This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json) Hash identifier: Awnsa4Hp/bKvProPw9wVwhQ7tLAWX/6l+hNqCENv1xw= Subject key identifier: C0:7B:D9:AF:93:AD:5E:C0:3A:8D:4E:B5:01:8B:BB:7C:3B:47:ED:99 Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225 Certificate serial: 019B559946D5C58A828485D594C409E37BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft Manifest number: 05E0 Signing time: Thu 25 Dec 2025 13:01:06 +0000 Manifest this update: Thu 25 Dec 2025 13:01:06 +0000 Manifest next update: Fri 26 Dec 2025 13:01:06 +0000 Files and hashes: 1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=) 2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: wRV1k9h7/5cMPDUrVrHRTRy/O4i2xajFk0/XI4DGDhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:46:d5:c5:8a:82:84:85:d5:94:c4:09:e3:7b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e610c2abd3664c11204580f748996555c22225 Validity Not Before: Dec 25 13:01:06 2025 GMT Not After : Dec 26 13:01:06 2025 GMT Subject: CN=c07bd9af93ad5ec03a8d4eb5018bbb7c3b47ed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:ed:20:f4:dd:c8:8b:df:b7:be:2c:fc:aa: 91:d0:27:3c:a8:c1:d9:28:5e:5b:a9:7a:55:e1:ba: c2:76:89:65:a4:2e:f6:39:e6:0d:ff:3e:b8:9c:81: 48:44:4b:74:98:b6:7b:a6:dd:cb:af:1f:4a:10:36: 81:01:34:36:95:6c:f4:92:ce:f2:81:63:47:37:9e: f4:2a:93:a2:a5:b5:84:56:03:5e:24:29:d6:95:ca: f8:1d:5e:bf:24:73:d4:58:68:69:fa:99:aa:9d:1c: 22:9f:95:cd:37:ce:12:1d:0a:59:97:c1:48:2a:09: 51:21:ec:61:fe:2a:47:ee:f8:30:fb:e9:90:c4:1e: cc:83:ec:54:37:da:65:6e:69:f2:dc:57:d1:b4:30: ef:eb:e8:1f:ac:0f:1e:e9:ae:22:27:26:1f:c9:8d: f2:4f:e9:c1:b9:5f:ed:fb:1e:fd:1d:3f:8c:39:80: 4c:23:ca:ad:fa:17:6f:d5:0e:19:cb:a7:17:e4:bb: a8:a1:f3:0a:fd:e6:b6:25:75:57:07:a5:bf:4e:aa: bd:80:e5:8e:b5:91:17:dc:6c:58:9d:cf:55:0b:f2: 4e:3d:19:b8:51:bf:02:f8:ab:39:08:5b:d9:d1:d9: 52:b3:08:02:24:77:ec:53:f7:8d:71:1e:ea:80:9c: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7B:D9:AF:93:AD:5E:C0:3A:8D:4E:B5:01:8B:BB:7C:3B:47:ED:99 X509v3 Authority Key Identifier: keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:88:14:e8:fb:4a:dc:c5:5b:3f:05:b2:68:1a:86:63:a0:25: e2:2b:09:0d:de:96:0d:c6:06:77:e5:b9:8c:bc:f4:61:c3:a4: fc:c8:49:18:0f:ca:6f:60:a4:e9:41:dd:b4:29:af:09:a8:bf: 32:e1:32:db:45:7a:1f:84:f6:f7:de:0b:35:ad:f5:ef:52:fd: 75:ce:db:02:e0:dc:aa:15:dd:6d:c6:25:05:98:a5:6b:82:a6: ad:02:14:32:f6:dc:51:ef:bb:ff:80:ef:19:0d:a0:9e:b4:46: 3a:37:6f:29:03:c5:31:a4:9f:30:b0:08:d2:ab:3e:e2:ec:4d: 7b:11:e3:2d:7d:3f:77:10:21:d8:81:ce:33:ae:b8:2b:eb:b7: f7:2b:54:82:85:0c:47:a8:89:19:53:7b:81:d2:17:57:11:fb: 79:43:19:c2:84:39:ef:84:22:af:7d:49:6a:47:75:29:d8:ea: ec:a8:ff:c7:37:04:6f:d0:8f:36:5e:f5:5c:65:99:d9:a7:04: ef:11:1e:4e:79:22:5b:37:a3:4b:96:f2:a2:86:ec:dd:66:f3: bf:69:09:86:39:72:8d:c3:b3:c6:c5:5d:51:23:96:3f:f0:05: 20:91:43:a2:46:ac:5d:40:76:74:71:5b:91:23:ae:8a:ed:3d: 25:9f:14:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmUbVxYqChIXVlMQJ43u8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj MjIyMjUwHhcNMjUxMjI1MTMwMTA2WhcNMjUxMjI2MTMwMTA2WjAzMTEwLwYDVQQD EyhjMDdiZDlhZjkzYWQ1ZWMwM2E4ZDRlYjUwMThiYmI3YzNiNDdlZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EjtIPTdyIvft74s/KqR0Cc8qMHZ KF5bqXpV4brCdollpC72OeYN/z64nIFIREt0mLZ7pt3Lrx9KEDaBATQ2lWz0ks7y gWNHN570KpOipbWEVgNeJCnWlcr4HV6/JHPUWGhp+pmqnRwin5XNN84SHQpZl8FI KglRIexh/ipH7vgw++mQxB7Mg+xUN9plbmny3FfRtDDv6+gfrA8e6a4iJyYfyY3y T+nBuV/t+x79HT+MOYBMI8qt+hdv1Q4Zy6cX5LuoofMK/ea2JXVXB6W/Tqq9gOWO tZEX3GxYnc9VC/JOPRm4Ub8C+Ks5CFvZ0dlSswgCJHfsU/eNcR7qgJxJdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB72a+TrV7AOo1OtQGLu3w7R+2ZMB8GA1UdIwQY MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMogU6PtK 3MVbPwWyaBqGY6Al4isJDd6WDcYGd+W5jLz0YcOk/MhJGA/Kb2Ck6UHdtCmvCai/ MuEy20V6H4T2994LNa3171L9dc7bAuDcqhXdbcYlBZila4KmrQIUMvbcUe+7/4Dv GQ2gnrRGOjdvKQPFMaSfMLAI0qs+4uxNexHjLX0/dxAh2IHOM664K+u39ytUgoUM R6iJGVN7gdIXVxH7eUMZwoQ574Qir31Jakd1Kdjq7Kj/xzcEb9CPNl71XGWZ2acE 7xEeTnkiWzejS5byoobs3Wbzv2kJhjlyjcOzxsVdUSOWP/AFIJFDokasXUB2dHFb kSOuiu09JZ8U5w== -----END CERTIFICATE-----Generated at Thu Dec 25 22:26:50 2025 by rpki-client