This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json) Hash identifier: IqqFDVyxgUjr7M1NfppQocgENfBKtwRnaRG/kKkIYP4= Subject key identifier: 91:9D:13:BB:92:E1:32:BE:9A:58:21:CC:67:02:8B:C4:C7:CB:93:9F Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45 Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945 Certificate serial: 019B59E38EB6FDB74E9B26CA67746ABDC1BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft Manifest number: 09C0 Signing time: Fri 26 Dec 2025 09:00:43 +0000 Manifest this update: Fri 26 Dec 2025 09:00:43 +0000 Manifest next update: Sat 27 Dec 2025 09:00:43 +0000 Files and hashes: 1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=) 2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: R0JSzqmZpI5gNeLmD2b44xZPQ/Il+tUhuVXOdiLSH74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:8e:b6:fd:b7:4e:9b:26:ca:67:74:6a:bd:c1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945 Validity Not Before: Dec 26 09:00:43 2025 GMT Not After : Dec 27 09:00:43 2025 GMT Subject: CN=919d13bb92e132be9a5821cc67028bc4c7cb939f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:f9:a7:db:ae:8b:39:63:e7:ce:8c:68:b1: 4a:f1:05:6e:dc:36:14:66:ac:59:74:90:f2:8c:23: 6e:58:b0:b9:80:c9:8b:5f:b7:c2:fb:80:e8:b7:9f: 82:51:0e:73:35:d5:ff:27:56:45:3b:b4:00:db:6d: 7a:09:f3:13:78:90:45:29:5a:46:43:f7:ad:d8:43: ec:4f:dc:90:7a:99:ec:83:df:9b:f7:3a:93:22:b5: 5f:f6:7c:4c:e0:86:99:bc:3d:79:91:03:2b:85:5b: ce:91:01:03:cc:7d:4f:64:ed:dc:fa:33:c6:d7:a2: b4:60:76:6c:56:df:30:b6:5f:88:41:0a:fb:8b:9d: 45:94:6d:c2:b9:a7:3d:84:5d:5e:81:69:55:ff:ec: fd:78:f6:ce:bb:c0:cd:39:5f:cf:d3:7b:de:94:03: bc:e7:47:00:e9:70:81:01:91:07:b7:3d:55:98:de: 62:62:8a:0c:d4:9d:41:21:3e:d8:7b:81:40:27:da: 20:51:e2:1f:b0:3e:39:3f:fe:c9:b2:22:2e:15:cc: a4:6f:da:1a:7f:32:09:9e:77:c8:33:f8:e1:ab:b2: 62:37:f6:cf:a1:a9:13:bd:c0:96:22:06:f3:af:a3: 35:a9:34:48:ff:bd:bd:37:ba:f6:ea:66:a7:f7:41: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:13:BB:92:E1:32:BE:9A:58:21:CC:67:02:8B:C4:C7:CB:93:9F X509v3 Authority Key Identifier: keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:79:38:dc:db:bd:79:e2:f4:86:e6:7c:b6:5a:55:2c:3f:2d: 1b:54:33:66:be:bc:49:8d:26:a6:d7:4b:45:10:cc:62:08:4b: 38:97:67:aa:22:4c:d8:b3:7f:f7:c6:8c:65:53:de:bb:82:2c: af:c0:85:64:f2:ed:94:40:b4:bb:c0:d6:ab:d5:61:25:1a:1f: fa:f8:f4:f7:33:ae:65:cb:4f:22:b6:8b:8e:d4:f2:2a:5f:3f: 0c:21:f5:b9:d4:30:92:44:c9:4f:07:f3:76:d0:2f:e3:24:bd: 2e:22:d3:2a:51:9f:c3:17:d4:9d:37:16:02:09:13:c3:63:50: f7:ae:62:3b:55:86:e3:f3:4d:d4:79:92:bf:ba:a1:5f:3d:1c: 3e:73:3e:18:08:ae:7d:91:dd:50:49:86:bf:8f:08:c0:07:5b: fb:f8:7c:d5:91:9c:70:bb:d7:1d:6e:30:e3:c9:7b:57:34:3c: 03:76:36:ef:7f:1f:20:26:7d:4e:8a:94:e7:4d:b6:af:4f:3f: fe:68:74:9a:19:e1:d1:09:70:52:47:28:1d:3f:42:c5:df:bf: 86:9a:e8:7e:50:e2:d4:ea:21:ed:e1:5f:04:fe:c7:84:a5:37: 14:ff:46:df:56:ac:f1:cd:44:96:e2:07:cb:44:b0:cd:5a:09: 9c:a5:fc:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4462/bdOmybKZ3RqvcG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWVlNGE4MWZmMzYwZmUwMGMzYTFmMGRhZTMwZTI2ZTEy ODA5NDUwHhcNMjUxMjI2MDkwMDQzWhcNMjUxMjI3MDkwMDQzWjAzMTEwLwYDVQQD Eyg5MTlkMTNiYjkyZTEzMmJlOWE1ODIxY2M2NzAyOGJjNGM3Y2I5MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3/5p9uuizlj586MaLFK8QVu3DYU ZqxZdJDyjCNuWLC5gMmLX7fC+4Dot5+CUQ5zNdX/J1ZFO7QA2216CfMTeJBFKVpG Q/et2EPsT9yQepnsg9+b9zqTIrVf9nxM4IaZvD15kQMrhVvOkQEDzH1PZO3c+jPG 16K0YHZsVt8wtl+IQQr7i51FlG3Cuac9hF1egWlV/+z9ePbOu8DNOV/P03velAO8 50cA6XCBAZEHtz1VmN5iYooM1J1BIT7Ye4FAJ9ogUeIfsD45P/7JsiIuFcykb9oa fzIJnnfIM/jhq7JiN/bPoakTvcCWIgbzr6M1qTRI/729N7r26man90GhUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGdE7uS4TK+mlghzGcCi8THy5OfMB8GA1UdIwQY MBaAFL2u5Kgf82D+AMOh8NrjDibhKAlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMt MjcwYzhiNWEwOTIzLzEvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMtMjcwYzhiNWEwOTIz LzEvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHk43Nu9 eeL0huZ8tlpVLD8tG1QzZr68SY0mptdLRRDMYghLOJdnqiJM2LN/98aMZVPeu4Is r8CFZPLtlEC0u8DWq9VhJRof+vj09zOuZctPIraLjtTyKl8/DCH1udQwkkTJTwfz dtAv4yS9LiLTKlGfwxfUnTcWAgkTw2NQ965iO1WG4/NN1HmSv7qhXz0cPnM+GAiu fZHdUEmGv48IwAdb+/h81ZGccLvXHW4w48l7VzQ8A3Y2738fICZ9ToqU5022r08/ /mh0mhnh0QlwUkcoHT9Cxd+/hproflDi1Ooh7eFfBP7HhKU3FP9G31as8c1EluIH y0SwzVoJnKX8AA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:11 2025 by rpki-client