This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft File: vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json) Hash identifier: tBspSgB5Yt+UTW71+1DhgK/3y2/YgHTf5umD4DQA8/s= Subject key identifier: D8:F4:4C:63:FF:42:E9:D4:49:17:32:86:83:79:AF:FC:ED:20:AA:B7 Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Certificate serial: 019AF5780E7EEAE12D035D7EFCD07DC02853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft Manifest number: 0BFA Signing time: Sat 06 Dec 2025 21:01:16 +0000 Manifest this update: Sat 06 Dec 2025 21:01:16 +0000 Manifest next update: Sun 07 Dec 2025 21:01:16 +0000 Files and hashes: 1: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (hash: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=) 2: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: RKHksNPacvo+vS1RCE4nalZBABXbLYq5G5JTXKUI8mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:0e:7e:ea:e1:2d:03:5d:7e:fc:d0:7d:c0:28:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60 Validity Not Before: Dec 6 21:01:16 2025 GMT Not After : Dec 7 21:01:16 2025 GMT Subject: CN=d8f44c63ff42e9d4491732868379affced20aab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:e1:ab:58:2c:cf:b6:ad:70:cd:09:ec:2a: 5c:32:c5:6d:90:6c:85:5e:bf:3e:31:9b:db:80:8e: 37:14:f3:5a:b8:86:31:b4:3a:a8:e9:91:21:da:1a: 91:1d:4b:0b:bd:47:13:70:e5:d6:92:b7:91:e8:5a: e1:a0:8b:00:9a:95:4a:b2:ae:18:88:04:33:51:5c: c7:54:0c:c1:a3:ab:bf:a3:fa:9b:1d:04:6f:47:23: c9:8c:55:97:bd:90:83:e9:dc:58:6e:5f:bb:09:bf: 70:7d:a0:52:ac:ec:67:09:b2:e4:ad:e9:52:c2:df: f2:6f:55:6a:51:87:b4:f4:7f:16:d6:fb:fb:44:6a: d3:92:e8:a7:3b:6a:ea:f5:6b:3b:47:00:09:40:11: 25:7c:06:8e:6b:04:07:7b:4d:73:ea:18:80:d0:9c: 93:94:42:af:40:8a:14:fc:79:02:1a:b1:a6:71:53: d9:ce:eb:47:9f:58:04:71:0b:ec:56:55:7d:8f:93: 13:a7:6d:21:b0:9a:8a:e3:f1:d0:8a:61:9e:5d:b1: dd:3f:9a:85:92:8c:43:04:f1:a6:d2:12:dc:89:ec: c3:4d:3a:67:83:dc:ed:5f:59:1d:93:48:52:a6:f5: ec:cb:ab:83:c0:83:0e:9b:55:0d:8c:d0:2a:36:43: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F4:4C:63:FF:42:E9:D4:49:17:32:86:83:79:AF:FC:ED:20:AA:B7 X509v3 Authority Key Identifier: keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:66:33:bb:13:b7:0b:55:24:e0:2d:0a:16:37:7e:db:13:7e: dd:65:c9:c0:1d:d6:5f:09:aa:87:3a:56:73:36:48:99:fe:cb: a5:68:18:80:5f:a0:9b:45:9f:57:1f:a4:7c:4a:c7:85:3b:57: 79:79:17:f9:01:2c:b0:7a:0a:2e:e9:16:f7:25:a3:6f:fe:de: 14:6f:5a:22:e2:e1:a5:64:c7:b2:b4:e4:fa:0c:b4:e6:ce:54: 38:c8:31:b0:45:d8:2e:ac:4b:ce:9f:5e:a5:76:e8:bc:08:95: c4:e4:07:8b:3d:dc:c9:f8:6f:e4:e1:d8:a9:a6:b0:9e:e5:3d: 58:a2:71:2a:df:e2:47:60:7a:4d:0e:da:0b:fb:29:b7:6c:20: 80:19:27:6a:53:cf:b8:0d:7f:76:64:11:d1:b9:b1:b8:98:7e: 1f:e9:d1:11:39:e8:e3:7e:ab:5c:0a:1c:ce:e4:4c:ea:49:49: 8a:f6:03:b4:ba:6f:75:6c:43:87:97:08:03:f4:c7:c9:e8:85: 2c:4d:65:3c:40:d3:f6:31:58:f7:bd:c9:e4:62:0c:80:eb:4f: ce:5f:a0:dd:fd:c1:22:5f:f4:f9:77:35:b4:e4:21:77:97:ef: bf:f0:e9:8d:83:0c:62:ed:72:38:0f:d8:0b:3c:6b:a4:e2:b1: eb:6b:12:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eA5+6uEtA11+/NB9wChTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTU3NzliYzhiMGJiZTVlNTdhMDc3NTViMTMyOGE1N2M5 Y2FkNjAwHhcNMjUxMjA2MjEwMTE2WhcNMjUxMjA3MjEwMTE2WjAzMTEwLwYDVQQD EyhkOGY0NGM2M2ZmNDJlOWQ0NDkxNzMyODY4Mzc5YWZmY2VkMjBhYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fzhq1gsz7atcM0J7CpcMsVtkGyF Xr8+MZvbgI43FPNauIYxtDqo6ZEh2hqRHUsLvUcTcOXWkreR6FrhoIsAmpVKsq4Y iAQzUVzHVAzBo6u/o/qbHQRvRyPJjFWXvZCD6dxYbl+7Cb9wfaBSrOxnCbLkrelS wt/yb1VqUYe09H8W1vv7RGrTkuinO2rq9Ws7RwAJQBElfAaOawQHe01z6hiA0JyT lEKvQIoU/HkCGrGmcVPZzutHn1gEcQvsVlV9j5MTp20hsJqK4/HQimGeXbHdP5qF koxDBPGm0hLciezDTTpng9ztX1kdk0hSpvXsy6uDwIMOm1UNjNAqNkMicwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj0TGP/QunUSRcyhoN5r/ztIKq3MB8GA1UdIwQY MBaAFL5Vd5vIsLvl5XoHdVsTKKV8nK1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMt YjE4ZDllNzFjMTZhLzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMtYjE4ZDllNzFjMTZh LzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2YzuxO3 C1Uk4C0KFjd+2xN+3WXJwB3WXwmqhzpWczZImf7LpWgYgF+gm0WfVx+kfErHhTtX eXkX+QEssHoKLukW9yWjb/7eFG9aIuLhpWTHsrTk+gy05s5UOMgxsEXYLqxLzp9e pXbovAiVxOQHiz3cyfhv5OHYqaawnuU9WKJxKt/iR2B6TQ7aC/spt2wggBknalPP uA1/dmQR0bmxuJh+H+nRETno436rXAoczuRM6klJivYDtLpvdWxDh5cIA/THyeiF LE1lPEDT9jFY973J5GIMgOtPzl+g3f3BIl/0+Xc1tOQhd5fvv/DpjYMMYu1yOA/Y CzxrpOKx62sS/A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:03 2025 by rpki-client