This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json) Hash identifier: tuiAEyCcnYKvvYkV/k5OBMHo+kP6MQ5m9Wo/62GZJEs= Subject key identifier: DC:B8:BD:DA:D2:DC:DD:30:A2:93:21:95:58:DB:E0:2E:07:D8:07:1F Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e Certificate serial: 019B40FF7E0213E686F9CB6D477264B334BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft Manifest number: 1273 Signing time: Sun 21 Dec 2025 13:00:44 +0000 Manifest this update: Sun 21 Dec 2025 13:00:44 +0000 Manifest next update: Mon 22 Dec 2025 13:00:44 +0000 Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=) 2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: dfAKtp+nzPF2Y1MQ0MnqbMq7W8Uh6XtWaYeqwHlFtP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:7e:02:13:e6:86:f9:cb:6d:47:72:64:b3:34:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e Validity Not Before: Dec 21 13:00:44 2025 GMT Not After : Dec 22 13:00:44 2025 GMT Subject: CN=dcb8bddad2dcdd30a293219558dbe02e07d8071f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:db:2c:84:69:3f:c7:7d:1e:16:55:ce:e6: 0d:be:0e:d8:99:bd:50:36:4d:15:18:67:eb:4a:0d: c1:90:a9:da:2a:a0:3d:c4:f9:b4:62:79:72:fe:cb: f5:59:b3:a8:38:84:b0:b4:64:10:2a:91:58:a3:88: a9:74:86:66:0e:01:4f:33:ec:59:80:10:5f:20:3b: 7d:1d:c6:e1:6b:85:d7:85:bf:f8:72:24:d2:db:4a: 6b:e4:5b:58:1f:bd:22:c0:24:cd:aa:d8:04:8c:d2: c7:76:93:19:29:98:4d:64:f5:53:63:a9:ef:3e:79: c2:ae:80:76:8a:4c:11:ae:2f:7d:bc:14:12:77:ed: 7c:f6:23:c6:f4:41:96:bb:bf:f0:44:e2:32:ff:e8: f1:5e:4c:57:38:c9:49:2c:2f:cc:b1:09:b9:d1:49: b5:ec:b6:95:5e:a8:c9:bc:7c:3a:94:31:ff:0c:89: bb:fd:43:12:50:89:cd:19:86:26:d2:6f:0c:e7:50: 76:0e:b8:e8:25:62:c7:32:fb:cf:31:fd:3d:27:29: 42:d6:d5:39:4e:cd:42:35:97:a4:73:6c:42:f9:52: d4:08:da:05:9e:25:82:a5:51:f2:2b:df:c9:b4:55: 21:91:37:f3:e8:1e:b0:65:50:aa:4d:69:55:e8:d2: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B8:BD:DA:D2:DC:DD:30:A2:93:21:95:58:DB:E0:2E:07:D8:07:1F X509v3 Authority Key Identifier: keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:56:a1:4d:ca:19:b6:36:f5:1d:47:3d:3a:85:f0:dc:15:ab: 57:fc:92:42:1f:df:c4:a7:7e:f0:ba:89:83:2d:d9:68:31:82: fa:0e:5b:18:c3:72:f8:8f:01:65:13:5b:f2:af:52:16:67:69: e8:ab:3a:85:4f:e2:71:1b:88:95:45:94:ca:01:f0:92:5f:1e: 07:26:b8:cf:8e:ba:f3:9c:ac:54:51:8f:87:60:8d:d5:63:7e: 4a:62:39:5b:de:4f:16:6d:6f:04:d4:3b:6a:0e:cf:3f:ac:49: 31:2f:cc:a7:a2:8e:3a:23:e0:37:c0:f4:88:a1:7d:5d:5a:ce: 0a:2e:75:76:94:21:6b:23:80:c2:db:5d:d3:ac:72:5f:a3:5d: ee:1b:02:d5:cd:df:f3:ce:dc:6b:c5:0a:3f:9c:f0:c6:b2:6a: 65:fe:56:4e:95:73:a2:ca:cf:59:0b:f3:cc:10:90:55:e1:31: ec:22:04:76:06:90:b4:06:60:72:4d:0a:cc:90:af:9d:18:f2: db:25:38:cb:76:14:fb:2d:13:14:c1:6b:f6:96:5d:df:6d:86: 35:86:ab:3e:0d:3a:f8:04:74:96:4c:dd:0a:45:db:2e:34:a3: f2:31:d1:a6:17:c4:eb:97:10:eb:a0:79:27:a3:53:c9:bc:fd: 14:59:f0:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/34CE+aG+cttR3JkszS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MWM3Y2NjNTIzNzY3ODczNzQwOTJlYWZhYzI2MjNlMDU3 MWE4MWUwHhcNMjUxMjIxMTMwMDQ0WhcNMjUxMjIyMTMwMDQ0WjAzMTEwLwYDVQQD EyhkY2I4YmRkYWQyZGNkZDMwYTI5MzIxOTU1OGRiZTAyZTA3ZDgwNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1fbLIRpP8d9HhZVzuYNvg7Ymb1Q Nk0VGGfrSg3BkKnaKqA9xPm0Ynly/sv1WbOoOISwtGQQKpFYo4ipdIZmDgFPM+xZ gBBfIDt9Hcbha4XXhb/4ciTS20pr5FtYH70iwCTNqtgEjNLHdpMZKZhNZPVTY6nv PnnCroB2ikwRri99vBQSd+189iPG9EGWu7/wROIy/+jxXkxXOMlJLC/MsQm50Um1 7LaVXqjJvHw6lDH/DIm7/UMSUInNGYYm0m8M51B2DrjoJWLHMvvPMf09JylC1tU5 Ts1CNZekc2xC+VLUCNoFniWCpVHyK9/JtFUhkTfz6B6wZVCqTWlV6NIZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy4vdrS3N0wopMhlVjb4C4H2AcfMB8GA1UdIwQY MBaAFFYcfMxSN2eHN0CS6vrCYj4FcageMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQt YzE3MDA5MTI4M2ViLzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQtYzE3MDA5MTI4M2Vi LzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1ahTcoZ tjb1HUc9OoXw3BWrV/ySQh/fxKd+8LqJgy3ZaDGC+g5bGMNy+I8BZRNb8q9SFmdp 6Ks6hU/icRuIlUWUygHwkl8eBya4z46685ysVFGPh2CN1WN+SmI5W95PFm1vBNQ7 ag7PP6xJMS/Mp6KOOiPgN8D0iKF9XVrOCi51dpQhayOAwttd06xyX6Nd7hsC1c3f 887ca8UKP5zwxrJqZf5WTpVzosrPWQvzzBCQVeEx7CIEdgaQtAZgck0KzJCvnRjy 2yU4y3YU+y0TFMFr9pZd322GNYarPg06+AR0lkzdCkXbLjSj8jHRphfE65cQ66B5 J6NTybz9FFnwAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:47:17 2025 by rpki-client