This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft File: VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft (raw, json) Hash identifier: OKqCkYrtuif9+20+nuVMOZ5qj0aqwsaFusb8lg2FpCs= Subject key identifier: AA:0D:7B:C1:DA:D4:C4:5A:28:43:B5:00:C7:EC:6C:48:31:E2:49:40 Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d Certificate serial: 019B76A4745BD39B8FE66E90CABCF68569AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft Manifest number: 0395 Signing time: Wed 31 Dec 2025 23:00:47 +0000 Manifest this update: Wed 31 Dec 2025 23:00:47 +0000 Manifest next update: Thu 01 Jan 2026 23:00:47 +0000 Files and hashes: 1: VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl (hash: jd9Qs9rmVEzxQoFMv0tD9jxC6xrOzZoil2mmP0RgkCU=) 2: iWKzGh5m2_oz6qvqBjoyFnizgxw.roa (hash: YVbdlpkB57bicqIuUwT2dIakABg210l0QU3avOsuQbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:74:5b:d3:9b:8f:e6:6e:90:ca:bc:f6:85:69:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d Validity Not Before: Dec 31 23:00:47 2025 GMT Not After : Jan 1 23:00:47 2026 GMT Subject: CN=aa0d7bc1dad4c45a2843b500c7ec6c4831e24940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:ab:57:82:c4:8e:7c:08:93:c9:be:37:8b: 35:69:7e:2d:c3:b4:3f:71:ca:97:d9:b6:e3:d5:d1: f1:64:90:99:cb:b1:48:31:ad:28:37:a1:77:e3:be: 20:70:33:cf:ef:8b:56:30:a6:0b:c2:29:8c:91:4c: 35:86:8b:fc:8d:a3:a3:bf:3e:bb:6c:fa:d8:8c:5e: b3:29:91:c2:da:e4:3e:e3:16:39:c9:49:11:66:c2: 67:de:94:a9:58:12:5a:ef:0b:e0:27:d8:f8:4c:6e: bc:4b:79:6b:ea:87:7e:f3:6f:6a:aa:a9:4c:78:38: 38:04:bb:c8:cd:b7:b1:31:45:11:93:b2:d3:25:09: 86:fd:e2:df:cb:9e:ef:00:a0:7b:ef:33:29:8e:27: 70:cd:b3:32:08:23:57:d7:99:41:e1:54:7d:04:d6: 50:82:d8:f3:cd:13:17:cf:12:7e:4b:bd:93:eb:50: c8:dc:02:5f:4a:c5:2c:33:6f:34:e6:70:9a:98:b9: 13:c7:3d:10:26:9d:4e:5b:1e:1b:c5:63:7d:a2:79: df:55:df:e8:83:f8:eb:58:e2:5a:64:25:6e:fb:b8: f8:42:9f:e9:f9:4a:50:10:75:e6:cc:14:c1:a0:41: 4e:44:4a:6a:8e:22:0e:ce:7f:08:7a:95:62:6f:94: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0D:7B:C1:DA:D4:C4:5A:28:43:B5:00:C7:EC:6C:48:31:E2:49:40 X509v3 Authority Key Identifier: keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:59:50:17:13:94:71:22:ba:a3:c4:34:89:91:a2:95:9a:0a: b2:29:86:d2:10:af:e2:0a:53:2d:18:4f:2f:74:db:b8:5c:ca: c6:b3:6b:c6:14:50:40:5d:b0:6d:7b:8f:7a:b4:ea:97:94:87: db:ef:a3:c3:99:db:46:22:af:c9:17:ea:9b:df:3d:a4:1f:41: eb:e7:85:8e:62:5b:8e:ac:2c:a9:8c:73:c6:31:07:0b:1c:e4: cd:c0:be:ce:c2:77:f4:57:66:e8:8a:47:38:bc:25:2d:1c:c1: 8e:69:2c:8a:23:87:40:80:52:a5:c1:ed:26:a1:a9:b5:4a:76: 8c:d3:ca:a1:11:45:6b:0e:9b:8c:da:4f:04:09:31:d1:9e:58: 14:5b:b2:03:02:1b:42:71:f2:1f:fb:4b:9e:29:41:42:8e:de: 69:36:7e:cd:57:5d:30:49:cd:d6:36:6b:d3:60:1f:d6:58:e6: e9:b4:8e:53:ff:ba:80:bf:3f:53:e2:50:f7:1d:23:ed:96:fe: 7f:61:2e:45:40:17:18:ea:cf:73:e4:8f:5f:c6:dd:bc:6d:70: ed:be:f9:65:83:39:a9:39:08:61:37:b3:9c:0a:c5:d3:67:30: e8:f9:0a:d1:97:93:11:f2:64:1c:3b:90:12:a4:35:7b:92:9c: 9c:44:51:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pHRb05uP5m6Qyrz2hWmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDk1YTJmNDFjZDEwNWFlZjA2ZjI4NzBhNzYzMzk4MDFl ZGI5MGQwHhcNMjUxMjMxMjMwMDQ3WhcNMjYwMTAxMjMwMDQ3WjAzMTEwLwYDVQQD EyhhYTBkN2JjMWRhZDRjNDVhMjg0M2I1MDBjN2VjNmM0ODMxZTI0OTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDCrV4LEjnwIk8m+N4s1aX4tw7Q/ ccqX2bbj1dHxZJCZy7FIMa0oN6F3474gcDPP74tWMKYLwimMkUw1hov8jaOjvz67 bPrYjF6zKZHC2uQ+4xY5yUkRZsJn3pSpWBJa7wvgJ9j4TG68S3lr6od+829qqqlM eDg4BLvIzbexMUURk7LTJQmG/eLfy57vAKB77zMpjidwzbMyCCNX15lB4VR9BNZQ gtjzzRMXzxJ+S72T61DI3AJfSsUsM2805nCamLkTxz0QJp1OWx4bxWN9onnfVd/o g/jrWOJaZCVu+7j4Qp/p+UpQEHXmzBTBoEFOREpqjiIOzn8IepVib5QR9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoNe8Ha1MRaKEO1AMfsbEgx4klAMB8GA1UdIwQY MBaAFFRJWi9BzRBa7wbyhwp2M5gB7bkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEt Zjk5NDBmYTFlMTA4LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEtZjk5NDBmYTFlMTA4 LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFlQFxOU cSK6o8Q0iZGilZoKsimG0hCv4gpTLRhPL3TbuFzKxrNrxhRQQF2wbXuPerTql5SH 2++jw5nbRiKvyRfqm989pB9B6+eFjmJbjqwsqYxzxjEHCxzkzcC+zsJ39Fdm6IpH OLwlLRzBjmksiiOHQIBSpcHtJqGptUp2jNPKoRFFaw6bjNpPBAkx0Z5YFFuyAwIb QnHyH/tLnilBQo7eaTZ+zVddMEnN1jZr02Af1ljm6bSOU/+6gL8/U+JQ9x0j7Zb+ f2EuRUAXGOrPc+SPX8bdvG1w7b75ZYM5qTkIYTeznArF02cw6PkK0ZeTEfJkHDuQ EqQ1e5KcnERRsw== -----END CERTIFICATE-----Generated at Thu Jan 1 01:04:31 2026 by rpki-client