This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json) Hash identifier: n0uWxrDYBOELDN/7NR48teyDzkhZSKNXoF9cEjWrmts= Subject key identifier: 5D:75:7B:B0:4D:FE:D8:30:0D:96:90:7B:92:8C:F4:6E:78:A3:49:B6 Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b Certificate serial: 019AF12DE775792C6CDA947ECF82323B1D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft Manifest number: 153D Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=) 2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: PYR9OtA/hmSA/rGHXIAGFFtJ68sZSL5Dqnay5U8+f78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e7:75:79:2c:6c:da:94:7e:cf:82:32:3b:1d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=5d757bb04dfed8300d96907b928cf46e78a349b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:bc:b5:29:cb:3c:3b:18:e4:03:30:2d:14: dc:5f:ac:1a:70:f1:39:28:c4:4c:6e:ef:95:96:f6: 28:40:14:d1:00:73:84:74:ce:c8:6a:03:d4:a3:07: 2d:c8:6a:3f:38:27:6c:b6:a7:09:42:a2:f7:c9:2c: 28:fa:e8:07:ab:85:a3:9a:40:bb:66:05:7a:66:1b: 9d:75:f3:9b:ce:7f:e0:03:de:1a:34:40:ca:3a:09: 1c:c5:1c:d5:e6:7e:35:4e:cc:8b:39:99:0c:25:b7: f1:6b:a5:80:0c:83:8d:c5:72:d1:f1:6a:57:55:0c: e3:d5:51:c4:b5:55:94:fe:a7:84:ec:53:ea:fc:68: 89:96:25:67:e8:e2:1f:d0:0f:b2:c5:b6:1f:c9:2a: 6c:ea:76:82:4e:4b:b4:a5:c9:f2:da:d8:d5:1a:7f: ea:1d:74:6b:21:59:67:df:11:6c:dc:8e:99:61:87: 6b:85:e9:43:4e:15:d6:5e:dd:fc:ad:2c:a4:86:6c: f4:81:23:74:0b:21:5d:84:2e:7a:99:66:10:44:9e: 12:f7:b7:21:0d:20:9c:2c:05:0e:9c:b2:94:c2:5c: ed:e5:7c:81:99:c2:37:5a:d0:c6:7a:91:f0:43:c6: 65:e5:62:f3:bf:5c:55:e4:75:cd:86:56:76:4d:fa: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:75:7B:B0:4D:FE:D8:30:0D:96:90:7B:92:8C:F4:6E:78:A3:49:B6 X509v3 Authority Key Identifier: keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:27:33:ac:18:40:2c:45:96:b9:32:7c:a3:fb:11:e3:90:df: ee:72:3e:d2:cf:08:9b:68:74:f6:09:ba:9c:34:7e:7f:69:3f: 19:29:7b:f7:97:36:ca:ac:3a:c3:86:43:7c:89:26:4f:3d:f4: b5:1e:b2:82:4f:28:05:b6:c0:a8:a4:1a:47:d7:95:35:38:d5: 5e:ef:4e:16:09:63:72:66:06:a8:27:ae:66:92:4b:c9:73:1a: ab:f3:e3:55:85:15:46:5e:a2:e0:94:79:24:4d:97:d3:af:ca: 58:94:34:36:cb:e0:63:44:ba:00:69:0c:69:75:2f:8e:09:57: 80:f2:2a:18:d0:a6:b5:94:4d:91:76:f5:bd:fa:63:20:d5:0f: 93:90:fa:8f:f3:18:19:1b:12:40:31:48:9a:6c:a6:26:60:e3: 58:97:6b:23:ba:0e:5f:58:12:11:bc:80:24:fb:19:4c:ea:e4: 4c:e9:c3:06:28:50:cb:03:3d:ad:94:fa:8c:0e:b4:52:03:96: 88:af:d1:ae:54:82:94:ad:44:0f:fa:e4:99:a6:ec:70:71:ff: 8f:fe:7f:d6:b0:aa:21:f1:5c:b2:5f:2e:2e:67:fa:4f:6a:2c: eb:da:69:5e:42:04:c1:96:b9:b9:14:a7:4d:90:fa:3d:ad:82: 1b:25:9f:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLed1eSxs2pR+z4IyOx0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl NThmOWIwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD Eyg1ZDc1N2JiMDRkZmVkODMwMGQ5NjkwN2I5MjhjZjQ2ZTc4YTM0OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkC8tSnLPDsY5AMwLRTcX6wacPE5 KMRMbu+VlvYoQBTRAHOEdM7IagPUowctyGo/OCdstqcJQqL3ySwo+ugHq4WjmkC7 ZgV6ZhuddfObzn/gA94aNEDKOgkcxRzV5n41TsyLOZkMJbfxa6WADIONxXLR8WpX VQzj1VHEtVWU/qeE7FPq/GiJliVn6OIf0A+yxbYfySps6naCTku0pcny2tjVGn/q HXRrIVln3xFs3I6ZYYdrhelDThXWXt38rSykhmz0gSN0CyFdhC56mWYQRJ4S97ch DSCcLAUOnLKUwlzt5XyBmcI3WtDGepHwQ8Zl5WLzv1xV5HXNhlZ2TfrfYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF11e7BN/tgwDZaQe5KM9G54o0m2MB8GA1UdIwQY MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3 LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiczrBhA LEWWuTJ8o/sR45Df7nI+0s8Im2h09gm6nDR+f2k/GSl795c2yqw6w4ZDfIkmTz30 tR6ygk8oBbbAqKQaR9eVNTjVXu9OFgljcmYGqCeuZpJLyXMaq/PjVYUVRl6i4JR5 JE2X06/KWJQ0NsvgY0S6AGkMaXUvjglXgPIqGNCmtZRNkXb1vfpjINUPk5D6j/MY GRsSQDFImmymJmDjWJdrI7oOX1gSEbyAJPsZTOrkTOnDBihQywM9rZT6jA60UgOW iK/RrlSClK1ED/rkmabscHH/j/5/1rCqIfFcsl8uLmf6T2os69ppXkIEwZa5uRSn TZD6Pa2CGyWfpw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:20 2025 by rpki-client