This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json) Hash identifier: lCQF4n8fnHufkwFj11BloKrT2OYOBmFwF2mRvZ7jylM= Subject key identifier: 87:68:37:77:A8:C1:57:E2:B0:AE:F8:DB:75:4C:0D:51:94:7B:4B:6B Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Certificate serial: 019B601C9CEF41BDB525E7BA594232CBADC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft Manifest number: 0F4F Signing time: Sat 27 Dec 2025 14:00:46 +0000 Manifest this update: Sat 27 Dec 2025 14:00:46 +0000 Manifest next update: Sun 28 Dec 2025 14:00:46 +0000 Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: iI+8JLuKDuL9agcYRXVSvlmfF3kUzpHlCSsgovnG/Ds=) 2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:9c:ef:41:bd:b5:25:e7:ba:59:42:32:cb:ad:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Validity Not Before: Dec 27 14:00:46 2025 GMT Not After : Dec 28 14:00:46 2025 GMT Subject: CN=87683777a8c157e2b0aef8db754c0d51947b4b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:4f:be:03:78:54:c8:ad:09:cc:d6:98:8c: d3:c9:7f:d1:72:dc:67:62:00:ce:0e:4e:2d:36:19: 8d:23:14:a9:90:0c:64:1a:1a:19:c2:c1:f7:49:a3: 2a:c7:bb:f0:21:cc:d9:aa:8b:52:a0:55:94:cb:27: 27:d2:62:87:e4:ed:2c:3d:89:66:13:04:57:77:6e: d9:7a:43:0d:f9:cb:1e:cd:38:03:f7:89:e3:53:fe: c2:9d:bb:1d:6e:15:50:a2:b4:62:d3:09:26:5b:f5: b8:e9:22:18:31:a5:34:e8:8b:8d:9f:ea:37:00:21: f8:19:66:af:02:e6:2c:be:9b:f0:96:f5:ce:e9:55: 7c:df:a9:c8:49:6c:b2:97:ae:51:c2:47:21:a4:f6: 2f:f2:c9:90:04:ef:9f:8a:b3:5f:33:8f:86:7e:49: eb:4b:db:23:04:a6:95:e5:59:5b:a3:dd:9c:25:1c: f1:67:9f:48:19:72:c7:72:19:ad:da:77:8a:f1:96: 24:c0:cf:be:ef:c3:66:f2:04:ce:6e:37:55:27:7f: a7:15:5d:81:41:33:8e:0e:48:77:1a:c7:95:3b:49: 6a:89:b7:c0:04:95:c5:cd:f6:49:d0:cb:75:5c:c5: 5d:92:43:cd:66:e2:df:74:7f:7e:95:ab:07:ee:df: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:37:77:A8:C1:57:E2:B0:AE:F8:DB:75:4C:0D:51:94:7B:4B:6B X509v3 Authority Key Identifier: keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fa:ef:ec:59:e9:d4:79:21:3a:fe:28:5b:93:b6:b9:d2:b8: eb:c6:1a:36:84:71:48:70:81:41:e5:bc:37:b6:0a:d5:8d:e2: 11:b2:50:fb:e5:e6:30:ef:87:a0:63:bd:5d:41:d6:95:3b:5f: 93:35:6b:ed:1d:5d:c7:5c:4f:8d:8f:07:b3:76:99:a8:14:78: aa:3f:11:b5:0e:a8:e2:ba:58:31:27:59:04:f7:23:23:13:e1: 93:bf:3c:12:b9:79:43:cc:1a:be:75:17:57:ca:d5:41:7e:a0: 37:b8:56:31:26:6b:cd:48:b8:6c:b5:75:ea:4e:0d:05:5f:23: 1c:d7:60:81:cb:2b:c7:46:c7:fe:21:31:a6:34:67:92:c7:c8: fb:d2:9f:8d:4d:aa:51:73:20:a8:f3:48:6c:0b:46:89:81:19: e3:b9:e4:22:3c:97:9b:35:15:9a:81:3a:e6:a6:2f:53:6e:52: f8:37:6a:b2:7b:3c:17:e2:96:ac:f9:60:d3:b7:04:be:07:23: c8:04:ab:53:d8:fc:4f:14:e6:e2:31:56:2d:bd:64:74:58:0f: 98:a0:b3:a1:3b:ba:4c:fb:5d:20:5f:c2:a3:3e:1f:f5:ca:69: ca:7a:8b:6f:e6:ec:02:bb:d7:63:a0:9b:0c:30:f9:89:fb:33: a5:dd:db:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHJzvQb21Jee6WUIyy63EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTRkMDgxZjY1ZjBjOGIwNGYxZDJmZTczZTA5MGIwN2Fi MWFiNTgwHhcNMjUxMjI3MTQwMDQ2WhcNMjUxMjI4MTQwMDQ2WjAzMTEwLwYDVQQD Eyg4NzY4Mzc3N2E4YzE1N2UyYjBhZWY4ZGI3NTRjMGQ1MTk0N2I0YjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnlPvgN4VMitCczWmIzTyX/Rctxn YgDODk4tNhmNIxSpkAxkGhoZwsH3SaMqx7vwIczZqotSoFWUyycn0mKH5O0sPYlm EwRXd27ZekMN+csezTgD94njU/7CnbsdbhVQorRi0wkmW/W46SIYMaU06IuNn+o3 ACH4GWavAuYsvpvwlvXO6VV836nISWyyl65RwkchpPYv8smQBO+firNfM4+Gfknr S9sjBKaV5Vlbo92cJRzxZ59IGXLHchmt2neK8ZYkwM++78Nm8gTObjdVJ3+nFV2B QTOODkh3GseVO0lqibfABJXFzfZJ0Mt1XMVdkkPNZuLfdH9+lasH7t85/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdoN3eowVfisK7423VMDVGUe0trMB8GA1UdIwQY MBaAFFcU0IH2XwyLBPHS/nPgkLB6satYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODIt ZmMyNzRhZDkyMTBiLzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODItZmMyNzRhZDkyMTBi LzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/rv7Fnp 1HkhOv4oW5O2udK468YaNoRxSHCBQeW8N7YK1Y3iEbJQ++XmMO+HoGO9XUHWlTtf kzVr7R1dx1xPjY8Hs3aZqBR4qj8RtQ6o4rpYMSdZBPcjIxPhk788Erl5Q8wavnUX V8rVQX6gN7hWMSZrzUi4bLV16k4NBV8jHNdggcsrx0bH/iExpjRnksfI+9KfjU2q UXMgqPNIbAtGiYEZ47nkIjyXmzUVmoE65qYvU25S+Ddqsns8F+KWrPlg07cEvgcj yASrU9j8TxTm4jFWLb1kdFgPmKCzoTu6TPtdIF/Coz4f9cppynqLb+bsArvXY6Cb DDD5ifszpd3bRw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:04:17 2025 by rpki-client