This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json) Hash identifier: tfM1BQcpyRqkbo7R2u41VJk7I/CsuaLd/SpORq/6m5k= Subject key identifier: 5B:6D:19:94:61:ED:7D:EE:51:9A:94:EB:D4:B5:75:BF:32:59:35:1B Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Certificate serial: 019AF42DE60C9226FF0739EAF131527AF6BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 15:00:39 +0000 Manifest this update: Sat 06 Dec 2025 15:00:39 +0000 Manifest next update: Sun 07 Dec 2025 15:00:39 +0000 Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=) 2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: EWMl+UwJ15lxlQWH0EF9jh7T1MA97I/BMkI1eNiYFWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:e6:0c:92:26:ff:07:39:ea:f1:31:52:7a:f6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Validity Not Before: Dec 6 15:00:39 2025 GMT Not After : Dec 7 15:00:39 2025 GMT Subject: CN=5b6d199461ed7dee519a94ebd4b575bf3259351b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:a5:1b:90:36:10:d4:bc:42:8c:ed:b8:e6: e3:32:ce:13:ba:ae:74:3f:27:f2:65:7c:cb:bc:32: 8e:89:bf:dc:90:77:58:85:00:3c:b5:0b:d0:10:80: b8:51:8b:8a:ba:dd:af:e5:89:b9:00:28:c7:ef:b8: 8e:c2:c5:55:60:82:d5:b2:09:e7:97:d8:e5:e5:21: 67:a7:c6:7e:92:54:49:cc:44:1f:24:0a:fa:e8:cb: 0e:23:6f:0f:84:bc:fe:92:34:65:b9:76:40:2b:5b: f9:1b:85:de:e1:e3:46:24:c3:6c:31:e0:d2:06:39: 2b:3e:cc:6c:e5:11:b8:3b:17:48:61:bd:36:75:44: b3:b1:fe:ab:02:1c:38:c8:5a:14:8b:64:2b:1d:2b: 06:a0:39:89:43:65:23:3f:2c:c8:bd:b4:35:a1:0b: 0d:75:1b:4c:ee:a9:8a:77:ff:0b:2f:29:f3:94:26: 91:38:38:5f:8a:fa:26:b2:52:76:30:9e:4d:e8:06: ec:10:2f:71:79:61:37:30:80:ff:10:00:54:31:38: 0b:fd:de:52:c9:bd:13:53:fb:e8:1e:ec:4e:68:fa: 79:04:28:5c:16:79:45:7d:cb:e8:4e:f9:ef:89:99: a5:e5:91:05:f5:cc:7f:df:ed:3b:ce:cb:1d:d8:f8: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6D:19:94:61:ED:7D:EE:51:9A:94:EB:D4:B5:75:BF:32:59:35:1B X509v3 Authority Key Identifier: keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c6:ba:28:f4:9c:6f:37:5c:c4:91:08:3f:49:da:64:93:77: bb:65:dd:af:09:28:6e:43:a0:a2:76:43:d4:d2:4a:6b:81:50: 02:15:c5:d0:e0:9f:14:54:ea:5a:22:92:fe:d0:fc:14:65:0a: 1d:34:6f:90:03:7f:51:ce:37:9e:c2:78:ab:f8:35:51:b8:f4: 2d:34:1a:13:4b:04:9e:2b:20:01:1c:0f:1a:b8:52:d0:8f:c3: 44:ae:35:b6:9d:5d:24:0d:b8:9e:e1:a2:f1:3d:db:5a:d1:b3: ea:de:15:62:e7:c7:67:fe:b4:45:71:5b:8a:48:68:90:9f:4d: 2b:ce:ab:fb:2c:b6:6c:40:0c:38:ae:bb:b8:7b:c2:7b:a7:03: ad:92:90:72:f8:27:8b:7f:78:db:26:dc:60:5b:44:20:88:95: 2b:4e:ad:88:56:8d:80:0d:2c:ef:8a:ee:a9:fb:a1:f9:ca:d8: c6:5f:67:dd:be:48:8e:f3:1a:83:c0:ca:6c:73:39:b0:97:15: 39:57:8c:d0:9a:b3:a5:66:a4:9f:16:0f:3b:59:d4:4c:46:9e: 5f:b9:94:91:a4:c3:87:d6:c1:b4:1f:77:59:67:ee:4e:65:f4: 6d:c2:46:63:af:4f:3f:a3:db:35:0a:2d:dc:aa:54:49:85:7b: 3b:82:04:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LeYMkib/Bznq8TFSeva6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMTI1Y2FkN2RkNGM1ZjAyMDFlZTJhMjFkZWFjMzg3MzY2 OTgxYzQwHhcNMjUxMjA2MTUwMDM5WhcNMjUxMjA3MTUwMDM5WjAzMTEwLwYDVQQD Eyg1YjZkMTk5NDYxZWQ3ZGVlNTE5YTk0ZWJkNGI1NzViZjMyNTkzNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9KlG5A2ENS8QoztuObjMs4Tuq50 PyfyZXzLvDKOib/ckHdYhQA8tQvQEIC4UYuKut2v5Ym5ACjH77iOwsVVYILVsgnn l9jl5SFnp8Z+klRJzEQfJAr66MsOI28PhLz+kjRluXZAK1v5G4Xe4eNGJMNsMeDS BjkrPsxs5RG4OxdIYb02dUSzsf6rAhw4yFoUi2QrHSsGoDmJQ2UjPyzIvbQ1oQsN dRtM7qmKd/8LLynzlCaRODhfivomslJ2MJ5N6AbsEC9xeWE3MID/EABUMTgL/d5S yb0TU/voHuxOaPp5BChcFnlFfcvoTvnviZml5ZEF9cx/3+07zssd2PjC7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFttGZRh7X3uUZqU69S1db8yWTUbMB8GA1UdIwQY MBaAFL4SXK191MXwIB7ioh3qw4c2aYHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEt NTE3ZWZmOTA4OTc1LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEtNTE3ZWZmOTA4OTc1 LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADca6KPSc bzdcxJEIP0naZJN3u2XdrwkobkOgonZD1NJKa4FQAhXF0OCfFFTqWiKS/tD8FGUK HTRvkAN/Uc43nsJ4q/g1Ubj0LTQaE0sEnisgARwPGrhS0I/DRK41tp1dJA24nuGi 8T3bWtGz6t4VYufHZ/60RXFbikhokJ9NK86r+yy2bEAMOK67uHvCe6cDrZKQcvgn i3942ybcYFtEIIiVK06tiFaNgA0s74ruqfuh+crYxl9n3b5IjvMag8DKbHM5sJcV OVeM0JqzpWaknxYPO1nUTEaeX7mUkaTDh9bBtB93WWfuTmX0bcJGY69PP6PbNQot 3KpUSYV7O4IE3A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:05 2025 by rpki-client