This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json) Hash identifier: RWBP/2fhr21eo4XXoAiKfGfMsXwWiBCNaceiFCUziEo= Subject key identifier: 61:CA:00:BF:26:9E:92:41:19:BA:15:AC:8F:BA:69:10:CA:AA:0A:B5 Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Certificate serial: 019B3F11277D3D6E2A9B6715D257CFB70211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft Manifest number: 117D Signing time: Sun 21 Dec 2025 04:00:47 +0000 Manifest this update: Sun 21 Dec 2025 04:00:47 +0000 Manifest next update: Mon 22 Dec 2025 04:00:47 +0000 Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=) 2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: sNxODpNu3ZWJq/VN1icfbLqISOkYdeKIkAzwEYYR4rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:27:7d:3d:6e:2a:9b:67:15:d2:57:cf:b7:02:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Validity Not Before: Dec 21 04:00:47 2025 GMT Not After : Dec 22 04:00:47 2025 GMT Subject: CN=61ca00bf269e924119ba15ac8fba6910caaa0ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:ec:1f:3c:a5:89:a3:1c:99:92:78:eb:f1: 92:f1:ee:ef:9c:94:68:45:f0:02:21:6c:70:3e:73: 04:3a:b8:fa:63:c7:b9:50:81:e2:01:3c:2c:bd:79: 61:cb:09:8e:71:6a:96:11:8b:07:99:d4:9a:24:c4: 28:01:64:af:9d:2f:c2:88:d3:42:80:43:d8:9a:bd: a3:64:41:24:c2:5d:04:de:c2:02:02:31:80:83:18: a3:66:0b:33:27:5c:46:93:bf:52:44:76:59:e4:b5: 36:3f:60:ac:dd:a2:30:1a:b5:ca:a0:a8:b4:3a:7b: 3b:ff:03:d7:57:bb:34:60:d6:ad:dc:00:7c:aa:9f: 54:28:d0:a5:a4:16:89:f0:86:49:de:9d:64:c9:1c: 04:e4:1f:34:c2:c2:38:e3:01:56:0b:19:5e:16:74: 76:29:76:ef:1e:9b:39:81:0c:8e:0b:e1:3e:77:bc: 4b:27:3f:f3:83:57:93:0a:0a:23:c5:ed:ff:04:79: 9c:e1:08:1a:43:ca:66:df:a3:a5:81:44:7d:27:77: db:96:9e:77:8b:51:b2:85:9c:7e:a1:bd:a6:3d:8c: 0e:ff:e4:6c:ac:15:e3:6a:b2:c3:f7:74:ea:5c:4c: a7:af:cd:9b:6a:70:8e:98:bb:0e:d5:ab:f6:d4:35: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CA:00:BF:26:9E:92:41:19:BA:15:AC:8F:BA:69:10:CA:AA:0A:B5 X509v3 Authority Key Identifier: keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:09:c8:d7:f4:79:98:55:be:08:f2:38:08:55:bf:6d:24:4b: 8b:67:2f:72:85:bf:b6:15:f3:54:57:cc:ba:25:8f:ee:b7:4f: aa:5f:93:4b:4c:1f:16:63:44:f4:ee:07:5a:3b:3a:9d:9d:5e: 80:e1:f8:f3:5c:8f:b3:f5:b4:e6:6f:51:c0:8d:8c:ed:38:af: 67:3d:8b:e4:06:18:c2:78:38:e9:2e:e9:c4:36:d3:f4:c2:26: 8c:2d:db:3b:54:fd:0b:fb:2b:e9:eb:28:68:12:57:a1:66:68: 6e:44:bd:98:85:b9:0a:f9:01:1b:2c:90:f3:bb:01:85:55:f5: 19:de:8e:1d:8d:9d:02:41:da:6c:bc:58:e5:ea:b5:fa:45:10: d4:f8:8d:c3:c6:d7:99:36:7c:85:77:43:59:2d:fc:1c:be:d5: 43:75:78:f5:8e:4b:97:1e:af:bf:77:a7:9a:b5:21:7e:68:d4: 9f:69:b3:a9:7b:d0:fd:2c:53:27:ab:ce:00:25:93:c8:10:e2: 21:c1:ed:6a:c8:c4:47:e7:f1:35:40:b8:f3:2d:b2:13:20:ce: 59:03:db:cb:d5:3c:14:89:d8:1f:67:67:ad:bc:e5:bf:2c:c3: 56:cd:09:dc:57:58:c9:1b:b1:63:5f:f8:e8:f8:11:d0:89:85: 81:da:8b:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESd9PW4qm2cV0lfPtwIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1 MTVkOTkwHhcNMjUxMjIxMDQwMDQ3WhcNMjUxMjIyMDQwMDQ3WjAzMTEwLwYDVQQD Eyg2MWNhMDBiZjI2OWU5MjQxMTliYTE1YWM4ZmJhNjkxMGNhYWEwYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxvsHzyliaMcmZJ46/GS8e7vnJRo RfACIWxwPnMEOrj6Y8e5UIHiATwsvXlhywmOcWqWEYsHmdSaJMQoAWSvnS/CiNNC gEPYmr2jZEEkwl0E3sICAjGAgxijZgszJ1xGk79SRHZZ5LU2P2Cs3aIwGrXKoKi0 Ons7/wPXV7s0YNat3AB8qp9UKNClpBaJ8IZJ3p1kyRwE5B80wsI44wFWCxleFnR2 KXbvHps5gQyOC+E+d7xLJz/zg1eTCgojxe3/BHmc4QgaQ8pm36OlgUR9J3fblp53 i1GyhZx+ob2mPYwO/+RsrBXjarLD93TqXEynr82banCOmLsO1av21DVT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHKAL8mnpJBGboVrI+6aRDKqgq1MB8GA1UdIwQY MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAognI1/R5 mFW+CPI4CFW/bSRLi2cvcoW/thXzVFfMuiWP7rdPql+TS0wfFmNE9O4HWjs6nZ1e gOH481yPs/W05m9RwI2M7TivZz2L5AYYwng46S7pxDbT9MImjC3bO1T9C/sr6eso aBJXoWZobkS9mIW5CvkBGyyQ87sBhVX1Gd6OHY2dAkHabLxY5eq1+kUQ1PiNw8bX mTZ8hXdDWS38HL7VQ3V49Y5Llx6vv3enmrUhfmjUn2mzqXvQ/SxTJ6vOACWTyBDi IcHtasjER+fxNUC48y2yEyDOWQPby9U8FInYH2dnrbzlvyzDVs0J3FdYyRuxY1/4 6PgR0ImFgdqLbg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:08:57 2025 by rpki-client