This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json) Hash identifier: vQLz6KwpbGWfyqPkSnSS2EAjCDJLesCKZeGrSk4g9sA= Subject key identifier: ED:31:75:2A:51:00:C8:9D:4E:59:E3:C0:96:AA:CD:91:6C:BF:CE:20 Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e Certificate serial: 019B4C2817043C3B17CBD3C7189449B62353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 17:00:54 +0000 Manifest this update: Tue 23 Dec 2025 17:00:54 +0000 Manifest next update: Wed 24 Dec 2025 17:00:54 +0000 Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=) 2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: L5SbbKHC2h6EROxcJdR9Pil7FUYX76FRHbdVpJHSWIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:17:04:3c:3b:17:cb:d3:c7:18:94:49:b6:23:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e Validity Not Before: Dec 23 17:00:54 2025 GMT Not After : Dec 24 17:00:54 2025 GMT Subject: CN=ed31752a5100c89d4e59e3c096aacd916cbfce20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fb:23:17:3b:5f:6c:14:b6:b3:fe:67:e5:7f: 9e:b7:74:7e:c9:e9:3a:eb:36:6a:23:aa:5f:eb:3a: 71:f2:41:ec:52:b7:a0:87:0b:5d:ba:43:2b:6a:e8: 3c:df:21:7b:b1:62:33:f8:88:5e:2c:f0:2e:19:0f: a1:ec:dd:89:fb:18:73:11:0e:0c:dd:6c:49:ba:32: 08:23:57:db:94:83:09:4a:78:e1:4a:e0:cf:6e:17: cb:38:de:a1:f3:4b:4d:33:24:b1:da:30:94:2d:c8: f9:35:fb:c7:16:05:69:9f:d1:79:f1:4c:8b:1b:23: 00:ba:43:87:76:6e:4f:fb:03:b8:f9:50:ea:9b:1d: 65:e1:5b:48:96:97:21:63:97:8a:68:97:1a:63:6d: 82:0a:81:e3:d1:e6:5b:c7:a7:53:9c:8e:f3:f9:a9: 5a:40:4b:4b:07:04:f8:1b:61:c0:c0:1f:e0:fc:e4: 1d:52:05:6d:8a:b4:9f:a2:ad:28:eb:20:7d:73:8f: e3:fc:44:b7:7f:50:c8:a5:40:08:03:4b:09:ae:39: 30:15:72:1b:0d:d0:25:01:d1:52:94:75:25:88:b3: 28:e0:f7:92:bd:62:e8:63:20:15:41:be:c4:38:a3: ed:9b:e4:03:fd:a9:c1:c0:be:a2:06:a4:6f:e4:65: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:31:75:2A:51:00:C8:9D:4E:59:E3:C0:96:AA:CD:91:6C:BF:CE:20 X509v3 Authority Key Identifier: keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e2:85:ff:4f:e7:8a:6d:40:2a:4f:31:70:25:41:0e:15:20: ef:c5:24:5e:5e:1d:6c:6a:f5:e4:ed:b6:1d:ce:13:1b:d7:0e: 8a:dc:be:31:23:36:05:53:eb:c8:33:5e:39:64:7e:25:8b:7b: 22:b4:60:6e:5f:65:b7:af:d0:76:25:34:ec:27:35:bc:c9:5c: 5d:e4:45:49:12:b4:5d:86:b0:57:6b:01:03:c4:6e:5b:58:61: 8a:ce:6b:53:19:e2:a4:4d:cd:25:95:70:03:76:c6:6f:73:f7: e2:1a:33:21:dd:ec:97:2d:69:70:a2:08:fc:fc:5a:29:7f:fe: 63:4b:91:1e:6e:ea:78:6a:f3:a5:a5:e9:b5:c3:92:ef:d5:78: 20:07:61:ff:8b:87:3a:1e:61:f3:53:9f:95:98:bf:69:0b:9e: 1f:60:e7:3e:38:12:99:27:c9:a2:38:7b:f1:07:b1:76:84:26: ca:c5:27:7e:8e:70:65:39:a9:72:0e:01:b5:5f:d5:ca:35:04: d6:04:b8:5c:ea:4d:99:af:24:74:6d:78:5b:9f:fa:11:b0:8e: 3e:e8:27:71:79:28:2d:6a:5d:1b:35:61:bf:99:b1:4a:a2:1a: 17:c6:5c:a8:12:c5:04:8e:6f:b4:1f:31:51:eb:39:cf:e1:8b: e0:a0:e4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKBcEPDsXy9PHGJRJtiNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4 YTZlMGUwHhcNMjUxMjIzMTcwMDU0WhcNMjUxMjI0MTcwMDU0WjAzMTEwLwYDVQQD EyhlZDMxNzUyYTUxMDBjODlkNGU1OWUzYzA5NmFhY2Q5MTZjYmZjZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fsjFztfbBS2s/5n5X+et3R+yek6 6zZqI6pf6zpx8kHsUreghwtdukMraug83yF7sWIz+IheLPAuGQ+h7N2J+xhzEQ4M 3WxJujIII1fblIMJSnjhSuDPbhfLON6h80tNMySx2jCULcj5NfvHFgVpn9F58UyL GyMAukOHdm5P+wO4+VDqmx1l4VtIlpchY5eKaJcaY22CCoHj0eZbx6dTnI7z+ala QEtLBwT4G2HAwB/g/OQdUgVtirSfoq0o6yB9c4/j/ES3f1DIpUAIA0sJrjkwFXIb DdAlAdFSlHUliLMo4PeSvWLoYyAVQb7EOKPtm+QD/anBwL6iBqRv5GXeVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0xdSpRAMidTlnjwJaqzZFsv84gMB8GA1UdIwQY MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4 LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+KF/0/n im1AKk8xcCVBDhUg78UkXl4dbGr15O22Hc4TG9cOity+MSM2BVPryDNeOWR+JYt7 IrRgbl9lt6/QdiU07Cc1vMlcXeRFSRK0XYawV2sBA8RuW1hhis5rUxnipE3NJZVw A3bGb3P34hozId3sly1pcKII/PxaKX/+Y0uRHm7qeGrzpaXptcOS79V4IAdh/4uH Oh5h81OflZi/aQueH2DnPjgSmSfJojh78QexdoQmysUnfo5wZTmpcg4BtV/VyjUE 1gS4XOpNma8kdG14W5/6EbCOPugncXkoLWpdGzVhv5mxSqIaF8ZcqBLFBI5vtB8x Ues5z+GL4KDk7g== -----END CERTIFICATE-----Generated at Tue Dec 23 19:01:59 2025 by rpki-client