This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: duFJuFbPDN9mlugK2pGPBeQp/ZiMZEc5gXi8r/VJKXQ= Subject key identifier: 37:AD:33:9D:76:14:76:28:AD:F4:2F:35:C8:7A:09:45:BF:8F:CC:CC Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B2B541042701BF1C7FC003E8547BBBA46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0BD6 Signing time: Wed 17 Dec 2025 08:01:27 +0000 Manifest this update: Wed 17 Dec 2025 08:01:27 +0000 Manifest next update: Thu 18 Dec 2025 08:01:27 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: RKaNBpm8q50NqEIhFkrIr4Qwq0YvNbCpv2TUpnJeLgc=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:10:42:70:1b:f1:c7:fc:00:3e:85:47:bb:ba:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Dec 17 08:01:27 2025 GMT Not After : Dec 18 08:01:27 2025 GMT Subject: CN=37ad339d76147628adf42f35c87a0945bf8fcccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:b7:28:5f:4b:54:a1:36:28:34:a3:da:86: 57:0d:a0:4b:5e:c7:27:7c:7a:fb:5b:27:69:db:fd: 7c:8d:85:a2:b1:bf:6d:a6:3c:a8:cf:dc:36:00:d7: 62:61:de:bb:0d:1c:c1:dd:07:b8:75:1b:ee:1a:83: b7:c7:f6:f2:71:b9:90:f2:e4:82:d1:e0:5f:16:45: 37:c9:3c:1a:dd:21:69:48:ca:a3:6a:a0:c4:cd:2f: 4d:52:0f:51:0d:a9:25:1d:5b:43:93:81:42:db:c4: 8e:f7:ea:9e:81:84:81:c2:6e:ff:d3:e8:66:18:86: e9:2d:c0:92:5e:ea:d7:e2:31:56:c2:ea:0a:17:f9: 44:1a:f1:5b:15:d1:0d:c4:80:79:73:a6:5f:75:af: 20:e1:ac:a5:eb:c0:eb:d4:bc:f5:0c:49:7a:35:3a: 01:b3:86:90:99:90:3c:32:cb:4e:56:6b:7a:40:3e: 92:de:8b:61:ec:4a:c7:2a:07:3a:3a:c7:ce:7b:be: 46:15:1f:c5:f5:d3:ec:72:d6:61:f6:af:2b:2c:5e: 02:8e:9c:ed:d3:81:51:48:77:cd:f3:82:07:41:78: ec:8d:cb:3d:e1:08:72:6c:76:02:ec:cd:d8:54:6f: 71:93:25:4a:2e:49:7e:6c:78:77:f5:1c:62:62:d7: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AD:33:9D:76:14:76:28:AD:F4:2F:35:C8:7A:09:45:BF:8F:CC:CC X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2f:75:29:b9:17:e1:98:0b:de:8f:53:bb:99:60:6b:7c:0d: 36:2e:ed:10:0e:c8:ca:d0:c1:5b:5b:ef:e9:24:47:3d:de:1b: 1f:b7:ca:4c:9b:94:24:83:19:c9:f4:a1:9a:ce:69:97:a2:d4: 67:1b:57:3a:c8:f5:3b:bb:57:3c:15:b5:d0:bd:c4:25:80:2c: 7f:a0:2f:66:8c:23:ff:48:f8:49:cf:d1:5b:0f:03:ad:7e:51: 0a:b6:6a:5a:d3:28:61:1d:2a:4d:ee:75:45:a6:d7:05:0b:44: 3a:01:16:8c:44:5c:89:72:d2:5d:62:c0:86:93:12:5e:42:6e: 89:3d:00:7c:89:71:09:92:12:18:cb:22:28:91:ee:66:c7:75: b9:5e:b2:75:c5:4c:53:25:5d:91:bb:7c:f9:84:6c:f4:0f:09: 49:fc:af:ea:42:10:9b:50:03:66:4d:ac:f1:58:99:1e:c2:17: f6:91:e7:41:2a:37:7f:a9:95:19:3d:ef:21:3e:21:01:19:1c: ec:b9:d0:cd:f4:16:3b:ee:4f:92:3d:b7:1a:cb:8f:bb:a4:9b: 05:84:14:34:8e:0d:80:e4:8a:ae:38:54:b3:39:5a:20:7f:92: 27:ff:c2:6f:23:7e:d0:76:a2:12:2a:2e:f4:f5:40:ee:05:29: 66:e7:6d:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVBBCcBvxx/wAPoVHu7pGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUxMjE3MDgwMTI3WhcNMjUxMjE4MDgwMTI3WjAzMTEwLwYDVQQD EygzN2FkMzM5ZDc2MTQ3NjI4YWRmNDJmMzVjODdhMDk0NWJmOGZjY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2O3KF9LVKE2KDSj2oZXDaBLXscn fHr7Wydp2/18jYWisb9tpjyoz9w2ANdiYd67DRzB3Qe4dRvuGoO3x/bycbmQ8uSC 0eBfFkU3yTwa3SFpSMqjaqDEzS9NUg9RDaklHVtDk4FC28SO9+qegYSBwm7/0+hm GIbpLcCSXurX4jFWwuoKF/lEGvFbFdENxIB5c6Zfda8g4ayl68Dr1Lz1DEl6NToB s4aQmZA8MstOVmt6QD6S3oth7ErHKgc6OsfOe75GFR/F9dPsctZh9q8rLF4Cjpzt 04FRSHfN84IHQXjsjcs94QhybHYC7M3YVG9xkyVKLkl+bHh39RxiYtfslQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDetM512FHYorfQvNch6CUW/j8zMMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS91KbkX 4ZgL3o9Tu5lga3wNNi7tEA7IytDBW1vv6SRHPd4bH7fKTJuUJIMZyfShms5pl6LU ZxtXOsj1O7tXPBW10L3EJYAsf6AvZowj/0j4Sc/RWw8DrX5RCrZqWtMoYR0qTe51 RabXBQtEOgEWjERciXLSXWLAhpMSXkJuiT0AfIlxCZISGMsiKJHuZsd1uV6ydcVM UyVdkbt8+YRs9A8JSfyv6kIQm1ADZk2s8ViZHsIX9pHnQSo3f6mVGT3vIT4hARkc 7LnQzfQWO+5Pkj23GsuPu6SbBYQUNI4NgOSKrjhUszlaIH+SJ//CbyN+0HaiEiou 9PVA7gUpZudtDA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:48:33 2025 by rpki-client