This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json) Hash identifier: 3Rd9YYIENCbbUEUGDkLi7z2kUS+cY8MhRV3GfVxlkHw= Subject key identifier: 2F:EF:5D:FE:5B:B2:E0:BE:83:B7:21:27:FD:51:91:7A:74:92:65:69 Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8 Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8 Certificate serial: 019B755AF35F00A977450E204587E24ACE5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft Manifest number: 0DA6 Signing time: Wed 31 Dec 2025 17:00:53 +0000 Manifest this update: Wed 31 Dec 2025 17:00:53 +0000 Manifest next update: Thu 01 Jan 2026 17:00:53 +0000 Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: 9THjlxT/7+rJC5xB5CnIH5gcGdWihVxib1b30WHOFWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5a:f3:5f:00:a9:77:45:0e:20:45:87:e2:4a:ce:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8 Validity Not Before: Dec 31 17:00:53 2025 GMT Not After : Jan 1 17:00:53 2026 GMT Subject: CN=2fef5dfe5bb2e0be83b72127fd51917a74926569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:7d:65:31:3d:15:78:ce:6a:cf:be:d7:83: d0:0c:7b:fe:de:37:fb:3b:f8:ba:94:a4:c4:ff:d6: 55:66:21:8b:78:13:a5:80:50:43:78:80:45:cc:2b: 6c:38:9e:54:cf:76:59:d9:22:65:51:4d:ae:63:d9: a8:11:95:ca:17:ea:11:4e:27:da:8a:c9:75:c5:ab: 73:e4:88:7b:6a:10:9f:73:0f:0b:b1:60:21:e6:d8: fa:3d:4f:8f:0a:e6:c5:d2:7f:30:9e:35:7d:14:00: 6c:59:2b:53:fd:75:b4:02:c0:e0:11:e9:f8:e9:ea: 0d:69:d5:0e:46:15:a0:53:b9:f5:c6:fb:88:29:22: e0:76:0f:f2:d9:e9:c0:83:1a:0c:49:a7:49:1f:fe: 76:c9:21:f3:c4:21:5b:9f:9b:f5:e3:d4:b2:d0:62: 80:09:89:bc:55:66:0f:4d:51:98:7f:98:14:70:62: f0:0c:06:5c:f4:af:aa:99:7a:7a:0a:f3:c9:8e:e7: d0:15:51:95:21:91:e4:f0:fd:7a:ca:97:02:cc:96: f9:f9:bc:04:95:f1:c0:0d:13:c9:74:ac:94:af:36: 77:32:6a:9f:59:51:af:a3:7a:60:9c:6b:bf:7c:8d: 81:50:65:8b:ea:e5:5e:01:67:17:38:47:3d:03:bc: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EF:5D:FE:5B:B2:E0:BE:83:B7:21:27:FD:51:91:7A:74:92:65:69 X509v3 Authority Key Identifier: keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ca:b1:ca:0b:15:0f:0e:88:5e:77:01:46:1c:ee:d7:50:db: be:49:62:53:7e:a1:d2:fb:73:f1:2e:14:ff:97:df:5a:c0:54: 9c:ec:69:95:9d:3b:22:4b:fd:1d:a5:9c:67:81:ba:e2:6f:12: 56:e9:dd:fe:9a:16:76:75:43:b1:b4:e9:ed:0c:fe:3b:f4:e6: 1e:68:18:29:8a:e2:7d:11:9c:54:5b:90:84:cc:74:c7:0d:db: ca:80:73:1c:73:42:13:43:1b:a9:dd:9c:f1:b6:6d:72:bf:42: 98:59:b1:2f:3f:b0:b5:24:8e:6b:fa:90:5e:ca:21:42:9b:6a: ad:76:e2:fa:82:48:ae:4b:33:fe:ca:ee:fb:bc:36:a9:70:3e: ed:9d:6b:69:98:ad:47:f5:94:8f:72:65:11:b6:f8:c8:0b:dc: e7:d3:8e:1c:8d:c6:27:83:11:26:61:0a:7a:e2:f9:6d:e5:f9: 24:27:b4:31:4a:80:e6:b6:8e:8f:59:df:5e:08:36:aa:e0:59: 72:79:be:b6:50:45:da:d6:cd:fa:e9:84:f4:cf:b1:9f:ab:8b: 69:58:10:14:08:9a:a1:52:71:66:2a:0a:2c:7f:19:de:b9:0b: 71:22:27:70:e9:3c:32:af:be:a6:36:0a:a7:ac:4f:74:ae:68: 0c:e9:b8:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1WvNfAKl3RQ4gRYfiSs5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMTg2ODIwNWIzZDEzNzM1NWFhNzFmMjQ2NzI5NWNkODcx OTUyYzgwHhcNMjUxMjMxMTcwMDUzWhcNMjYwMTAxMTcwMDUzWjAzMTEwLwYDVQQD EygyZmVmNWRmZTViYjJlMGJlODNiNzIxMjdmZDUxOTE3YTc0OTI2NTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFR9ZTE9FXjOas++14PQDHv+3jf7 O/i6lKTE/9ZVZiGLeBOlgFBDeIBFzCtsOJ5Uz3ZZ2SJlUU2uY9moEZXKF+oRTifa isl1xatz5Ih7ahCfcw8LsWAh5tj6PU+PCubF0n8wnjV9FABsWStT/XW0AsDgEen4 6eoNadUORhWgU7n1xvuIKSLgdg/y2enAgxoMSadJH/52ySHzxCFbn5v149Sy0GKA CYm8VWYPTVGYf5gUcGLwDAZc9K+qmXp6CvPJjufQFVGVIZHk8P16ypcCzJb5+bwE lfHADRPJdKyUrzZ3MmqfWVGvo3pgnGu/fI2BUGWL6uVeAWcXOEc9A7yK1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/vXf5bsuC+g7chJ/1RkXp0kmVpMB8GA1UdIwQY MBaAFL4YaCBbPRNzVapx8kZylc2HGVLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWIt NzU3Zjk5OTI3NTcxLzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWItNzU3Zjk5OTI3NTcx LzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMqxygsV Dw6IXncBRhzu11DbvkliU36h0vtz8S4U/5ffWsBUnOxplZ07Ikv9HaWcZ4G64m8S Vund/poWdnVDsbTp7Qz+O/TmHmgYKYrifRGcVFuQhMx0xw3byoBzHHNCE0Mbqd2c 8bZtcr9CmFmxLz+wtSSOa/qQXsohQptqrXbi+oJIrksz/sru+7w2qXA+7Z1raZit R/WUj3JlEbb4yAvc59OOHI3GJ4MRJmEKeuL5beX5JCe0MUqA5raOj1nfXgg2quBZ cnm+tlBF2tbN+umE9M+xn6uLaVgQFAiaoVJxZioKLH8Z3rkLcSIncOk8Mq++pjYK p6xPdK5oDOm4kQ== -----END CERTIFICATE-----Generated at Wed Dec 31 23:31:27 2025 by rpki-client