This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json) Hash identifier: 2Dp4Z22vpQr45xKKA6lVL/YfIePq90rz8zN3WSIyZ+I= Subject key identifier: A5:92:C3:EF:1E:D0:7F:00:F3:41:3B:6C:57:E0:36:F8:BF:E5:46:34 Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9 Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9 Certificate serial: 019AF19B3C40C5C5F45B1FC48DDBB6DD000A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft Manifest number: 09CB Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: FSb-Rvye6YoA1Ii-rCKundZ-HD8.roa (hash: wEXQWTLVPy1UwtI4vOgrpyaszSEDzsytRnOaOtWiUUo=) 2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: dp3q880rvDCML0MXhN4aWIF3B5e6zMlWOdK6KwOtmb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3c:40:c5:c5:f4:5b:1f:c4:8d:db:b6:dd:00:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=a592c3ef1ed07f00f3413b6c57e036f8bfe54634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:e3:55:06:84:4f:fe:52:4f:e1:14:66:7e: c8:88:26:db:02:ec:43:10:93:5e:cd:ce:c0:c4:8f: 43:24:32:f3:76:21:94:03:03:66:4e:f5:a9:ad:d8: 48:2c:ab:87:d5:ae:a2:03:37:b3:9e:c1:1e:a0:39: 42:18:fb:9e:56:45:16:99:0a:77:70:cd:3d:d4:1a: 80:d5:aa:14:96:31:dc:16:38:ee:20:22:e9:d3:3c: 11:58:ae:e8:24:47:a3:6f:6d:bb:03:bc:03:e9:7e: ff:d4:5d:48:a3:9c:88:d7:c9:72:d4:c7:8b:26:33: 0b:4f:b8:1d:42:11:61:c8:48:21:75:12:0d:6b:1f: 9c:33:8b:54:66:d3:54:59:28:07:41:d9:0b:a2:df: d7:cd:2a:64:ac:c8:af:e2:e4:10:f8:48:73:1a:29: 28:43:5b:a0:31:b9:a9:97:39:9d:cd:d2:6b:55:cc: 2a:e6:30:d6:76:65:3f:58:82:22:7e:e3:7c:81:1b: ad:cd:48:ed:67:32:fd:41:88:fe:8d:4f:a9:4c:a3: 04:a5:f6:92:d1:c4:42:1b:40:28:c0:a7:b2:67:55: a2:7b:fc:24:d8:90:be:ec:49:0b:30:9c:39:b1:a5: fd:0d:9b:9c:c4:2e:14:13:e1:ca:d1:b7:ac:7e:ba: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:92:C3:EF:1E:D0:7F:00:F3:41:3B:6C:57:E0:36:F8:BF:E5:46:34 X509v3 Authority Key Identifier: keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:04:9c:1e:25:53:20:0c:da:e4:1a:00:ad:aa:58:35:d7:a0: be:13:58:98:21:0c:f0:47:d9:f7:99:f1:da:a3:c3:66:90:2e: d8:4d:9a:e7:69:61:39:b6:96:f3:ce:b6:9f:a9:66:25:05:06: 84:96:0b:13:c4:1c:8f:36:2f:3e:e0:82:76:35:2b:1b:15:e0: b0:ee:82:d0:17:03:ea:91:c8:43:3f:43:4c:13:e4:69:64:9c: 54:8d:2a:07:cc:9c:78:cf:a0:82:b2:12:2e:ab:b1:26:ee:27: 8a:b4:97:4b:4a:34:a4:4b:ef:d7:9b:56:c7:cd:9c:87:c8:84: 8a:4f:34:f1:52:34:d8:67:3a:85:d0:16:ac:a1:2c:7b:f6:71: 45:cf:5d:d5:c6:3d:cf:fe:34:42:57:80:5a:5c:89:cd:75:64: 41:59:fd:79:20:ba:f2:5a:e4:6a:43:1a:54:59:8b:75:a5:74: e9:89:c8:6a:2f:24:69:e8:46:1c:46:3b:38:99:3b:34:a2:eb: 1b:23:df:22:84:d0:76:60:de:9e:ea:a8:98:4d:24:2a:e3:cd: 54:44:e2:8a:28:cf:32:e1:ee:d8:5a:7a:db:ae:ee:2a:6b:5d: 15:a7:f7:ae:24:57:3b:9c:18:96:af:6e:fd:1f:ff:8c:29:50: c5:a9:9c:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzxAxcX0Wx/Ejdu23QAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzhlZWIyNmMzOWRmMGYxOTRlNTBkNzY0MTk4ZDkwZTFm M2I1YzkwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD EyhhNTkyYzNlZjFlZDA3ZjAwZjM0MTNiNmM1N2UwMzZmOGJmZTU0NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdfjVQaET/5ST+EUZn7IiCbbAuxD EJNezc7AxI9DJDLzdiGUAwNmTvWprdhILKuH1a6iAzeznsEeoDlCGPueVkUWmQp3 cM091BqA1aoUljHcFjjuICLp0zwRWK7oJEejb227A7wD6X7/1F1Io5yI18ly1MeL JjMLT7gdQhFhyEghdRINax+cM4tUZtNUWSgHQdkLot/XzSpkrMiv4uQQ+EhzGiko Q1ugMbmplzmdzdJrVcwq5jDWdmU/WIIifuN8gRutzUjtZzL9QYj+jU+pTKMEpfaS 0cRCG0AowKeyZ1Wie/wk2JC+7EkLMJw5saX9DZucxC4UE+HK0besfrohYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWSw+8e0H8A80E7bFfgNvi/5UY0MB8GA1UdIwQY MBaAFLw47rJsOd8PGU5Q12QZjZDh87XJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82MWIyM2MtYTU4Ni00MmMwLTlkZWQt MDUwZGExMTQ5MWU3LzEvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82MWIyM2MtYTU4Ni00MmMwLTlkZWQtMDUwZGExMTQ5MWU3 LzEvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgScHiVT IAza5BoArapYNdegvhNYmCEM8EfZ95nx2qPDZpAu2E2a52lhObaW8862n6lmJQUG hJYLE8QcjzYvPuCCdjUrGxXgsO6C0BcD6pHIQz9DTBPkaWScVI0qB8yceM+ggrIS LquxJu4nirSXS0o0pEvv15tWx82ch8iEik808VI02Gc6hdAWrKEse/ZxRc9d1cY9 z/40QleAWlyJzXVkQVn9eSC68lrkakMaVFmLdaV06YnIai8kaehGHEY7OJk7NKLr GyPfIoTQdmDenuqomE0kKuPNVETiiijPMuHu2Fp6267uKmtdFaf3riRXO5wYlq9u /R//jClQxamcgg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:12 2025 by rpki-client