This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json) Hash identifier: OtGH87RhCctUn1Y1XFU7BNM84AsmEMcJEHJ3bMhtj5Q= Subject key identifier: 78:4B:37:45:10:0E:92:08:13:05:C5:6A:6D:E8:44:84:D3:20:AC:67 Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a Certificate serial: 019B285285AC1419CB474445CE266E69DB1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 18:00:55 +0000 Manifest this update: Tue 16 Dec 2025 18:00:55 +0000 Manifest next update: Wed 17 Dec 2025 18:00:55 +0000 Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: bksQR26Py4xBAsdGMXsSHk/UkOnQliB20L/RBi1uSsQ=) 2: yO-xzrVzP9w-99d-1MgI3akuEEw.roa (hash: /wfJmKbrJk5HLRMl66b8UyeroQ01b/DROieeTJUHsw8=) 3: ykuZpqMlHSUIWtYa1mPsmyPe9Ho.roa (hash: yZcmu9TrDVEdaIS3LL1L046LUfG1VEvG/7HySIUseIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:85:ac:14:19:cb:47:44:45:ce:26:6e:69:db:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a Validity Not Before: Dec 16 18:00:55 2025 GMT Not After : Dec 17 18:00:55 2025 GMT Subject: CN=784b3745100e92081305c56a6de84484d320ac67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:70:8f:5a:ff:54:29:97:36:a0:52:5e:55: 87:b8:7c:9d:57:50:2d:91:4b:14:0b:b8:b7:2f:cf: 25:7d:47:0a:14:a1:55:95:b6:2f:33:0e:8f:41:9d: 28:fb:10:bf:76:94:af:43:18:14:eb:2a:5e:20:77: f7:ec:67:ee:f0:33:10:92:1c:d9:75:7c:2e:94:0a: 50:da:8f:c9:99:1f:b6:a5:13:a4:cc:3e:88:6a:e1: b2:bd:c3:b1:ba:41:5b:b1:0f:3d:20:48:57:18:67: 4d:64:96:99:1e:e7:26:7f:b8:b8:5d:d2:63:0d:c6: 3a:09:1c:b3:7a:2b:9f:20:14:50:af:5e:f6:11:6a: 5d:c6:69:11:f0:74:c4:c3:34:0e:05:35:ad:78:4f: f6:ef:d0:bc:30:31:f2:3e:f1:d7:fc:19:53:27:e6: f0:73:a2:78:ec:7c:99:95:50:0c:01:b8:10:e3:54: 0e:97:b3:6f:f2:6a:58:ab:73:cb:4c:42:c4:78:d9: a8:44:1d:ad:36:5d:ca:a7:f9:6a:94:72:18:1f:3f: ec:20:0d:fa:27:39:5a:ba:7c:bb:d6:a4:c1:3b:2b: 77:39:40:2b:cc:ab:91:8d:39:0b:86:2b:65:18:4e: f8:1c:b4:e2:02:ac:6c:fd:ba:c3:25:a4:1d:fd:f5: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:37:45:10:0E:92:08:13:05:C5:6A:6D:E8:44:84:D3:20:AC:67 X509v3 Authority Key Identifier: keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5f:df:49:92:29:9d:00:72:3e:5d:82:38:b0:21:f5:8d:7e: b5:d1:8c:44:ec:c6:59:ea:ff:be:ca:5f:45:ad:24:b4:69:98: 52:ec:bb:3d:df:cf:de:04:45:b5:40:65:16:c2:f6:0b:79:2c: 72:80:d0:5c:dd:f0:5f:1d:62:74:ec:fe:17:52:8d:c8:64:5f: c0:66:87:1f:6f:08:5a:09:4f:97:1c:ba:03:62:c6:c4:d2:fc: 8c:0b:4b:35:d7:68:95:7f:3c:2b:85:75:93:99:27:a3:57:f3: a8:c5:fa:7e:c4:04:46:96:80:21:5b:68:1a:95:b3:28:6b:94: 2e:4c:f5:5b:74:a3:ea:d8:31:c3:bc:d5:dc:8b:5c:47:3e:8c: 2d:3a:07:4f:23:21:87:b3:b5:bf:15:29:a6:a2:02:ef:a8:9a: 39:ca:7c:28:be:1b:c3:33:31:eb:fc:a0:a0:9d:72:60:ec:81: 02:54:e5:07:7d:75:04:73:46:00:0c:53:f9:34:cb:a6:f0:eb: f0:08:45:2a:b0:32:31:18:98:3d:60:db:1a:f1:56:02:84:0b: 99:c9:5d:13:bb:8d:76:c8:90:86:81:c9:88:dc:5f:9b:c0:82: ca:85:6c:65:bc:ca:ff:95:17:78:e9:a8:f5:35:5b:cf:e6:d9: da:48:f1:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUoWsFBnLR0RFziZuadsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NTg0YTIxOWY2ZjUwNjZkODQ4ZWQyYWI5NjRkYTg5NjZk NDBhMmEwHhcNMjUxMjE2MTgwMDU1WhcNMjUxMjE3MTgwMDU1WjAzMTEwLwYDVQQD Eyg3ODRiMzc0NTEwMGU5MjA4MTMwNWM1NmE2ZGU4NDQ4NGQzMjBhYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPpwj1r/VCmXNqBSXlWHuHydV1At kUsUC7i3L88lfUcKFKFVlbYvMw6PQZ0o+xC/dpSvQxgU6ypeIHf37Gfu8DMQkhzZ dXwulApQ2o/JmR+2pROkzD6IauGyvcOxukFbsQ89IEhXGGdNZJaZHucmf7i4XdJj DcY6CRyzeiufIBRQr172EWpdxmkR8HTEwzQOBTWteE/279C8MDHyPvHX/BlTJ+bw c6J47HyZlVAMAbgQ41QOl7Nv8mpYq3PLTELEeNmoRB2tNl3Kp/lqlHIYHz/sIA36 Jzlauny71qTBOyt3OUArzKuRjTkLhitlGE74HLTiAqxs/brDJaQd/fVcFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhLN0UQDpIIEwXFam3oRITTIKxnMB8GA1UdIwQY MBaAFFRYSiGfb1Bm2EjtKrlk2olm1AoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAt OWZiMWNlNGQ3MjBiLzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kZDNkZDEtMDliNS00YWEyLWFlYzAtOWZiMWNlNGQ3MjBi LzEvVkZoS0laOXZVR2JZU08wcXVXVGFpV2JVQ2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEV/fSZIp nQByPl2COLAh9Y1+tdGMROzGWer/vspfRa0ktGmYUuy7Pd/P3gRFtUBlFsL2C3ks coDQXN3wXx1idOz+F1KNyGRfwGaHH28IWglPlxy6A2LGxNL8jAtLNddolX88K4V1 k5kno1fzqMX6fsQERpaAIVtoGpWzKGuULkz1W3Sj6tgxw7zV3ItcRz6MLToHTyMh h7O1vxUppqIC76iaOcp8KL4bwzMx6/ygoJ1yYOyBAlTlB311BHNGAAxT+TTLpvDr 8AhFKrAyMRiYPWDbGvFWAoQLmcldE7uNdsiQhoHJiNxfm8CCyoVsZbzK/5UXeOmo 9TVbz+bZ2kjxEQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:17:44 2025 by rpki-client