This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft File: vhqIfnZTot5E8TFj4YcDcyaimgM.mft (raw, json) Hash identifier: uUgNSx3mGXJ7ZGJq0m14QMYrCPBslDjy0kmHJGF44Ok= Subject key identifier: C8:72:9B:0A:4E:09:EB:F7:DC:22:21:11:BA:19:C0:BE:6E:61:43:79 Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03 Certificate serial: 019B53AAE9790E0F23DD9D62FD7A11A90799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft Manifest number: 179A Signing time: Thu 25 Dec 2025 04:01:08 +0000 Manifest this update: Thu 25 Dec 2025 04:01:08 +0000 Manifest next update: Fri 26 Dec 2025 04:01:08 +0000 Files and hashes: 1: Ae-diP3rVk-4sa-PXAYgbcBanm4.roa (hash: u0iGxdBhci5JERVXq9GDeBfY++asc/728T5ZMln1pyE=) 2: Z9qZa3inYQ6MRNBOPIdAZNAoS4Y.roa (hash: hXK11vHnwMejj7JOnaAkUByhg12mm0SXJ7OP6kT8Ve8=) 3: vhqIfnZTot5E8TFj4YcDcyaimgM.crl (hash: 19K6clMdzABqAFPkkCSsfoRDR1VUnT/3QIzOAICDAOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:e9:79:0e:0f:23:dd:9d:62:fd:7a:11:a9:07:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03 Validity Not Before: Dec 25 04:01:08 2025 GMT Not After : Dec 26 04:01:08 2025 GMT Subject: CN=c8729b0a4e09ebf7dc222111ba19c0be6e614379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:01:08:21:3f:72:1e:2d:60:a4:a9:92:aa: 49:7d:27:61:1c:ec:1f:60:56:bc:10:be:53:78:49: 6b:f1:ed:85:a6:ad:3e:78:3a:4b:ed:da:64:6a:28: 2c:7f:7f:2b:dc:6f:7d:b4:2b:e8:37:93:e0:04:a9: 03:16:0d:11:3e:28:a4:8f:9b:ce:97:57:f6:7f:38: 11:ca:02:da:a7:23:61:7f:99:05:44:28:25:3d:43: c4:7c:27:ef:e3:40:71:a6:14:40:80:88:97:24:0d: 60:59:bc:6a:6b:7b:7a:9b:79:4e:ef:32:7d:73:47: e1:3e:16:f1:20:40:7c:e8:a2:ce:b4:66:0c:ab:5e: 2b:7c:a7:3e:0c:cc:01:eb:7e:88:7e:48:61:1b:0b: 88:7f:45:62:b9:84:0f:24:d0:0f:d1:63:48:3c:68: 06:24:f3:f2:66:5b:aa:91:7f:fe:e6:36:c5:15:3b: 69:b5:69:2b:fb:c8:47:bf:6f:21:66:58:a9:14:3d: 5c:e1:3f:ba:c0:09:cb:55:80:90:c0:87:23:53:49: a1:3b:2b:2c:cb:e4:a8:74:1d:b7:03:5e:c5:92:79: 38:fd:3d:67:fe:6d:37:b2:8b:8c:68:56:08:36:f1: c9:88:44:84:97:d5:3c:34:5c:a2:ff:1a:12:92:71: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:9B:0A:4E:09:EB:F7:DC:22:21:11:BA:19:C0:BE:6E:61:43:79 X509v3 Authority Key Identifier: keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:61:b8:99:30:79:51:7a:a9:df:2d:0f:89:c5:54:e1:45:09: 3f:89:5c:30:53:19:de:8e:73:2b:d4:03:e4:81:46:ae:a1:4c: a3:df:ea:ff:2e:c0:cc:0d:05:b7:19:94:d1:f1:9b:64:52:3e: 43:ae:3a:c6:29:9f:fd:ad:52:2d:25:87:d9:85:fe:4d:58:e1: 7b:26:5c:6e:58:fc:c4:39:5c:27:89:8c:75:15:73:0d:7c:df: 68:7f:41:5f:95:45:a3:8c:22:df:32:53:78:22:1d:92:55:b2: 6b:db:d3:15:2e:08:18:17:87:8f:48:9c:bd:e1:c9:fe:3c:47: ca:80:43:43:25:48:04:94:74:45:88:e0:28:30:ca:8b:2d:07: 4d:a9:38:23:1e:f6:2a:c3:07:7a:2b:fc:ab:7b:4e:dd:a6:12: fe:94:02:86:ea:f2:d4:2f:69:12:f9:4a:6e:53:e8:0d:6d:e1: f2:aa:f0:f6:fd:17:71:3e:c7:12:b3:db:d6:63:c4:78:99:97: 41:5a:a3:79:94:7f:b7:66:2a:5e:6e:ec:55:c8:a6:1b:7a:5c: 40:61:ce:07:f0:cf:38:01:59:2b:b7:26:9d:9e:b7:58:07:af: 8b:ad:41:4d:ee:47:5a:59:fc:5a:e2:0b:2c:8f:2c:80:ce:c9: d6:26:76:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqul5Dg8j3Z1i/XoRqQeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMWE4ODdlNzY1M2EyZGU0NGYxMzE2M2UxODcwMzczMjZh MjlhMDMwHhcNMjUxMjI1MDQwMTA4WhcNMjUxMjI2MDQwMTA4WjAzMTEwLwYDVQQD EyhjODcyOWIwYTRlMDllYmY3ZGMyMjIxMTFiYTE5YzBiZTZlNjE0Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH4BCCE/ch4tYKSpkqpJfSdhHOwf YFa8EL5TeElr8e2Fpq0+eDpL7dpkaigsf38r3G99tCvoN5PgBKkDFg0RPiikj5vO l1f2fzgRygLapyNhf5kFRCglPUPEfCfv40BxphRAgIiXJA1gWbxqa3t6m3lO7zJ9 c0fhPhbxIEB86KLOtGYMq14rfKc+DMwB636IfkhhGwuIf0ViuYQPJNAP0WNIPGgG JPPyZluqkX/+5jbFFTtptWkr+8hHv28hZlipFD1c4T+6wAnLVYCQwIcjU0mhOyss y+SodB23A17Fknk4/T1n/m03souMaFYINvHJiESEl9U8NFyi/xoSknF1ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhymwpOCev33CIhEboZwL5uYUN5MB8GA1UdIwQY MBaAFL4aiH52U6LeRPExY+GHA3MmopoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYt ODZjNTQxY2E5ZDcxLzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84YjQ0M2UtZjNjOC00YmEwLTllOTYtODZjNTQxY2E5ZDcx LzEvdmhxSWZuWlRvdDVFOFRGajRZY0RjeWFpbWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWG4mTB5 UXqp3y0PicVU4UUJP4lcMFMZ3o5zK9QD5IFGrqFMo9/q/y7AzA0FtxmU0fGbZFI+ Q646ximf/a1SLSWH2YX+TVjheyZcblj8xDlcJ4mMdRVzDXzfaH9BX5VFo4wi3zJT eCIdklWya9vTFS4IGBeHj0icveHJ/jxHyoBDQyVIBJR0RYjgKDDKiy0HTak4Ix72 KsMHeiv8q3tO3aYS/pQChury1C9pEvlKblPoDW3h8qrw9v0XcT7HErPb1mPEeJmX QVqjeZR/t2YqXm7sVcimG3pcQGHOB/DPOAFZK7cmnZ63WAevi61BTe5HWln8WuIL LI8sgM7J1iZ2+Q== -----END CERTIFICATE-----Generated at Thu Dec 25 06:24:51 2025 by rpki-client