This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: EhHYCOy/eJd/aorX5JkyQxMrcKuQDcsxGUMFnfHodSY= Subject key identifier: CC:D7:96:8D:31:49:16:89:D1:F8:AB:CC:4C:AE:48:1F:8C:4C:C8:A9 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019AF2E450F3654133A35F21C5FCA5107C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 123A Signing time: Sat 06 Dec 2025 09:00:40 +0000 Manifest this update: Sat 06 Dec 2025 09:00:40 +0000 Manifest next update: Sun 07 Dec 2025 09:00:40 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: J42E1RbvxDPZN8hSUtuVzEgWEQ8.roa (hash: yHzZkI8WBsUDrg6tstr8yujQqJ7rIkiUvhkoKj5fkYs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: 325+STkwnPjzb6vmNQ4KvxR683hm8ifTCUuV1icCXfQ=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:50:f3:65:41:33:a3:5f:21:c5:fc:a5:10:7c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Dec 6 09:00:40 2025 GMT Not After : Dec 7 09:00:40 2025 GMT Subject: CN=ccd7968d31491689d1f8abcc4cae481f8c4cc8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:dd:da:44:22:68:2f:e8:78:02:71:83:af: e1:8c:00:d2:d5:de:43:b7:21:20:99:6d:37:ec:6b: 8f:a4:92:be:4e:b5:88:a8:96:51:81:b9:0e:f0:77: b8:e2:c6:dd:16:69:af:e7:35:c5:bc:cf:2e:1e:fd: 59:a0:32:31:02:d7:d3:83:db:90:c6:86:37:e8:0d: 6b:88:83:48:38:ce:f0:f1:50:57:ba:2c:54:36:ee: 7a:79:74:89:e2:2a:77:3b:85:12:e7:e8:4a:ba:c5: f7:7c:82:2c:26:c8:78:56:72:a3:92:28:c0:2b:fe: ba:a0:58:b1:48:ce:54:ec:dd:bd:07:0a:ae:19:2d: df:de:e3:98:69:3e:0f:2b:43:3d:3d:f8:5b:b1:92: 95:c4:dd:67:3d:48:5d:13:36:a0:00:c3:05:1f:7c: 54:8f:04:3a:8a:a3:a9:39:61:13:f3:f4:93:0f:1d: 55:3a:15:24:98:ff:16:a9:89:4f:76:eb:51:0f:75: c5:1c:92:9f:fb:f1:bd:31:44:0f:8c:c4:8a:8f:91: 03:20:86:c2:a5:3f:13:84:3c:46:e8:e7:67:bd:24: 60:f4:9d:b6:df:b7:bd:9c:e5:5a:d3:41:bf:4a:8a: 8f:70:d6:27:7f:1a:5e:0d:15:28:db:a9:7d:1a:f9: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D7:96:8D:31:49:16:89:D1:F8:AB:CC:4C:AE:48:1F:8C:4C:C8:A9 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e9:25:40:4e:d7:bb:e8:4c:f1:d5:18:95:6d:5a:d1:0a:fb: 41:b3:3f:a9:d8:0e:23:62:22:5f:89:b1:d6:81:71:22:da:52: 3d:aa:43:d5:66:5a:d9:90:86:e6:9d:3b:9b:3a:50:ad:33:1f: 99:75:01:38:11:7e:c9:c6:b1:0e:7e:e5:d6:49:fd:14:8b:d9: f8:27:8f:82:30:53:94:6e:21:23:f9:ba:58:62:b7:01:71:7b: 9c:54:db:2b:22:f0:c1:9c:57:c5:67:d1:d7:36:4d:af:31:e5: b9:13:04:2d:b4:9e:0c:b1:83:41:ff:ba:d5:af:5a:2a:b6:a8: 1f:43:a6:24:8b:5e:1b:56:3c:a8:72:b7:5f:ff:58:7d:2e:78: 93:84:87:1a:00:46:8e:c7:53:f4:9a:e3:98:92:c4:e5:80:b7: 22:c2:cd:c6:70:f5:c4:2a:81:a7:23:f8:b7:27:dc:f2:21:91: e4:57:e6:f0:2c:ee:32:2c:5b:55:04:58:92:ef:f0:a1:68:dc: 5f:be:0d:00:9e:c0:2e:e6:ad:ca:c3:e9:aa:78:97:5b:7d:0a: 8f:7f:c2:68:fb:f0:3f:34:af:e8:bf:9f:59:00:e2:57:44:f1: 83:14:c8:d1:0f:c0:20:f0:e0:07:bf:b1:6f:ad:63:61:7c:32: e7:30:cd:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FDzZUEzo18hxfylEHxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUxMjA2MDkwMDQwWhcNMjUxMjA3MDkwMDQwWjAzMTEwLwYDVQQD EyhjY2Q3OTY4ZDMxNDkxNjg5ZDFmOGFiY2M0Y2FlNDgxZjhjNGNjOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzLd2kQiaC/oeAJxg6/hjADS1d5D tyEgmW037GuPpJK+TrWIqJZRgbkO8He44sbdFmmv5zXFvM8uHv1ZoDIxAtfTg9uQ xoY36A1riINIOM7w8VBXuixUNu56eXSJ4ip3O4US5+hKusX3fIIsJsh4VnKjkijA K/66oFixSM5U7N29BwquGS3f3uOYaT4PK0M9PfhbsZKVxN1nPUhdEzagAMMFH3xU jwQ6iqOpOWET8/STDx1VOhUkmP8WqYlPdutRD3XFHJKf+/G9MUQPjMSKj5EDIIbC pT8ThDxG6OdnvSRg9J2237e9nOVa00G/SoqPcNYnfxpeDRUo26l9Gvn/DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzXlo0xSRaJ0firzEyuSB+MTMipMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuklQE7X u+hM8dUYlW1a0Qr7QbM/qdgOI2IiX4mx1oFxItpSPapD1WZa2ZCG5p07mzpQrTMf mXUBOBF+ycaxDn7l1kn9FIvZ+CePgjBTlG4hI/m6WGK3AXF7nFTbKyLwwZxXxWfR 1zZNrzHluRMELbSeDLGDQf+61a9aKraoH0OmJIteG1Y8qHK3X/9YfS54k4SHGgBG jsdT9JrjmJLE5YC3IsLNxnD1xCqBpyP4tyfc8iGR5Ffm8CzuMixbVQRYku/woWjc X74NAJ7ALuatysPpqniXW30Kj3/CaPvwPzSv6L+fWQDiV0TxgxTI0Q/AIPDgB7+x b61jYXwy5zDNvA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:38 2025 by rpki-client