This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft File: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json) Hash identifier: dmU5bz3H2ez4WJVwbrhQ018Udcg1oQKP/42J+OFqUPg= Subject key identifier: 04:D9:0E:AE:30:94:9D:31:39:6A:F5:DB:39:51:73:EB:02:AC:79:3B Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc Certificate serial: 019B3D5A33EB62E703673B9F45627A39A53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft Manifest number: 04CE Signing time: Sat 20 Dec 2025 20:01:20 +0000 Manifest this update: Sat 20 Dec 2025 20:01:20 +0000 Manifest next update: Sun 21 Dec 2025 20:01:20 +0000 Files and hashes: 1: 5plB530qygQZgc5iy94cTTubXQY.roa (hash: bggGhARy6ftWuU+BuycqTEacDg0xLxj5VnkE+HMr4qY=) 2: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=) 3: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: PiG0elAVXtSUqUhEMd7stVmlXTD/Ua/H7cIcK2YzkUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:33:eb:62:e7:03:67:3b:9f:45:62:7a:39:a5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503251db69693362a927e2b130467945c54f0fc Validity Not Before: Dec 20 20:01:20 2025 GMT Not After : Dec 21 20:01:20 2025 GMT Subject: CN=04d90eae30949d31396af5db395173eb02ac793b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:ee:36:b1:77:6d:f7:cc:bc:10:ba:57:67: ed:d3:3f:5a:ac:be:85:71:be:b9:84:a8:86:ef:1f: 4d:fb:2c:90:8b:48:a6:2c:35:cc:af:1b:46:f4:4c: c1:8f:b6:49:f2:7e:16:50:10:32:00:47:b7:d6:9d: 18:08:af:e0:61:02:68:28:13:a1:88:67:68:d2:14: 53:b7:ef:cb:76:95:68:1d:a6:26:9d:52:29:0b:0a: 33:57:09:75:06:c9:23:f2:71:84:ca:bc:55:b3:49: 83:b8:9d:e9:66:26:a2:c9:96:da:2f:e7:63:2d:96: 79:7a:65:cb:93:5c:33:bf:ce:29:98:b2:3e:47:93: 2e:ff:81:53:a6:e8:f3:fa:7b:17:ea:cc:25:be:19: b1:68:11:47:e2:05:ec:81:21:8a:02:b6:1e:e3:d9: c3:88:59:18:6c:b0:c4:64:0c:ef:2f:3a:88:22:fa: 8c:cb:a6:ab:63:89:4e:08:f7:f4:41:75:21:dd:f7: 3b:8e:c2:7c:05:97:b2:55:c3:17:4a:10:d8:f2:3d: 98:bc:f1:85:f2:e9:bb:a1:02:f3:2f:3b:41:88:fb: f4:dc:56:f6:cb:f6:e7:65:45:9b:a1:f8:4d:3b:ec: 43:08:90:dd:44:92:f1:26:10:13:4a:16:83:81:55: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D9:0E:AE:30:94:9D:31:39:6A:F5:DB:39:51:73:EB:02:AC:79:3B X509v3 Authority Key Identifier: keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:23:2d:25:01:b4:50:31:25:6e:44:13:6b:40:0e:b5:93:55: c6:a2:d7:35:03:29:44:98:10:6e:95:47:c7:39:d0:7f:9c:1d: 4c:77:26:8a:75:63:54:7b:2b:69:98:51:ff:f9:db:cf:08:22: a9:04:92:46:7e:0c:73:bf:fb:34:af:f8:3f:85:72:12:99:00: 99:b6:f6:3f:34:76:b1:24:54:e4:a9:9c:3f:d4:2a:9f:b3:a8: 93:5e:7f:8e:cf:51:c9:2e:b7:a0:97:70:5a:b2:30:a1:87:c6: bb:ec:f2:be:c6:27:13:53:1c:8e:b1:9c:c2:df:11:da:55:99: 31:ff:41:c2:5d:5a:57:59:9a:79:9e:0d:a8:8f:e3:6b:e8:3e: 1c:cc:c3:b5:b1:bf:a2:48:11:5c:4c:ec:06:53:61:10:59:1b: 81:f1:40:eb:f4:a2:ae:95:54:33:03:e8:c7:32:c6:47:12:78: 6f:0a:be:79:1f:c9:a8:5e:22:73:78:89:3c:44:aa:4d:ac:14: 8b:76:16:9e:bc:69:75:43:1e:43:19:27:f3:13:5a:c1:8f:82: 6d:7a:16:be:cf:3e:f3:5a:fa:52:46:45:c4:60:d1:08:37:2d: ca:bc:2a:d7:ee:57:d7:39:79:ea:4b:63:02:5a:0a:cb:9d:10: 2f:29:29:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjPrYucDZzufRWJ6OaU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1 NGYwZmMwHhcNMjUxMjIwMjAwMTIwWhcNMjUxMjIxMjAwMTIwWjAzMTEwLwYDVQQD EygwNGQ5MGVhZTMwOTQ5ZDMxMzk2YWY1ZGIzOTUxNzNlYjAyYWM3OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhLuNrF3bffMvBC6V2ft0z9arL6F cb65hKiG7x9N+yyQi0imLDXMrxtG9EzBj7ZJ8n4WUBAyAEe31p0YCK/gYQJoKBOh iGdo0hRTt+/LdpVoHaYmnVIpCwozVwl1Bskj8nGEyrxVs0mDuJ3pZiaiyZbaL+dj LZZ5emXLk1wzv84pmLI+R5Mu/4FTpujz+nsX6swlvhmxaBFH4gXsgSGKArYe49nD iFkYbLDEZAzvLzqIIvqMy6arY4lOCPf0QXUh3fc7jsJ8BZeyVcMXShDY8j2YvPGF 8um7oQLzLztBiPv03Fb2y/bnZUWbofhNO+xDCJDdRJLxJhATShaDgVVhMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATZDq4wlJ0xOWr12zlRc+sCrHk7MB8GA1UdIwQY MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It M2NiYWQ1YjkwNGI1LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1 LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCMtJQG0 UDElbkQTa0AOtZNVxqLXNQMpRJgQbpVHxznQf5wdTHcminVjVHsraZhR//nbzwgi qQSSRn4Mc7/7NK/4P4VyEpkAmbb2PzR2sSRU5KmcP9Qqn7Ook15/js9RyS63oJdw WrIwoYfGu+zyvsYnE1McjrGcwt8R2lWZMf9Bwl1aV1maeZ4NqI/ja+g+HMzDtbG/ okgRXEzsBlNhEFkbgfFA6/SirpVUMwPoxzLGRxJ4bwq+eR/JqF4ic3iJPESqTawU i3YWnrxpdUMeQxkn8xNawY+CbXoWvs8+81r6UkZFxGDRCDctyrwq1+5X1zl56ktj AloKy50QLykpoA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:30 2025 by rpki-client