This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json) Hash identifier: sn1TwrB8krvZgBvhIO5iXWV525r4iFgLljj6euG53cY= Subject key identifier: AA:97:A1:4F:2F:89:8C:87:4F:53:08:98:6E:40:A7:08:59:D9:E5:6D Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Certificate serial: 019AF2096CC1764004636A6B1E2D3A3124EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft Manifest number: 1433 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: VTzQEre1LOW5un0PlYn-CvmDAKI.roa (hash: fUzpWZIo72ujZLDiYOULGotM+6e+u6e7TR9QhDLmQyE=) 2: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (hash: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=) 3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: YgQAq1RQaXewPH7dbMZzH0EdTp5ERDaRAqGa3JW4Q74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6c:c1:76:40:04:63:6a:6b:1e:2d:3a:31:24:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=aa97a14f2f898c874f5308986e40a70859d9e56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b9:45:25:a4:40:7f:44:f8:d9:47:df:7c:39: 00:4e:02:6c:23:ca:3c:3f:f6:bb:0f:fd:18:38:a6: d7:ea:f4:bd:df:0f:db:ab:a9:99:37:5d:49:c0:d5: fb:c6:4b:cc:0e:58:be:b7:21:dc:c0:7c:77:9c:68: ef:c5:72:92:bf:b9:80:4b:b3:2d:48:b2:94:da:cb: f3:50:dc:3e:b5:d5:16:6d:d0:9a:0a:1c:5d:26:4f: 4a:48:b2:01:bf:49:11:61:b1:ab:f9:bc:09:b4:4b: b0:d5:b0:da:1c:7c:2d:4a:84:6c:80:d6:ad:81:12: 24:00:fa:f2:ff:15:4c:13:4e:5c:d1:df:70:35:8e: 76:37:f1:3d:94:8b:6d:d4:a1:bd:e4:db:e3:79:5c: 93:0a:fe:83:83:b5:db:b1:87:02:a9:e4:c8:78:ff: fc:f2:12:5e:dc:93:39:20:b5:ca:ac:2c:58:45:a5: b6:63:9c:36:fe:e9:b7:66:a0:16:41:c3:69:34:ab: 83:71:1e:c3:ae:34:1f:6a:c8:4d:9f:0b:93:18:3e: 2d:d3:e2:56:e7:d0:36:74:df:5a:4f:1a:77:6b:6c: 76:db:bb:22:df:66:65:c9:b3:5f:78:9b:9c:de:b5: ac:dd:14:c4:fe:57:0f:0a:b4:e4:cb:e1:d9:95:51: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:97:A1:4F:2F:89:8C:87:4F:53:08:98:6E:40:A7:08:59:D9:E5:6D X509v3 Authority Key Identifier: keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:38:79:94:8e:c1:fb:dc:71:0e:1b:02:86:c3:94:99:a0:c3: 17:49:db:67:6b:50:7b:cc:0b:51:48:d0:a7:f3:25:12:df:33: d1:42:46:ee:ab:da:97:2a:91:62:48:3a:9b:2b:03:38:9c:ab: 2f:90:88:60:29:fa:ba:bc:28:79:f1:50:61:c4:c5:2d:f2:d2: 6e:e9:0a:57:71:b2:e7:06:2b:ba:cb:bb:3f:45:74:8a:db:ce: 14:9e:3f:cb:54:89:34:04:58:65:ae:21:30:2c:f7:00:c4:51: ed:ef:21:8c:54:c3:6b:17:06:21:b6:7f:e9:c6:10:95:c3:cc: 24:17:26:ab:32:15:94:b9:1f:ca:ae:dc:e4:53:4f:63:d1:d8: 2a:ae:d4:2b:64:53:98:0c:b4:eb:4e:f1:85:15:ef:45:d4:8e: 5c:1a:1b:f8:a1:f3:ce:6c:9c:6c:be:a7:0a:f1:8f:a9:19:eb: 5c:bc:2f:25:0d:24:2a:2f:b6:fd:4a:98:12:ff:77:1c:e0:af: ac:c7:8b:cf:3b:19:f8:b7:04:67:ab:56:48:97:a1:09:ae:7a: 7b:94:63:5f:3f:79:16:39:a8:6f:46:a7:73:02:69:5a:7b:c7: 16:ff:dd:eb:a6:79:3f:70:47:ad:42:74:aa:92:d6:78:0a:af: ae:d1:7f:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWzBdkAEY2prHi06MSTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk NDRlN2IwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhhYTk3YTE0ZjJmODk4Yzg3NGY1MzA4OTg2ZTQwYTcwODU5ZDllNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7lFJaRAf0T42UfffDkATgJsI8o8 P/a7D/0YOKbX6vS93w/bq6mZN11JwNX7xkvMDli+tyHcwHx3nGjvxXKSv7mAS7Mt SLKU2svzUNw+tdUWbdCaChxdJk9KSLIBv0kRYbGr+bwJtEuw1bDaHHwtSoRsgNat gRIkAPry/xVME05c0d9wNY52N/E9lItt1KG95NvjeVyTCv6Dg7XbsYcCqeTIeP/8 8hJe3JM5ILXKrCxYRaW2Y5w2/um3ZqAWQcNpNKuDcR7DrjQfashNnwuTGD4t0+JW 59A2dN9aTxp3a2x227si32ZlybNfeJuc3rWs3RTE/lcPCrTky+HZlVGISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqXoU8viYyHT1MImG5ApwhZ2eVtMB8GA1UdIwQY MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt YjVlMGU0YzMzMTVjLzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTh5lI7B +9xxDhsChsOUmaDDF0nbZ2tQe8wLUUjQp/MlEt8z0UJG7qvalyqRYkg6mysDOJyr L5CIYCn6urwoefFQYcTFLfLSbukKV3Gy5wYrusu7P0V0itvOFJ4/y1SJNARYZa4h MCz3AMRR7e8hjFTDaxcGIbZ/6cYQlcPMJBcmqzIVlLkfyq7c5FNPY9HYKq7UK2RT mAy0607xhRXvRdSOXBob+KHzzmycbL6nCvGPqRnrXLwvJQ0kKi+2/UqYEv93HOCv rMeLzzsZ+LcEZ6tWSJehCa56e5RjXz95Fjmob0ancwJpWnvHFv/d66Z5P3BHrUJ0 qpLWeAqvrtF/Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:48 2025 by rpki-client