This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json) Hash identifier: FRo5VoEMAXBaYgMyHbOh9k16Hm6dS+iwFgnLps7tQc4= Subject key identifier: 56:B2:75:A7:E0:36:EE:79:3C:CE:A9:D6:2D:52:AD:1C:46:34:12:F9 Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Certificate serial: 019AF12EBE1F10B1782BFF3574C389059EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft Manifest number: 25 Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: 30rO_BdRX1qylu2XkOuDKVnX5kA.roa (hash: bXGCsHFr9AJnwD9C9VsQWa2UE5+/86m77Z5zzSFtsJQ=) 2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: wZHhhsnK2Ywt4zcyIRhK/x+RVY0+XbM8kEytjMrWmZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:be:1f:10:b1:78:2b:ff:35:74:c3:89:05:9e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=56b275a7e036ee793ccea9d62d52ad1c463412f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:8c:27:1a:a3:ec:43:3e:6a:0c:ee:54:8a: bd:9e:f9:f9:71:e6:a0:16:74:c5:19:7c:20:f3:0d: e2:68:74:88:48:54:5d:47:cb:16:4d:ca:5b:df:d2: 76:94:27:c6:c0:93:6d:6c:3a:90:f8:a4:26:36:98: 96:fd:3f:e0:99:4d:c8:cf:21:12:a8:43:7f:30:10: 93:df:54:7b:66:ca:92:2d:1a:14:2c:00:6d:3f:94: d3:ba:54:b2:61:1a:9d:ab:ae:20:64:5e:a9:04:a3: 37:8e:5a:a4:b5:70:c3:66:25:bd:8c:78:ed:0e:59: 20:d0:5c:18:46:17:68:65:5b:74:e8:d2:40:55:dc: 51:9d:b9:24:5a:ae:04:94:19:5e:25:03:28:0d:a1: 96:57:71:1d:9c:93:44:c7:45:5f:9e:82:52:c4:c2: 1b:43:a5:74:ad:17:07:78:50:b0:ea:0b:fa:c4:0d: 13:f9:69:72:ca:ba:95:b7:74:63:28:50:b5:9c:81: 44:47:07:27:f4:1f:82:ce:5f:b1:f9:c9:db:f3:ab: f5:f1:97:a5:a1:84:ae:6e:19:20:a8:8c:3d:fe:5b: 99:0f:c0:ac:b4:e1:0f:c0:79:d1:be:6b:0b:a8:67: 42:f9:62:f0:4e:61:6f:76:24:a8:1a:11:7c:e7:7f: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B2:75:A7:E0:36:EE:79:3C:CE:A9:D6:2D:52:AD:1C:46:34:12:F9 X509v3 Authority Key Identifier: keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:0b:39:05:ec:a0:60:39:99:34:2b:c4:28:1e:17:00:44:d5: 03:96:f0:a8:29:f4:5b:e6:39:68:b5:86:21:4b:6b:88:be:ab: cf:ed:60:8a:f4:f5:f7:37:2b:da:0b:2c:90:ae:08:1f:f3:b2: 51:3a:a4:d8:97:8a:bc:c4:6a:61:8f:0c:cd:18:c7:06:69:7e: e6:a5:39:63:46:b9:a9:0b:7b:10:78:ea:e2:7b:78:d0:98:fa: f7:44:d5:7b:21:d5:88:3d:e1:ab:72:fa:08:df:7f:87:4e:98: 6b:1a:5d:d2:a8:71:e6:9d:99:48:90:6d:d1:a6:a0:b0:07:38: 14:9c:14:85:c1:16:c0:7b:5c:0c:40:1f:63:51:4f:be:49:10: 79:df:43:10:33:50:33:ab:56:3c:37:b1:8e:08:72:e1:3c:41: 9d:3a:ef:62:f8:40:3b:40:15:7c:2a:2b:7c:45:87:19:99:0d: 08:c2:cd:47:5e:55:75:38:f3:aa:df:07:39:83:63:31:9e:70: 43:37:e6:7e:5f:4c:29:b4:d4:88:44:ee:32:0f:16:f0:51:44: 53:f2:a3:d7:67:27:58:ed:00:33:08:72:72:01:0e:ea:03:e6: 95:8d:6f:48:42:9d:4f:e6:57:b2:a8:f7:e8:c3:21:59:5f:fc: 96:db:05:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr4fELF4K/81dMOJBZ7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWM2YWI2YmMyMDZhNTRjNGFiYjM3NDE1ODU4Y2IyZDUz ZDM0OWUwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD Eyg1NmIyNzVhN2UwMzZlZTc5M2NjZWE5ZDYyZDUyYWQxYzQ2MzQxMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhiMJxqj7EM+agzuVIq9nvn5ceag FnTFGXwg8w3iaHSISFRdR8sWTcpb39J2lCfGwJNtbDqQ+KQmNpiW/T/gmU3IzyES qEN/MBCT31R7ZsqSLRoULABtP5TTulSyYRqdq64gZF6pBKM3jlqktXDDZiW9jHjt Dlkg0FwYRhdoZVt06NJAVdxRnbkkWq4ElBleJQMoDaGWV3EdnJNEx0VfnoJSxMIb Q6V0rRcHeFCw6gv6xA0T+WlyyrqVt3RjKFC1nIFERwcn9B+Czl+x+cnb86v18Zel oYSubhkgqIw9/luZD8CstOEPwHnRvmsLqGdC+WLwTmFvdiSoGhF853/8rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaydafgNu55PM6p1i1SrRxGNBL5MB8GA1UdIwQY MBaAFL1cara8IGpUxKuzdBWFjLLVPTSeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQt NDIzMjNiMjAwOWUzLzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQtNDIzMjNiMjAwOWUz LzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAs5Beyg YDmZNCvEKB4XAETVA5bwqCn0W+Y5aLWGIUtriL6rz+1givT19zcr2gsskK4IH/Oy UTqk2JeKvMRqYY8MzRjHBml+5qU5Y0a5qQt7EHjq4nt40Jj690TVeyHViD3hq3L6 CN9/h06Yaxpd0qhx5p2ZSJBt0aagsAc4FJwUhcEWwHtcDEAfY1FPvkkQed9DEDNQ M6tWPDexjghy4TxBnTrvYvhAO0AVfCorfEWHGZkNCMLNR15VdTjzqt8HOYNjMZ5w Qzfmfl9MKbTUiETuMg8W8FFEU/Kj12cnWO0AMwhycgEO6gPmlY1vSEKdT+ZXsqj3 6MMhWV/8ltsFbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:48 2025 by rpki-client