This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json) Hash identifier: xJ5ooEIrBuXR4GfCr+KhId428/gro/dLNOHbxvF9rL4= Subject key identifier: 23:D9:1F:14:BC:18:BA:49:F1:3E:AC:FD:6C:A0:1B:07:E7:5A:FF:11 Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697 Certificate serial: 019AF5AE823005516E63E2ECEBC1464D7DF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 22:00:45 +0000 Manifest this update: Sat 06 Dec 2025 22:00:45 +0000 Manifest next update: Sun 07 Dec 2025 22:00:45 +0000 Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=) 2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: M1X2UeZhGE03rCGRLJxdsx+O7B2on6y1S3kl99lJe44=) 3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:82:30:05:51:6e:63:e2:ec:eb:c1:46:4d:7d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697 Validity Not Before: Dec 6 22:00:45 2025 GMT Not After : Dec 7 22:00:45 2025 GMT Subject: CN=23d91f14bc18ba49f13eacfd6ca01b07e75aff11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:61:88:c1:0a:56:4c:5d:49:b5:b3:f6:ed: 58:11:14:39:bd:53:35:06:d0:1d:35:9d:7f:d5:fe: 1a:05:43:3f:c4:ee:f6:89:91:ec:ba:7c:6e:21:98: c5:6f:de:7a:35:51:96:e4:b3:a1:fe:89:4d:d3:2e: 62:9e:03:55:7e:96:ad:ab:94:46:63:81:8f:c2:27: bf:40:09:67:f1:e8:ac:63:bd:cd:b9:ab:08:c9:03: 7f:ba:51:31:fb:5a:54:ab:a9:f4:af:5f:f2:4f:40: 59:6e:47:77:6e:94:53:da:ba:7c:83:a4:57:68:33: 8b:f2:bb:56:a3:69:a1:62:67:33:23:d0:22:ec:74: dc:a8:69:cf:11:d7:c4:39:46:ae:d6:e7:25:34:92: 03:b7:31:04:57:18:97:82:0e:61:51:ee:b0:d0:cc: 86:99:85:90:ed:49:f3:52:3e:21:6a:eb:e2:b2:e6: 11:24:89:d9:85:e3:a3:d1:d0:f7:f2:44:e7:c4:a5: 59:b4:67:9d:ac:29:9f:c2:92:11:b6:09:22:da:23: 75:98:0f:2c:9f:18:eb:23:ea:f9:2c:19:f6:de:ee: 1c:04:e3:d0:f2:b9:42:b0:74:44:cf:04:d5:6b:90: 78:f3:4c:76:93:84:85:8e:aa:8f:57:68:99:df:a7: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D9:1F:14:BC:18:BA:49:F1:3E:AC:FD:6C:A0:1B:07:E7:5A:FF:11 X509v3 Authority Key Identifier: keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d5:06:2c:21:06:5a:30:ae:02:ef:2d:07:50:e0:92:40:f8: 9c:a6:97:de:9b:79:5e:02:57:ec:0f:6c:cc:df:d5:78:a3:0a: bf:0c:86:d3:29:a4:fa:9b:90:81:1f:7c:af:77:dd:ea:e3:b3: c5:56:96:7c:ea:1b:b0:c5:f7:b4:d4:72:af:13:14:ac:80:53: 31:a7:1c:bd:3e:ad:17:87:11:64:32:7e:6e:e9:19:35:83:9d: 76:2e:b0:38:e8:86:be:ef:55:20:0e:58:9b:36:e5:c5:aa:15: 68:99:6e:dd:7f:0d:23:f7:66:26:0c:a7:a3:92:ab:74:d3:ce: 0b:19:9d:ae:11:6c:80:b0:9a:2b:d1:76:2f:1a:9d:10:5b:16: a0:ca:0a:d9:53:49:fe:f9:f4:32:4d:7b:f0:4a:1d:5c:5b:4c: 6a:e6:0d:aa:36:62:26:91:f7:02:0f:a9:ad:67:f5:96:d7:52: 53:89:a9:75:70:26:39:b2:93:1d:83:40:8a:ea:d9:85:18:a2: 1a:cb:70:59:a0:86:e2:66:6f:05:f4:be:35:03:ce:b7:2e:47: 8a:eb:0a:98:28:f4:3b:11:33:03:49:fc:10:c1:07:76:36:39: b8:35:1c:14:4a:63:43:c7:e1:7a:d6:9c:7e:7e:06:da:22:c9: 4c:2c:1d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1roIwBVFuY+Ls68FGTX35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDZhZjgwNGVmNWE2MzZmNDY0ZTcxYThkNDFlOGQ0MDFh N2Y2OTcwHhcNMjUxMjA2MjIwMDQ1WhcNMjUxMjA3MjIwMDQ1WjAzMTEwLwYDVQQD EygyM2Q5MWYxNGJjMThiYTQ5ZjEzZWFjZmQ2Y2EwMWIwN2U3NWFmZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQNhiMEKVkxdSbWz9u1YERQ5vVM1 BtAdNZ1/1f4aBUM/xO72iZHsunxuIZjFb956NVGW5LOh/olN0y5ingNVfpatq5RG Y4GPwie/QAln8eisY73NuasIyQN/ulEx+1pUq6n0r1/yT0BZbkd3bpRT2rp8g6RX aDOL8rtWo2mhYmczI9Ai7HTcqGnPEdfEOUau1uclNJIDtzEEVxiXgg5hUe6w0MyG mYWQ7UnzUj4hauvisuYRJInZheOj0dD38kTnxKVZtGedrCmfwpIRtgki2iN1mA8s nxjrI+r5LBn23u4cBOPQ8rlCsHREzwTVa5B480x2k4SFjqqPV2iZ36cWnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPZHxS8GLpJ8T6s/WygGwfnWv8RMB8GA1UdIwQY MBaAFFQGr4BO9aY29GTnGo1B6NQBp/aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQt MWNhOWQyNTllMmFkLzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQtMWNhOWQyNTllMmFk LzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtUGLCEG WjCuAu8tB1DgkkD4nKaX3pt5XgJX7A9szN/VeKMKvwyG0ymk+puQgR98r3fd6uOz xVaWfOobsMX3tNRyrxMUrIBTMaccvT6tF4cRZDJ+bukZNYOddi6wOOiGvu9VIA5Y mzblxaoVaJlu3X8NI/dmJgyno5KrdNPOCxmdrhFsgLCaK9F2LxqdEFsWoMoK2VNJ /vn0Mk178EodXFtMauYNqjZiJpH3Ag+prWf1ltdSU4mpdXAmObKTHYNAiurZhRii GstwWaCG4mZvBfS+NQPOty5HiusKmCj0OxEzA0n8EMEHdjY5uDUcFEpjQ8fhetac fn4G2iLJTCwdJA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:06 2025 by rpki-client