This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json) Hash identifier: wXImmFV1yT8jyJcl0DBQkSpgyjz4fcI47bsj8ojwO7M= Subject key identifier: 27:C7:A6:D2:A3:11:CE:E5:60:B7:6D:42:64:6D:CE:AF:E8:10:C0:86 Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89 Certificate serial: 019B5004D69182FBE87DB33D9CFBB2C3BF98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 11:00:52 +0000 Manifest this update: Wed 24 Dec 2025 11:00:52 +0000 Manifest next update: Thu 25 Dec 2025 11:00:52 +0000 Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: n7c/RmZ76UP1VGDrbPEGglDgsyrhPziFgkttwzUH100=) 2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:d6:91:82:fb:e8:7d:b3:3d:9c:fb:b2:c3:bf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c54067385a765b1d5617c43331956fb208e89 Validity Not Before: Dec 24 11:00:52 2025 GMT Not After : Dec 25 11:00:52 2025 GMT Subject: CN=27c7a6d2a311cee560b76d42646dceafe810c086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:c5:f1:77:16:1d:10:e9:52:cb:92:a1:7f: 2b:1d:36:a2:f9:96:66:18:00:6e:e2:d1:5b:95:bd: 9a:3f:a8:e4:e3:31:f0:27:cc:28:00:fa:be:e0:58: eb:1c:70:f2:9d:cc:64:93:b6:52:1b:b3:3c:a4:91: 59:7d:85:7c:c1:1f:e2:15:c6:60:89:89:3d:6e:c6: 10:48:ee:8f:09:0a:29:22:ea:a6:1b:84:3f:b4:fe: 5c:ef:29:08:45:d9:d7:4d:ec:92:86:22:e8:4a:88: b4:72:2c:45:06:63:a4:8a:f1:a2:c9:ea:ef:07:ef: 27:91:b4:5f:aa:61:09:63:cf:45:21:df:d3:fc:ac: 11:6b:28:20:d9:54:c8:f9:c0:20:2c:d2:d8:f1:aa: 3a:ca:d8:5d:09:d4:28:eb:2b:cc:04:ff:70:4f:a4: 8f:53:de:54:ba:f3:41:42:d7:86:9f:60:be:67:5c: 92:37:d8:56:94:a1:43:82:5c:ae:0c:97:14:45:ad: c8:6d:8a:a9:43:ce:af:2a:89:04:dd:b7:5d:8e:cc: 2b:d8:bf:cd:eb:b5:21:f2:05:db:2d:a1:ee:66:3b: 4a:6a:f7:60:51:d0:32:bb:3a:1d:5f:b1:69:30:26: 48:9e:65:be:ec:38:f0:12:00:50:e1:09:26:d8:63: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C7:A6:D2:A3:11:CE:E5:60:B7:6D:42:64:6D:CE:AF:E8:10:C0:86 X509v3 Authority Key Identifier: keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fe:e9:98:d1:92:0f:28:05:67:82:49:0f:da:af:1e:a8:b4: 09:bf:00:c1:d8:b6:33:a0:23:c5:67:c3:7b:da:07:4c:dd:0a: 24:80:84:db:bf:99:90:80:59:d4:f9:73:2b:ca:e3:52:3e:7a: 4e:ef:63:08:97:1b:d3:2c:52:fc:52:5d:9a:40:e8:ff:80:92: f8:91:ee:9b:b5:d3:11:2e:26:b3:38:23:08:96:30:cf:d0:9c: 10:e7:ab:d2:4e:af:9b:20:bd:f9:2c:69:ca:e1:46:69:f7:2f: ca:4e:8a:1d:31:22:08:b2:22:82:78:a4:d7:a0:1e:58:df:ca: e2:00:3d:cf:53:60:36:3d:f6:65:ef:8d:ce:f4:c2:1d:3b:55: fe:ae:8b:85:f3:1c:de:83:19:71:14:e2:c3:86:2d:50:18:2f: 2f:2a:f3:18:df:90:3a:9a:83:75:33:27:f0:ad:37:22:95:81: bb:59:57:28:41:82:98:b6:0e:19:94:54:5a:2a:95:f1:0d:59: d2:c4:8f:92:4b:ab:be:50:90:87:e5:1c:2d:03:b4:37:c9:ab: ae:b7:2a:ee:3b:23:c0:6a:e8:a2:6a:a7:de:b7:4a:f7:ff:b1: bf:74:c2:a2:c4:7a:48:2a:40:0a:11:9a:61:99:2c:69:92:a7: 88:da:be:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBNaRgvvofbM9nPuyw7+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy MDhlODkwHhcNMjUxMjI0MTEwMDUyWhcNMjUxMjI1MTEwMDUyWjAzMTEwLwYDVQQD EygyN2M3YTZkMmEzMTFjZWU1NjBiNzZkNDI2NDZkY2VhZmU4MTBjMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8bF8XcWHRDpUsuSoX8rHTai+ZZm GABu4tFblb2aP6jk4zHwJ8woAPq+4FjrHHDyncxkk7ZSG7M8pJFZfYV8wR/iFcZg iYk9bsYQSO6PCQopIuqmG4Q/tP5c7ykIRdnXTeyShiLoSoi0cixFBmOkivGiyerv B+8nkbRfqmEJY89FId/T/KwRaygg2VTI+cAgLNLY8ao6ythdCdQo6yvMBP9wT6SP U95UuvNBQteGn2C+Z1ySN9hWlKFDglyuDJcURa3IbYqpQ86vKokE3bddjswr2L/N 67Uh8gXbLaHuZjtKavdgUdAyuzodX7FpMCZInmW+7DjwEgBQ4Qkm2GOd2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfHptKjEc7lYLdtQmRtzq/oEMCGMB8GA1UdIwQY MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct YTQxYTQ4MzRlY2FhLzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZv7pmNGS DygFZ4JJD9qvHqi0Cb8Awdi2M6AjxWfDe9oHTN0KJICE27+ZkIBZ1PlzK8rjUj56 Tu9jCJcb0yxS/FJdmkDo/4CS+JHum7XTES4mszgjCJYwz9CcEOer0k6vmyC9+Sxp yuFGafcvyk6KHTEiCLIignik16AeWN/K4gA9z1NgNj32Ze+NzvTCHTtV/q6LhfMc 3oMZcRTiw4YtUBgvLyrzGN+QOpqDdTMn8K03IpWBu1lXKEGCmLYOGZRUWiqV8Q1Z 0sSPkkurvlCQh+UcLQO0N8mrrrcq7jsjwGroomqn3rdK9/+xv3TCosR6SCpAChGa YZksaZKniNq+0g== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:30 2025 by rpki-client