This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json) Hash identifier: lslSZ0bYYWDbZ4ucPP3f+XQ/oVBnNmsIRKP4B1/HLBc= Subject key identifier: 21:45:37:3C:D5:CF:B6:0B:A4:8A:9A:26:B9:B0:E2:E1:89:0A:DC:52 Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1 Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1 Certificate serial: 019AF0BF82A9FB59DFF12F0F8978208FBE15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft Manifest number: 16F1 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=) 2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: 6wvGe97ccZxzIJ1jyk5CYvlo/lvX1+H+mfLYnKbaCkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:82:a9:fb:59:df:f1:2f:0f:89:78:20:8f:be:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=2145373cd5cfb60ba48a9a26b9b0e2e1890adc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:18:86:5f:65:ce:b3:0f:15:df:7e:36:a8: 9d:54:e3:63:24:45:ab:e6:2e:b1:06:3c:02:b2:ac: 38:e0:56:ab:a2:5f:62:37:94:56:bb:82:ce:f0:9b: cb:7b:65:32:e2:85:ae:2d:d8:a3:96:38:86:48:ff: 42:76:7f:de:bc:e2:b4:8b:34:21:27:e5:a7:6a:31: 4e:b2:de:1f:a2:73:82:33:1a:9f:cd:65:8c:e2:27: 08:2f:04:ec:12:f4:c4:5f:58:9b:b1:ff:4c:bb:78: 2b:53:7c:22:c7:6f:b2:20:b3:95:50:48:5d:c5:ce: d7:87:4a:b2:69:ac:bb:10:26:24:1c:11:58:a6:46: b2:f6:6c:7f:1f:50:0d:b7:91:2a:57:e2:35:99:3c: f6:2e:5a:0a:92:8e:0d:1f:c0:83:8e:03:ac:23:e8: 46:ad:c1:43:49:75:ab:51:74:3c:9f:4e:ac:3a:c1: 6b:6d:71:19:77:df:e4:03:f8:ce:51:3d:1d:17:13: 0e:6c:b4:0a:19:d2:e1:dd:36:6a:dd:1f:69:4a:5d: b5:3e:ca:be:76:bd:b6:31:33:3c:ff:ee:22:88:21: d0:0e:26:f4:a5:38:0c:0f:80:64:22:ae:a3:2b:f0: f3:54:da:1d:1a:99:3a:15:f1:90:10:80:0b:4c:71: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:45:37:3C:D5:CF:B6:0B:A4:8A:9A:26:B9:B0:E2:E1:89:0A:DC:52 X509v3 Authority Key Identifier: keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b8:6a:7c:b8:af:56:6f:36:73:0a:5f:d6:26:6e:6d:6d:5f: 04:f8:f8:aa:27:f1:fd:32:d1:a5:2f:c6:5b:1f:37:f2:ed:cb: 3c:59:84:e5:55:ba:79:e6:b2:fc:d0:61:fd:b1:48:d3:5c:f0: f6:ec:fb:81:63:b5:7f:51:fc:a3:2e:42:89:21:8b:44:7f:61: be:a4:cd:16:7d:4e:91:b8:48:86:9b:61:9d:77:c1:2b:5f:b9: de:64:9a:e2:09:16:aa:76:b0:43:11:1b:63:1f:f6:fc:16:b8: bd:c7:ff:20:4d:78:33:f5:56:50:7a:e8:3c:9b:b2:72:3c:ab: 95:70:a6:42:59:bf:4d:c4:f6:02:11:de:3f:a2:fa:df:15:af: 03:b5:80:44:b9:d8:ab:02:cf:b3:c8:cf:5e:3e:54:51:c4:62: d7:8b:f8:15:88:b2:68:14:2f:ea:e9:81:d2:0b:17:bf:0c:f8: 04:f0:1d:46:47:8c:18:1b:ff:71:3a:38:b2:45:18:eb:f7:fe: e1:d7:86:a0:4f:81:79:87:92:24:c3:c2:58:c9:83:34:13:22: 8d:70:1d:ef:73:9a:7c:95:32:82:dd:25:76:d9:c4:2a:76:90: 6f:5a:61:50:c1:31:69:db:b9:fb:b2:bc:0e:a1:c1:48:9f:7b: 24:c3:a0:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4Kp+1nf8S8PiXggj74VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw N2NmYTEwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD EygyMTQ1MzczY2Q1Y2ZiNjBiYTQ4YTlhMjZiOWIwZTJlMTg5MGFkYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplkYhl9lzrMPFd9+NqidVONjJEWr 5i6xBjwCsqw44Farol9iN5RWu4LO8JvLe2Uy4oWuLdijljiGSP9Cdn/evOK0izQh J+WnajFOst4fonOCMxqfzWWM4icILwTsEvTEX1ibsf9Mu3grU3wix2+yILOVUEhd xc7Xh0qyaay7ECYkHBFYpkay9mx/H1ANt5EqV+I1mTz2LloKko4NH8CDjgOsI+hG rcFDSXWrUXQ8n06sOsFrbXEZd9/kA/jOUT0dFxMObLQKGdLh3TZq3R9pSl21Psq+ dr22MTM8/+4iiCHQDib0pTgMD4BkIq6jK/DzVNodGpk6FfGQEIALTHEZ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFFNzzVz7YLpIqaJrmw4uGJCtxSMB8GA1UdIwQY MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt NGQ2ZDEyNTZiZjliLzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbhqfLiv Vm82cwpf1iZubW1fBPj4qifx/TLRpS/GWx838u3LPFmE5VW6eeay/NBh/bFI01zw 9uz7gWO1f1H8oy5CiSGLRH9hvqTNFn1OkbhIhpthnXfBK1+53mSa4gkWqnawQxEb Yx/2/Ba4vcf/IE14M/VWUHroPJuycjyrlXCmQlm/TcT2AhHeP6L63xWvA7WARLnY qwLPs8jPXj5UUcRi14v4FYiyaBQv6umB0gsXvwz4BPAdRkeMGBv/cTo4skUY6/f+ 4deGoE+BeYeSJMPCWMmDNBMijXAd73OafJUygt0ldtnEKnaQb1phUMExadu5+7K8 DqHBSJ97JMOg1g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:29 2025 by rpki-client