This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json) Hash identifier: nowuSuoKfrJjEALctQlvioClp77DmDKnXYTvIfhlcAE= Subject key identifier: A4:2E:ED:6F:0D:85:82:A4:8E:7D:AE:5C:E0:60:C3:C1:AF:41:31:89 Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B3D90920E06D5C17BDAC7A5DFED76522E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft Manifest number: 0C98 Signing time: Sat 20 Dec 2025 21:00:43 +0000 Manifest this update: Sat 20 Dec 2025 21:00:43 +0000 Manifest next update: Sun 21 Dec 2025 21:00:43 +0000 Files and hashes: 1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=) 2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=) 3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: CM8gNNhgiKmV4O7/Xoh4br2cQZWBV9FIAk7yQUYXg7Q=) 4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=) 5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=) 6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=) 7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:92:0e:06:d5:c1:7b:da:c7:a5:df:ed:76:52:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Dec 20 21:00:43 2025 GMT Not After : Dec 21 21:00:43 2025 GMT Subject: CN=a42eed6f0d8582a48e7dae5ce060c3c1af413189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:18:f5:95:20:be:e9:37:f3:a8:4a:be:0b: f6:58:88:52:2b:6e:1d:ce:7f:94:ab:56:26:51:2d: 25:3a:88:c5:92:0e:41:c2:9d:fa:74:cd:72:96:95: 38:35:2c:3c:05:49:79:91:24:94:cd:cc:fd:9f:33: bf:ce:04:0a:b3:3f:21:2d:23:4d:1b:9b:89:0e:0c: f7:39:ab:26:a7:2d:66:2c:91:65:a3:ec:7e:07:61: 34:fe:09:4a:39:fb:27:ed:a4:01:e0:5b:53:e4:fb: 39:f1:c7:c3:26:9e:90:c7:30:da:5f:33:44:1e:1e: 59:3e:4c:7a:36:2f:fc:49:3b:7c:27:65:d9:67:66: e0:91:15:f0:17:73:e9:2f:ca:9f:ca:4d:41:82:5d: e0:56:64:61:fe:3a:f5:36:62:29:48:4f:71:de:f1: 0f:f0:ee:18:25:73:09:a4:2c:6e:11:ec:3f:9f:4b: cc:49:62:f7:78:32:84:1d:1c:93:7a:f6:2f:d9:88: 58:db:27:cf:00:c8:f7:2e:b2:aa:90:23:2d:22:ca: 29:5d:a4:a7:16:7e:85:50:23:8f:80:65:9b:c6:65: 86:42:4d:52:a2:9d:91:f9:c5:85:dc:62:55:a3:b0: da:3d:e8:16:30:7e:35:12:9a:9e:95:50:d4:19:59: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:ED:6F:0D:85:82:A4:8E:7D:AE:5C:E0:60:C3:C1:AF:41:31:89 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ed:86:e5:0c:1b:59:6c:86:9c:c3:f8:fa:48:c3:8b:6a:04: 87:90:6d:9a:1e:17:f2:c1:de:58:95:fa:c6:18:31:1b:5f:30: 6a:93:11:bb:24:8b:29:03:e5:98:8d:7e:f3:d0:3d:7d:23:01: ea:2b:aa:b4:94:e8:1d:2e:ea:1f:c6:4a:e1:d9:c3:e8:63:ff: d3:65:64:3d:bf:f2:b6:d2:45:a4:a0:99:05:19:6e:5e:36:76: 1f:54:3d:9a:87:fc:fc:67:f1:7f:5a:7d:47:c1:7f:e4:d3:4c: 33:45:8d:99:43:47:bd:cb:28:1d:10:a9:82:28:8b:45:e1:44: d5:d9:a6:8d:f6:c3:ff:d0:87:56:fa:55:84:18:f9:79:00:02: c2:97:07:9c:27:f3:c2:af:f7:c4:f3:45:13:ba:d3:3f:d4:c4: 91:90:46:a6:89:cd:b7:a5:fc:44:ba:e7:93:08:a2:f0:dd:93: 05:28:f5:29:18:73:ea:66:45:ef:bb:a0:ce:bd:b5:58:8f:c8: 5b:b9:47:72:a3:ff:29:32:04:1e:6e:40:b5:b7:34:5a:9f:57: d2:96:8f:60:5b:50:53:af:fc:58:25:aa:1b:45:47:36:72:a0: 23:41:e2:79:4a:e2:29:fd:d8:8e:5f:42:6e:c7:05:a9:66:70: 87:b2:64:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJIOBtXBe9rHpd/tdlIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjUxMjIwMjEwMDQzWhcNMjUxMjIxMjEwMDQzWjAzMTEwLwYDVQQD EyhhNDJlZWQ2ZjBkODU4MmE0OGU3ZGFlNWNlMDYwYzNjMWFmNDEzMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtMY9ZUgvuk386hKvgv2WIhSK24d zn+Uq1YmUS0lOojFkg5Bwp36dM1ylpU4NSw8BUl5kSSUzcz9nzO/zgQKsz8hLSNN G5uJDgz3Oasmpy1mLJFlo+x+B2E0/glKOfsn7aQB4FtT5Ps58cfDJp6QxzDaXzNE Hh5ZPkx6Ni/8STt8J2XZZ2bgkRXwF3PpL8qfyk1Bgl3gVmRh/jr1NmIpSE9x3vEP 8O4YJXMJpCxuEew/n0vMSWL3eDKEHRyTevYv2YhY2yfPAMj3LrKqkCMtIsopXaSn Fn6FUCOPgGWbxmWGQk1Sop2R+cWF3GJVo7DaPegWMH41EpqelVDUGVk+6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQu7W8NhYKkjn2uXOBgw8GvQTGJMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGO2G5Qwb WWyGnMP4+kjDi2oEh5Btmh4X8sHeWJX6xhgxG18wapMRuySLKQPlmI1+89A9fSMB 6iuqtJToHS7qH8ZK4dnD6GP/02VkPb/yttJFpKCZBRluXjZ2H1Q9mof8/Gfxf1p9 R8F/5NNMM0WNmUNHvcsoHRCpgiiLReFE1dmmjfbD/9CHVvpVhBj5eQACwpcHnCfz wq/3xPNFE7rTP9TEkZBGponNt6X8RLrnkwii8N2TBSj1KRhz6mZF77ugzr21WI/I W7lHcqP/KTIEHm5Atbc0Wp9X0paPYFtQU6/8WCWqG0VHNnKgI0HieUriKf3Yjl9C bscFqWZwh7Jkkg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:04:54 2025 by rpki-client