This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json) Hash identifier: EufLajzfyHoNvmenY6JnZnUZK3UdW89Nten/Gk0kXoA= Subject key identifier: DE:1D:30:FE:7E:6E:A5:01:9E:A8:8C:F1:F3:13:94:6D:20:1A:94:34 Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Certificate serial: 019B432502A2271D25CB8469319FA30CBC24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 23:00:57 +0000 Manifest this update: Sun 21 Dec 2025 23:00:57 +0000 Manifest next update: Mon 22 Dec 2025 23:00:57 +0000 Files and hashes: 1: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: cNQJ7XcyVqNpLBUM6Jd8MHNZbCe9seIO7RBDKYgUQLA=) 2: ix-ZSSNlerCaWdEBa65HEpQka7I.roa (hash: 1tb0LpSD1iWi8R1yiZ2FFdKAVxcZDqiaztDvg3PO7k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:02:a2:27:1d:25:cb:84:69:31:9f:a3:0c:bc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Validity Not Before: Dec 21 23:00:57 2025 GMT Not After : Dec 22 23:00:57 2025 GMT Subject: CN=de1d30fe7e6ea5019ea88cf1f313946d201a9434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:5d:4f:9c:41:38:e4:bf:e9:c3:0d:0f:60: 04:56:46:26:8c:74:6a:e1:dc:a3:81:a6:f7:a8:f0: d9:0e:e9:67:1c:bb:b4:07:6b:cc:b4:b7:5e:49:50: 12:2a:29:7b:1d:be:a6:54:6d:8a:be:fa:97:6e:2e: 30:53:22:ce:24:4d:98:e3:ae:87:ce:59:4a:80:79: e1:b6:96:63:46:24:dd:b9:1b:58:47:76:8f:64:a4: a2:e8:3c:de:09:b3:c5:a5:96:f0:73:f4:45:ee:da: 17:2f:28:cf:57:52:47:5f:5c:e1:93:de:e5:59:56: 7b:ac:97:dc:9f:5c:38:da:2b:73:3a:0a:40:6e:75: 68:05:42:bf:67:e8:dd:4c:3c:b5:11:55:d3:17:c6: a6:28:b1:3d:e8:e2:da:5b:ba:b6:ee:f0:64:2d:ff: c5:6d:7e:c4:06:89:3c:b7:80:f9:7a:ea:37:cd:c0: 7f:33:06:9d:91:0f:d2:73:a7:eb:1d:50:ab:57:81: 19:c5:84:dc:65:9d:98:73:87:fc:ed:a3:01:10:b0: c0:89:c6:87:28:4c:e5:48:38:c3:4d:0c:ad:21:c8: 7d:67:9e:c8:7a:74:95:b5:38:35:3b:1e:60:37:c0: ab:12:4e:35:a3:ef:ec:4a:74:87:15:16:3f:16:f3: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:30:FE:7E:6E:A5:01:9E:A8:8C:F1:F3:13:94:6D:20:1A:94:34 X509v3 Authority Key Identifier: keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f4:da:7c:65:04:43:89:b8:25:00:19:46:2d:20:db:97:9e: 5c:bf:5b:2f:a9:fc:50:5f:76:6a:b9:ae:4c:e7:3b:ab:6d:3e: 65:14:61:2d:bc:67:81:d4:8f:f8:79:5f:6c:e0:4b:c3:f0:75: b2:7d:2f:e6:74:68:4e:24:94:80:f8:ff:6b:59:3d:2b:f0:d6: 01:1c:d3:f0:92:cc:8c:9d:b4:e1:3c:38:7e:8a:1a:31:cc:21: 38:f4:92:22:9c:e7:ef:14:3c:6b:b6:f0:04:68:b4:e7:49:d1: 20:16:22:19:8a:1f:c8:17:2c:2d:f0:c3:24:fb:27:bc:b0:9f: 31:e8:3a:c1:30:c5:c8:cc:9f:f8:35:fd:ef:85:87:f5:0e:df: 2e:c0:70:37:c4:74:8a:df:f4:0a:50:6b:f2:4c:3a:f3:fb:43: 31:b6:b1:d3:ca:20:b1:31:2b:f6:42:d7:ec:e5:7e:c2:01:d0: 70:c2:d4:63:e3:14:96:4e:fa:6e:1b:cf:c2:8f:d7:7e:d3:92: 8c:2e:93:82:63:64:79:ab:7f:b7:a1:3d:35:7a:53:46:fa:f9: e0:35:ce:57:41:c1:60:de:a7:e5:f0:26:2a:72:f1:f5:29:f6: b4:e6:16:39:6c:1a:a1:6b:92:60:95:b0:ed:6c:7c:23:e5:be: 28:50:c0:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQKiJx0ly4RpMZ+jDLwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWUzNmJiNmZlZjkzMjhmNTE4ZTRiMTA1ZmMyMTJjMTUy YThjNjgwHhcNMjUxMjIxMjMwMDU3WhcNMjUxMjIyMjMwMDU3WjAzMTEwLwYDVQQD EyhkZTFkMzBmZTdlNmVhNTAxOWVhODhjZjFmMzEzOTQ2ZDIwMWE5NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgRdT5xBOOS/6cMND2AEVkYmjHRq 4dyjgab3qPDZDulnHLu0B2vMtLdeSVASKil7Hb6mVG2KvvqXbi4wUyLOJE2Y466H zllKgHnhtpZjRiTduRtYR3aPZKSi6DzeCbPFpZbwc/RF7toXLyjPV1JHX1zhk97l WVZ7rJfcn1w42itzOgpAbnVoBUK/Z+jdTDy1EVXTF8amKLE96OLaW7q27vBkLf/F bX7EBok8t4D5euo3zcB/MwadkQ/Sc6frHVCrV4EZxYTcZZ2Yc4f87aMBELDAicaH KEzlSDjDTQytIch9Z57IenSVtTg1Ox5gN8CrEk41o+/sSnSHFRY/FvO5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4dMP5+bqUBnqiM8fMTlG0gGpQ0MB8GA1UdIwQY MBaAFIueNrtv75Mo9RjksQX8ISwVKoxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEt MWExMTZhNTM0NDgzLzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEtMWExMTZhNTM0NDgz LzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPTafGUE Q4m4JQAZRi0g25eeXL9bL6n8UF92armuTOc7q20+ZRRhLbxngdSP+HlfbOBLw/B1 sn0v5nRoTiSUgPj/a1k9K/DWARzT8JLMjJ204Tw4fooaMcwhOPSSIpzn7xQ8a7bw BGi050nRIBYiGYofyBcsLfDDJPsnvLCfMeg6wTDFyMyf+DX974WH9Q7fLsBwN8R0 it/0ClBr8kw68/tDMbax08ogsTEr9kLX7OV+wgHQcMLUY+MUlk76bhvPwo/XftOS jC6TgmNkeat/t6E9NXpTRvr54DXOV0HBYN6n5fAmKnLx9Sn2tOYWOWwaoWuSYJWw 7Wx8I+W+KFDAIg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:32:58 2025 by rpki-client