This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json) Hash identifier: mgiiZoVDtZZkYYzAi9p19UzHMe9j6bl9psDEDDaNClM= Subject key identifier: AF:D9:E6:68:A3:AC:F3:B5:5D:5A:6F:F9:E4:EC:05:D9:52:FA:79:D4 Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef Certificate serial: 019B5606D513ADC6E69B29D74A6A1439DFD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft Manifest number: 179B Signing time: Thu 25 Dec 2025 15:00:46 +0000 Manifest this update: Thu 25 Dec 2025 15:00:46 +0000 Manifest next update: Fri 26 Dec 2025 15:00:46 +0000 Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=) 2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: G95PNfKoJNiNC4a0Xv5+A8r0I3xiO4RFXtkIaP3uQC4=) 3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:d5:13:ad:c6:e6:9b:29:d7:4a:6a:14:39:df:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef Validity Not Before: Dec 25 15:00:46 2025 GMT Not After : Dec 26 15:00:46 2025 GMT Subject: CN=afd9e668a3acf3b55d5a6ff9e4ec05d952fa79d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:b8:69:92:f2:87:0a:0d:3b:6d:d9:f2:bf: 4f:ed:63:fe:55:ae:65:6c:4b:b3:50:fc:6c:e6:bb: c3:9d:b4:d2:78:57:fb:36:b6:32:03:a6:7a:bf:6c: ad:fe:12:66:35:2e:76:7c:1e:b9:b1:f0:09:08:af: fd:b2:ab:46:43:0f:79:30:a9:f7:b1:8a:bf:16:3d: d3:24:f3:0f:0b:15:34:27:7b:79:72:26:e8:7b:fb: eb:5a:45:87:97:70:d0:8b:72:1a:ec:8b:ba:7d:2f: 12:c4:b7:c8:4e:c1:6e:97:36:a4:5e:a1:2b:bc:90: e7:b4:56:d2:af:ab:e6:29:19:c0:c9:97:6b:6d:15: 12:60:d3:c3:5f:27:e7:85:12:b9:21:ff:87:89:b8: 33:3b:0c:e2:5d:47:19:4f:44:e6:66:e9:64:8c:33: ac:4c:be:df:55:87:38:cc:01:57:62:ab:4d:d6:d1: ac:99:7c:f7:35:0d:7e:ad:8c:ff:49:c3:62:63:ba: f4:21:a8:0f:7a:22:31:d3:da:ba:dc:54:ba:4f:91: 52:8f:89:8f:f2:fe:68:81:a7:d5:8d:31:54:f9:6a: a3:82:e3:5d:e5:b8:06:35:a4:82:35:f7:b8:06:aa: 26:ca:f5:62:fc:79:88:5c:ee:0e:db:65:55:fa:5f: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D9:E6:68:A3:AC:F3:B5:5D:5A:6F:F9:E4:EC:05:D9:52:FA:79:D4 X509v3 Authority Key Identifier: keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:96:a5:23:9a:bd:dd:0f:9f:eb:d3:28:e9:95:ec:4c:3a:6e: 62:75:f2:84:91:72:ba:91:9c:dd:ce:75:29:15:57:41:be:13: 93:57:db:40:df:49:ed:c7:c1:2a:c8:72:b0:73:0a:f5:33:8e: aa:65:62:ee:01:a8:48:41:69:c0:77:3d:f9:88:aa:35:29:69: 27:ec:b2:bf:86:07:c1:6f:36:90:59:5e:dd:23:dc:68:cb:5e: 69:3a:6b:22:0e:6e:73:6c:63:76:62:2a:95:4b:3e:6e:3b:4f: 6b:08:07:2f:bb:e4:54:5a:a1:e9:b3:29:9b:d5:a7:1e:c6:82: be:62:25:3a:dd:f4:47:1c:40:20:20:ad:10:91:8a:64:25:f0: 0e:cb:78:49:b1:5e:e6:f6:66:3c:ee:5f:1e:5e:2c:0d:9e:4d: ed:47:25:0d:54:ef:b4:94:57:92:b3:11:96:50:7d:56:9f:6e: ac:7e:e1:bf:7b:15:4b:7f:5a:c8:a9:fe:98:5e:f0:ab:a4:bc: 4e:69:9b:80:4d:9b:80:c4:31:9e:13:da:e9:82:58:58:02:ee: 76:fa:fb:78:d7:a5:80:e5:c3:c8:65:8e:2b:36:79:9c:91:b3: 0d:fc:5f:d2:49:7a:c7:a2:5a:81:50:47:13:a3:de:c7:76:81: f6:2c:4a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBtUTrcbmmynXSmoUOd/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzE5MDg1NDc4NmExNmFmYTZiMGVjNzhkZmIwNjIwYWJh YWNmZWYwHhcNMjUxMjI1MTUwMDQ2WhcNMjUxMjI2MTUwMDQ2WjAzMTEwLwYDVQQD EyhhZmQ5ZTY2OGEzYWNmM2I1NWQ1YTZmZjllNGVjMDVkOTUyZmE3OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qi4aZLyhwoNO23Z8r9P7WP+Va5l bEuzUPxs5rvDnbTSeFf7NrYyA6Z6v2yt/hJmNS52fB65sfAJCK/9sqtGQw95MKn3 sYq/Fj3TJPMPCxU0J3t5ciboe/vrWkWHl3DQi3Ia7Iu6fS8SxLfITsFulzakXqEr vJDntFbSr6vmKRnAyZdrbRUSYNPDXyfnhRK5If+HibgzOwziXUcZT0TmZulkjDOs TL7fVYc4zAFXYqtN1tGsmXz3NQ1+rYz/ScNiY7r0IagPeiIx09q63FS6T5FSj4mP 8v5ogafVjTFU+WqjguNd5bgGNaSCNfe4BqomyvVi/HmIXO4O22VV+l/czQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/Z5mijrPO1XVpv+eTsBdlS+nnUMB8GA1UdIwQY MBaAFFZxkIVHhqFq+msOx437BiCrqs/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEt NzNmZjQwOTU5MzQ4LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEtNzNmZjQwOTU5MzQ4 LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5alI5q9 3Q+f69Mo6ZXsTDpuYnXyhJFyupGc3c51KRVXQb4Tk1fbQN9J7cfBKshysHMK9TOO qmVi7gGoSEFpwHc9+YiqNSlpJ+yyv4YHwW82kFle3SPcaMteaTprIg5uc2xjdmIq lUs+bjtPawgHL7vkVFqh6bMpm9WnHsaCvmIlOt30RxxAICCtEJGKZCXwDst4SbFe 5vZmPO5fHl4sDZ5N7UclDVTvtJRXkrMRllB9Vp9urH7hv3sVS39ayKn+mF7wq6S8 TmmbgE2bgMQxnhPa6YJYWALudvr7eNelgOXDyGWOKzZ5nJGzDfxf0kl6x6JagVBH E6Pex3aB9ixKrA== -----END CERTIFICATE-----Generated at Thu Dec 25 23:54:56 2025 by rpki-client