This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft File: VQlsYRU9KrVQd_GjDCRZhgAbodk.mft (raw, json) Hash identifier: tcngMOA/uDwSoc+8qIJngeCmuj2cgnyMjaF6ZqNe2lQ= Subject key identifier: 0E:F7:5A:5F:9E:2F:82:E3:57:DA:7E:A0:8D:06:16:6B:87:47:A1:98 Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9 Certificate issuer: /CN=55096c61153d2ab55077f1a30c245986001ba1d9 Certificate serial: 019B3F7EE07156C64A99226903B00C428E80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft Manifest number: 16E2 Signing time: Sun 21 Dec 2025 06:00:38 +0000 Manifest this update: Sun 21 Dec 2025 06:00:38 +0000 Manifest next update: Mon 22 Dec 2025 06:00:38 +0000 Files and hashes: 1: 2UJUcXgEXfunFA21jmeL2YNS9MM.roa (hash: 6FVHb9+rMImArAonsBYihu+wIYZJbNNs1MntdRcJc2I=) 2: VQlsYRU9KrVQd_GjDCRZhgAbodk.crl (hash: NkhHcbtVbTXB3x4+29eZwDPJ9iELai0tSdbRluvk6DI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e0:71:56:c6:4a:99:22:69:03:b0:0c:42:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9 Validity Not Before: Dec 21 06:00:38 2025 GMT Not After : Dec 22 06:00:38 2025 GMT Subject: CN=0ef75a5f9e2f82e357da7ea08d06166b8747a198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:9a:fe:cd:52:45:7a:37:1f:ee:90:4b:3e: b8:b8:3a:91:07:34:0d:5a:39:4f:c7:11:e2:80:87: 59:99:0d:b8:90:53:bf:bb:03:66:c2:5c:06:a0:7b: 11:52:cd:04:22:00:77:70:44:a4:71:0f:ac:3d:64: a2:4e:4b:36:9d:42:f3:67:c9:bc:b2:35:91:35:b6: 7e:ab:02:64:09:e4:30:75:e1:74:e4:ca:93:40:61: 30:82:e9:79:aa:03:b4:0b:40:9f:7c:59:2c:25:fd: fa:14:c9:9c:7c:45:89:2d:e0:66:50:47:43:b2:d6: 74:4b:d7:42:41:f9:d2:51:6b:4a:01:bb:b0:29:35: 75:98:13:7c:3f:d7:c0:47:64:2e:5d:61:17:4a:60: fa:2d:d6:61:f2:58:14:dc:e8:7b:aa:9b:bf:7b:e8: a6:3f:73:e6:1e:1a:03:77:95:55:d6:b7:49:6e:8f: e6:a9:a7:70:94:0e:6d:3c:57:61:50:f9:22:e1:fc: 4f:1f:d7:36:e2:bd:54:1d:84:0b:da:4d:af:66:f4: e9:cc:42:2c:60:3a:67:1d:d5:2c:b5:95:ba:da:39: 58:ef:3e:9f:ec:4f:35:4f:e9:b8:76:b9:2f:24:cb: b6:0b:51:06:80:b6:74:40:28:cf:93:26:16:f0:c1: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F7:5A:5F:9E:2F:82:E3:57:DA:7E:A0:8D:06:16:6B:87:47:A1:98 X509v3 Authority Key Identifier: keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:65:51:6b:94:a0:93:57:e3:c5:e6:4e:e9:57:6e:a8:6f: 17:69:d3:31:3a:cf:64:3a:e7:4d:47:38:1a:c9:2b:37:33:21: f4:9b:59:cd:7f:bc:0e:d2:74:fd:11:7b:cf:6c:e3:8d:be:f4: e1:c8:ae:38:6d:ba:a8:b9:5d:ac:9c:ce:4a:82:37:9b:be:c0: 98:43:b6:1d:bf:af:e4:86:60:96:ae:72:ee:df:26:42:2f:5e: 43:44:17:66:3c:93:48:8a:db:d6:b0:67:98:bb:b3:e0:90:b7: fc:6b:e0:36:53:5a:31:25:4d:82:96:d1:4f:54:10:aa:02:fb: 5f:ad:82:d0:80:ab:69:7b:41:24:be:d6:ca:5f:c6:53:56:b5: 74:e2:ff:5c:f3:c7:bf:4c:c0:67:60:94:87:c7:7d:0d:83:51: 29:b3:ab:51:f5:ef:5c:18:9a:7b:0b:6c:1d:ea:a8:2e:12:72: 1b:f6:8d:a9:de:36:a7:36:aa:42:98:38:6d:09:fb:ab:6e:4a: 27:fc:61:5c:bb:4a:ea:a2:dd:f7:9b:39:62:ef:e1:a1:c8:66: 3d:a1:cc:95:69:cd:05:f5:9c:28:b0:26:82:aa:74:bb:a5:3c: f8:59:c9:7e:af:8c:98:62:4a:3b:47:41:05:d1:df:54:01:99: 4a:4b:f3:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuBxVsZKmSJpA7AMQo6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MDk2YzYxMTUzZDJhYjU1MDc3ZjFhMzBjMjQ1OTg2MDAx YmExZDkwHhcNMjUxMjIxMDYwMDM4WhcNMjUxMjIyMDYwMDM4WjAzMTEwLwYDVQQD EygwZWY3NWE1ZjllMmY4MmUzNTdkYTdlYTA4ZDA2MTY2Yjg3NDdhMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFia/s1SRXo3H+6QSz64uDqRBzQN WjlPxxHigIdZmQ24kFO/uwNmwlwGoHsRUs0EIgB3cESkcQ+sPWSiTks2nULzZ8m8 sjWRNbZ+qwJkCeQwdeF05MqTQGEwgul5qgO0C0CffFksJf36FMmcfEWJLeBmUEdD stZ0S9dCQfnSUWtKAbuwKTV1mBN8P9fAR2QuXWEXSmD6LdZh8lgU3Oh7qpu/e+im P3PmHhoDd5VV1rdJbo/mqadwlA5tPFdhUPki4fxPH9c24r1UHYQL2k2vZvTpzEIs YDpnHdUstZW62jlY7z6f7E81T+m4drkvJMu2C1EGgLZ0QCjPkyYW8MHoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA73Wl+eL4LjV9p+oI0GFmuHR6GYMB8GA1UdIwQY MBaAFFUJbGEVPSq1UHfxowwkWYYAG6HZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OWJmZWMtNzU3Zi00MzE5LWI0NWQt OWI1ZDYzYjVjYmY1LzEvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80OWJmZWMtNzU3Zi00MzE5LWI0NWQtOWI1ZDYzYjVjYmY1 LzEvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrJlUWuU oJNX48XmTulXbqhvF2nTMTrPZDrnTUc4GskrNzMh9JtZzX+8DtJ0/RF7z2zjjb70 4ciuOG26qLldrJzOSoI3m77AmEO2Hb+v5IZglq5y7t8mQi9eQ0QXZjyTSIrb1rBn mLuz4JC3/GvgNlNaMSVNgpbRT1QQqgL7X62C0ICraXtBJL7Wyl/GU1a1dOL/XPPH v0zAZ2CUh8d9DYNRKbOrUfXvXBiaewtsHeqoLhJyG/aNqd42pzaqQpg4bQn7q25K J/xhXLtK6qLd95s5Yu/hochmPaHMlWnNBfWcKLAmgqp0u6U8+FnJfq+MmGJKO0dB BdHfVAGZSkvzxg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:30 2025 by rpki-client