This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json) Hash identifier: hyRh9CMQRgiquxrpo0FZxrd6QIce1PzMHPJHS+nEfbI= Subject key identifier: D7:12:26:BF:AD:4C:7B:94:6F:8C:D4:82:70:FA:F0:65:E1:8E:E7:B8 Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1 Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1 Certificate serial: 019B6EB3B1F7B2E6914DA12AC0A76B268F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft Manifest number: 06C5 Signing time: Tue 30 Dec 2025 10:00:28 +0000 Manifest this update: Tue 30 Dec 2025 10:00:28 +0000 Manifest next update: Wed 31 Dec 2025 10:00:28 +0000 Files and hashes: 1: NZvb2qKNw6TNNeDvqlV_-QChDh8.roa (hash: AvipIjBdsS0207+aK/JkUYN7M+6rcBf9DVuXv7pl1K0=) 2: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: 5jHFQ1PR59PleXTnEqi1c0uR3EwaCWNxJ5zB4/Mw/R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b3:b1:f7:b2:e6:91:4d:a1:2a:c0:a7:6b:26:8f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1 Validity Not Before: Dec 30 10:00:28 2025 GMT Not After : Dec 31 10:00:28 2025 GMT Subject: CN=d71226bfad4c7b946f8cd48270faf065e18ee7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:21:66:70:f8:14:39:0d:48:05:e7:d1:91: 85:90:2c:04:79:32:41:d4:da:1a:34:6c:62:f5:35: 87:79:8b:f2:92:43:f5:a0:c6:f8:01:3d:ff:bd:21: b9:f6:b4:73:27:50:6d:46:bd:a8:b4:68:34:48:2c: 75:d6:66:82:99:a9:6f:03:97:96:3c:ac:cc:1a:cb: 92:78:2b:fb:01:00:ff:86:5c:45:fb:cc:37:e7:50: bd:a4:dd:a2:96:bd:66:1a:07:21:74:43:ef:6a:33: 4e:45:d4:4f:48:8a:ab:99:72:cf:31:1e:91:fa:4c: bf:2f:14:fe:69:09:62:08:e5:25:50:39:a0:d1:43: e7:b9:7e:22:09:6c:09:bd:da:6c:26:c8:36:fe:3f: e4:27:b3:59:82:8f:b9:96:18:14:0a:3e:04:1a:eb: 22:e3:98:ef:44:ce:2a:99:fa:1d:60:e9:c3:11:a3: 1b:12:45:58:78:66:68:81:54:f7:00:ec:d5:97:5d: ee:88:ea:f5:13:2e:f5:c8:a7:26:cb:62:88:06:bd: 25:4d:ae:6b:9b:16:59:ce:cf:f4:40:c7:c8:e4:b1: d5:d2:8a:cc:d2:f1:6d:ff:99:56:11:37:6e:8d:98: d2:08:7d:10:f2:13:0b:b1:1d:bb:4d:ce:c9:73:f8: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:12:26:BF:AD:4C:7B:94:6F:8C:D4:82:70:FA:F0:65:E1:8E:E7:B8 X509v3 Authority Key Identifier: keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:22:5c:6e:b1:7c:8b:bf:3f:32:84:4b:99:24:4e:db:48:22: c6:b7:0e:74:49:d0:6c:25:19:9a:3c:8e:7c:33:04:ef:57:68: 71:ee:3e:00:14:7d:0f:0b:7c:ec:4f:38:f0:27:bc:0b:f3:d7: 80:54:4c:f1:da:df:5d:7b:7a:7b:18:11:2e:44:b8:88:9d:34: 9f:17:e5:8b:4b:90:f6:f2:2c:17:68:1e:bf:67:35:c8:e3:ab: 27:93:4a:fd:14:d2:b3:06:9e:ae:28:0d:f8:29:37:bf:01:e1: 43:e8:b6:fe:7c:33:1b:69:80:d9:f9:f8:fa:28:e1:cf:1c:7f: 81:ea:0a:9c:cf:32:17:56:37:ca:1f:9d:1b:5a:d4:05:d5:79: 92:81:80:e8:10:7c:e0:38:a8:80:c4:d2:fd:b1:c5:83:06:65: 7c:35:5a:d4:0d:d5:19:c9:4c:17:e4:59:aa:04:5e:3a:62:93: 33:7f:99:cb:d2:20:dd:6b:d9:96:99:7f:92:79:ee:a9:c7:5b: 36:83:30:fd:1b:ed:c0:a4:08:00:49:5c:8f:ce:33:a9:07:7c: 94:32:be:ff:ec:a1:9c:a8:6b:72:a6:b9:d3:2c:e5:54:bc:85: 78:08:ba:db:84:06:b1:d3:fa:59:6a:49:3e:b7:79:96:1e:a5: 78:ac:33:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtus7H3suaRTaEqwKdrJo9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YmJkYjJkOTgwYWMwYTgyN2MwY2M2ZWQwZjkwNjc0OWNi MmNlYTEwHhcNMjUxMjMwMTAwMDI4WhcNMjUxMjMxMTAwMDI4WjAzMTEwLwYDVQQD EyhkNzEyMjZiZmFkNGM3Yjk0NmY4Y2Q0ODI3MGZhZjA2NWUxOGVlN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EghZnD4FDkNSAXn0ZGFkCwEeTJB 1NoaNGxi9TWHeYvykkP1oMb4AT3/vSG59rRzJ1BtRr2otGg0SCx11maCmalvA5eW PKzMGsuSeCv7AQD/hlxF+8w351C9pN2ilr1mGgchdEPvajNORdRPSIqrmXLPMR6R +ky/LxT+aQliCOUlUDmg0UPnuX4iCWwJvdpsJsg2/j/kJ7NZgo+5lhgUCj4EGusi 45jvRM4qmfodYOnDEaMbEkVYeGZogVT3AOzVl13uiOr1Ey71yKcmy2KIBr0lTa5r mxZZzs/0QMfI5LHV0orM0vFt/5lWETdujZjSCH0Q8hMLsR27Tc7Jc/iLLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcSJr+tTHuUb4zUgnD68GXhjue4MB8GA1UdIwQY MBaAFFS72y2YCsCoJ8DMbtD5BnScss6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQt ZjM4NTU5YmU4MGU5LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQtZjM4NTU5YmU4MGU5 LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCJcbrF8 i78/MoRLmSRO20gixrcOdEnQbCUZmjyOfDME71doce4+ABR9Dwt87E848Ce8C/PX gFRM8drfXXt6exgRLkS4iJ00nxfli0uQ9vIsF2gev2c1yOOrJ5NK/RTSswaerigN +Ck3vwHhQ+i2/nwzG2mA2fn4+ijhzxx/geoKnM8yF1Y3yh+dG1rUBdV5koGA6BB8 4DiogMTS/bHFgwZlfDVa1A3VGclMF+RZqgReOmKTM3+Zy9Ig3WvZlpl/knnuqcdb NoMw/RvtwKQIAElcj84zqQd8lDK+/+yhnKhrcqa50yzlVLyFeAi624QGsdP6WWpJ Prd5lh6leKwz5Q== -----END CERTIFICATE-----Generated at Tue Dec 30 16:34:21 2025 by rpki-client