This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json) Hash identifier: Lzkk+N/ZdZnPiSZQ2eiw8GDZByoekhMlQzBy+8jKKbo= Subject key identifier: 2B:A1:02:E9:7D:59:06:38:CB:6C:2A:D9:C4:C4:E4:0B:29:2B:7B:D3 Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B56AC1C21D003D00E359D39138F360666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft Manifest number: 0CA5 Signing time: Thu 25 Dec 2025 18:01:18 +0000 Manifest this update: Thu 25 Dec 2025 18:01:18 +0000 Manifest next update: Fri 26 Dec 2025 18:01:18 +0000 Files and hashes: 1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=) 2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=) 3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: HxC0Zq1dKzhyCDPZHF6riNriEDtJHKNE95+NmRH1F7g=) 4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=) 5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=) 6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=) 7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ac:1c:21:d0:03:d0:0e:35:9d:39:13:8f:36:06:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Dec 25 18:01:18 2025 GMT Not After : Dec 26 18:01:18 2025 GMT Subject: CN=2ba102e97d590638cb6c2ad9c4c4e40b292b7bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:f2:a8:59:25:a6:a4:39:a5:60:85:47:a1: d6:d0:0a:a2:8f:d0:9c:18:e0:14:bf:62:94:86:21: 2e:46:10:e7:74:7b:d6:9c:37:01:09:21:46:a7:06: 1a:91:e8:44:8c:31:02:94:07:1f:06:c7:18:22:fd: 73:e8:04:86:6f:a8:4d:38:d3:3e:5d:bf:2d:1b:26: f2:af:96:80:58:f3:c0:2a:b8:78:28:a9:53:dc:d6: ac:08:5b:12:80:ad:92:77:e5:e8:1f:01:9c:c7:5d: c6:e7:6a:e2:75:99:37:68:a9:48:dd:5a:ab:f1:15: c6:f3:9a:58:58:78:5c:3f:11:fd:71:02:65:f7:86: 43:dd:20:4f:ae:b3:9e:04:52:1c:5e:31:9f:42:8b: c6:fa:7b:fd:1e:48:de:36:22:57:03:ef:27:6d:e8: e0:40:7d:ef:8a:5e:51:c0:00:18:72:5e:4c:d2:a9: e1:db:77:7e:fe:6c:6b:e6:da:2d:9e:51:ce:c8:c2: 1e:61:70:61:ed:8b:e7:12:13:6a:5a:46:24:31:a2: ef:d4:48:4b:cd:14:1b:38:b9:f0:81:65:06:0e:9b: 5c:87:4d:b8:21:32:fe:22:e3:72:22:a0:9e:46:bb: f5:0c:eb:ef:2d:ea:cd:a7:2e:fd:8b:d1:9c:c8:23: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A1:02:E9:7D:59:06:38:CB:6C:2A:D9:C4:C4:E4:0B:29:2B:7B:D3 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a4:be:c3:f1:3b:2a:2f:2e:bc:9b:47:44:33:f1:b1:fb:ac: 9c:b1:cb:ba:cc:23:68:b9:f6:ca:3e:ac:1b:24:f9:f5:58:2c: 01:33:0c:79:de:67:af:c7:9c:90:7b:e9:d3:fd:6c:ba:02:e9: f7:7b:01:f8:14:29:5f:e1:5a:9a:a9:01:84:34:42:5f:99:d7: 46:ad:21:10:23:6b:f2:20:a8:6d:a4:d4:9c:4e:b8:65:2d:50: 66:05:ce:a0:d3:df:8e:1b:6a:85:0f:c2:d7:82:4d:7b:70:98: a8:47:e8:50:53:3b:f1:65:23:e3:e3:8b:0d:9d:69:f2:ea:70: 1f:a0:8e:92:94:a1:93:9a:24:cf:3a:fa:28:0d:d1:bb:02:d5: 90:37:91:a1:40:b8:d7:bf:be:65:61:e2:2f:ce:e5:ac:91:2b: 5e:f4:7a:0d:77:03:35:8e:72:4e:14:21:72:19:bd:9c:47:5d: b7:48:18:a6:64:fe:a5:e0:35:68:88:c3:de:b1:3e:0c:d6:2e: 1a:70:06:c2:3b:bb:93:56:f0:7d:46:b6:f1:41:1f:87:48:90: e4:cc:ec:38:60:12:8b:53:eb:df:37:e5:8e:76:54:e4:c4:25: 9a:b1:80:87:bb:75:4a:91:51:4b:31:42:85:de:a0:09:f5:82: 54:f0:d4:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWrBwh0APQDjWdOROPNgZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjUxMjI1MTgwMTE4WhcNMjUxMjI2MTgwMTE4WjAzMTEwLwYDVQQD EygyYmExMDJlOTdkNTkwNjM4Y2I2YzJhZDljNGM0ZTQwYjI5MmI3YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8nyqFklpqQ5pWCFR6HW0Aqij9Cc GOAUv2KUhiEuRhDndHvWnDcBCSFGpwYakehEjDEClAcfBscYIv1z6ASGb6hNONM+ Xb8tGybyr5aAWPPAKrh4KKlT3NasCFsSgK2Sd+XoHwGcx13G52ridZk3aKlI3Vqr 8RXG85pYWHhcPxH9cQJl94ZD3SBPrrOeBFIcXjGfQovG+nv9HkjeNiJXA+8nbejg QH3vil5RwAAYcl5M0qnh23d+/mxr5totnlHOyMIeYXBh7YvnEhNqWkYkMaLv1EhL zRQbOLnwgWUGDptch024ITL+IuNyIqCeRrv1DOvvLerNpy79i9GcyCM93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuhAul9WQY4y2wq2cTE5AspK3vTMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaS+w/E7 Ki8uvJtHRDPxsfusnLHLuswjaLn2yj6sGyT59VgsATMMed5nr8eckHvp0/1sugLp 93sB+BQpX+FamqkBhDRCX5nXRq0hECNr8iCobaTUnE64ZS1QZgXOoNPfjhtqhQ/C 14JNe3CYqEfoUFM78WUj4+OLDZ1p8upwH6COkpShk5okzzr6KA3RuwLVkDeRoUC4 17++ZWHiL87lrJErXvR6DXcDNY5yThQhchm9nEddt0gYpmT+peA1aIjD3rE+DNYu GnAGwju7k1bwfUa28UEfh0iQ5MzsOGASi1Pr3zfljnZU5MQlmrGAh7t1SpFRSzFC hd6gCfWCVPDUfg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:31 2025 by rpki-client