This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json) Hash identifier: JIiavtwFjG0xGZXnhhBC44eM7iR0sU07n6NGA7lDav4= Subject key identifier: BA:6F:EC:26:B5:F4:5B:86:3E:80:C2:AC:69:EB:8D:38:23:DF:21:B8 Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225 Certificate serial: 019B44390939E259B43CC4BCE950A81A108E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft Manifest number: 05D7 Signing time: Mon 22 Dec 2025 04:02:27 +0000 Manifest this update: Mon 22 Dec 2025 04:02:27 +0000 Manifest next update: Tue 23 Dec 2025 04:02:27 +0000 Files and hashes: 1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=) 2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: v0REfwAox5LH72M7F20bG3h9ZGbxO3gMdATgzTn96Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:09:39:e2:59:b4:3c:c4:bc:e9:50:a8:1a:10:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e610c2abd3664c11204580f748996555c22225 Validity Not Before: Dec 22 04:02:27 2025 GMT Not After : Dec 23 04:02:27 2025 GMT Subject: CN=ba6fec26b5f45b863e80c2ac69eb8d3823df21b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:a0:03:b0:62:3f:c8:53:2d:e5:db:ad:37: 35:63:71:43:5d:d9:cd:46:5d:28:be:ee:6d:93:f7: d4:be:f2:ad:5f:9f:28:61:74:fc:4d:ba:89:20:5c: 7f:23:1b:f4:b1:24:dc:8a:26:a8:42:5f:4c:e6:d9: 02:e6:23:1b:95:e1:89:4d:4b:25:04:f9:5d:e0:c2: c9:e4:24:99:f7:8c:82:97:ee:b9:b6:72:23:ab:93: 7b:ae:f9:82:4d:70:01:2a:39:9a:81:06:57:01:66: cc:02:38:94:40:69:93:d4:76:e0:62:48:dc:28:06: 18:3b:63:d2:66:8c:f4:bd:8b:e9:a9:ab:7f:5c:db: 1f:4b:6c:42:17:79:d4:b6:f4:e9:0a:66:9a:c9:12: d0:eb:4b:0c:69:21:e2:eb:a3:1f:c4:2d:4c:5a:7c: 4f:32:a4:3b:26:48:af:04:57:74:f8:e1:e0:dd:ac: 4f:b3:c1:04:4b:8e:6f:cb:8a:36:ac:f7:87:8b:70: 8a:b1:73:cb:76:75:e0:25:ab:f2:4c:c2:7f:7b:08: 26:81:11:86:fa:bd:3d:46:0b:13:e7:c1:21:cb:f9: e8:72:c8:66:b3:47:85:78:e4:60:f1:50:99:3c:9b: 27:c1:16:13:7d:77:e3:3e:2e:62:5d:b9:37:9e:bc: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6F:EC:26:B5:F4:5B:86:3E:80:C2:AC:69:EB:8D:38:23:DF:21:B8 X509v3 Authority Key Identifier: keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9e:b6:95:c7:24:30:12:4c:98:7c:91:59:47:43:a9:65:14: e2:5b:4f:01:31:a1:5c:bd:bc:82:d8:96:43:fe:da:b0:e9:db: 86:87:4f:58:b0:52:ac:3d:05:8f:15:f2:19:18:3a:3a:bf:98: 40:79:eb:1f:85:fa:21:7e:5c:4d:59:45:2e:3a:8c:e4:79:65: ec:b9:0f:0a:3f:57:e3:f6:1d:c6:33:c2:09:82:93:ea:58:6b: 8e:bd:b5:6d:8c:89:86:7f:86:12:22:9f:57:d7:61:0c:a4:78: 86:e8:6d:6b:c0:60:c9:ef:92:93:f8:b5:64:33:a0:62:bf:94: dd:e7:eb:f8:51:80:5c:69:92:50:e7:12:2d:8b:ba:14:56:95: 89:84:e4:71:06:98:b1:26:13:df:bb:dd:2c:bb:11:86:5b:db: ff:6c:9b:7d:af:68:58:cf:10:f9:a2:f2:7e:2e:b5:6b:62:5a: 8e:58:f1:fa:a2:62:c7:88:ae:55:48:fd:3d:53:7d:6f:53:2a: bf:c1:d6:1a:b4:77:96:7f:aa:5c:8b:dc:f6:05:86:4f:95:b9: 1b:82:41:2a:fe:db:75:31:23:86:5d:57:48:91:4c:4f:5d:25: 4d:09:0e:0f:01:d2:08:9d:20:d9:1d:2b:41:1e:61:85:52:49: 42:1e:53:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQk54lm0PMS86VCoGhCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj MjIyMjUwHhcNMjUxMjIyMDQwMjI3WhcNMjUxMjIzMDQwMjI3WjAzMTEwLwYDVQQD EyhiYTZmZWMyNmI1ZjQ1Yjg2M2U4MGMyYWM2OWViOGQzODIzZGYyMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylugA7BiP8hTLeXbrTc1Y3FDXdnN Rl0ovu5tk/fUvvKtX58oYXT8TbqJIFx/Ixv0sSTciiaoQl9M5tkC5iMbleGJTUsl BPld4MLJ5CSZ94yCl+65tnIjq5N7rvmCTXABKjmagQZXAWbMAjiUQGmT1HbgYkjc KAYYO2PSZoz0vYvpqat/XNsfS2xCF3nUtvTpCmaayRLQ60sMaSHi66MfxC1MWnxP MqQ7JkivBFd0+OHg3axPs8EES45vy4o2rPeHi3CKsXPLdnXgJavyTMJ/ewgmgRGG +r09RgsT58Ehy/nocshms0eFeORg8VCZPJsnwRYTfXfjPi5iXbk3nry+kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpv7Ca19FuGPoDCrGnrjTgj3yG4MB8GA1UdIwQY MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ62lcck MBJMmHyRWUdDqWUU4ltPATGhXL28gtiWQ/7asOnbhodPWLBSrD0FjxXyGRg6Or+Y QHnrH4X6IX5cTVlFLjqM5Hll7LkPCj9X4/YdxjPCCYKT6lhrjr21bYyJhn+GEiKf V9dhDKR4huhta8Bgye+Sk/i1ZDOgYr+U3efr+FGAXGmSUOcSLYu6FFaViYTkcQaY sSYT37vdLLsRhlvb/2ybfa9oWM8Q+aLyfi61a2Jajljx+qJix4iuVUj9PVN9b1Mq v8HWGrR3ln+qXIvc9gWGT5W5G4JBKv7bdTEjhl1XSJFMT10lTQkODwHSCJ0g2R0r QR5hhVJJQh5T1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 10:03:32 2025 by rpki-client