4c:28:20:59:9f:77:79:72: 57:22:ca:72:7d:8a:5c:bc:75:23:fb:98:c7:77:36: 8a:f1:44:3b:00:ac:e0:68:f0:fb:1a:f2:06:29:e3: 5b:a8:43:b2:d7:b5:37:38:2f:e0:b6:c9:3c:b2:a0: ed:fc:8d:55:67:6b:2a:a3:f1:b5:55:0a:c0:f4:13: 38:55:c9:fc:2d:f5:4e:f9:6e:a0:32:e6:de:bb:75: a3:8c:63:cf:6a:94:d7:ca:37:e7:df:8d:52:3f:45: bd:26:8e:92:1d:e4:69:ea:11:44:90:85:97:97:e5: 37:95:28:72:93:0c:a2:14:c9:f2:65:99:51:09:44: ff:0f:8a:1a:e3:81:c1:36:9d:01:46:d1:24:c5:0b: b2:89:88:e2:65:b9:5e:44:0a:6e:7a:22:8e:e9:b6: 3b:f6:78:f5:41:1b:82:7c:9c:27:a6:a9:b2:37:6b: d3:c1:19:08:cd:c1:97:0d:1c:0e:f3:38:a8:5d:21: 23:02:1b:5c:c7:52:25:db:8a:16:0c:f6:31:9f:37: 4b:15:c2:57:3a:68:59:de:8b:de:b9:20:62:1a:2b: 00:8a:86:6b:fd:42:a8:20:8e:9e:52:5d:57:e8:c7: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:05:8A:F7:44:CF:19:D7:7D:3B:C6:BD:D2:F6:B6:F5:CB:73:EA X509v3 Authority Key Identifier: keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:05:79:dd:b2:26:05:3c:eb:9e:50:46:24:ff:0f:fd:42:17: 7a:82:2c:1a:42:bc:77:9a:69:6d:3e:26:0b:d0:ba:79:da:38: 66:ab:2c:5f:c1:f8:6c:89:18:6f:d8:b0:1d:7d:4d:f5:77:63: 67:eb:c7:4a:c5:e5:0d:f6:78:b2:b9:7d:09:cf:c8:09:b6:ef: c8:9e:e4:56:a3:13:91:44:5c:0f:8d:cf:9b:d5:cb:ae:e3:98: e6:62:f6:10:3d:66:6b:2d:6c:b0:73:a9:35:79:61:25:09:a8: 04:1a:9d:92:18:14:78:42:78:c5:e2:6f:0d:4b:99:06:40:4d: fa:64:cb:8d:5e:1f:08:b4:93:fa:18:c8:a8:9e:11:2e:4e:bd: 0a:09:85:f8:14:6d:e9:79:2f:04:36:53:ac:6c:69:12:77:aa: a3:50:f2:fa:4f:81:33:55:e9:a4:dc:4c:3d:45:8f:d3:cf:18: b6:b5:3a:61:00:ca:f8:20:38:21:6b:31:d8:da:22:3c:09:ad: 68:7b:9c:0d:00:f1:07:18:ce:3c:ec:4c:7c:0a:1f:7e:9b:ca: 6e:d1:57:6a:f9:6c:44:1c:03:4c:10:84:14:da:e6:cf:bf:ff: 7f:45:d6:b2:44:09:67:08:08:da:7b:74:51:d2:d5:bb:1e:f6: 28:97:26:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX7BffrkOIwERFrMKi9IlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTAwYmI5YWM2MDY5YzUxM2I1ODJkNjFmZDgxZWNjZDU2 MWE1NjcwHhcNMjUxMjE0MDEwMDM3WhcNMjUxMjE1MDEwMDM3WjAzMTEwLwYDVQQD EygxYWU0MDU4YWY3NDRjZjE5ZDc3ZDNiYzZiZGQyZjZiNmY1Y2I3M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwxUHLGtYNdxAZMJcJiHd8smAtWS TCggWZ93eXJXIspyfYpcvHUj+5jHdzaK8UQ7AKzgaPD7GvIGKeNbqEOy17U3OC/g tsk8sqDt/I1VZ2sqo/G1VQrA9BM4Vcn8LfVO+W6gMubeu3WjjGPPapTXyjfn341S P0W9Jo6SHeRp6hFEkIWXl+U3lShykwyiFMnyZZlRCUT/D4oa44HBNp0BRtEkxQuy iYjiZbleRApueiKO6bY79nj1QRuCfJwnpqmyN2vTwRkIzcGXDRwO8zioXSEjAhtc x1Il24oWDPYxnzdLFcJXOmhZ3oveuSBiGisAioZr/UKoII6eUl1X6McaDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrkBYr3RM8Z1307xr3S9rb1y3PqMB8GA1UdIwQY MBaAFL2QC7msYGnFE7WC1h/YHszVYaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2It ZTFiOWY2ZDM1N2MwLzEvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2ItZTFiOWY2ZDM1N2Mw LzEvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAV53bIm BTzrnlBGJP8P/UIXeoIsGkK8d5ppbT4mC9C6edo4ZqssX8H4bIkYb9iwHX1N9Xdj Z+vHSsXlDfZ4srl9Cc/ICbbvyJ7kVqMTkURcD43Pm9XLruOY5mL2ED1may1ssHOp NXlhJQmoBBqdkhgUeEJ4xeJvDUuZBkBN+mTLjV4fCLST+hjIqJ4RLk69CgmF+BRt 6XkvBDZTrGxpEneqo1Dy+k+BM1XppNxMPUWP088YtrU6YQDK+CA4IWsx2NoiPAmt aHucDQDxBxjOPOxMfAoffpvKbtFXavlsRBwDTBCEFNrmz7//f0XWskQJZwgI2nt0 UdLVux72KJcmXA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:30:17 2025 by rpki-client