This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json) Hash identifier: V/F0uKTV7qKrnaQZ73oFYTUdjZ/xQuOu+H7SBG4cydc= Subject key identifier: 07:32:94:03:21:6F:DD:C9:8F:E5:9D:A8:0D:A5:DB:2A:00:37:C3:3F Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162 Certificate serial: 019B21E259468C17D9DC97882DE22E1729C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft Manifest number: 170C Signing time: Mon 15 Dec 2025 12:00:40 +0000 Manifest this update: Mon 15 Dec 2025 12:00:40 +0000 Manifest next update: Tue 16 Dec 2025 12:00:40 +0000 Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=) 2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: 1+F2CdTsVM4iDHB/Udh0VsQhFrIbkDpiREn3B3k+yuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:59:46:8c:17:d9:dc:97:88:2d:e2:2e:17:29:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd92eae9e11699e4ce710580519776c300296162 Validity Not Before: Dec 15 12:00:40 2025 GMT Not After : Dec 16 12:00:40 2025 GMT Subject: CN=07329403216fddc98fe59da80da5db2a0037c33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cc:92:5d:ab:05:6d:21:cc:49:2c:45:61:cd: 7c:e3:4e:8a:f4:ea:98:51:5e:43:f4:66:92:d1:d5: 7f:86:20:98:6a:f8:4c:cc:5e:53:29:27:cd:e0:1c: c1:9e:8c:73:ba:18:1e:1e:20:fb:36:11:a3:93:ea: c8:84:fb:46:a2:a0:43:dd:78:60:31:9f:4b:8d:c3: 77:59:ce:52:df:02:9f:70:ca:f9:c1:90:69:b3:1f: 06:ac:fe:8d:63:7c:9d:d2:a4:f9:cb:73:dc:c5:88: ba:f3:96:1c:e4:02:11:14:1c:6d:01:ad:13:c2:d1: 01:75:94:4b:d2:76:9d:90:51:25:a9:41:98:90:4d: c0:99:2f:c4:a4:f6:91:f6:54:eb:da:10:dc:2a:80: 73:6e:67:2f:d1:c3:a8:ce:37:85:50:94:2c:b9:4e: cf:dd:4f:7c:fd:f8:8e:be:ec:85:ed:e5:50:3e:e0: a6:63:de:62:a1:dd:df:98:4b:35:b2:98:fc:a6:36: a9:f7:ed:59:a6:2e:ce:ae:1b:cf:c0:2c:c8:28:48: 4c:e8:b3:02:7f:b9:34:23:59:6e:18:37:01:14:32: 93:62:70:76:06:fb:49:ac:ab:13:0e:f6:a1:b3:98: a6:20:74:43:d8:42:cb:a8:f9:92:6c:76:ba:73:26: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:32:94:03:21:6F:DD:C9:8F:E5:9D:A8:0D:A5:DB:2A:00:37:C3:3F X509v3 Authority Key Identifier: keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d2:6f:c4:36:1e:46:05:da:88:07:bc:c2:11:93:54:f1:05: 67:d1:4c:0b:a6:ab:84:77:b4:0e:5d:0f:cd:0e:f8:bc:4c:07: 70:17:26:57:96:1a:3d:c4:e2:c9:8e:0b:9e:1b:34:32:02:93: b6:a9:fd:74:c7:21:5c:33:bb:0f:05:44:f4:82:b1:a4:3e:48: 62:44:75:48:74:8f:f7:ea:25:ff:d9:90:b1:4b:ba:22:29:7a: a1:a0:d3:18:14:ec:bf:ba:ee:f6:a6:94:7d:05:15:bc:a4:8e: b7:96:ac:94:33:f0:2c:b9:44:25:53:18:16:04:60:d6:b6:b6: 90:d2:4f:31:0f:ef:a3:a2:86:49:88:4d:2e:55:b7:c3:f7:44: 18:54:78:ad:53:d8:01:25:d1:07:c6:53:6f:36:01:be:65:2c: a9:7e:ce:f2:f8:76:9e:dd:bd:57:d6:66:8a:8f:6d:b2:0e:a4: 47:5c:a6:cd:81:e7:bc:cd:0d:98:56:35:ca:f3:d9:88:f9:a1: e0:ba:0a:f0:bc:df:3c:33:a4:6a:dd:e0:1a:da:4d:8b:61:82: d2:46:75:9d:c8:c0:2b:e1:37:9a:42:33:75:fd:1a:88:bc:28: 1f:0b:d6:34:b6:40:4b:03:a8:24:66:fa:76:d0:68:ef:05:98: 8f:cc:e0:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4llGjBfZ3JeILeIuFynHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTJlYWU5ZTExNjk5ZTRjZTcxMDU4MDUxOTc3NmMzMDAy OTYxNjIwHhcNMjUxMjE1MTIwMDQwWhcNMjUxMjE2MTIwMDQwWjAzMTEwLwYDVQQD EygwNzMyOTQwMzIxNmZkZGM5OGZlNTlkYTgwZGE1ZGIyYTAwMzdjMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MySXasFbSHMSSxFYc18406K9OqY UV5D9GaS0dV/hiCYavhMzF5TKSfN4BzBnoxzuhgeHiD7NhGjk+rIhPtGoqBD3Xhg MZ9LjcN3Wc5S3wKfcMr5wZBpsx8GrP6NY3yd0qT5y3PcxYi685Yc5AIRFBxtAa0T wtEBdZRL0nadkFElqUGYkE3AmS/EpPaR9lTr2hDcKoBzbmcv0cOozjeFUJQsuU7P 3U98/fiOvuyF7eVQPuCmY95iod3fmEs1spj8pjap9+1Zpi7OrhvPwCzIKEhM6LMC f7k0I1luGDcBFDKTYnB2BvtJrKsTDvahs5imIHRD2ELLqPmSbHa6cyaXSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcylAMhb93Jj+WdqA2l2yoAN8M/MB8GA1UdIwQY MBaAFL2S6unhFpnkznEFgFGXdsMAKWFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2Qt YzhhOWNhYTNiYmU5LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2QtYzhhOWNhYTNiYmU5 LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodJvxDYe RgXaiAe8whGTVPEFZ9FMC6arhHe0Dl0PzQ74vEwHcBcmV5YaPcTiyY4Lnhs0MgKT tqn9dMchXDO7DwVE9IKxpD5IYkR1SHSP9+ol/9mQsUu6Iil6oaDTGBTsv7ru9qaU fQUVvKSOt5aslDPwLLlEJVMYFgRg1ra2kNJPMQ/vo6KGSYhNLlW3w/dEGFR4rVPY ASXRB8ZTbzYBvmUsqX7O8vh2nt29V9Zmio9tsg6kR1ymzYHnvM0NmFY1yvPZiPmh 4LoK8LzfPDOkat3gGtpNi2GC0kZ1ncjAK+E3mkIzdf0aiLwoHwvWNLZASwOoJGb6 dtBo7wWYj8zgJQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:10:16 2025 by rpki-client