This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json) Hash identifier: NtkfRn/Aj1aKwnAzahazcoBguZh16oZWJKCOuQEYYEM= Subject key identifier: E5:71:9A:26:8B:28:0B:CC:A8:FF:B8:2B:83:12:B4:D5:32:64:EF:4A Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4 Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4 Certificate serial: 019AF209A7F782C50BB529797EA034C0FEBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft Manifest number: 114C Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: A6rb1dzlDcV8JbvloxjZ9srng9Y.roa (hash: p6jxR8xYwMN0t2VYMZkdONNHxcFxVga3IwawawK72KQ=) 2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: MC+jz+ak0g1414UZhJv0UViQmtkFuS+jacybS0A1EOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a7:f7:82:c5:0b:b5:29:79:7e:a0:34:c0:fe:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4 Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=e5719a268b280bcca8ffb82b8312b4d53264ef4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:b5:28:b1:f9:4a:c9:11:4f:71:f7:e2:be: d2:ee:1f:40:dd:de:6d:8d:95:71:63:33:76:20:6c: 15:5d:3c:c6:ba:c7:52:ec:4e:2f:08:98:2b:cb:ac: da:fb:29:0d:5a:c8:fd:ae:50:98:16:f4:23:58:d1: 51:16:f7:ee:24:e9:ab:82:a0:37:8e:24:d6:c5:3e: 5d:dc:8f:5a:1e:28:24:13:5f:ad:d0:ed:36:cf:13: c3:b4:82:75:38:76:bf:e6:b0:a4:9c:9b:f7:e8:05: ca:95:dd:c2:a1:f6:7a:3d:e7:bf:aa:74:d0:33:1a: 55:03:92:62:55:13:6b:c7:c3:da:3a:fc:25:54:07: 74:9f:ff:2e:95:0c:23:8e:9c:c1:4d:60:2e:50:e7: d7:23:bc:ea:40:a1:8e:94:c9:fe:3e:b3:8d:ca:57: 27:ec:49:c0:20:b6:94:c4:a1:69:d7:22:30:56:60: f8:5c:6d:68:ee:15:20:14:3f:9e:81:fb:3c:32:0b: 25:02:60:16:ec:fd:e7:4f:16:e2:be:83:83:b1:2f: 9e:dc:61:ec:a4:85:76:f8:ea:46:26:57:a4:7f:63: 39:59:20:29:66:84:09:3d:0f:a8:72:2a:73:77:aa: f0:c8:ba:dd:c4:da:62:94:e3:32:64:c2:b9:64:d1: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:71:9A:26:8B:28:0B:CC:A8:FF:B8:2B:83:12:B4:D5:32:64:EF:4A X509v3 Authority Key Identifier: keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7e:16:16:70:41:a7:73:33:36:02:ae:cb:22:33:91:2d:a5: 86:7a:e1:03:03:ef:2d:2f:87:fc:e3:df:3c:0d:cc:83:dd:bc: f0:75:ee:a3:44:a9:f6:7b:a6:ec:e3:fe:91:4c:a0:34:7a:57: b2:bf:de:4d:2b:f0:92:2f:a5:68:73:22:69:fd:32:2a:75:27: aa:f5:02:1e:44:0b:af:e3:05:f1:70:ef:b4:77:e2:f4:63:e5: fc:e4:1f:17:42:b5:f9:28:20:28:74:a4:78:c7:f6:86:77:30: cb:20:97:1b:9c:fc:49:56:31:30:04:b6:3b:89:ee:0c:0b:c3: 12:eb:c0:0a:17:6a:42:44:1b:4b:d8:cc:d0:ea:dd:20:f2:27: ce:3e:69:2b:5b:2b:ff:7b:65:dc:1f:69:dc:78:f1:20:9a:91: 6c:59:2d:12:11:23:b5:1b:05:a9:db:1d:fc:62:41:61:9c:ec: 79:8f:d6:f1:c6:9c:35:a9:0c:b8:58:7c:63:c1:7d:5c:0e:83: 8f:ec:4b:30:27:fc:6a:d0:a3:1f:6b:2f:52:5d:77:08:fb:60: 28:e8:39:bd:0b:88:81:5e:4b:0a:ae:05:36:3c:18:ab:4d:73: 60:84:bc:48:2e:08:a1:cc:7b:e5:4a:8e:96:13:0f:1c:6e:bd: 71:ef:c1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaf3gsULtSl5fqA0wP6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTFlNTVmNzQ0ZTE0MTJiZDc1M2ZkMjc3Yjc3NDA4ZGNk ZjhjYjQwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD EyhlNTcxOWEyNjhiMjgwYmNjYThmZmI4MmI4MzEyYjRkNTMyNjRlZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS21KLH5SskRT3H34r7S7h9A3d5t jZVxYzN2IGwVXTzGusdS7E4vCJgry6za+ykNWsj9rlCYFvQjWNFRFvfuJOmrgqA3 jiTWxT5d3I9aHigkE1+t0O02zxPDtIJ1OHa/5rCknJv36AXKld3CofZ6Pee/qnTQ MxpVA5JiVRNrx8PaOvwlVAd0n/8ulQwjjpzBTWAuUOfXI7zqQKGOlMn+PrONylcn 7EnAILaUxKFp1yIwVmD4XG1o7hUgFD+egfs8MgslAmAW7P3nTxbivoODsS+e3GHs pIV2+OpGJlekf2M5WSApZoQJPQ+ocipzd6rwyLrdxNpilOMyZMK5ZNFv0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVxmiaLKAvMqP+4K4MStNUyZO9KMB8GA1UdIwQY MBaAFL2h5V90ThQSvXU/0ne3dAjc34y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zY2Q0NWYtMGI3OS00M2I3LWE5ZTYt YzBiY2VkYjM0Mjc0LzEvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zY2Q0NWYtMGI3OS00M2I3LWE5ZTYtYzBiY2VkYjM0Mjc0 LzEvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHn4WFnBB p3MzNgKuyyIzkS2lhnrhAwPvLS+H/OPfPA3Mg9288HXuo0Sp9num7OP+kUygNHpX sr/eTSvwki+laHMiaf0yKnUnqvUCHkQLr+MF8XDvtHfi9GPl/OQfF0K1+SggKHSk eMf2hncwyyCXG5z8SVYxMAS2O4nuDAvDEuvAChdqQkQbS9jM0OrdIPInzj5pK1sr /3tl3B9p3HjxIJqRbFktEhEjtRsFqdsd/GJBYZzseY/W8cacNakMuFh8Y8F9XA6D j+xLMCf8atCjH2svUl13CPtgKOg5vQuIgV5LCq4FNjwYq01zYIS8SC4Iocx75UqO lhMPHG69ce/BEw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:38:45 2025 by rpki-client