This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json) Hash identifier: Juj/5EmHfFMKcl6DglKd38ZNdhQgIo23rxvwJ+8i+ek= Subject key identifier: 86:37:CD:E3:AD:15:3D:4A:65:D6:36:39:D7:83:3A:58:63:C8:50:64 Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67 Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567 Certificate serial: 019AF1D18E5B19665ECB4DD8F0BEF93710E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft Manifest number: 16E1 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: d7tBUWSiQHeiqH-bBOlyLkT02Ns.roa (hash: rmL3xWHBj145jAhqBB3i69rSx83PgbXey8Czqw5Lf3A=) 2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: /wuQZo0E4zcjjuckPf2cVBaT/7xzcxLpX9IXzYhSo8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8e:5b:19:66:5e:cb:4d:d8:f0:be:f9:37:10:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=8637cde3ad153d4a65d63639d7833a5863c85064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:ee:9a:33:2e:b3:d4:57:0d:06:6d:3c:70: bf:cb:47:22:c9:60:ab:66:1a:3c:26:22:2f:6c:85: 16:80:d3:b4:18:55:cb:fe:c2:93:7c:53:f2:63:85: 6a:d1:20:1a:c2:c9:80:b8:4d:40:13:76:a2:29:c1: c7:f9:36:6c:b4:60:71:2d:90:68:3c:10:df:72:f0: d5:bb:42:09:e2:88:48:f6:e1:1c:3e:18:69:ef:07: a5:11:a1:9e:12:92:75:af:c7:18:b8:13:92:a4:2e: 63:aa:de:a8:3b:f8:99:28:ba:1f:98:3f:1c:52:55: 1d:90:47:33:ad:78:1e:cf:25:0f:48:63:a4:53:94: cf:25:c1:29:96:94:b5:6a:72:f7:26:89:96:6f:7b: 9c:d6:ff:a0:04:4d:4a:b1:2c:d5:4a:73:dd:10:01: 6f:b5:2c:49:52:8a:31:15:b7:60:c0:b1:81:b0:06: 28:4f:73:dd:83:1c:3c:3e:6d:18:bc:dd:93:4a:a3: 05:b3:f1:e9:f7:5f:2d:e9:f2:a2:14:cb:b5:e1:fb: 13:6f:59:c5:c1:8b:03:ec:db:4c:70:16:25:12:2a: f3:78:2e:7e:25:2f:4f:22:e9:b9:4b:88:a0:9f:4b: 57:4f:8e:cd:86:59:9b:09:e6:e0:08:8c:35:05:cd: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:37:CD:E3:AD:15:3D:4A:65:D6:36:39:D7:83:3A:58:63:C8:50:64 X509v3 Authority Key Identifier: keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:23:84:77:5e:a9:99:73:a9:48:3b:7e:8e:9a:77:64:0f:70: 3f:48:c8:d7:5e:1f:ab:c8:82:0b:17:21:80:ef:4e:ca:06:b7: 73:6c:d5:22:a8:7e:9d:be:47:bf:8f:42:25:23:37:80:45:58: 2e:b0:c4:a9:d6:c7:7d:aa:f2:03:58:23:88:ae:47:51:81:35: 56:cc:f8:73:e9:f8:41:b8:d0:e9:c9:cc:a9:b6:4e:08:e4:e8: a2:60:5b:3c:73:7c:c7:23:7f:e7:27:fe:94:a4:4b:fe:e4:ae: 4e:3f:d0:3d:e8:10:a4:46:da:93:2f:32:46:ab:bc:43:41:d5: 86:e5:69:b3:b9:84:f1:15:e5:50:53:70:e4:48:7c:2e:7e:0d: 25:71:03:62:e6:51:33:c6:69:ae:4a:5d:96:58:c1:4a:18:5c: 2c:12:a6:f9:7e:c8:a3:33:c0:be:f2:45:9f:e8:d7:39:a3:06: 0d:c5:cf:1a:5c:7b:e3:f6:6c:5e:d8:c5:e9:35:e3:59:5d:cd: 57:7f:bd:98:6a:fe:78:4b:3a:e9:cf:22:8a:e5:6b:77:38:71: 50:c9:a9:53:80:84:fb:e0:6e:bd:e7:09:03:c1:2c:fd:bb:4a: 54:b2:3d:e9:fb:e0:58:62:90:9a:f5:c9:80:7d:45:ef:d6:0d: d9:5e:a7:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y5bGWZey03Y8L75NxDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTAwYmI5YWM2MDY5YzUxM2I1ODJkNjFmZDgxZWNjZDU2 MWE1NjcwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD Eyg4NjM3Y2RlM2FkMTUzZDRhNjVkNjM2MzlkNzgzM2E1ODYzYzg1MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFrumjMus9RXDQZtPHC/y0ciyWCr Zho8JiIvbIUWgNO0GFXL/sKTfFPyY4Vq0SAawsmAuE1AE3aiKcHH+TZstGBxLZBo PBDfcvDVu0IJ4ohI9uEcPhhp7welEaGeEpJ1r8cYuBOSpC5jqt6oO/iZKLofmD8c UlUdkEczrXgezyUPSGOkU5TPJcEplpS1anL3JomWb3uc1v+gBE1KsSzVSnPdEAFv tSxJUooxFbdgwLGBsAYoT3Pdgxw8Pm0YvN2TSqMFs/Hp918t6fKiFMu14fsTb1nF wYsD7NtMcBYlEirzeC5+JS9PIum5S4ign0tXT47NhlmbCebgCIw1Bc2o1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY3zeOtFT1KZdY2OdeDOlhjyFBkMB8GA1UdIwQY MBaAFL2QC7msYGnFE7WC1h/YHszVYaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2It ZTFiOWY2ZDM1N2MwLzEvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lM2VhNWItZDUzZS00Y2Q3LWJiN2ItZTFiOWY2ZDM1N2Mw LzEvdlpBTHVheGdhY1VUdFlMV0g5Z2V6TlZocFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCOEd16p mXOpSDt+jpp3ZA9wP0jI114fq8iCCxchgO9Oyga3c2zVIqh+nb5Hv49CJSM3gEVY LrDEqdbHfaryA1gjiK5HUYE1Vsz4c+n4QbjQ6cnMqbZOCOToomBbPHN8xyN/5yf+ lKRL/uSuTj/QPegQpEbaky8yRqu8Q0HVhuVps7mE8RXlUFNw5Eh8Ln4NJXEDYuZR M8ZprkpdlljBShhcLBKm+X7IozPAvvJFn+jXOaMGDcXPGlx74/ZsXtjF6TXjWV3N V3+9mGr+eEs66c8iiuVrdzhxUMmpU4CE++BuvecJA8Es/btKVLI96fvgWGKQmvXJ gH1F79YN2V6nsg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:45 2025 by rpki-client