This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json) Hash identifier: EjpCEPT+UBFbu/gfVoQs6FA38nUIZ8RGZNM24ZSOfe0= Subject key identifier: 43:4F:B8:86:59:37:8E:DB:DD:43:B3:14:39:5C:A2:AA:7E:DC:80:29 Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720 Certificate serial: 019B3FECAAC4C18C713A12A7F5AA1ACECB48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:33 +0000 Manifest this update: Sun 21 Dec 2025 08:00:33 +0000 Manifest next update: Mon 22 Dec 2025 08:00:33 +0000 Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=) 2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: k6+6nNTwGBJWnW8RBOiyZ6nFDxwMit/kW2w5rO//EmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:aa:c4:c1:8c:71:3a:12:a7:f5:aa:1a:ce:cb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720 Validity Not Before: Dec 21 08:00:33 2025 GMT Not After : Dec 22 08:00:33 2025 GMT Subject: CN=434fb88659378edbdd43b314395ca2aa7edc8029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:c9:74:f8:85:03:ab:4e:7e:2a:17:80:51: b9:7b:20:1b:ba:ac:e6:f8:0c:dd:c7:20:93:2d:6f: 7e:03:64:c6:1d:02:19:af:05:f9:3d:c2:6e:8f:0c: 17:2b:9f:d6:9a:46:de:55:a2:d2:04:c7:99:3d:72: fa:79:85:6e:98:c4:15:e3:c5:69:da:aa:9c:3b:6f: ee:9a:2e:ca:20:da:46:9d:8d:57:7a:a0:97:1f:dd: af:3f:c0:9f:87:a3:16:82:bb:e2:78:6e:c3:d3:8a: 2b:1a:75:59:36:e6:17:7f:bb:3c:ba:c4:7a:7d:a9: 0d:98:17:05:8c:a4:fb:e8:9e:1c:81:82:ad:a5:71: 32:a4:b9:59:b4:c9:0a:25:c0:ca:42:18:48:da:8f: 35:28:a8:02:53:ef:ed:d9:8c:9b:31:3d:6d:5e:21: 50:0d:14:cb:5e:aa:ee:60:96:01:1d:09:a2:00:a4: ef:c1:fe:66:5b:8a:4c:13:1c:ce:c4:b3:76:35:65: 10:d2:a5:7c:54:1f:dc:24:1a:64:b9:39:3b:79:ce: e6:99:a3:e5:4a:99:1c:08:3c:0e:5e:49:86:92:ec: 1f:ba:4c:fb:40:b2:87:70:ab:a6:a5:a1:04:59:97: 56:03:40:fb:e6:2b:bc:6f:fc:72:67:b4:ac:f9:53: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4F:B8:86:59:37:8E:DB:DD:43:B3:14:39:5C:A2:AA:7E:DC:80:29 X509v3 Authority Key Identifier: keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b1:3b:5f:b3:3a:48:ac:39:04:75:c9:7e:90:2b:9f:0a:b8: 86:f9:c9:4c:77:86:f8:f4:5c:95:d3:f7:7f:55:f3:bf:61:27: 70:ac:cc:d2:46:e0:8a:7b:bf:d2:1a:fa:37:4f:cc:cd:c7:d1: 8a:57:9c:ff:15:d5:7d:fb:90:02:ee:6d:05:b9:da:f3:c7:43: e5:95:ac:48:27:ed:d8:f3:e8:f5:a0:b3:13:c2:b6:6f:bd:28: 20:50:98:25:4d:70:74:b4:55:5b:d6:9f:3b:a7:22:20:f3:76: d7:01:12:cc:ac:15:4d:e1:c0:f9:df:7c:4c:c3:09:85:21:b5: b7:d0:8d:52:2d:b6:5b:7b:a9:76:81:b9:6a:b5:0a:b9:67:31: b4:93:7d:00:13:55:da:e2:be:2c:17:de:c9:4a:05:97:85:d9: 59:fb:54:c5:7d:a0:c2:e9:72:f5:db:df:b3:75:6d:67:fa:3c: 03:b8:d4:f9:3d:12:3e:38:69:7a:95:87:24:27:49:79:df:61: a8:e7:a6:57:0a:cd:83:00:bd:ce:5b:bd:15:3e:26:d9:ca:11: 81:0a:fa:ae:41:81:b6:fe:3b:10:f8:16:7f:28:43:41:6e:63: b2:ca:92:67:4b:40:98:a3:e4:18:6b:13:9b:ca:27:b7:5d:c7: bb:7b:8e:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7KrEwYxxOhKn9aoazstIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjg1ZmZlZTk3MzEyYzUxYzNhODA1ZmY5MzQwZWJlYzMz NTI3MjAwHhcNMjUxMjIxMDgwMDMzWhcNMjUxMjIyMDgwMDMzWjAzMTEwLwYDVQQD Eyg0MzRmYjg4NjU5Mzc4ZWRiZGQ0M2IzMTQzOTVjYTJhYTdlZGM4MDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVvJdPiFA6tOfioXgFG5eyAbuqzm +AzdxyCTLW9+A2TGHQIZrwX5PcJujwwXK5/WmkbeVaLSBMeZPXL6eYVumMQV48Vp 2qqcO2/umi7KINpGnY1XeqCXH92vP8Cfh6MWgrvieG7D04orGnVZNuYXf7s8usR6 fakNmBcFjKT76J4cgYKtpXEypLlZtMkKJcDKQhhI2o81KKgCU+/t2YybMT1tXiFQ DRTLXqruYJYBHQmiAKTvwf5mW4pMExzOxLN2NWUQ0qV8VB/cJBpkuTk7ec7mmaPl SpkcCDwOXkmGkuwfukz7QLKHcKumpaEEWZdWA0D75iu8b/xyZ7Ss+VNGqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENPuIZZN47b3UOzFDlcoqp+3IApMB8GA1UdIwQY MBaAFFQoX/7pcxLFHDqAX/k0Dr7DNScgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjIt OGE3ZTYzZThjZDc1LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjItOGE3ZTYzZThjZDc1 LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrE7X7M6 SKw5BHXJfpArnwq4hvnJTHeG+PRcldP3f1Xzv2EncKzM0kbginu/0hr6N0/MzcfR ilec/xXVffuQAu5tBbna88dD5ZWsSCft2PPo9aCzE8K2b70oIFCYJU1wdLRVW9af O6ciIPN21wESzKwVTeHA+d98TMMJhSG1t9CNUi22W3updoG5arUKuWcxtJN9ABNV 2uK+LBfeyUoFl4XZWftUxX2gwuly9dvfs3VtZ/o8A7jU+T0SPjhpepWHJCdJed9h qOemVwrNgwC9zlu9FT4m2coRgQr6rkGBtv47EPgWfyhDQW5jssqSZ0tAmKPkGGsT m8ont13Hu3uOVA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:06:59 2025 by rpki-client