This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json) Hash identifier: g0VBLgmMF+FO8+E1quEDRQK7qzQh2pry0vcjSiq/OZw= Subject key identifier: EC:F4:E8:F9:06:CE:4F:F8:EF:B0:9B:F8:BB:17:DC:2B:D0:DF:2F:50 Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9 Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9 Certificate serial: 019B63C261E5D6627A8B8553BF3BEE9B90E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft Manifest number: 14B0 Signing time: Sun 28 Dec 2025 07:00:41 +0000 Manifest this update: Sun 28 Dec 2025 07:00:41 +0000 Manifest next update: Mon 29 Dec 2025 07:00:41 +0000 Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: YfUdIvSfoXCqtDcoCbXw8ZDklP1+E+bNkgSzue7twOs=) 2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=) 3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:c2:61:e5:d6:62:7a:8b:85:53:bf:3b:ee:9b:90:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9 Validity Not Before: Dec 28 07:00:41 2025 GMT Not After : Dec 29 07:00:41 2025 GMT Subject: CN=ecf4e8f906ce4ff8efb09bf8bb17dc2bd0df2f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:39:41:14:53:f7:b3:8c:8f:01:49:02:9e: aa:7e:b1:0a:cf:f2:43:d1:d9:de:4f:71:6a:bf:4d: 52:ad:13:1a:30:32:aa:60:e6:09:e4:10:2f:44:1d: 54:7d:85:65:cf:bc:7c:cf:6c:0b:84:e8:a2:4e:b0: 32:f3:31:b7:5d:53:dd:77:22:d7:3c:f4:fd:31:2c: 2b:73:a4:2e:54:89:4d:68:27:e2:da:66:53:ee:ac: 5f:b6:36:af:99:cf:44:be:55:46:02:22:92:d6:00: e8:fe:88:c8:35:c8:f0:aa:87:0d:d2:34:be:29:f9: 0a:9c:f0:4d:4a:b9:c4:1c:79:0f:65:52:43:b6:65: 69:ad:67:65:db:54:43:c1:ab:c1:65:78:8d:df:16: 2e:d0:0f:b7:6f:08:d9:da:c7:21:53:f5:7b:d2:ad: 65:9b:ca:20:01:d5:dc:24:02:58:42:6e:67:0c:9b: 7b:18:37:44:09:f6:a9:18:15:1b:aa:47:21:c7:98: 8a:36:70:83:ae:76:ff:53:87:66:b1:ef:51:56:07: ea:dd:2d:89:78:c9:fb:55:19:fe:e0:01:f1:3f:1d: d4:fe:b3:09:a0:05:dd:be:8a:0b:42:ff:99:5d:e5: 9a:4f:e4:e9:13:fa:9a:68:8f:cf:9f:77:80:c2:30: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F4:E8:F9:06:CE:4F:F8:EF:B0:9B:F8:BB:17:DC:2B:D0:DF:2F:50 X509v3 Authority Key Identifier: keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5e:41:fc:3d:b5:6c:48:f9:79:86:b4:78:c0:54:d6:31:1f: 30:40:91:86:8f:90:2c:0c:65:f5:be:e1:6a:b0:ae:89:d7:71: 82:ef:95:49:31:0d:e3:34:e7:21:ee:78:d4:e7:20:99:8c:88: 38:67:ee:57:83:85:98:88:7d:52:39:a7:9f:58:ee:22:de:c5: f5:9b:74:5a:fe:e7:9b:f8:35:96:99:9e:b5:77:6d:f8:52:a3: f7:f6:3f:32:33:c3:b6:ac:69:cd:b5:d7:54:a6:f1:a5:ee:96: 4a:22:fd:07:84:f3:ff:6f:31:9d:05:07:bb:5f:e7:7c:99:10: 52:a1:20:c0:1d:7f:b6:a3:7b:00:02:1f:36:2c:92:30:58:5b: fd:bd:2a:54:b8:4b:64:b5:fd:d3:26:09:82:5b:a9:02:ce:f5: f0:f7:d4:9d:cc:be:3e:ba:40:7d:26:b2:f4:0b:c5:1e:51:6a: d4:87:98:32:b1:94:01:c1:f4:84:93:ec:b3:4d:96:c4:da:3c: 3a:dc:32:3f:25:24:88:4f:41:70:08:99:a8:19:dc:c6:c5:62: d7:8c:13:91:31:28:54:9a:17:9f:27:52:1b:1d:05:f8:09:33: 3d:c7:16:af:c1:44:48:b6:13:65:66:a3:d9:dd:8f:6b:88:cb: de:8c:9b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjwmHl1mJ6i4VTvzvum5DkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YTQ5ODdiZjhjNmI0Y2RkNjU3YmJjMmQwYTVlMTNlOWI2 MjZjYjkwHhcNMjUxMjI4MDcwMDQxWhcNMjUxMjI5MDcwMDQxWjAzMTEwLwYDVQQD EyhlY2Y0ZThmOTA2Y2U0ZmY4ZWZiMDliZjhiYjE3ZGMyYmQwZGYyZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yE5QRRT97OMjwFJAp6qfrEKz/JD 0dneT3Fqv01SrRMaMDKqYOYJ5BAvRB1UfYVlz7x8z2wLhOiiTrAy8zG3XVPddyLX PPT9MSwrc6QuVIlNaCfi2mZT7qxftjavmc9EvlVGAiKS1gDo/ojINcjwqocN0jS+ KfkKnPBNSrnEHHkPZVJDtmVprWdl21RDwavBZXiN3xYu0A+3bwjZ2schU/V70q1l m8ogAdXcJAJYQm5nDJt7GDdECfapGBUbqkchx5iKNnCDrnb/U4dmse9RVgfq3S2J eMn7VRn+4AHxPx3U/rMJoAXdvooLQv+ZXeWaT+TpE/qaaI/Pn3eAwjCZkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOz06PkGzk/477Cb+LsX3CvQ3y9QMB8GA1UdIwQY MBaAFFakmHv4xrTN1le7wtCl4T6bYmy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQt ZGU1ODY5OGI2NDcwLzEvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQtZGU1ODY5OGI2NDcw LzEvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAol5B/D21 bEj5eYa0eMBU1jEfMECRho+QLAxl9b7harCuiddxgu+VSTEN4zTnIe541OcgmYyI OGfuV4OFmIh9Ujmnn1juIt7F9Zt0Wv7nm/g1lpmetXdt+FKj9/Y/MjPDtqxpzbXX VKbxpe6WSiL9B4Tz/28xnQUHu1/nfJkQUqEgwB1/tqN7AAIfNiySMFhb/b0qVLhL ZLX90yYJglupAs718PfUncy+PrpAfSay9AvFHlFq1IeYMrGUAcH0hJPss02WxNo8 OtwyPyUkiE9BcAiZqBncxsVi14wTkTEoVJoXnydSGx0F+AkzPccWr8FESLYTZWaj 2d2Pa4jL3oybWg== -----END CERTIFICATE-----Generated at Sun Dec 28 09:20:06 2025 by rpki-client