This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json) Hash identifier: rTBoVSIkGOzEu9BmZ8CON6r5cjr7qllBl61/tYDkc9s= Subject key identifier: B2:2A:0B:A6:F4:72:62:38:16:DE:DE:08:FD:43:1E:C1:C4:B4:86:2A Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Certificate serial: 019B44A5F5959535889779984C320D2753E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft Manifest number: 121F Signing time: Mon 22 Dec 2025 06:01:25 +0000 Manifest this update: Mon 22 Dec 2025 06:01:25 +0000 Manifest next update: Tue 23 Dec 2025 06:01:25 +0000 Files and hashes: 1: 6QMQKtWwcd7qtN8rUJfjAA80stY.roa (hash: vi5fCYqnGO7QvwAUOW0ptahNy5X2IqMPhfiW65Kpt+E=) 2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: st6niW0y78B6NSPa8BbqfUKF81XdeX8bOf8i9Av0cv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:f5:95:95:35:88:97:79:98:4c:32:0d:27:53:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Validity Not Before: Dec 22 06:01:25 2025 GMT Not After : Dec 23 06:01:25 2025 GMT Subject: CN=b22a0ba6f472623816dede08fd431ec1c4b4862a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:81:c5:09:06:6d:53:5e:d3:da:df:6f:f8: 4f:e5:9f:dc:e4:3f:9d:a3:2c:a9:b2:3f:3b:27:f1: 79:04:f0:0d:29:c4:73:ae:76:0c:38:0c:05:1e:8f: 00:b1:90:52:04:56:34:91:b4:fb:6b:73:f6:9f:8f: 6e:c3:17:37:1f:4a:43:40:27:f5:2c:a6:a0:ca:99: 30:07:37:e4:7e:45:45:92:ed:bd:99:1a:f3:e0:dd: 9d:15:28:34:4f:1f:e2:19:2e:be:27:4b:74:4b:94: 2d:0e:99:e1:b1:f0:13:4c:60:0c:94:10:5f:e2:e3: ff:1a:da:5a:93:04:ce:8d:ac:ae:69:5c:e0:0e:4c: 56:55:43:e1:c1:d3:58:9c:07:dd:4e:a3:f0:7f:3b: 7d:bb:93:a6:0a:91:2f:12:a1:9a:48:e4:4c:55:79: 49:c1:a6:1f:45:0b:38:2a:20:b7:a4:41:8f:d2:7b: d1:60:b7:e9:36:b3:b8:df:a7:1f:b6:6a:28:af:dc: ed:10:c2:03:9a:04:46:ee:db:b1:4a:b2:0d:81:b6: 89:74:55:ff:85:aa:92:30:8c:85:55:1e:d2:55:30: 05:c3:50:59:c9:0f:61:12:39:f3:f5:a1:b9:05:89: a9:37:70:30:36:c3:f0:28:38:a7:51:fd:09:80:98: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2A:0B:A6:F4:72:62:38:16:DE:DE:08:FD:43:1E:C1:C4:B4:86:2A X509v3 Authority Key Identifier: keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e3:93:ac:0e:4e:15:ae:ce:b7:a7:f2:4e:ab:26:35:4f:13: 7e:ab:e4:ed:5d:89:d9:b9:94:b4:2a:09:56:b3:ff:41:fb:c1: 6b:a4:f9:2d:af:33:6a:e2:39:1a:73:f6:6e:44:5c:dc:7e:f5: 03:f7:41:28:9b:ed:dd:3d:09:69:15:08:d3:a5:85:10:73:0d: d6:ee:ef:5c:62:8e:e4:85:1c:3e:92:fe:df:2e:cd:8b:14:40: 2f:f5:48:37:d6:76:1d:7a:e8:02:fa:24:6b:73:2a:f4:79:96: 3e:e7:e5:f0:71:54:7f:4a:cd:8d:48:08:22:c2:3c:c7:5b:b3: 3f:20:50:25:4d:d3:42:2e:fb:fe:2e:fb:43:48:3d:99:f4:09: 7f:12:de:95:e2:63:df:0d:f2:a1:88:5a:3c:03:69:86:81:09: 9f:d6:0e:21:87:37:55:cb:0e:05:da:15:d0:db:46:4d:67:e3: ab:49:0e:c9:8b:b4:dd:b1:08:96:dd:42:83:d2:40:5d:3f:8f: 61:bc:53:e0:19:f2:aa:75:4f:31:7a:33:40:e2:13:de:80:7f: 70:65:c6:11:6a:a9:11:5b:26:06:19:15:a0:2a:b4:06:6a:df: b2:e5:72:9a:0d:c9:e2:6a:09:68:74:3e:f4:6d:e9:2a:1d:46: 45:cd:9a:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpfWVlTWIl3mYTDINJ1PpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0 ZmMzZmEwHhcNMjUxMjIyMDYwMTI1WhcNMjUxMjIzMDYwMTI1WjAzMTEwLwYDVQQD EyhiMjJhMGJhNmY0NzI2MjM4MTZkZWRlMDhmZDQzMWVjMWM0YjQ4NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SiBxQkGbVNe09rfb/hP5Z/c5D+d oyypsj87J/F5BPANKcRzrnYMOAwFHo8AsZBSBFY0kbT7a3P2n49uwxc3H0pDQCf1 LKagypkwBzfkfkVFku29mRrz4N2dFSg0Tx/iGS6+J0t0S5QtDpnhsfATTGAMlBBf 4uP/GtpakwTOjayuaVzgDkxWVUPhwdNYnAfdTqPwfzt9u5OmCpEvEqGaSORMVXlJ waYfRQs4KiC3pEGP0nvRYLfpNrO436cftmoor9ztEMIDmgRG7tuxSrINgbaJdFX/ haqSMIyFVR7SVTAFw1BZyQ9hEjnz9aG5BYmpN3AwNsPwKDinUf0JgJg0NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIqC6b0cmI4Ft7eCP1DHsHEtIYqMB8GA1UdIwQY MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt ZTgwOTJkZDY1YzdmLzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+OTrA5O Fa7Ot6fyTqsmNU8Tfqvk7V2J2bmUtCoJVrP/QfvBa6T5La8zauI5GnP2bkRc3H71 A/dBKJvt3T0JaRUI06WFEHMN1u7vXGKO5IUcPpL+3y7NixRAL/VIN9Z2HXroAvok a3Mq9HmWPufl8HFUf0rNjUgIIsI8x1uzPyBQJU3TQi77/i77Q0g9mfQJfxLeleJj 3w3yoYhaPANphoEJn9YOIYc3VcsOBdoV0NtGTWfjq0kOyYu03bEIlt1Cg9JAXT+P YbxT4BnyqnVPMXozQOIT3oB/cGXGEWqpEVsmBhkVoCq0BmrfsuVymg3J4moJaHQ+ 9G3pKh1GRc2aDw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:35:12 2025 by rpki-client