This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json) Hash identifier: K6wrwMaQ3wLBskTLzEXwDUheUKpnJXgix//ykJl3S90= Subject key identifier: B5:71:8C:17:8E:8B:96:97:66:28:1D:55:8F:EF:95:75:39:97:81:38 Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Certificate serial: 019B4CCD44685197CB566F718E1335AB2E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 20:01:19 +0000 Manifest this update: Tue 23 Dec 2025 20:01:19 +0000 Manifest next update: Wed 24 Dec 2025 20:01:19 +0000 Files and hashes: 1: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: L0u0d9NDXd8nTixEXoy3x0EcvhNtsIs2ieY+3xLKkVw=) 2: ix-ZSSNlerCaWdEBa65HEpQka7I.roa (hash: 1tb0LpSD1iWi8R1yiZ2FFdKAVxcZDqiaztDvg3PO7k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:44:68:51:97:cb:56:6f:71:8e:13:35:ab:2e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Validity Not Before: Dec 23 20:01:19 2025 GMT Not After : Dec 24 20:01:19 2025 GMT Subject: CN=b5718c178e8b969766281d558fef957539978138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:59:95:3b:fe:62:33:66:01:ee:51:fd:b9: a2:92:71:1c:dc:fe:cc:b4:ed:9a:27:b0:31:6a:bc: 1d:39:22:55:fc:31:cb:df:e4:91:d7:08:f6:39:51: 78:6e:d5:6b:d3:c8:40:69:45:74:4b:68:e9:55:a6: c1:2c:bd:b5:b3:b2:e5:69:1a:fd:3d:ce:08:67:2f: 2c:98:4b:3f:98:71:9b:14:5a:ff:39:2a:1b:18:31: 97:53:c4:8e:df:9c:e9:94:fa:64:e1:33:e0:1d:7a: e1:bd:ba:53:6c:88:e1:f9:d3:45:ad:c1:c2:81:bc: 38:56:a6:a9:d7:14:77:c5:54:0f:fd:34:6a:74:7d: 61:4c:9f:20:bc:aa:28:a2:74:d2:4e:84:94:60:3d: b6:c2:83:df:81:0b:12:45:af:d7:bb:71:0f:45:c0: 8d:fb:a4:b7:f5:fd:a7:0f:12:2e:66:61:0b:da:0b: 31:55:29:4a:21:93:1d:38:19:8b:fc:9c:1a:79:2c: 1f:39:44:96:b7:5a:a4:0a:c2:98:2b:97:7e:14:72: 28:80:11:00:94:7d:f3:6b:13:6c:9f:6a:c3:2c:6b: d7:f7:36:18:07:6a:24:e7:7b:e8:21:9b:23:45:fe: 25:d4:3c:91:94:28:7a:e3:89:31:85:a2:c5:e8:81: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:71:8C:17:8E:8B:96:97:66:28:1D:55:8F:EF:95:75:39:97:81:38 X509v3 Authority Key Identifier: keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:81:30:d9:9b:10:2b:1e:c3:02:cb:25:6e:21:7c:43:05:6c: 9c:82:85:ac:47:1b:47:d2:98:5b:3a:00:4a:1b:d9:f3:6f:6a: 14:5a:fc:f5:23:1f:31:17:0e:0e:f1:95:0c:91:75:81:a6:59: b8:9f:c1:ea:a2:41:0a:18:27:d8:43:22:c8:c0:49:48:43:b7: ff:cf:07:cf:79:d8:ee:2c:39:76:7d:dc:31:e7:a0:9f:f3:78: 78:76:71:73:06:cc:74:f3:08:19:3b:a0:b7:2c:da:1f:a9:0f: 1a:19:a7:28:9b:2c:25:b4:f1:e7:82:02:f9:93:99:d8:53:89: 49:fe:6f:a5:b8:6a:f1:3d:40:06:56:ab:13:d4:26:38:8b:42: 4a:f6:71:97:65:65:2a:39:18:66:1d:df:ad:43:81:b5:e9:2c: 23:83:da:39:47:d5:db:a2:89:44:27:18:69:74:6d:0f:1e:87: 68:89:0e:81:ef:23:33:a6:1c:9d:e1:90:09:7b:42:0f:23:b8: de:bf:24:13:64:83:b0:be:d0:48:af:26:99:73:ab:93:5b:46: 37:5b:b2:e7:e1:2f:50:16:f1:f2:e4:ce:65:0b:49:f4:08:fa: 94:e4:a7:32:61:1c:c7:9d:cf:36:99:6c:03:eb:fe:b0:de:97: 6f:76:44:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzURoUZfLVm9xjhM1qy5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWUzNmJiNmZlZjkzMjhmNTE4ZTRiMTA1ZmMyMTJjMTUy YThjNjgwHhcNMjUxMjIzMjAwMTE5WhcNMjUxMjI0MjAwMTE5WjAzMTEwLwYDVQQD EyhiNTcxOGMxNzhlOGI5Njk3NjYyODFkNTU4ZmVmOTU3NTM5OTc4MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jhZlTv+YjNmAe5R/bmiknEc3P7M tO2aJ7AxarwdOSJV/DHL3+SR1wj2OVF4btVr08hAaUV0S2jpVabBLL21s7LlaRr9 Pc4IZy8smEs/mHGbFFr/OSobGDGXU8SO35zplPpk4TPgHXrhvbpTbIjh+dNFrcHC gbw4Vqap1xR3xVQP/TRqdH1hTJ8gvKooonTSToSUYD22woPfgQsSRa/Xu3EPRcCN +6S39f2nDxIuZmEL2gsxVSlKIZMdOBmL/JwaeSwfOUSWt1qkCsKYK5d+FHIogBEA lH3zaxNsn2rDLGvX9zYYB2ok53voIZsjRf4l1DyRlCh644kxhaLF6IG7XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVxjBeOi5aXZigdVY/vlXU5l4E4MB8GA1UdIwQY MBaAFIueNrtv75Mo9RjksQX8ISwVKoxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEt MWExMTZhNTM0NDgzLzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEtMWExMTZhNTM0NDgz LzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIEw2ZsQ Kx7DAsslbiF8QwVsnIKFrEcbR9KYWzoAShvZ829qFFr89SMfMRcODvGVDJF1gaZZ uJ/B6qJBChgn2EMiyMBJSEO3/88Hz3nY7iw5dn3cMeegn/N4eHZxcwbMdPMIGTug tyzaH6kPGhmnKJssJbTx54IC+ZOZ2FOJSf5vpbhq8T1ABlarE9QmOItCSvZxl2Vl KjkYZh3frUOBteksI4PaOUfV26KJRCcYaXRtDx6HaIkOge8jM6YcneGQCXtCDyO4 3r8kE2SDsL7QSK8mmXOrk1tGN1uy5+EvUBbx8uTOZQtJ9Aj6lOSnMmEcx53PNpls A+v+sN6Xb3ZEoQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:38:29 2025 by rpki-client