This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft File: VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json) Hash identifier: ky2YrMFfrLxG4MbfhJgcy8IuoZv6fx9RS9FifuiyGfA= Subject key identifier: 5F:EB:D5:B3:FB:10:24:53:65:8C:4F:CA:18:B2:0A:E1:B2:5F:3F:77 Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e Certificate serial: 019B4023DE63DD49B1CC8CB1224E5148CE3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft Manifest number: 0106 Signing time: Sun 21 Dec 2025 09:00:51 +0000 Manifest this update: Sun 21 Dec 2025 09:00:51 +0000 Manifest next update: Mon 22 Dec 2025 09:00:51 +0000 Files and hashes: 1: 1QnOxejfk5XuuYbYlllCBsBaG9c.roa (hash: P2RSq1ow6j3BlPvu76+kMbIlFbKzSTT3UqfFarTiLBQ=) 2: D6r05J6D3sA79ZZwq1eEGmeTVdE.roa (hash: 4BzqyVO9j3Co5UPBfledlmasXeXWcyyXJrp3dBPxaTE=) 3: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: l3JmpMt/T2YfD0fW3sQOmWYfftYUx6vXY7xTU8PrYhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:de:63:dd:49:b1:cc:8c:b1:22:4e:51:48:ce:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e Validity Not Before: Dec 21 09:00:51 2025 GMT Not After : Dec 22 09:00:51 2025 GMT Subject: CN=5febd5b3fb102453658c4fca18b20ae1b25f3f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:8d:82:cf:03:4f:1b:52:fb:4b:27:80:60: c7:ee:2b:86:1d:c5:84:ff:9d:69:b6:15:fa:45:5a: 07:33:60:8e:22:c2:ee:db:8b:b5:4c:52:37:08:7e: 27:84:b5:47:32:47:65:73:0b:38:16:b4:71:22:b2: b5:91:c8:3c:6e:ea:31:95:60:0a:72:5a:bf:6c:a7: 76:b3:94:99:18:2b:b0:dc:88:95:5b:46:de:05:94: 12:24:43:0c:ed:26:df:bf:ed:76:48:9b:d4:89:34: 85:c4:d2:fc:b9:a4:af:db:5b:6b:f5:0e:3a:e9:49: 85:21:a2:a4:5a:8f:73:03:10:2a:e9:51:d6:40:89: 22:b0:66:01:1d:a8:90:65:7d:44:13:8f:20:60:ca: 34:1d:9d:4a:bb:cd:f9:6e:d7:62:c1:3f:33:04:ac: 4f:86:58:61:ee:a6:13:55:46:51:2d:52:66:37:07: e4:b7:5f:99:9a:e9:ca:64:11:3e:2c:72:13:6a:06: 4e:0c:3e:9a:34:4b:be:76:f5:b2:58:65:ac:5a:fb: f4:7c:32:95:ae:ad:6b:0a:af:88:e1:ff:7a:59:b6: e5:fc:2b:ab:52:85:05:fa:be:e7:f5:d1:cd:11:2a: 2e:4d:8d:c9:5b:1a:55:d8:95:92:ef:d6:7b:fa:f8: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:D5:B3:FB:10:24:53:65:8C:4F:CA:18:B2:0A:E1:B2:5F:3F:77 X509v3 Authority Key Identifier: keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:01:d5:59:6d:30:1d:01:1f:ab:47:34:ec:a9:fd:1f:41:85: ca:ca:8c:b8:42:88:a5:30:e9:f3:be:1c:f9:85:08:11:0b:87: 9b:a2:d1:36:f7:5f:1e:f0:d5:c8:51:50:b8:98:ac:29:1b:b1: 1b:b2:35:c3:75:b1:5c:2b:3e:49:29:50:3f:10:e8:58:c7:39: a3:95:b0:3b:90:41:36:56:4e:6e:d3:b3:bf:13:0e:92:84:ff: c1:f4:1d:c0:1d:3e:e2:60:6c:ae:11:da:d8:d6:46:a9:e4:70: 28:dd:96:29:c8:3a:ac:64:b4:f3:6f:4b:01:1b:3d:43:16:a4: 8e:d1:5c:cc:c1:e8:f9:9e:b0:42:23:14:54:08:ba:7f:32:b1: 98:4a:54:ab:25:33:ec:a3:35:59:60:1d:ec:b5:56:7f:8b:be: 93:91:81:34:0f:35:2d:8e:d8:20:8c:ac:f6:dd:67:ff:ad:d9: c3:3a:d4:2b:9b:e9:ef:82:56:2b:13:f7:52:43:b1:7a:57:5a: 76:8e:b2:76:0c:a7:9e:51:2f:ea:9f:b4:03:b1:8a:cf:40:3c: 15:3b:15:d6:6b:4c:92:9d:38:7b:a5:42:41:20:20:06:2c:33: ae:91:61:f5:b5:13:ad:d4:95:63:70:32:1c:42:90:4f:9e:d0: a7:65:95:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI95j3UmxzIyxIk5RSM4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1 NDQ5N2UwHhcNMjUxMjIxMDkwMDUxWhcNMjUxMjIyMDkwMDUxWjAzMTEwLwYDVQQD Eyg1ZmViZDViM2ZiMTAyNDUzNjU4YzRmY2ExOGIyMGFlMWIyNWYzZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEKNgs8DTxtS+0sngGDH7iuGHcWE /51pthX6RVoHM2COIsLu24u1TFI3CH4nhLVHMkdlcws4FrRxIrK1kcg8buoxlWAK clq/bKd2s5SZGCuw3IiVW0beBZQSJEMM7Sbfv+12SJvUiTSFxNL8uaSv21tr9Q46 6UmFIaKkWo9zAxAq6VHWQIkisGYBHaiQZX1EE48gYMo0HZ1Ku835btdiwT8zBKxP hlhh7qYTVUZRLVJmNwfkt1+ZmunKZBE+LHITagZODD6aNEu+dvWyWGWsWvv0fDKV rq1rCq+I4f96Wbbl/CurUoUF+r7n9dHNESouTY3JWxpV2JWS79Z7+vh6OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/r1bP7ECRTZYxPyhiyCuGyXz93MB8GA1UdIwQY MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt MDJkZTAxMjQyMjhlLzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgHVWW0w HQEfq0c07Kn9H0GFysqMuEKIpTDp874c+YUIEQuHm6LRNvdfHvDVyFFQuJisKRux G7I1w3WxXCs+SSlQPxDoWMc5o5WwO5BBNlZObtOzvxMOkoT/wfQdwB0+4mBsrhHa 2NZGqeRwKN2WKcg6rGS0829LARs9QxakjtFczMHo+Z6wQiMUVAi6fzKxmEpUqyUz 7KM1WWAd7LVWf4u+k5GBNA81LY7YIIys9t1n/63ZwzrUK5vp74JWKxP3UkOxelda do6ydgynnlEv6p+0A7GKz0A8FTsV1mtMkp04e6VCQSAgBiwzrpFh9bUTrdSVY3Ay HEKQT57Qp2WVJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:01 2025 by rpki-client