This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json) Hash identifier: 1FgxdbYwhjr2JvrcXfoT1hLBLT/uBWJezGEKhmdBQng= Subject key identifier: 00:24:13:85:A9:7B:B2:98:91:C7:BE:7E:B5:57:6B:12:3A:96:6C:7C Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507 Certificate serial: 019AF42E36A6FCD794C5AD3E6BCFA810789F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 15:01:00 +0000 Manifest this update: Sat 06 Dec 2025 15:01:00 +0000 Manifest next update: Sun 07 Dec 2025 15:01:00 +0000 Files and hashes: 1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=) 2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: hYN9/hKh+5t5sFovMusbzK0Iq/XowFAVUAVDAJGY2t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:36:a6:fc:d7:94:c5:ad:3e:6b:cf:a8:10:78:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507 Validity Not Before: Dec 6 15:01:00 2025 GMT Not After : Dec 7 15:01:00 2025 GMT Subject: CN=00241385a97bb29891c7be7eb5576b123a966c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:83:8e:3a:41:ca:6b:5d:a5:ae:d1:ae:4c: d4:53:4f:38:58:1e:6a:cc:83:0f:6c:40:2a:98:71: a6:e5:e8:ef:07:84:77:1f:1c:43:f2:50:23:aa:11: 5a:f1:ba:48:18:d8:89:f5:95:42:5e:f6:5c:55:a5: 4b:48:66:7e:f5:be:3f:25:23:c2:0b:b7:25:1c:39: c4:a1:c9:ef:83:a2:50:5b:dd:cd:95:3f:17:bf:80: 08:4d:0c:ba:43:19:44:d6:39:b4:df:12:5e:17:0f: ae:c3:a5:2e:86:40:1b:c2:c4:16:43:18:7b:a8:2f: e0:da:25:77:01:f0:13:29:c1:5f:26:ff:70:62:dd: a5:f0:93:05:4a:fb:3a:9e:57:e6:40:35:98:64:60: 3f:d0:ea:5e:73:ec:52:44:04:39:69:5a:02:c9:11: 6e:96:ed:cf:79:cd:c5:2d:5c:a8:70:da:a6:4a:07: 54:6c:68:ab:48:88:cd:6f:95:52:d4:86:37:ff:b3: ff:cb:ff:0d:8b:89:d8:b9:e7:4b:b9:ce:bf:3a:5b: 35:62:5a:bc:f5:94:72:ca:f2:50:ab:40:ec:f5:2b: c0:54:32:08:95:30:f6:13:b0:62:6f:15:8f:4f:65: f1:f6:4f:9e:22:b0:12:c5:6b:54:21:2f:ff:21:ac: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:24:13:85:A9:7B:B2:98:91:C7:BE:7E:B5:57:6B:12:3A:96:6C:7C X509v3 Authority Key Identifier: keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d9:03:8a:ab:3d:0b:db:eb:fb:03:23:b5:1b:cd:fc:ae:1e: 4c:33:bc:1c:ee:05:8f:5e:68:71:2f:c8:47:cf:fb:3c:68:d6: f8:c0:f0:a9:ac:16:0f:6b:5b:1f:37:1c:0f:12:37:8d:93:13: d4:40:e4:97:35:b8:f1:68:94:bb:2e:38:79:9a:73:71:55:d3: 87:80:da:33:4f:bf:e0:12:c9:26:61:21:cc:fc:53:37:7f:be: 19:ad:85:a0:6e:e2:e4:77:40:12:6d:cd:ea:5e:2f:29:9d:6d: 7a:ba:bb:c7:ad:13:91:2d:51:fd:27:b6:4c:09:28:31:4c:af: 0c:74:9d:c4:1f:13:8a:58:b6:65:57:5f:96:59:46:01:50:e4: 4c:18:04:f6:ab:9f:e1:32:94:eb:99:3e:e6:8a:e5:08:53:37: d8:12:71:88:c1:ea:0f:f5:07:13:50:30:c6:52:56:03:83:de: be:1e:c5:5a:ef:cc:74:c6:5d:61:b5:00:3d:f5:1f:6d:f1:41: 3d:18:4e:4f:e2:c9:44:51:07:1a:e6:20:19:2f:f8:0f:c0:06: 55:8d:49:66:18:03:ad:30:99:ca:ff:40:8f:ad:b2:ca:e5:4b: 88:83:75:75:96:36:44:a8:14:31:68:7a:d7:ea:f8:e3:84:e9: 3f:4a:f6:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ljam/NeUxa0+a8+oEHifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2M1NGQxZWRjYTY5MmY0NGM5ZGEzODM0MDJjMjRmZGU3 MjM1MDcwHhcNMjUxMjA2MTUwMTAwWhcNMjUxMjA3MTUwMTAwWjAzMTEwLwYDVQQD EygwMDI0MTM4NWE5N2JiMjk4OTFjN2JlN2ViNTU3NmIxMjNhOTY2YzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm+DjjpBymtdpa7RrkzUU084WB5q zIMPbEAqmHGm5ejvB4R3HxxD8lAjqhFa8bpIGNiJ9ZVCXvZcVaVLSGZ+9b4/JSPC C7clHDnEocnvg6JQW93NlT8Xv4AITQy6QxlE1jm03xJeFw+uw6UuhkAbwsQWQxh7 qC/g2iV3AfATKcFfJv9wYt2l8JMFSvs6nlfmQDWYZGA/0Opec+xSRAQ5aVoCyRFu lu3Pec3FLVyocNqmSgdUbGirSIjNb5VS1IY3/7P/y/8Ni4nYuedLuc6/Ols1Ylq8 9ZRyyvJQq0Ds9SvAVDIIlTD2E7BibxWPT2Xx9k+eIrASxWtUIS//Iazg1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAkE4Wpe7KYkce+frVXaxI6lmx8MB8GA1UdIwQY MBaAFL48VNHtymkvRMnaODQCwk/ecjUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQt YzM0OTUzZWRjN2U1LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQtYzM0OTUzZWRjN2U1 LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdkDiqs9 C9vr+wMjtRvN/K4eTDO8HO4Fj15ocS/IR8/7PGjW+MDwqawWD2tbHzccDxI3jZMT 1EDklzW48WiUuy44eZpzcVXTh4DaM0+/4BLJJmEhzPxTN3++Ga2FoG7i5HdAEm3N 6l4vKZ1terq7x60TkS1R/Se2TAkoMUyvDHSdxB8Tili2ZVdflllGAVDkTBgE9quf 4TKU65k+5orlCFM32BJxiMHqD/UHE1AwxlJWA4Pevh7FWu/MdMZdYbUAPfUfbfFB PRhOT+LJRFEHGuYgGS/4D8AGVY1JZhgDrTCZyv9Aj62yyuVLiIN1dZY2RKgUMWh6 1+r444TpP0r28w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:51 2025 by rpki-client