This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json) Hash identifier: NTuzjyMN3XmPvPa9U07YPohNstWkhUaTAHO8ijZ9sMU= Subject key identifier: B3:FB:C1:9A:F5:89:83:1A:C4:27:BD:42:94:DF:01:A5:DD:47:94:CB Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac Certificate serial: 019AF577CD096D7873FC8A80C74A867D3872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 21:01:00 +0000 Manifest this update: Sat 06 Dec 2025 21:01:00 +0000 Manifest next update: Sun 07 Dec 2025 21:01:00 +0000 Files and hashes: 1: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (hash: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=) 2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: HMnZeymb7N+GDYz/fK+rJgu2N9wlKCpWzOGGmdBq1tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:cd:09:6d:78:73:fc:8a:80:c7:4a:86:7d:38:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac Validity Not Before: Dec 6 21:01:00 2025 GMT Not After : Dec 7 21:01:00 2025 GMT Subject: CN=b3fbc19af589831ac427bd4294df01a5dd4794cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f3:f8:77:0e:a3:96:2f:7a:af:28:b3:8c:ef: 3a:98:9f:63:b7:11:ff:c6:8d:37:af:f0:1e:63:e7: 43:f2:e8:35:a5:d9:0e:42:89:b5:7d:d9:51:c1:09: 9e:35:a6:84:88:85:0a:ff:4a:9c:b6:92:9b:a2:b6: 1d:89:73:12:fe:59:dc:d5:0c:a7:eb:03:f9:95:80: 43:44:ea:11:c2:39:a2:a7:3f:29:24:e2:49:3a:4b: e2:b0:d6:4d:c9:f9:8d:e3:dd:1c:3d:6b:74:93:dc: 52:ea:42:de:06:85:12:ac:a9:ed:b9:63:e1:33:e9: 73:cd:66:a9:fb:1d:73:7b:10:b3:0b:e0:7c:65:ef: f8:14:81:dc:be:fe:fb:56:03:46:a6:e7:44:ae:cf: ae:cc:08:47:84:07:6c:f9:b6:08:4d:e2:10:43:f8: 22:82:95:73:f1:4a:a6:f3:91:90:31:31:f6:3f:ae: 8d:9e:c4:6f:4e:92:11:16:b5:c1:1b:a2:d3:b9:bf: 60:0e:7c:f6:70:ea:bf:2f:8f:45:2e:7a:67:6d:17: 0c:f6:a3:e3:e1:08:64:fd:22:d2:04:0d:d8:5a:0b: 11:8f:a3:5d:67:40:30:d9:e3:1d:b0:3b:9a:94:0e: dd:a4:2a:cf:38:65:2c:3e:a1:0b:45:c2:57:84:61: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FB:C1:9A:F5:89:83:1A:C4:27:BD:42:94:DF:01:A5:DD:47:94:CB X509v3 Authority Key Identifier: keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:bc:13:ca:b3:d5:e6:5f:30:c1:93:b8:b7:1b:1d:27:94:0b: 23:66:91:76:1b:ad:72:10:bd:47:b4:f1:6a:f0:41:bd:65:5b: ef:13:42:5d:fd:11:ee:8a:be:04:86:f3:7a:92:b6:cc:82:73: 54:70:79:42:ec:d1:8a:47:84:58:c3:38:4c:a1:4e:6f:41:ae: 47:c5:5c:b6:c0:ee:aa:51:ac:7b:a7:d4:ae:93:40:ad:59:04: a4:18:db:c2:1e:a7:e6:b7:b7:35:4e:4b:67:a1:23:4f:90:cb: ce:bf:d3:02:3c:ff:75:2c:fe:00:8f:73:3f:29:2d:ab:e8:cc: 0e:a7:1f:fc:4e:95:69:d6:f8:6b:ba:a9:4d:69:b9:a2:28:9f: b9:f4:ec:ab:72:79:9f:73:92:5c:8e:b6:ef:fc:d8:91:67:db: f6:9f:76:5c:ca:86:73:f6:13:53:59:45:95:2d:01:9c:4a:62: e3:c8:3d:db:67:25:94:22:54:09:b0:68:f8:b7:b9:2e:57:bd: a8:72:36:dd:29:b5:58:2a:03:fc:99:20:36:29:d0:c7:c9:84: 5e:10:72:6c:b2:35:ca:2d:e4:da:76:4e:03:dd:f9:4f:fb:f4: 60:6b:27:2c:c9:e9:26:f2:79:14:19:42:b0:33:49:b4:e8:55: da:a6:d2:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d80JbXhz/IqAx0qGfThyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNzIyYTk5NzMyYzljM2NiYzIwYjBhNDcyOTJhODIzNzgy NjAzYWMwHhcNMjUxMjA2MjEwMTAwWhcNMjUxMjA3MjEwMTAwWjAzMTEwLwYDVQQD EyhiM2ZiYzE5YWY1ODk4MzFhYzQyN2JkNDI5NGRmMDFhNWRkNDc5NGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vP4dw6jli96ryizjO86mJ9jtxH/ xo03r/AeY+dD8ug1pdkOQom1fdlRwQmeNaaEiIUK/0qctpKborYdiXMS/lnc1Qyn 6wP5lYBDROoRwjmipz8pJOJJOkvisNZNyfmN490cPWt0k9xS6kLeBoUSrKntuWPh M+lzzWap+x1zexCzC+B8Ze/4FIHcvv77VgNGpudErs+uzAhHhAds+bYITeIQQ/gi gpVz8Uqm85GQMTH2P66NnsRvTpIRFrXBG6LTub9gDnz2cOq/L49FLnpnbRcM9qPj 4Qhk/SLSBA3YWgsRj6NdZ0Aw2eMdsDualA7dpCrPOGUsPqELRcJXhGG6CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP7wZr1iYMaxCe9QpTfAaXdR5TLMB8GA1UdIwQY MBaAFL5yKplzLJw8vCCwpHKSqCN4JgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODct MjliOTdhMTg3N2ZiLzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODctMjliOTdhMTg3N2Zi LzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLwTyrPV 5l8wwZO4txsdJ5QLI2aRdhutchC9R7TxavBBvWVb7xNCXf0R7oq+BIbzepK2zIJz VHB5QuzRikeEWMM4TKFOb0GuR8VctsDuqlGse6fUrpNArVkEpBjbwh6n5re3NU5L Z6EjT5DLzr/TAjz/dSz+AI9zPyktq+jMDqcf/E6Vadb4a7qpTWm5oiifufTsq3J5 n3OSXI627/zYkWfb9p92XMqGc/YTU1lFlS0BnEpi48g922cllCJUCbBo+Le5Lle9 qHI23Sm1WCoD/JkgNinQx8mEXhBybLI1yi3k2nZOA935T/v0YGsnLMnpJvJ5FBlC sDNJtOhV2qbSww== -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:41 2025 by rpki-client