This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json) Hash identifier: ZA91QDwb8Bl3oBSckcEl3jUFvrcvZMKWWmFruqzhP3g= Subject key identifier: F0:65:7A:15:32:57:FD:F8:69:CA:F9:A6:DF:B4:79:E4:49:E5:5B:0F Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Certificate serial: 019AF6541B2A2FAD59885D7A2BDC3177E771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 01:01:38 +0000 Manifest this update: Sun 07 Dec 2025 01:01:38 +0000 Manifest next update: Mon 08 Dec 2025 01:01:38 +0000 Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=) 2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=) 3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: L4KmoctywHbozYLI8nI01Dep/HreyagTIar/aWGz+go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:54:1b:2a:2f:ad:59:88:5d:7a:2b:dc:31:77:e7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Validity Not Before: Dec 7 01:01:38 2025 GMT Not After : Dec 8 01:01:38 2025 GMT Subject: CN=f0657a153257fdf869caf9a6dfb479e449e55b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:bc:12:00:81:ec:62:e2:62:bc:cd:7f:ce: 30:5a:75:35:9b:39:75:12:9f:83:62:a5:ce:bc:43: 9d:93:38:6f:02:fb:ba:cc:8a:f3:b3:5d:34:55:99: 0c:a8:d2:b6:b9:91:7e:97:b4:dd:41:d5:a7:72:3b: c7:b6:31:a0:a5:24:93:fb:16:27:03:34:a8:e6:da: 6b:d5:0e:0d:f4:8b:87:61:67:05:6f:d2:80:b7:78: 60:a8:83:66:66:65:6e:ea:4a:38:8c:98:0e:47:5a: 14:81:5b:62:d1:73:b0:ed:f2:5c:06:04:db:c8:03: a5:63:85:13:84:92:c6:75:58:df:76:61:ae:99:eb: a6:d3:64:d6:52:67:76:33:72:98:e0:c9:be:89:cf: d3:78:2c:23:b4:68:13:78:fd:c6:1c:70:08:2d:28: 2c:80:72:07:5e:c9:52:72:bc:3f:1d:37:5d:90:ed: a4:83:05:84:71:0e:34:ea:e5:64:4e:13:b1:a2:89: 66:25:60:00:26:31:8e:8d:fa:eb:e6:87:86:84:de: 65:be:8d:29:7d:db:4f:1d:3d:35:3e:2d:2c:5b:6e: 68:90:bb:ca:8d:ac:84:91:22:db:0e:32:2a:29:5c: ab:78:e9:3b:58:ab:4c:d7:a8:a8:46:49:24:d7:7e: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:65:7A:15:32:57:FD:F8:69:CA:F9:A6:DF:B4:79:E4:49:E5:5B:0F X509v3 Authority Key Identifier: keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ff:3d:6d:d4:a6:0a:65:b6:85:b6:ee:fe:c0:f1:6c:8a:03: c2:61:04:17:8b:9e:06:59:ff:e4:fd:9e:64:6e:cc:21:64:2c: 5d:28:92:fe:37:86:dd:03:57:2a:e4:45:ec:83:f5:3c:8b:ef: 4d:c6:28:37:5f:7b:16:d4:1f:40:06:9c:a0:6b:c6:88:25:c4: 92:fa:3c:ee:ec:62:86:de:b3:bd:4e:9a:54:6b:48:ba:ce:87: 18:9d:98:26:a7:cf:31:42:9f:1d:1d:0a:78:0a:ee:cc:72:3f: 85:01:02:ba:3b:2f:a1:4f:01:4d:69:89:2a:2e:77:c3:04:1f: 9d:cb:85:50:a1:e1:4d:a2:84:ad:e7:2c:5f:a7:b5:62:90:5b: d9:dc:ec:a7:17:1a:36:c1:5e:d7:f1:2d:6d:77:b4:0f:71:b7: 3d:27:45:43:04:4a:43:74:ee:06:ec:93:a5:1a:93:be:43:49: 15:ba:22:d7:07:4e:86:f9:d9:89:fe:1d:3c:bc:94:a2:d1:73: 61:dc:19:98:2c:08:f4:c3:93:c4:c1:12:89:e6:fe:c5:c4:3a: 19:5f:41:91:2a:90:80:c4:a9:24:c1:73:51:0d:2b:9c:22:9d: b8:ea:8b:71:95:ed:87:7d:3c:21:59:f6:bc:c2:e8:e1:e0:e7: 41:92:51:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2VBsqL61ZiF16K9wxd+dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5 ZTk0YTIwHhcNMjUxMjA3MDEwMTM4WhcNMjUxMjA4MDEwMTM4WjAzMTEwLwYDVQQD EyhmMDY1N2ExNTMyNTdmZGY4NjljYWY5YTZkZmI0NzllNDQ5ZTU1YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni28EgCB7GLiYrzNf84wWnU1mzl1 Ep+DYqXOvEOdkzhvAvu6zIrzs100VZkMqNK2uZF+l7TdQdWncjvHtjGgpSST+xYn AzSo5tpr1Q4N9IuHYWcFb9KAt3hgqINmZmVu6ko4jJgOR1oUgVti0XOw7fJcBgTb yAOlY4UThJLGdVjfdmGumeum02TWUmd2M3KY4Mm+ic/TeCwjtGgTeP3GHHAILSgs gHIHXslScrw/HTddkO2kgwWEcQ406uVkThOxoolmJWAAJjGOjfrr5oeGhN5lvo0p fdtPHT01Pi0sW25okLvKjayEkSLbDjIqKVyreOk7WKtM16ioRkkk137PdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBlehUyV/34acr5pt+0eeRJ5VsPMB8GA1UdIwQY MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1 LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf89bdSm CmW2hbbu/sDxbIoDwmEEF4ueBln/5P2eZG7MIWQsXSiS/jeG3QNXKuRF7IP1PIvv TcYoN197FtQfQAacoGvGiCXEkvo87uxiht6zvU6aVGtIus6HGJ2YJqfPMUKfHR0K eAruzHI/hQECujsvoU8BTWmJKi53wwQfncuFUKHhTaKErecsX6e1YpBb2dzspxca NsFe1/EtbXe0D3G3PSdFQwRKQ3TuBuyTpRqTvkNJFboi1wdOhvnZif4dPLyUotFz YdwZmCwI9MOTxMESieb+xcQ6GV9BkSqQgMSpJMFzUQ0rnCKduOqLcZXth308IVn2 vMLo4eDnQZJRuw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:46 2025 by rpki-client