This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json) Hash identifier: VS9xn9+q9bxR0xDveyVqh87yHtBfGJZo2ciTwleXiOU= Subject key identifier: BB:5D:8C:E6:A6:CC:F0:4A:A7:A7:9C:7C:91:FD:39:40:C3:CC:E1:82 Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc Certificate serial: 019AF1D201D6AB9B7FA009DD37F44AC5CEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft Manifest number: 6B Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: 1-rB8XTQYqpP7MjgG7HR4P6rMeyU.roa (hash: o9F/zfrqIdfUaOEIn5d4Y/Rf/lN8VClY0SnZ+RAIGLc=) 2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: wkhLA6uxXE24Pil+RFQlyv2N07vJwVFHUzm4RXQkoU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:01:d6:ab:9b:7f:a0:09:dd:37:f4:4a:c5:ce:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=bb5d8ce6a6ccf04aa7a79c7c91fd3940c3cce182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:73:24:10:cf:05:0d:8d:4a:7c:49:03:86: 69:ef:29:cb:14:13:2c:5c:45:7b:06:2c:f0:0f:f8: 13:82:dd:6d:8d:a7:38:86:59:06:65:34:e8:76:34: aa:0a:d6:3a:7c:6e:44:61:d5:20:23:03:58:63:b2: aa:3b:99:9b:ea:c3:64:4e:8c:7f:2e:b9:43:30:70: 6d:4a:1a:56:70:49:c0:ba:69:0f:a2:69:97:d6:79: 0d:f9:6e:0f:62:54:2a:a3:76:09:a6:b4:2a:d4:dc: cd:6a:37:10:a7:75:bf:19:fa:8a:47:74:5d:88:a1: 16:59:2a:04:c2:f5:23:5d:1d:50:a6:c7:d1:40:42: a8:02:ea:72:76:d1:3e:8d:61:70:ea:c6:5a:95:f5: 07:da:aa:e9:35:7c:1c:f7:8f:48:ab:1f:a7:9a:71: 0d:41:d8:55:d9:9d:87:2e:d7:77:bf:49:3e:94:a0: 4d:3f:27:45:da:bb:5a:12:48:ff:e2:73:87:d5:a0: 8b:d9:43:95:89:7e:ee:24:70:b4:f0:59:cc:ae:49: b2:f2:bd:88:c1:72:b2:b2:5a:30:0b:cc:cf:29:6a: 1e:06:7f:0a:4b:d4:72:33:8f:d8:c1:3a:07:8d:ea: 12:0d:42:a5:72:a4:fd:dd:1b:51:28:78:ce:79:81: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5D:8C:E6:A6:CC:F0:4A:A7:A7:9C:7C:91:FD:39:40:C3:CC:E1:82 X509v3 Authority Key Identifier: keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:55:fd:92:0b:b0:82:7d:ea:76:6e:e6:dc:69:15:be:7e:cb: 60:ea:e7:d5:66:28:4a:46:52:5b:59:62:84:21:f1:84:d3:83: eb:92:9c:11:64:45:e7:17:b7:82:a1:7b:eb:89:51:a3:75:00: fa:be:8c:b9:50:3a:c1:9b:28:a5:22:ea:75:a8:43:09:cf:06: dc:5f:b5:67:cb:01:bc:9e:71:aa:99:ad:33:18:05:5a:23:dd: aa:27:e2:af:14:17:f0:9a:10:72:11:f1:b2:db:f4:a6:8b:12: f2:3a:b3:29:0d:34:0f:ad:b8:c9:ef:6d:42:f8:f0:7e:02:5d: bd:a5:d5:93:91:d0:00:9f:31:9b:b0:e0:9b:4e:7d:d2:ca:9e: f3:f6:de:0b:d3:fa:d1:67:ea:9d:58:65:8f:5c:64:b6:10:bd: 7f:cd:c8:cc:ba:5c:c4:06:3d:48:e8:6e:51:b2:48:ae:63:c4: af:c8:c2:ec:e5:8f:e6:8e:b4:df:91:e5:71:ed:b2:f6:6f:6d: e0:c8:41:bc:cd:9a:3a:fa:31:c1:fe:3c:e8:85:07:ab:2d:31: 67:d5:ba:7d:84:03:37:f4:f6:5d:30:7f:b5:93:c1:7d:1f:0c: e2:96:67:ae:63:c6:55:6b:98:1d:7d:3e:9f:aa:f6:e9:85:c5: 61:34:26:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gHWq5t/oAndN/RKxc6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWI0ODllNmQ5YjhjN2Q4M2NhMWU3MjdhNTk4NGRiZTU3 N2FmYmMwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EyhiYjVkOGNlNmE2Y2NmMDRhYTdhNzljN2M5MWZkMzk0MGMzY2NlMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03hzJBDPBQ2NSnxJA4Zp7ynLFBMs XEV7BizwD/gTgt1tjac4hlkGZTTodjSqCtY6fG5EYdUgIwNYY7KqO5mb6sNkTox/ LrlDMHBtShpWcEnAumkPommX1nkN+W4PYlQqo3YJprQq1NzNajcQp3W/GfqKR3Rd iKEWWSoEwvUjXR1QpsfRQEKoAupydtE+jWFw6sZalfUH2qrpNXwc949Iqx+nmnEN QdhV2Z2HLtd3v0k+lKBNPydF2rtaEkj/4nOH1aCL2UOViX7uJHC08FnMrkmy8r2I wXKyslowC8zPKWoeBn8KS9RyM4/YwToHjeoSDUKlcqT93RtRKHjOeYFSyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtdjOamzPBKp6ecfJH9OUDDzOGCMB8GA1UdIwQY MBaAFL8bSJ5tm4x9g8oecnpZhNvld6+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTIt MTgyY2Q0YWFjNDM2LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTItMTgyY2Q0YWFjNDM2 LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlX9kguw gn3qdm7m3GkVvn7LYOrn1WYoSkZSW1lihCHxhNOD65KcEWRF5xe3gqF764lRo3UA +r6MuVA6wZsopSLqdahDCc8G3F+1Z8sBvJ5xqpmtMxgFWiPdqifirxQX8JoQchHx stv0posS8jqzKQ00D624ye9tQvjwfgJdvaXVk5HQAJ8xm7Dgm0590sqe8/beC9P6 0WfqnVhlj1xkthC9f83IzLpcxAY9SOhuUbJIrmPEr8jC7OWP5o6035Hlce2y9m9t 4MhBvM2aOvoxwf486IUHqy0xZ9W6fYQDN/T2XTB/tZPBfR8M4pZnrmPGVWuYHX0+ n6r26YXFYTQmDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:19 2025 by rpki-client