This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json) Hash identifier: t3s+sjI9zUZdtcN8d1tXadYj88vPWUc1DOriyeSlL2E= Subject key identifier: B9:AB:98:F0:E4:16:E5:73:08:14:A1:15:FE:E8:F6:23:97:65:21:E0 Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B6D3384EFF1E0BB5A5D3D6701DFA62F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft Manifest number: 0D80 Signing time: Tue 30 Dec 2025 03:00:51 +0000 Manifest this update: Tue 30 Dec 2025 03:00:51 +0000 Manifest next update: Wed 31 Dec 2025 03:00:51 +0000 Files and hashes: 1: 2uBWQEQ5bCZzxWiTRxSToVgE9dQ.roa (hash: MsldwzQz27lchmlMAHvSH+WOXjpCThCf8Kkip/88G38=) 2: 5yKICj_2gDXyLaLptV_QQPobwBA.roa (hash: ymCwe5qZ4XyCaC4waTVSNvK53llzEbvyfIqHPUqq7zU=) 3: JgoOvXvrswEOgbBkM7mOX2KwPkM.roa (hash: 0lHrFGf5p+iWNP5B3Ka8kAz0C85fbyYK54kTcYnj/rA=) 4: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: uZYZy+lzIQ3ZdhuERBKKIQlOiE1+xRzBzq01cO+VqkU=) 5: bgMiLEeTNbzwpc1k6dzLrZiynds.roa (hash: X43AawoIAAS3lhLbwAcgQ0icROu3r9TC3+rpI3/4Bxs=) 6: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=) 7: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=) 8: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:84:ef:f1:e0:bb:5a:5d:3d:67:01:df:a6:2f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Dec 30 03:00:51 2025 GMT Not After : Dec 31 03:00:51 2025 GMT Subject: CN=b9ab98f0e416e5730814a115fee8f623976521e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:33:c6:55:67:53:34:a3:b8:4c:de:d3:68: 3d:7c:08:0d:2d:4e:2b:df:05:1b:52:55:cd:4f:b4: 7b:20:63:0c:15:97:9d:3c:d6:e5:65:ed:e0:c8:e2: 4d:7e:f8:56:1a:d8:91:78:81:aa:dd:c3:f5:f3:e5: fa:fb:6a:bd:72:dd:51:5d:4d:f9:5b:5a:02:c0:8b: b0:44:68:a6:11:48:ea:7b:7c:7a:d0:d7:ba:3a:92: 78:2c:c7:49:a9:11:86:35:7c:28:fd:b6:d7:ed:af: 5b:76:f4:5a:18:ac:0d:51:96:98:94:a1:a7:99:c8: 94:2a:bd:c7:a4:f5:91:e5:23:ab:11:e6:4d:cc:4e: be:9a:d4:d6:47:49:1a:fd:4f:f9:6a:90:c5:50:37: ff:7e:61:ed:0e:bc:7b:2d:3d:e2:aa:1b:a8:9f:29: 99:d6:fb:a4:5a:75:ee:9d:7a:81:dd:75:b4:5b:c1: 10:ec:cf:47:0d:bc:52:23:5a:92:97:fc:69:40:33: 3d:65:d9:00:90:6a:27:9c:6c:99:57:bf:ec:86:c5: f6:8d:0c:93:c4:56:82:8d:c5:19:2e:b6:61:93:dc: 0a:e8:03:52:9a:53:47:5e:82:f5:e4:d6:e7:7d:7e: f7:f8:6f:db:30:18:9c:fd:07:4b:5a:85:22:47:dd: 41:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AB:98:F0:E4:16:E5:73:08:14:A1:15:FE:E8:F6:23:97:65:21:E0 X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:03:8f:3f:94:ff:07:05:7f:93:27:06:68:56:f5:75:e3:c2: 21:bc:cd:f9:9f:49:1d:94:f9:f9:5a:bb:d2:0f:34:35:65:39: 5f:9c:01:dc:1b:54:42:c3:54:d8:ba:d8:04:ba:25:6f:e9:36: d6:fc:40:07:04:fe:d1:d0:a6:bd:8d:60:d0:6c:28:1b:a7:6b: 58:61:af:7c:53:a6:c7:57:18:59:68:61:3c:4c:82:a8:bc:0e: 31:66:8f:03:f1:b4:4a:eb:cd:ba:e9:31:c7:4a:a0:54:a6:2e: a5:53:7a:f9:a7:51:9d:de:6a:94:91:38:d1:b0:9d:66:61:44: 28:82:4b:23:59:2e:5e:6d:da:3f:da:61:0d:17:7b:5d:84:54: 57:0c:80:a8:eb:6c:b6:2e:96:b3:e2:67:d2:99:a9:39:f0:70: fe:69:86:d2:32:98:64:99:ab:2b:a8:62:fb:63:d4:d8:cb:12: ed:bf:8a:7b:6b:74:7d:9c:d6:dd:cb:31:a8:f2:31:b6:d0:97: 20:24:56:5c:07:4b:cc:9d:c4:5e:1c:17:93:5f:3e:86:aa:0a: e1:23:d5:38:f9:e6:ab:8e:62:f2:69:85:ec:1d:a2:3e:97:f7: 2b:92:ab:9d:c0:f4:0b:e4:49:8f:58:33:e8:76:b7:92:de:15: f6:54:3b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM4Tv8eC7Wl09ZwHfpi9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjUxMjMwMDMwMDUxWhcNMjUxMjMxMDMwMDUxWjAzMTEwLwYDVQQD EyhiOWFiOThmMGU0MTZlNTczMDgxNGExMTVmZWU4ZjYyMzk3NjUyMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1UzxlVnUzSjuEze02g9fAgNLU4r 3wUbUlXNT7R7IGMMFZedPNblZe3gyOJNfvhWGtiReIGq3cP18+X6+2q9ct1RXU35 W1oCwIuwRGimEUjqe3x60Ne6OpJ4LMdJqRGGNXwo/bbX7a9bdvRaGKwNUZaYlKGn mciUKr3HpPWR5SOrEeZNzE6+mtTWR0ka/U/5apDFUDf/fmHtDrx7LT3iqhuonymZ 1vukWnXunXqB3XW0W8EQ7M9HDbxSI1qSl/xpQDM9ZdkAkGonnGyZV7/shsX2jQyT xFaCjcUZLrZhk9wK6ANSmlNHXoL15NbnfX73+G/bMBic/QdLWoUiR91BVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmrmPDkFuVzCBShFf7o9iOXZSHgMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwOPP5T/ BwV/kycGaFb1dePCIbzN+Z9JHZT5+Vq70g80NWU5X5wB3BtUQsNU2LrYBLolb+k2 1vxABwT+0dCmvY1g0GwoG6drWGGvfFOmx1cYWWhhPEyCqLwOMWaPA/G0SuvNuukx x0qgVKYupVN6+adRnd5qlJE40bCdZmFEKIJLI1kuXm3aP9phDRd7XYRUVwyAqOts ti6Ws+Jn0pmpOfBw/mmG0jKYZJmrK6hi+2PU2MsS7b+Ke2t0fZzW3csxqPIxttCX ICRWXAdLzJ3EXhwXk18+hqoK4SPVOPnmq45i8mmF7B2iPpf3K5KrncD0C+RJj1gz 6Ha3kt4V9lQ79Q== -----END CERTIFICATE-----Generated at Tue Dec 30 05:40:43 2025 by rpki-client