This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json) Hash identifier: 5oeL0sWivtdssMsSBo1awJqfL6O2MCRJtbU4+X50COc= Subject key identifier: D8:2D:97:6B:CB:67:75:0F:C3:C7:B6:9B:57:42:02:5B:87:CB:7C:C7 Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79 Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079 Certificate serial: 019B6D332E5C37D0C58BE1675698CBD93112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft Manifest number: 0E99 Signing time: Tue 30 Dec 2025 03:00:29 +0000 Manifest this update: Tue 30 Dec 2025 03:00:29 +0000 Manifest next update: Wed 31 Dec 2025 03:00:29 +0000 Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: tJmtKI1GZuqIuXVgvZf/3irSsfU84LcyRDGPXpiAsV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:2e:5c:37:d0:c5:8b:e1:67:56:98:cb:d9:31:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079 Validity Not Before: Dec 30 03:00:29 2025 GMT Not After : Dec 31 03:00:29 2025 GMT Subject: CN=d82d976bcb67750fc3c7b69b5742025b87cb7cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:82:89:47:71:88:66:c8:d2:26:6f:68:2f:04: a1:f7:b9:40:85:3c:41:b5:f1:06:d4:9e:59:28:c6: b7:54:24:a3:8d:9a:f2:2a:74:ec:98:96:25:e3:2b: e2:13:25:5e:5a:a8:4e:ac:b9:ef:18:41:1b:b1:d1: aa:98:c0:57:89:95:1b:9c:6b:42:61:4d:90:24:71: 0d:bf:36:f5:3d:34:25:0d:ee:20:2f:70:70:bd:83: 0a:ea:b4:c8:16:84:38:b6:16:7f:06:c1:d1:26:38: a7:4a:31:9d:f8:40:a6:7c:20:9e:81:d3:74:7f:c8: 1c:f9:77:7d:79:08:b5:47:57:01:be:b7:09:02:94: 92:31:3b:3a:3a:47:ad:62:01:8e:f0:e7:04:71:55: 5e:12:59:95:7f:11:a2:61:c6:b9:2f:95:76:af:f0: 33:52:04:30:c7:50:d7:13:90:ac:92:d8:85:55:cf: dc:12:43:d4:cd:ca:b5:89:f0:8f:7d:7f:06:a1:f4: ee:f9:69:f5:2b:17:70:7e:7f:0f:27:db:9a:da:6d: fb:15:c6:77:2b:dc:69:cc:b7:d9:ee:f1:b9:09:a2: 7f:90:48:e2:13:d8:6a:63:5f:c0:c8:ad:ff:27:30: fc:ea:2f:c2:b3:16:0a:93:b1:23:cf:96:59:12:d7: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2D:97:6B:CB:67:75:0F:C3:C7:B6:9B:57:42:02:5B:87:CB:7C:C7 X509v3 Authority Key Identifier: keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:05:0c:fe:75:5e:09:4f:c0:03:49:83:8a:25:1c:e9:d9:af: cb:94:2e:16:5c:aa:1b:2b:1a:39:02:44:15:27:fd:3d:87:7d: 16:ff:b6:4e:b6:50:cd:37:66:b1:5a:ac:c4:78:aa:de:b6:c0: ff:8b:b1:99:67:40:5b:11:f6:9f:5b:9b:b6:a9:72:7a:eb:bd: ee:13:9f:1c:eb:bc:90:28:3c:12:b8:cc:56:71:a0:32:da:48: b3:d0:8c:fd:92:c1:5d:3e:a1:92:be:6e:f2:7e:e6:46:b1:bb: c6:e1:0c:08:bb:9c:d6:86:ae:3e:e2:ca:bd:a0:98:94:db:52: ad:29:2a:ed:ea:20:4a:ff:c4:ab:fa:81:5c:06:43:08:4b:65: 20:fe:60:5f:f9:f3:9f:97:e1:dc:b8:17:e2:0d:ab:48:ae:78: 1e:79:94:9b:15:25:06:ba:5e:10:01:fe:68:be:18:d5:16:84: 69:9d:97:0e:1c:40:b1:21:96:1c:12:8c:e9:a8:d8:d7:04:0c: cc:5d:99:45:e5:10:33:86:ca:58:22:9b:68:b9:8a:bc:bd:5a: f6:8d:94:84:8b:b0:e9:1b:7c:a5:ac:25:ac:b0:25:90:e4:89: 35:ea:42:7b:e6:72:1a:39:67:2b:71:9d:27:4c:c8:73:7f:22: 75:66:cc:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMy5cN9DFi+FnVpjL2TESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NGQ1YTZjMzkxOWY1MWY4ZmRiOTUwNTBjMTljNTNlZjg0 OWQwNzkwHhcNMjUxMjMwMDMwMDI5WhcNMjUxMjMxMDMwMDI5WjAzMTEwLwYDVQQD EyhkODJkOTc2YmNiNjc3NTBmYzNjN2I2OWI1NzQyMDI1Yjg3Y2I3Y2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoKJR3GIZsjSJm9oLwSh97lAhTxB tfEG1J5ZKMa3VCSjjZryKnTsmJYl4yviEyVeWqhOrLnvGEEbsdGqmMBXiZUbnGtC YU2QJHENvzb1PTQlDe4gL3BwvYMK6rTIFoQ4thZ/BsHRJjinSjGd+ECmfCCegdN0 f8gc+Xd9eQi1R1cBvrcJApSSMTs6OketYgGO8OcEcVVeElmVfxGiYca5L5V2r/Az UgQwx1DXE5CsktiFVc/cEkPUzcq1ifCPfX8GofTu+Wn1Kxdwfn8PJ9ua2m37FcZ3 K9xpzLfZ7vG5CaJ/kEjiE9hqY1/AyK3/JzD86i/CsxYKk7Ejz5ZZEtfRpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgtl2vLZ3UPw8e2m1dCAluHy3zHMB8GA1UdIwQY MBaAFFRNWmw5GfUfj9uVBQwZxT74SdB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEt NjE2ZTQzOWZkMDBkLzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEtNjE2ZTQzOWZkMDBk LzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwUM/nVe CU/AA0mDiiUc6dmvy5QuFlyqGysaOQJEFSf9PYd9Fv+2TrZQzTdmsVqsxHiq3rbA /4uxmWdAWxH2n1ubtqlyeuu97hOfHOu8kCg8ErjMVnGgMtpIs9CM/ZLBXT6hkr5u 8n7mRrG7xuEMCLuc1oauPuLKvaCYlNtSrSkq7eogSv/Eq/qBXAZDCEtlIP5gX/nz n5fh3LgX4g2rSK54HnmUmxUlBrpeEAH+aL4Y1RaEaZ2XDhxAsSGWHBKM6ajY1wQM zF2ZReUQM4bKWCKbaLmKvL1a9o2UhIuw6Rt8pawlrLAlkOSJNepCe+ZyGjlnK3Gd J0zIc38idWbMJQ== -----END CERTIFICATE-----Generated at Tue Dec 30 08:50:28 2025 by rpki-client