This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json) Hash identifier: OHMKhhK4uepk4HYixDC2sCkOH0G4Eu8YmqzEeZFlct0= Subject key identifier: 41:60:AA:CD:43:EA:0C:63:66:A2:B3:91:A9:BF:00:E5:E2:4B:82:1E Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5 Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5 Certificate serial: 019AF1D1EB41FBD762D655CC2CDBF58E5677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft Manifest number: 146E Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: obytG4cH2mIy049MdAy6IdlrYZht2ogOs3AXJMD52FE=) 2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:eb:41:fb:d7:62:d6:55:cc:2c:db:f5:8e:56:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=4160aacd43ea0c6366a2b391a9bf00e5e24b821e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:4e:b9:70:89:0f:17:22:bb:56:25:c8:75: 1e:3e:57:b2:48:b3:72:bc:11:37:6f:90:57:2f:58: 89:63:31:7a:22:74:96:f6:e5:27:07:9f:1e:f5:f0: d2:05:52:c5:cf:24:1c:a8:ab:2a:44:20:55:09:38: 74:ee:bc:93:09:db:d1:e8:5b:ea:75:50:e6:e2:d9: 5f:3a:1f:0f:f7:dc:d8:02:70:c4:0e:0a:44:01:7d: 2d:46:54:74:d6:4c:36:da:47:d7:ec:02:f7:36:5a: 46:27:19:69:27:4d:6a:86:08:94:19:de:6a:0f:d9: d4:9d:be:d9:f3:27:5d:b8:77:7a:78:fc:71:df:1d: e6:82:f7:39:cb:a6:c3:1b:bd:b9:16:18:40:0b:bb: 74:e0:d6:ac:0b:e5:99:8a:03:11:15:9b:5c:22:7c: 3d:ff:0e:ec:6c:10:ba:69:a6:53:9f:85:6f:e5:7c: 95:0c:d3:ca:06:39:ab:db:19:76:14:d7:d4:80:a4: fc:67:71:d8:04:62:c5:2d:88:da:5b:cd:e4:6c:87: 73:5e:68:0a:62:6d:17:0e:11:03:02:3a:e3:38:c1: 06:ff:5c:fd:11:5e:26:29:36:bd:5f:ba:23:c7:47: 16:cf:1e:f7:64:61:27:d4:aa:88:1f:9f:77:bf:b6: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:AA:CD:43:EA:0C:63:66:A2:B3:91:A9:BF:00:E5:E2:4B:82:1E X509v3 Authority Key Identifier: keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1a:79:17:77:0b:a3:9b:2d:87:c2:36:69:84:1b:a3:ac:23: 94:48:59:44:36:ad:82:8e:01:de:53:ba:ec:28:7c:95:87:63: c9:49:00:b2:ae:f4:a9:de:29:4a:8d:42:6d:29:d9:60:45:b4: 2f:a1:88:58:5c:f6:04:48:fe:5c:5c:dd:d8:ae:3b:1f:c6:6b: 67:a2:6b:1c:ab:f7:7e:2a:88:cd:e8:4c:ca:ca:ef:fb:b9:b9: 9a:c1:5a:39:1c:38:5b:5f:95:d5:93:c0:3f:9e:d9:66:46:35: 70:1a:42:5b:90:25:f1:a8:27:45:79:55:35:95:df:00:3b:25: f4:2a:58:d7:8a:c5:3c:0c:bd:66:6b:55:47:e8:07:c3:74:5b: dd:65:d8:26:dc:73:90:1b:78:b7:27:d0:4f:d8:9d:d2:8c:32: cc:bf:90:76:2c:05:10:e5:d6:17:b3:49:1e:46:5f:1d:a0:55: 8f:ee:cd:25:d2:41:70:e1:9d:b7:93:d3:7a:06:ad:77:fd:da: 90:63:e0:a9:d5:6d:78:63:62:f8:30:07:81:40:d5:ab:6e:be: e5:1d:39:c3:21:dd:46:8f:d2:93:d6:33:5a:1b:38:33:b6:ab: 6d:22:7d:5f:53:b6:1a:e9:53:43:eb:9d:32:85:68:85:8c:68: 4c:35:b4:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0etB+9di1lXMLNv1jlZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODVjOGVmMDM3Y2I4OTdjOGU5NGNmNjIxYzVhMzdkNjUx YzVlYTUwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD Eyg0MTYwYWFjZDQzZWEwYzYzNjZhMmIzOTFhOWJmMDBlNWUyNGI4MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDZOuXCJDxciu1YlyHUePleySLNy vBE3b5BXL1iJYzF6InSW9uUnB58e9fDSBVLFzyQcqKsqRCBVCTh07ryTCdvR6Fvq dVDm4tlfOh8P99zYAnDEDgpEAX0tRlR01kw22kfX7AL3NlpGJxlpJ01qhgiUGd5q D9nUnb7Z8ydduHd6ePxx3x3mgvc5y6bDG725FhhAC7t04NasC+WZigMRFZtcInw9 /w7sbBC6aaZTn4Vv5XyVDNPKBjmr2xl2FNfUgKT8Z3HYBGLFLYjaW83kbIdzXmgK Ym0XDhEDAjrjOMEG/1z9EV4mKTa9X7ojx0cWzx73ZGEn1KqIH593v7ZCFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFgqs1D6gxjZqKzkam/AOXiS4IeMB8GA1UdIwQY MBaAFFSFyO8DfLiXyOlM9iHFo31lHF6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wZDY2NTUtYzBlYi00NjI2LTk2ZDUt ZTYzYzkxYWRjZTdmLzEvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wZDY2NTUtYzBlYi00NjI2LTk2ZDUtZTYzYzkxYWRjZTdm LzEvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxp5F3cL o5sth8I2aYQbo6wjlEhZRDatgo4B3lO67Ch8lYdjyUkAsq70qd4pSo1CbSnZYEW0 L6GIWFz2BEj+XFzd2K47H8ZrZ6JrHKv3fiqIzehMysrv+7m5msFaORw4W1+V1ZPA P57ZZkY1cBpCW5Al8agnRXlVNZXfADsl9CpY14rFPAy9ZmtVR+gHw3Rb3WXYJtxz kBt4tyfQT9id0owyzL+QdiwFEOXWF7NJHkZfHaBVj+7NJdJBcOGdt5PTegatd/3a kGPgqdVteGNi+DAHgUDVq26+5R05wyHdRo/Sk9YzWhs4M7arbSJ9X1O2GulTQ+ud MoVohYxoTDW0Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:22 2025 by rpki-client