This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json) Hash identifier: UhTeTxAV4dPHx6dcW3cJ+z15PLRNCh4KSG3zB2i4tMw= Subject key identifier: 54:25:1B:1B:68:46:DC:6F:02:A9:9B:E3:AD:3F:79:C4:FD:BE:AA:F8 Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e Certificate serial: 019B5261487ED90DC79E908E4800196912EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft Manifest number: 132B Signing time: Wed 24 Dec 2025 22:01:05 +0000 Manifest this update: Wed 24 Dec 2025 22:01:05 +0000 Manifest next update: Thu 25 Dec 2025 22:01:05 +0000 Files and hashes: 1: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: H5QbiylOH/n5zimGhpSaLtTBYbKtm1Y/fGVWUo2uQNk=) 2: kC_Q9FQ-J4DvH1bNDORMySN0tt0.roa (hash: VKlodJ8xjH2Yq58gYH0eZlUzy+prTwBQnlcgP5DbpSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:48:7e:d9:0d:c7:9e:90:8e:48:00:19:69:12:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e Validity Not Before: Dec 24 22:01:05 2025 GMT Not After : Dec 25 22:01:05 2025 GMT Subject: CN=54251b1b6846dc6f02a99be3ad3f79c4fdbeaaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:2b:b7:5f:8b:5f:4b:38:93:9f:26:f9:35: c6:20:3b:d9:e6:c5:2c:6e:20:94:53:59:b9:d1:13: a3:dc:06:ac:02:18:60:b8:be:24:a2:f8:80:19:70: ca:61:c3:7d:5a:85:1d:2f:fa:93:63:5f:63:72:61: 5b:92:d1:fe:b5:13:12:2d:14:7b:66:f7:f6:97:e5: c2:0d:fe:cd:0c:6e:a5:7b:cb:d3:75:59:68:fa:b7: e6:1f:5b:6f:c7:26:2c:4e:73:7b:01:90:aa:a3:12: 24:b4:5e:ea:a7:1c:a6:c2:a8:3d:59:83:ab:16:1e: df:c0:f0:0a:d5:d7:ab:58:95:08:88:0e:62:03:19: 35:25:55:70:d0:01:74:01:a3:1c:fc:66:ae:14:8e: c5:d6:ec:64:9e:83:c9:0d:02:b9:91:0b:2f:c1:bd: e5:b7:58:d9:4d:54:4d:32:8a:a8:01:5e:9b:b7:91: 00:8a:96:19:e3:88:b2:b9:9e:1d:3f:10:f4:30:91: 1e:4a:29:69:71:6c:f8:bf:5c:1a:0c:55:0a:de:31: 28:37:2e:8c:b9:cf:85:a7:e2:74:67:10:07:ae:dc: a8:12:36:d6:30:33:b7:93:3f:5e:e8:bb:5a:a2:1e: 38:3b:24:e9:57:91:ed:4f:36:dc:d2:d0:11:5b:58: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:25:1B:1B:68:46:DC:6F:02:A9:9B:E3:AD:3F:79:C4:FD:BE:AA:F8 X509v3 Authority Key Identifier: keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:74:9d:3a:a1:20:17:c7:6f:9b:77:f3:b8:33:41:13:83:04: 90:11:27:b4:83:70:d6:a5:88:4d:16:50:aa:a3:95:04:7b:df: fc:30:0c:80:f0:ea:13:ea:9f:ba:df:cc:29:88:e2:89:48:6b: ef:9b:ff:ee:45:f7:6e:3e:18:5f:5b:fd:fa:18:1b:e7:3d:52: d5:6c:fd:fc:7b:ee:c6:ed:40:c5:b3:05:5b:6d:b7:11:dc:25: 28:3e:3f:e2:47:37:1a:48:ec:52:fd:61:b4:d1:41:0a:1b:45: 53:d3:7b:d2:3e:cf:07:46:43:af:9a:63:68:f9:e2:fd:c2:37: d1:e4:2a:0e:ee:86:bd:77:2e:3f:de:58:ef:75:7b:64:be:44: 3c:5b:92:83:00:65:02:11:05:8d:47:3d:44:6e:5f:55:ee:63: 9e:5f:a9:55:81:f6:62:c6:97:95:0e:03:b1:e3:71:88:28:f7: 8f:f8:72:19:5e:a4:ef:5d:40:77:83:0c:ce:d2:7a:02:81:bc: 9f:22:55:99:ce:11:e2:12:11:d4:03:b5:f0:f6:96:93:0b:4f: 8c:ee:3c:ca:b8:1a:94:c2:2a:16:38:9f:bb:8f:2f:09:cb:16: aa:49:9f:c4:f3:17:4a:60:a6:c4:c2:b9:26:6a:d9:ec:7a:04: 96:0e:8e:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYUh+2Q3HnpCOSAAZaRLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OWM2NGE2YWM0YzQ5NzZhZDM2MjE0MTJhMTM3NDU5ZTY0 OWFiOWUwHhcNMjUxMjI0MjIwMTA1WhcNMjUxMjI1MjIwMTA1WjAzMTEwLwYDVQQD Eyg1NDI1MWIxYjY4NDZkYzZmMDJhOTliZTNhZDNmNzljNGZkYmVhYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbgrt1+LX0s4k58m+TXGIDvZ5sUs biCUU1m50ROj3AasAhhguL4koviAGXDKYcN9WoUdL/qTY19jcmFbktH+tRMSLRR7 Zvf2l+XCDf7NDG6le8vTdVlo+rfmH1tvxyYsTnN7AZCqoxIktF7qpxymwqg9WYOr Fh7fwPAK1derWJUIiA5iAxk1JVVw0AF0AaMc/GauFI7F1uxknoPJDQK5kQsvwb3l t1jZTVRNMoqoAV6bt5EAipYZ44iyuZ4dPxD0MJEeSilpcWz4v1waDFUK3jEoNy6M uc+Fp+J0ZxAHrtyoEjbWMDO3kz9e6Ltaoh44OyTpV5HtTzbc0tARW1jVmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQlGxtoRtxvAqmb460/ecT9vqr4MB8GA1UdIwQY MBaAFFWcZKasTEl2rTYhQSoTdFnmSaueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjIt ZjMxNTEwNzcxMTg1LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yZTdmZDctMDU1Ni00ZGQ5LWI2YjItZjMxNTEwNzcxMTg1 LzEvVlp4a3BxeE1TWGF0TmlGQktoTjBXZVpKcTU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXSdOqEg F8dvm3fzuDNBE4MEkBEntINw1qWITRZQqqOVBHvf/DAMgPDqE+qfut/MKYjiiUhr 75v/7kX3bj4YX1v9+hgb5z1S1Wz9/Hvuxu1AxbMFW223EdwlKD4/4kc3GkjsUv1h tNFBChtFU9N70j7PB0ZDr5pjaPni/cI30eQqDu6GvXcuP95Y73V7ZL5EPFuSgwBl AhEFjUc9RG5fVe5jnl+pVYH2YsaXlQ4DseNxiCj3j/hyGV6k711Ad4MMztJ6AoG8 nyJVmc4R4hIR1AO18PaWkwtPjO48yrgalMIqFjifu48vCcsWqkmfxPMXSmCmxMK5 JmrZ7HoElg6O9Q== -----END CERTIFICATE-----Generated at Thu Dec 25 03:39:37 2025 by rpki-client