This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json) Hash identifier: WEvP10Fc7c2jAZq9oVDgDOdVTpOxpuW83Hx8yGAUVO0= Subject key identifier: 38:69:78:5B:6E:FB:70:4D:A5:E4:DD:29:F1:0D:6C:A7:36:4C:6F:06 Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9 Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9 Certificate serial: 019AF27650E8B7EFBF7D0557E7216BBEF19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=) 2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: peWUkSZXOP5tMedfuHSL4unlayLYWieSKy3S2LMZYsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:50:e8:b7:ef:bf:7d:05:57:e7:21:6b:be:f1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9 Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=3869785b6efb704da5e4dd29f10d6ca7364c6f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:12:ed:12:77:4a:5e:9c:8c:4f:b6:19:04: 27:2f:3b:db:6d:f8:cf:1c:e3:d9:db:b3:5b:f4:13: 5a:29:71:a0:e0:fe:eb:22:2b:d1:70:bf:e5:0b:16: 96:0c:f7:3c:80:60:90:75:b2:6c:bc:5f:0b:d1:93: c2:a4:ff:00:a0:a3:74:b5:5a:64:8c:92:ae:6d:f9: 1c:26:9f:d7:36:af:ac:d1:94:67:5c:ae:16:2a:31: 2f:9c:09:43:3c:8d:94:84:9d:62:5e:59:27:a5:55: 8d:42:b6:90:71:e1:49:a0:7c:8e:78:91:3a:dc:4e: c1:e9:76:eb:b9:03:73:ec:bd:85:8c:e2:30:e9:40: 81:1b:cc:a8:2f:82:a4:e7:a2:f7:79:34:af:e0:8b: 2f:a9:c1:3b:de:c1:d2:74:b3:51:7c:7d:f4:00:64: 2c:c7:fa:fb:4f:40:e3:74:63:cc:1b:c4:4a:c9:41: 03:58:02:ee:75:31:46:23:eb:56:45:c2:6a:cf:b0: 0d:ec:d6:86:18:88:0b:b9:49:cd:d9:96:74:e7:8d: 0b:d7:76:47:8c:86:19:ae:05:8d:5d:97:ff:48:f1: 07:12:6b:e9:63:f9:8b:03:2a:c3:a6:c4:44:9d:7a: 50:e1:58:ab:0e:75:1e:93:3e:a5:2a:c8:fc:d8:29: 51:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:69:78:5B:6E:FB:70:4D:A5:E4:DD:29:F1:0D:6C:A7:36:4C:6F:06 X509v3 Authority Key Identifier: keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:c9:fe:88:3b:fb:ca:32:c2:42:03:0a:57:48:3f:92:02:62: 2b:40:12:16:0d:a1:f9:d6:71:4d:7f:66:15:9d:f1:2e:91:0c: 7d:83:e9:09:55:f8:dc:c4:04:af:55:0d:89:d2:eb:27:a3:42: 3e:8a:e4:d3:0e:6d:fe:b0:76:27:0c:6f:60:2e:b0:1c:10:d7: 59:aa:49:2c:27:08:18:b3:01:98:d5:cc:76:a7:e0:d5:3d:ee: 51:e4:77:5e:a7:64:e0:ea:9f:a1:5b:66:f1:66:d7:23:b4:d4: 00:4e:33:1f:70:6e:8b:39:6b:40:4f:47:18:ef:1a:a2:fd:d9: 2a:e6:cb:0c:c3:ca:e4:59:94:48:56:8d:90:26:6e:e5:ac:3a: e6:86:34:26:fd:b2:5b:e8:ea:4c:66:10:57:cc:6a:82:ac:dc: 20:ba:7a:eb:ed:4a:d6:23:36:d9:6b:48:c3:26:2e:57:64:83: e4:db:6e:9d:ad:ac:3f:6b:f7:74:5c:40:a0:71:b1:bd:a9:8d: d8:28:09:fd:80:92:0a:39:31:c5:3f:61:3a:6b:95:17:b3:fb: 18:b9:35:f8:a1:7d:d1:b2:be:15:d4:dc:1e:40:c3:31:16:2a: 9b:c3:fa:c0:57:30:04:55:ee:4c:65:9d:ab:ad:45:90:ff:1b: ce:3a:0d:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlDot++/fQVX5yFrvvGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWQ1OTc0YjRlNTk5Y2E3MmRjYzRkYWMwNjZkNzcxNDIw MmVmYzkwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD EygzODY5Nzg1YjZlZmI3MDRkYTVlNGRkMjlmMTBkNmNhNzM2NGM2ZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c0S7RJ3Sl6cjE+2GQQnLzvbbfjP HOPZ27Nb9BNaKXGg4P7rIivRcL/lCxaWDPc8gGCQdbJsvF8L0ZPCpP8AoKN0tVpk jJKubfkcJp/XNq+s0ZRnXK4WKjEvnAlDPI2UhJ1iXlknpVWNQraQceFJoHyOeJE6 3E7B6XbruQNz7L2FjOIw6UCBG8yoL4Kk56L3eTSv4IsvqcE73sHSdLNRfH30AGQs x/r7T0DjdGPMG8RKyUEDWALudTFGI+tWRcJqz7AN7NaGGIgLuUnN2ZZ0540L13ZH jIYZrgWNXZf/SPEHEmvpY/mLAyrDpsREnXpQ4VirDnUekz6lKsj82ClRrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhpeFtu+3BNpeTdKfENbKc2TG8GMB8GA1UdIwQY MBaAFL8dWXS05ZnKctzE2sBm13FCAu/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGIt YzMyYTlhMDg1YWUwLzEvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGItYzMyYTlhMDg1YWUw LzEvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1cn+iDv7 yjLCQgMKV0g/kgJiK0ASFg2h+dZxTX9mFZ3xLpEMfYPpCVX43MQEr1UNidLrJ6NC Pork0w5t/rB2JwxvYC6wHBDXWapJLCcIGLMBmNXMdqfg1T3uUeR3Xqdk4OqfoVtm 8WbXI7TUAE4zH3BuizlrQE9HGO8aov3ZKubLDMPK5FmUSFaNkCZu5aw65oY0Jv2y W+jqTGYQV8xqgqzcILp66+1K1iM22WtIwyYuV2SD5Ntuna2sP2v3dFxAoHGxvamN 2CgJ/YCSCjkxxT9hOmuVF7P7GLk1+KF90bK+FdTcHkDDMRYqm8P6wFcwBFXuTGWd q61FkP8bzjoNZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:33 2025 by rpki-client