This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json) Hash identifier: 3aqv7pb/ZKSad8qk6piCPUxTuhMwXRlkP0m0b5wYLIg= Subject key identifier: 70:C0:47:4A:C3:BE:3E:E8:92:30:25:7A:30:B0:A9:0C:69:86:2F:79 Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Certificate serial: 019B5A8844BCD14F43AFE3A4C0AD3794D591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 12:00:38 +0000 Manifest this update: Fri 26 Dec 2025 12:00:38 +0000 Manifest next update: Sat 27 Dec 2025 12:00:38 +0000 Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=) 2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: MHTCp7bmnGwRNUzhFsvEJUInU0KMQ3cGytko2gXv8oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:44:bc:d1:4f:43:af:e3:a4:c0:ad:37:94:d5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Validity Not Before: Dec 26 12:00:38 2025 GMT Not After : Dec 27 12:00:38 2025 GMT Subject: CN=70c0474ac3be3ee89230257a30b0a90c69862f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:8a:ab:98:e5:09:1d:8f:4c:07:39:3b:fb: fd:fa:9d:6f:48:71:14:4e:b8:a7:9c:55:d6:e7:d4: f9:71:37:eb:97:6a:c5:08:17:62:94:0e:82:49:16: db:02:59:c9:4f:8f:59:e5:79:e8:6c:3b:01:ae:d5: cc:9e:a3:08:ed:27:26:b3:73:6f:83:a0:b0:3e:44: af:4e:5a:bd:2e:81:63:17:71:34:23:2b:5d:04:20: 6b:83:69:69:59:b2:4f:01:75:46:55:3a:69:24:3d: 1e:a4:a0:c9:cf:39:15:52:f4:3a:5a:fa:56:91:75: da:71:2b:cd:2e:c7:0d:c0:9f:ca:70:35:66:57:fe: 01:89:b6:8a:47:e6:06:23:09:33:e7:88:e6:7b:60: fc:06:2a:8e:30:bc:ce:1e:2c:4d:62:b5:c7:62:d4: 38:73:b0:17:56:35:cf:a3:89:16:fe:09:8f:09:0d: 03:b4:fc:17:d0:48:b3:ba:eb:b6:c9:92:4c:38:1d: 1a:f3:b2:f1:c1:16:a1:34:6e:64:f4:79:c9:a9:9a: 45:e8:5f:f5:f9:bf:20:6a:1c:f4:6e:91:a7:0f:c0: 3b:64:b6:92:80:54:de:e2:8c:65:14:99:66:82:4d: f9:bc:b8:b8:10:81:8a:e3:7a:ee:fe:3b:05:19:38: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C0:47:4A:C3:BE:3E:E8:92:30:25:7A:30:B0:A9:0C:69:86:2F:79 X509v3 Authority Key Identifier: keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:a5:f6:f4:26:c6:27:ee:95:85:f2:92:61:d2:71:3d:fb: 08:91:15:ce:d1:2e:18:43:e5:29:44:96:16:4a:3d:18:c3:e9: 59:84:50:3f:da:33:7a:ab:88:51:ba:e9:fd:58:0a:e2:c1:57: 30:1c:47:9a:70:dc:22:3c:f2:3e:e1:0b:bf:15:31:c5:44:f6: e9:e7:a1:53:1d:10:4a:fc:3d:fb:b2:26:b8:8b:32:89:4d:b3: 58:56:37:6b:a1:f3:41:6e:e3:52:9d:ba:b7:f9:b4:c8:c0:db: c6:c2:62:41:d8:02:41:b5:7a:e2:2a:4f:17:5a:3d:ec:a8:40: 22:4e:f3:65:5a:96:d4:a9:f5:4f:ee:3c:31:0c:22:9e:ab:b2: 30:84:f0:b9:85:80:17:08:0a:f2:af:91:8a:2d:d8:57:50:29: 07:e5:84:0d:0b:8c:6f:6b:eb:71:e2:65:d6:a0:bb:d0:55:e6: 98:1d:6f:a4:9f:92:73:36:5e:41:48:3b:8e:2c:ce:fa:61:8f: 5a:fb:0b:9f:47:39:fc:84:cf:2a:8e:e9:d9:7f:03:f0:53:83: 6a:c5:9b:0b:a1:4f:14:b7:a3:8f:9e:78:c3:6b:41:8f:1b:53: 0a:1f:02:78:ea:a3:af:6d:03:a2:f3:f9:7d:ee:31:31:b1:9e: 15:59:d0:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiES80U9Dr+OkwK03lNWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMTI1Y2FkN2RkNGM1ZjAyMDFlZTJhMjFkZWFjMzg3MzY2 OTgxYzQwHhcNMjUxMjI2MTIwMDM4WhcNMjUxMjI3MTIwMDM4WjAzMTEwLwYDVQQD Eyg3MGMwNDc0YWMzYmUzZWU4OTIzMDI1N2EzMGIwYTkwYzY5ODYyZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc2Kq5jlCR2PTAc5O/v9+p1vSHEU TrinnFXW59T5cTfrl2rFCBdilA6CSRbbAlnJT49Z5XnobDsBrtXMnqMI7Scms3Nv g6CwPkSvTlq9LoFjF3E0IytdBCBrg2lpWbJPAXVGVTppJD0epKDJzzkVUvQ6WvpW kXXacSvNLscNwJ/KcDVmV/4BibaKR+YGIwkz54jme2D8BiqOMLzOHixNYrXHYtQ4 c7AXVjXPo4kW/gmPCQ0DtPwX0Eizuuu2yZJMOB0a87LxwRahNG5k9HnJqZpF6F/1 +b8gahz0bpGnD8A7ZLaSgFTe4oxlFJlmgk35vLi4EIGK43ru/jsFGTiORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDAR0rDvj7okjAlejCwqQxphi95MB8GA1UdIwQY MBaAFL4SXK191MXwIB7ioh3qw4c2aYHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEt NTE3ZWZmOTA4OTc1LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEtNTE3ZWZmOTA4OTc1 LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInul9vQm xifulYXykmHScT37CJEVztEuGEPlKUSWFko9GMPpWYRQP9ozequIUbrp/VgK4sFX MBxHmnDcIjzyPuELvxUxxUT26eehUx0QSvw9+7ImuIsyiU2zWFY3a6HzQW7jUp26 t/m0yMDbxsJiQdgCQbV64ipPF1o97KhAIk7zZVqW1Kn1T+48MQwinquyMITwuYWA FwgK8q+Rii3YV1ApB+WEDQuMb2vrceJl1qC70FXmmB1vpJ+SczZeQUg7jizO+mGP WvsLn0c5/ITPKo7p2X8D8FODasWbC6FPFLejj554w2tBjxtTCh8CeOqjr20DovP5 fe4xMbGeFVnQOA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:02 2025 by rpki-client