This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json) Hash identifier: zhik47sz943no5ogIfOYiVch6emKe7Yf4CO0yqjb1rc= Subject key identifier: D1:01:51:42:95:FD:7B:73:72:9C:12:7C:D2:4D:F8:31:75:D3:56:09 Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Certificate serial: 019AF61CC2B77EA56D55DAA514256D78F4B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft Manifest number: 0D36 Signing time: Sun 07 Dec 2025 00:01:11 +0000 Manifest this update: Sun 07 Dec 2025 00:01:11 +0000 Manifest next update: Mon 08 Dec 2025 00:01:11 +0000 Files and hashes: 1: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (hash: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=) 2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: AaRqqRqXKBM3oLH4F97W9KSQo7dm7NYklGH70xZkZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:c2:b7:7e:a5:6d:55:da:a5:14:25:6d:78:f4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Validity Not Before: Dec 7 00:01:11 2025 GMT Not After : Dec 8 00:01:11 2025 GMT Subject: CN=d101514295fd7b73729c127cd24df83175d35609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:3b:d2:1c:d7:0b:a1:78:38:8d:fc:bf:69: 22:46:d0:72:b9:0e:fa:0c:14:d6:f5:b5:c6:05:eb: ac:d1:57:4b:26:77:e1:25:bc:2b:b8:3d:d4:6c:6f: 13:c0:0c:93:6b:97:ff:06:52:49:0d:c8:54:46:8d: f2:9f:cc:0e:bd:18:83:74:d8:ee:73:f3:ae:9b:ca: 04:86:6f:80:12:2e:cb:6f:53:aa:c5:c1:06:43:28: 23:05:49:3b:2b:7e:e3:9e:64:9b:71:5f:4c:72:54: fd:82:12:2b:11:e7:b1:4e:cf:00:a3:5a:69:4e:06: 85:b6:b4:6d:36:12:47:d7:28:0f:82:16:59:ef:2b: ab:9c:a4:70:4d:34:4b:08:b2:67:cf:49:5d:01:d0: b1:66:99:7e:09:cb:fb:0f:5b:58:0a:a5:a8:cf:6e: f8:87:39:e8:0d:85:be:f3:58:2b:e4:68:8e:d2:24: b0:94:c5:84:80:3f:ce:19:c3:e0:76:ee:1d:d0:47: ab:a2:c3:e5:ff:eb:10:49:07:ab:3e:56:53:74:fd: f6:6a:2d:fb:73:5c:1b:d6:e7:6e:d7:40:4e:24:1e: 35:38:31:14:ab:7d:57:6b:7e:3d:b8:83:37:92:4b: d6:d3:77:b3:20:54:75:db:9c:0b:c4:e7:3d:38:1e: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:01:51:42:95:FD:7B:73:72:9C:12:7C:D2:4D:F8:31:75:D3:56:09 X509v3 Authority Key Identifier: keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8f:01:a3:08:ec:d5:73:55:96:34:b6:83:08:10:f0:1a:3f: 59:df:33:55:67:92:f3:8a:04:33:05:04:45:2d:c0:25:76:4b: 22:f1:92:a3:37:55:66:22:89:b1:e2:79:21:e7:a7:99:56:cf: 25:48:5c:dc:2c:ae:dd:39:3e:3c:cc:46:7f:4e:e2:4f:1e:33: 28:b9:4a:da:86:df:fb:96:c3:14:90:9b:77:4a:a4:b5:ec:fb: 2d:f5:f2:ef:67:c9:54:de:e9:2c:a2:9d:54:14:54:c6:31:31: 5e:7c:1e:dd:cf:1a:8d:b3:c2:04:b2:a5:1e:fb:bf:d3:35:37: f9:d5:b7:1f:f8:96:51:70:9d:c9:c3:2f:90:74:3c:0f:14:8d: 39:64:ad:27:62:a9:ac:ae:cb:75:3b:d5:87:e7:b0:57:d6:4b: 26:9a:7a:5e:45:e7:ca:8f:91:6a:29:d6:e4:8e:bc:77:5c:bc: 23:db:26:55:b7:d2:34:bc:eb:73:af:ee:b0:e9:e7:26:1d:44: d7:51:c1:6b:a8:21:c3:77:a8:46:28:ff:55:98:ab:08:4c:f5: e4:fc:44:d9:b9:68:31:df:81:35:c1:0f:e7:a5:f3:0f:2e:42: bf:95:b1:a5:b7:08:ff:40:de:66:13:67:06:7d:2f:b4:d4:6b: 84:5f:e0:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HMK3fqVtVdqlFCVtePS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5 ZDAxNDgwHhcNMjUxMjA3MDAwMTExWhcNMjUxMjA4MDAwMTExWjAzMTEwLwYDVQQD EyhkMTAxNTE0Mjk1ZmQ3YjczNzI5YzEyN2NkMjRkZjgzMTc1ZDM1NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XY70hzXC6F4OI38v2kiRtByuQ76 DBTW9bXGBeus0VdLJnfhJbwruD3UbG8TwAyTa5f/BlJJDchURo3yn8wOvRiDdNju c/Oum8oEhm+AEi7Lb1OqxcEGQygjBUk7K37jnmSbcV9MclT9ghIrEeexTs8Ao1pp TgaFtrRtNhJH1ygPghZZ7yurnKRwTTRLCLJnz0ldAdCxZpl+Ccv7D1tYCqWoz274 hznoDYW+81gr5GiO0iSwlMWEgD/OGcPgdu4d0EerosPl/+sQSQerPlZTdP32ai37 c1wb1udu10BOJB41ODEUq31Xa349uIM3kkvW03ezIFR125wLxOc9OB5ycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEBUUKV/XtzcpwSfNJN+DF101YJMB8GA1UdIwQY MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo8Bowjs 1XNVljS2gwgQ8Bo/Wd8zVWeS84oEMwUERS3AJXZLIvGSozdVZiKJseJ5IeenmVbP JUhc3Cyu3Tk+PMxGf07iTx4zKLlK2obf+5bDFJCbd0qktez7LfXy72fJVN7pLKKd VBRUxjExXnwe3c8ajbPCBLKlHvu/0zU3+dW3H/iWUXCdycMvkHQ8DxSNOWStJ2Kp rK7LdTvVh+ewV9ZLJpp6XkXnyo+RainW5I68d1y8I9smVbfSNLzrc6/usOnnJh1E 11HBa6ghw3eoRij/VZirCEz15PxE2bloMd+BNcEP56XzDy5Cv5WxpbcI/0DeZhNn Bn0vtNRrhF/gcw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:39:14 2025 by rpki-client