This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft File: vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json) Hash identifier: 8ysEN4dehO5qo6F9KinWvOd/nqHcJgZnHAMMpVhhzec= Subject key identifier: 5E:5F:BD:E9:34:EB:EE:C3:6A:0B:97:16:2F:A0:AD:5C:9C:DC:0A:4B Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D Certificate issuer: /CN=be370733b8db614daa760a002c24048028300e2d Certificate serial: 019AF42DF8284A2D501B19A8C74A1CB3E4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 15:00:44 +0000 Manifest this update: Sat 06 Dec 2025 15:00:44 +0000 Manifest next update: Sun 07 Dec 2025 15:00:44 +0000 Files and hashes: 1: paMGJN73rjp1fa_w9RA1xrwwx18.roa (hash: Z6fxiaAqnra9zk/dGdgt7claLY2U/7DrFceSHabOI5E=) 2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: g873Sg4Z4/K7qA3OO8oxAIpvElecm+X6I3sZRq4TYEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f8:28:4a:2d:50:1b:19:a8:c7:4a:1c:b3:e4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be370733b8db614daa760a002c24048028300e2d Validity Not Before: Dec 6 15:00:44 2025 GMT Not After : Dec 7 15:00:44 2025 GMT Subject: CN=5e5fbde934ebeec36a0b97162fa0ad5c9cdc0a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:40:f0:80:7c:ca:2c:b8:77:e0:c6:0f:67: 9f:5b:44:43:ba:27:43:3c:ed:a9:32:0f:0e:cb:a2: e7:4c:26:e8:eb:bf:85:38:55:d7:91:d4:a8:1b:5c: 18:18:23:48:64:78:6b:fb:21:12:fd:1f:93:b5:8e: 84:7e:40:88:56:e4:e3:b1:c9:88:35:b4:9f:6b:71: 43:95:5b:13:46:35:a4:2e:21:26:5c:3b:e0:d9:22: 91:a3:dd:f3:d6:ad:5d:f4:2d:33:28:b9:9a:8b:ec: b5:7c:80:71:90:de:2f:d9:e8:85:b0:b6:87:65:c1: 08:23:d9:12:e8:7c:3b:50:71:42:53:56:fc:dc:0e: 92:c6:92:07:a8:a2:69:79:bd:62:5f:39:ea:96:6f: 75:79:c2:fa:bb:0b:80:c8:a8:7d:0e:40:59:b6:88: 0e:02:eb:d5:b6:c3:16:ad:b6:51:69:cd:19:10:7e: 0f:ce:72:03:c8:7b:d1:3b:76:79:ba:09:af:04:31: 1b:e4:cf:ff:c3:41:c2:08:ca:8a:8d:3f:41:99:e2: c0:df:30:95:c6:04:c4:e3:59:82:c3:54:65:11:db: 0e:6b:5b:80:5b:ce:ba:9e:03:61:8c:11:04:7f:9c: ed:53:89:a3:17:31:36:5e:5c:57:3f:9e:be:8d:b5: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5F:BD:E9:34:EB:EE:C3:6A:0B:97:16:2F:A0:AD:5C:9C:DC:0A:4B X509v3 Authority Key Identifier: keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:17:f6:48:c9:9b:17:76:12:4c:21:97:30:f8:33:70:04:a2: f7:9d:dc:65:e7:8d:a4:2c:5d:67:ad:df:36:c2:53:f0:db:73: 9f:b6:e4:94:11:18:89:5a:1f:fc:1d:e0:6c:c6:94:3f:c7:50: 61:af:12:81:81:9c:11:1c:f5:eb:bf:fd:40:0a:18:17:ae:92: f2:f2:f3:b9:0d:b6:e9:ee:ce:b1:56:0a:ed:3b:70:1b:41:98: 14:6d:6c:e4:10:7c:37:97:b9:ae:cc:1d:33:5c:98:12:46:93: d7:c8:07:93:b4:99:4b:88:bf:b9:5e:da:5d:e2:a4:c4:74:79: a2:dc:1f:51:2e:20:0f:fb:1e:b7:2a:d7:a2:7d:91:17:c6:f0: db:c9:d4:c8:fe:bf:c5:ea:94:b6:d1:0d:28:ab:c9:b9:dc:b0: 24:66:bd:c3:1c:bc:8b:4a:b0:40:ae:86:17:dd:4d:74:46:6b: 09:ca:46:ce:1c:1e:d6:fe:48:b4:41:7f:e7:cf:0f:57:45:f7: 78:27:e5:08:c4:93:52:41:58:68:e1:e6:15:d7:6a:15:6b:39: 5d:54:f9:eb:bc:d3:d6:b2:04:c6:f0:7b:33:e4:2e:23:5c:13: 87:ac:46:dd:a6:cd:14:42:93:05:fc:fd:87:c8:da:a9:1c:4c: a7:df:43:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfgoSi1QGxmox0ocs+T8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzcwNzMzYjhkYjYxNGRhYTc2MGEwMDJjMjQwNDgwMjgz MDBlMmQwHhcNMjUxMjA2MTUwMDQ0WhcNMjUxMjA3MTUwMDQ0WjAzMTEwLwYDVQQD Eyg1ZTVmYmRlOTM0ZWJlZWMzNmEwYjk3MTYyZmEwYWQ1YzljZGMwYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI5A8IB8yiy4d+DGD2efW0RDuidD PO2pMg8Oy6LnTCbo67+FOFXXkdSoG1wYGCNIZHhr+yES/R+TtY6EfkCIVuTjscmI NbSfa3FDlVsTRjWkLiEmXDvg2SKRo93z1q1d9C0zKLmai+y1fIBxkN4v2eiFsLaH ZcEII9kS6Hw7UHFCU1b83A6SxpIHqKJpeb1iXznqlm91ecL6uwuAyKh9DkBZtogO AuvVtsMWrbZRac0ZEH4PznIDyHvRO3Z5ugmvBDEb5M//w0HCCMqKjT9BmeLA3zCV xgTE41mCw1RlEdsOa1uAW866ngNhjBEEf5ztU4mjFzE2XlxXP56+jbVxSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5fvek06+7DaguXFi+grVyc3ApLMB8GA1UdIwQY MBaAFL43BzO422FNqnYKACwkBIAoMA4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84OTZhYjMtYzQ3OS00NzBhLThiYjkt MjQyMjJkODdmODhkLzEvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84OTZhYjMtYzQ3OS00NzBhLThiYjktMjQyMjJkODdmODhk LzEvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxf2SMmb F3YSTCGXMPgzcASi953cZeeNpCxdZ63fNsJT8Ntzn7bklBEYiVof/B3gbMaUP8dQ Ya8SgYGcERz167/9QAoYF66S8vLzuQ226e7OsVYK7TtwG0GYFG1s5BB8N5e5rswd M1yYEkaT18gHk7SZS4i/uV7aXeKkxHR5otwfUS4gD/setyrXon2RF8bw28nUyP6/ xeqUttENKKvJudywJGa9wxy8i0qwQK6GF91NdEZrCcpGzhwe1v5ItEF/588PV0X3 eCflCMSTUkFYaOHmFddqFWs5XVT567zT1rIExvB7M+QuI1wTh6xG3abNFEKTBfz9 h8jaqRxMp99DEQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:39:04 2025 by rpki-client