This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json) Hash identifier: HwHNOM3VNpQbb4+r1uFCBsJ2L6cHmTnZGUU6KR5cUWE= Subject key identifier: BC:B6:4A:26:D0:6C:71:BD:65:25:39:3F:10:09:29:C1:A1:69:7A:5F Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019AF2774212BF7B3D5C2195689C0F007223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft Manifest number: 0D3C Signing time: Sat 06 Dec 2025 07:01:33 +0000 Manifest this update: Sat 06 Dec 2025 07:01:33 +0000 Manifest next update: Sun 07 Dec 2025 07:01:33 +0000 Files and hashes: 1: JgoOvXvrswEOgbBkM7mOX2KwPkM.roa (hash: 0lHrFGf5p+iWNP5B3Ka8kAz0C85fbyYK54kTcYnj/rA=) 2: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: VfMIwq0foEA407JYhOSJyodgn514376/FCChj92dk6g=) 3: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=) 4: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=) 5: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=) 6: w3oVmuw8ayCWipsjf7Gj9_wvooQ.roa (hash: PQa7Ps6DrpkpjdthG8dfoc8AVs7mJPa76WRf2LVd8gs=) 7: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:42:12:bf:7b:3d:5c:21:95:68:9c:0f:00:72:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Dec 6 07:01:33 2025 GMT Not After : Dec 7 07:01:33 2025 GMT Subject: CN=bcb64a26d06c71bd6525393f100929c1a1697a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:59:72:c0:47:70:f9:fd:bf:20:2b:6b:3e: 9d:83:d6:7a:d2:52:d4:a7:89:7d:57:77:d9:92:fb: 75:bc:7d:83:2e:85:c2:43:de:52:c9:ab:62:bb:55: 2c:82:47:95:d4:2e:72:50:48:52:22:8a:95:ac:f5: c4:22:0a:c3:8e:aa:87:5d:6a:7f:3b:22:66:2f:a0: 03:08:82:33:de:a4:01:97:12:9e:2e:5c:3b:53:1f: 05:7f:98:d6:ed:4c:d9:18:41:20:d0:50:27:a1:8f: 62:54:c4:bd:51:a1:e7:2f:3e:72:ed:42:b4:ca:dc: 59:87:e8:59:68:bf:31:9e:06:90:24:4a:6d:16:b3: 96:b3:cd:be:f6:86:c1:99:d0:22:a5:9b:40:5c:e5: 55:fb:a6:51:a8:e4:21:97:a2:73:f1:77:68:19:84: 60:75:56:48:f2:8e:71:88:ec:35:2f:55:df:c7:1a: 6a:ae:59:24:58:da:1b:b1:2b:40:a5:00:6a:ec:e0: 94:85:f2:9f:22:5d:a7:84:e0:cd:fe:b3:28:00:c4: 8e:26:2e:32:1d:53:5a:45:bb:9a:f1:d8:17:b9:36: b9:ea:f2:e9:21:90:35:a2:39:37:83:f0:c0:d1:b3: ff:76:31:7f:4f:b0:71:7a:49:e4:85:e6:98:9a:0c: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B6:4A:26:D0:6C:71:BD:65:25:39:3F:10:09:29:C1:A1:69:7A:5F X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f6:e8:b0:d7:aa:85:75:fb:a6:3b:55:14:0f:61:5a:10:89: 8a:75:fc:00:37:02:4c:d5:ef:35:7f:b0:4e:b4:62:4f:e7:1a: 04:02:bd:5f:46:12:48:52:2d:67:6e:04:0e:8d:11:9a:42:84: 70:e4:cc:d4:1b:06:ac:2a:ce:ce:d9:41:ba:e4:5e:14:8c:85: 22:d5:9f:55:07:0d:53:e0:af:86:2f:27:5c:9e:e9:4e:f7:07: 88:b3:57:a8:dd:1d:a1:c8:9c:6c:e4:c7:47:0e:bd:fd:94:5e: 6d:ec:95:2c:2b:6a:89:4b:ae:00:4d:ea:fe:7d:6d:50:9b:2d: 5f:54:e9:a5:ca:a8:09:08:db:9c:8c:29:3b:cf:53:7d:10:33: 1f:99:67:e9:94:2a:b1:40:3b:7d:0f:26:df:fe:3c:6f:33:3a: 2a:46:5f:a4:15:da:c7:6e:7b:8e:c5:bd:71:bf:60:1d:9e:e9: 41:0a:61:2c:57:3a:8e:7f:a2:f4:bc:70:76:b4:b2:ee:c8:ef: ce:7f:33:15:81:5f:56:1a:3d:f5:b2:12:a8:5d:eb:9c:15:48: 82:2f:2b:9f:f3:f4:68:7c:3c:bd:ed:25:e7:e8:44:f9:e6:aa: ba:28:18:49:19:a6:eb:d3:f3:83:be:fb:72:b7:15:79:a9:9b: e9:5d:1e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0ISv3s9XCGVaJwPAHIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjUxMjA2MDcwMTMzWhcNMjUxMjA3MDcwMTMzWjAzMTEwLwYDVQQD EyhiY2I2NGEyNmQwNmM3MWJkNjUyNTM5M2YxMDA5MjljMWExNjk3YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDxZcsBHcPn9vyAraz6dg9Z60lLU p4l9V3fZkvt1vH2DLoXCQ95Syatiu1UsgkeV1C5yUEhSIoqVrPXEIgrDjqqHXWp/ OyJmL6ADCIIz3qQBlxKeLlw7Ux8Ff5jW7UzZGEEg0FAnoY9iVMS9UaHnLz5y7UK0 ytxZh+hZaL8xngaQJEptFrOWs82+9obBmdAipZtAXOVV+6ZRqOQhl6Jz8XdoGYRg dVZI8o5xiOw1L1XfxxpqrlkkWNobsStApQBq7OCUhfKfIl2nhODN/rMoAMSOJi4y HVNaRbua8dgXuTa56vLpIZA1ojk3g/DA0bP/djF/T7BxeknkheaYmgx1kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy2SibQbHG9ZSU5PxAJKcGhaXpfMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfbosNeq hXX7pjtVFA9hWhCJinX8ADcCTNXvNX+wTrRiT+caBAK9X0YSSFItZ24EDo0RmkKE cOTM1BsGrCrOztlBuuReFIyFItWfVQcNU+Cvhi8nXJ7pTvcHiLNXqN0docicbOTH Rw69/ZRebeyVLCtqiUuuAE3q/n1tUJstX1TppcqoCQjbnIwpO89TfRAzH5ln6ZQq sUA7fQ8m3/48bzM6KkZfpBXax257jsW9cb9gHZ7pQQphLFc6jn+i9LxwdrSy7sjv zn8zFYFfVho99bISqF3rnBVIgi8rn/P0aHw8ve0l5+hE+eaquigYSRmm69Pzg777 crcVeamb6V0e8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:59 2025 by rpki-client