This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json) Hash identifier: sOzB9icLX5+qNET4bseeymMFyulHFQvHtYIY1QuSjI4= Subject key identifier: D8:67:CD:AC:BF:CE:A9:B8:F4:C2:B4:C8:3E:75:AB:BC:08:3A:31:B9 Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0 Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0 Certificate serial: 019AF20925AF593DCEA0FE4082D7ADCA3CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=) 2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: PTaGBVLSn4TjEBbMifCukSernA3kTPc5BjXgyYih1fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:25:af:59:3d:ce:a0:fe:40:82:d7:ad:ca:3c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=d867cdacbfcea9b8f4c2b4c83e75abbc083a31b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5c:14:88:c1:da:ba:48:55:b9:34:e8:88:16: 52:13:aa:ce:16:01:ee:dc:93:c3:9b:38:9b:08:16: 76:86:6d:45:26:6f:f1:39:b3:1d:4f:e5:41:2f:00: 74:96:bd:0f:69:af:70:7b:75:3b:cd:62:ef:46:2c: e4:c0:a4:a5:d7:9c:c8:27:4e:42:05:e7:c5:50:e8: 55:e7:ed:80:94:8b:6e:90:5b:95:cd:f8:43:82:92: e8:7e:0d:e0:31:48:57:f5:5e:c1:9d:c2:a9:a2:5e: 80:8e:e2:be:c5:c8:3f:2b:fb:b3:b4:3c:d0:50:9e: 86:7a:2b:6f:ae:de:ea:b9:15:f8:03:a4:af:fe:ae: ca:2c:a3:d9:72:37:5f:f3:e3:3f:a5:5c:1f:59:99: 40:c4:98:e0:ef:a3:1d:58:9a:d2:53:ef:5f:a4:9e: 2a:8c:31:e4:f6:ff:96:ca:09:e5:aa:ec:32:fa:c8: 6c:38:37:94:2a:78:0b:e6:cc:00:2f:98:48:f5:80: b1:24:c9:68:2d:f3:fc:69:a1:a7:a5:4b:3a:37:ff: 53:1a:e8:9c:7d:6c:23:53:41:eb:46:a5:11:0d:04: 1f:2c:f7:0f:9d:97:df:9d:d0:66:e6:d3:ba:a5:dd: 80:7b:c0:e0:29:07:92:3c:24:d0:6e:9f:8f:5a:e7: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:67:CD:AC:BF:CE:A9:B8:F4:C2:B4:C8:3E:75:AB:BC:08:3A:31:B9 X509v3 Authority Key Identifier: keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c3:56:3b:3f:52:bd:8c:c4:73:0f:9d:a0:30:dd:98:08:36: aa:90:22:31:38:3d:26:5e:47:03:27:88:85:19:f5:ec:89:7e: c1:13:83:f0:fe:02:1f:ff:44:69:e6:8f:0e:c7:3b:d7:fa:68: 7d:d5:43:cf:df:b4:f5:db:e0:c1:7e:2d:48:9b:db:4d:b7:b8: 5b:f2:15:d0:a9:55:0f:85:df:3e:07:46:06:89:32:56:72:12: 67:ef:35:86:03:c5:0a:0e:9d:bb:44:63:00:9c:2a:23:d3:ee: 00:b6:41:c9:8c:2f:e3:1b:b1:2a:d0:19:61:28:be:00:83:85: b4:a8:8f:5e:c6:fe:c0:07:e5:df:e9:0b:f1:35:68:3d:c8:0c: 78:95:33:af:e8:9f:75:27:51:cc:07:2b:96:3e:e9:89:9b:86: 7b:d7:04:b9:48:9b:75:4a:65:27:ea:2b:92:bb:dc:13:5d:bf: d2:77:63:9c:8c:71:44:51:66:eb:ec:3b:b6:6b:37:20:71:e9: 69:3c:d3:5a:a5:a0:71:21:5d:a3:b7:06:04:f6:d4:30:4e:64: 2d:2c:a8:e3:ec:c7:80:a1:37:13:4c:06:36:45:b1:a3:e9:fb: e2:3d:8b:17:f8:67:8d:24:52:d3:8b:4c:7c:90:b0:a0:70:58: ab:49:fa:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSWvWT3OoP5AgtetyjztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWEwZmMwMTJlZmI4OTY1MGE3N2U2ZmJkMTJkY2FiZGE0 MjhjYjAwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhkODY3Y2RhY2JmY2VhOWI4ZjRjMmI0YzgzZTc1YWJiYzA4M2EzMWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lwUiMHaukhVuTToiBZSE6rOFgHu 3JPDmzibCBZ2hm1FJm/xObMdT+VBLwB0lr0Paa9we3U7zWLvRizkwKSl15zIJ05C BefFUOhV5+2AlItukFuVzfhDgpLofg3gMUhX9V7BncKpol6AjuK+xcg/K/uztDzQ UJ6Geitvrt7quRX4A6Sv/q7KLKPZcjdf8+M/pVwfWZlAxJjg76MdWJrSU+9fpJ4q jDHk9v+Wygnlquwy+shsODeUKngL5swAL5hI9YCxJMloLfP8aaGnpUs6N/9TGuic fWwjU0HrRqURDQQfLPcPnZffndBm5tO6pd2Ae8DgKQeSPCTQbp+PWueHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhnzay/zqm49MK0yD51q7wIOjG5MB8GA1UdIwQY MBaAFFcaD8AS77iWUKd+b70S3KvaQoywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUt OGI0OWRhYjE2NmE0LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUtOGI0OWRhYjE2NmE0 LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsNWOz9S vYzEcw+doDDdmAg2qpAiMTg9Jl5HAyeIhRn17Il+wROD8P4CH/9EaeaPDsc71/po fdVDz9+09dvgwX4tSJvbTbe4W/IV0KlVD4XfPgdGBokyVnISZ+81hgPFCg6du0Rj AJwqI9PuALZByYwv4xuxKtAZYSi+AIOFtKiPXsb+wAfl3+kL8TVoPcgMeJUzr+if dSdRzAcrlj7piZuGe9cEuUibdUplJ+orkrvcE12/0ndjnIxxRFFm6+w7tms3IHHp aTzTWqWgcSFdo7cGBPbUME5kLSyo4+zHgKE3E0wGNkWxo+n74j2LF/hnjSRS04tM fJCwoHBYq0n6OQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:08 2025 by rpki-client