This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json) Hash identifier: +HWLyLNQlpSgbGpdYmDlZrTre53wbGU9TIXjM2OejVw= Subject key identifier: FF:20:2E:76:D4:28:B6:1B:74:DE:94:2C:F1:C8:BE:F7:42:E0:9C:E3 Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e Certificate serial: 019AF5AE8DADCE5491D958E82D80993406AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft Manifest number: 124C Signing time: Sat 06 Dec 2025 22:00:48 +0000 Manifest this update: Sat 06 Dec 2025 22:00:48 +0000 Manifest next update: Sun 07 Dec 2025 22:00:48 +0000 Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=) 2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: ppMnl4ZazS0IYio1on7jGCxHO4Z1mplg/EswCWK9y9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:8d:ad:ce:54:91:d9:58:e8:2d:80:99:34:06:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e Validity Not Before: Dec 6 22:00:48 2025 GMT Not After : Dec 7 22:00:48 2025 GMT Subject: CN=ff202e76d428b61b74de942cf1c8bef742e09ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:04:a9:c5:6f:61:89:09:54:6a:f0:c8:1c: 4d:be:6d:2a:e2:3f:9f:3a:30:78:ed:68:43:92:ff: 1c:99:a4:35:7a:92:33:22:d4:66:b6:4c:cd:93:e3: fc:ba:b7:74:ab:d5:27:61:65:aa:ba:a6:9f:0a:73: 60:d7:43:20:76:c3:bb:58:a7:c2:7f:d1:cb:77:07: 37:88:04:f7:43:07:76:db:53:8f:51:e2:f9:1f:81: b7:c5:b3:30:d8:d3:18:b7:50:85:3f:8a:48:de:09: 9d:9a:3d:6c:4c:b4:ce:1a:66:ae:65:78:72:b8:7d: 81:fc:6c:9e:3b:32:81:8d:7b:f9:1b:9a:5b:5a:f6: 9f:c6:8c:8f:83:b8:ba:dc:9f:df:00:8d:8f:56:08: 8c:90:8d:f4:9f:7b:89:b1:c0:34:22:0e:f1:b2:78: e4:49:c5:c0:a8:7d:ea:0e:73:23:91:ec:6f:2b:9f: 6f:de:51:b3:3b:de:47:ca:bb:23:84:11:47:b3:42: c0:f0:44:27:6d:14:17:8c:8a:ee:1b:1e:59:97:8b: 19:2b:18:fe:11:b4:df:69:7c:df:5b:8e:11:84:50: f9:ae:d1:ae:e7:e4:26:eb:28:dd:d6:5d:46:fa:46: 32:1b:36:fa:1e:f8:b5:9d:ce:17:c8:74:6f:21:2e: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:20:2E:76:D4:28:B6:1B:74:DE:94:2C:F1:C8:BE:F7:42:E0:9C:E3 X509v3 Authority Key Identifier: keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:00:43:40:09:7c:e6:f9:dd:24:21:9b:b0:7e:c2:d7:4d:2d: 81:dd:2f:de:ba:4e:a6:43:1a:ca:28:02:19:58:f9:7c:d2:26: 14:0e:7b:69:e2:cf:d4:1c:f6:a4:ff:24:1f:17:5c:1a:a4:63: 2d:87:b0:d7:00:57:c8:40:fa:26:db:43:bc:02:13:30:65:bb: c8:7c:56:66:f1:36:ac:07:be:f4:29:21:4b:12:97:b9:da:27: de:b5:e5:80:d9:a1:83:dc:83:ae:46:ac:19:6d:9e:9c:1b:5a: b6:31:59:62:6c:4b:3e:1c:85:bb:6c:45:4a:db:ca:8e:ff:76: cb:18:74:f3:e9:98:d4:e5:df:05:50:fe:5d:43:89:73:c1:37: a8:19:64:72:c4:7a:dc:56:f5:84:cf:90:50:84:b4:f6:de:12: a9:cc:ed:6c:a7:64:5d:51:8f:4f:05:22:50:82:ce:47:88:cc: a5:d6:78:13:eb:01:06:40:c4:18:a2:59:c0:8a:99:36:88:e7: 2a:14:50:34:28:a9:39:b1:56:26:7e:5d:c5:7a:5b:f3:0f:44: 27:c1:69:22:a9:ef:ac:00:dc:df:54:06:98:43:a0:89:6f:3b: 80:79:ab:cd:58:25:01:2e:58:9a:79:07:e5:72:ad:fc:83:c2: a4:5b:05:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ro2tzlSR2VjoLYCZNAaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MWM3Y2NjNTIzNzY3ODczNzQwOTJlYWZhYzI2MjNlMDU3 MWE4MWUwHhcNMjUxMjA2MjIwMDQ4WhcNMjUxMjA3MjIwMDQ4WjAzMTEwLwYDVQQD EyhmZjIwMmU3NmQ0MjhiNjFiNzRkZTk0MmNmMWM4YmVmNzQyZTA5Y2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU0EqcVvYYkJVGrwyBxNvm0q4j+f OjB47WhDkv8cmaQ1epIzItRmtkzNk+P8urd0q9UnYWWquqafCnNg10MgdsO7WKfC f9HLdwc3iAT3Qwd221OPUeL5H4G3xbMw2NMYt1CFP4pI3gmdmj1sTLTOGmauZXhy uH2B/GyeOzKBjXv5G5pbWvafxoyPg7i63J/fAI2PVgiMkI30n3uJscA0Ig7xsnjk ScXAqH3qDnMjkexvK59v3lGzO95HyrsjhBFHs0LA8EQnbRQXjIruGx5Zl4sZKxj+ EbTfaXzfW44RhFD5rtGu5+Qm6yjd1l1G+kYyGzb6Hvi1nc4XyHRvIS47SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8gLnbUKLYbdN6ULPHIvvdC4JzjMB8GA1UdIwQY MBaAFFYcfMxSN2eHN0CS6vrCYj4FcageMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQt YzE3MDA5MTI4M2ViLzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQtYzE3MDA5MTI4M2Vi LzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXABDQAl8 5vndJCGbsH7C100tgd0v3rpOpkMayigCGVj5fNImFA57aeLP1Bz2pP8kHxdcGqRj LYew1wBXyED6JttDvAITMGW7yHxWZvE2rAe+9CkhSxKXudon3rXlgNmhg9yDrkas GW2enBtatjFZYmxLPhyFu2xFStvKjv92yxh08+mY1OXfBVD+XUOJc8E3qBlkcsR6 3Fb1hM+QUIS09t4SqcztbKdkXVGPTwUiUILOR4jMpdZ4E+sBBkDEGKJZwIqZNojn KhRQNCipObFWJn5dxXpb8w9EJ8FpIqnvrADc31QGmEOgiW87gHmrzVglAS5YmnkH 5XKt/IPCpFsFDQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:32 2025 by rpki-client