This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json) Hash identifier: g/hXIhXzgIC4APIImpioHuMh1eEe2xj1ELuyO1YIxG8= Subject key identifier: 1B:71:84:B0:74:68:70:70:AF:43:66:0C:A6:1B:E8:A9:C6:55:B6:42 Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Certificate serial: 019B37C5B837C683CE9C26C8AA01483FD1A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft Manifest number: 17A2 Signing time: Fri 19 Dec 2025 18:01:03 +0000 Manifest this update: Fri 19 Dec 2025 18:01:03 +0000 Manifest next update: Sat 20 Dec 2025 18:01:03 +0000 Files and hashes: 1: FnOWfDYcbqnXkJpTipQaFNmoJuI.roa (hash: x4PipE/X9nl6y/X2dlJtlfW1wrZz8kR30mZn+6h+rAw=) 2: GrxF-Z6g8x7Myhoo6_yrBMBBtIw.roa (hash: KHfAEEJOgExqo49TxB4REgLZoluYcPxAiiRPplUp4YI=) 3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: 8mX+USUbyzsc/B4Nm2US5E4TKY5BZWiHiM3EQ04eOGo=) 4: jPQhWSPbJrDgBisE3QHlP-LQn3M.roa (hash: aNePKBPywT8UKvj1ZcaWKnrp38Gzd5gq2H+pwRm93KE=) 5: nS1WLePcNk0wxJVQAoq0SfHTCWw.roa (hash: /N0EJ4juDLfwbpXrNdKKbMwqT3lKS7SOYvpGsMPBWsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:b8:37:c6:83:ce:9c:26:c8:aa:01:48:3f:d1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c Validity Not Before: Dec 19 18:01:03 2025 GMT Not After : Dec 20 18:01:03 2025 GMT Subject: CN=1b7184b074687070af43660ca61be8a9c655b642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:17:65:b1:17:ca:cb:75:d0:ce:fd:5e:bc: 9e:97:b0:d9:e5:85:30:c1:f4:a0:29:70:fb:79:01: 7c:aa:52:9e:18:d6:5c:c3:da:ce:86:05:5a:ad:f3: ca:a9:6b:b4:90:1e:2a:c9:20:df:50:5d:5e:7c:ef: 2d:df:53:9a:4a:e2:7d:fb:bf:18:7c:0c:2d:57:5d: ca:05:19:ac:29:6f:3b:ab:2a:51:09:d6:7b:9c:00: 34:f5:1a:1b:26:cf:d0:4f:2e:e9:d4:93:24:61:90: 48:ab:03:8c:73:22:a8:bc:c9:88:b1:3e:73:34:26: 7a:c2:40:f2:eb:f6:b1:d0:5f:45:cc:2a:4f:15:2c: 0f:06:0e:4e:1a:21:8b:54:9d:e8:88:84:34:95:63: cd:0d:6a:7a:6e:c4:ae:93:48:d8:64:e3:22:e3:d2: 3d:ce:0b:6c:25:c2:0f:ef:43:74:a2:f0:b0:cd:03: 05:7f:96:bc:ab:43:d7:fc:5d:0b:ef:42:4e:79:a7: 56:f2:52:b4:29:49:0b:e2:06:80:85:74:e0:63:36: 6a:99:bb:39:b8:6f:25:f9:1f:19:aa:c6:5d:39:7a: 31:13:b4:41:6f:75:1d:02:49:4e:1a:0a:cd:5a:31: 05:41:11:73:e0:76:1e:36:b7:c1:ed:58:bb:82:0b: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:84:B0:74:68:70:70:AF:43:66:0C:A6:1B:E8:A9:C6:55:B6:42 X509v3 Authority Key Identifier: keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:de:ec:9c:11:e2:93:c0:e4:94:d0:bf:e8:dc:4b:cd:f3:8e: 45:23:a4:66:ef:81:a2:6a:27:5b:e5:df:f7:9b:6d:25:30:88: 50:e4:a7:53:7f:5b:ee:be:c7:66:fb:77:35:9d:65:1c:9f:6b: 7d:84:a1:0e:88:dc:fa:cf:ec:f6:c6:74:21:53:a3:01:67:07: db:f6:68:b4:3d:61:8b:67:e8:1e:1b:65:10:0d:67:67:17:16: bf:53:e3:f1:38:96:49:68:19:8a:90:32:99:28:86:20:f4:99: 74:c9:24:ad:bd:aa:7c:62:9c:a4:c9:40:28:40:09:59:73:1a: b3:74:2d:36:a2:86:f9:80:b0:9d:94:d3:e6:87:bc:57:a7:17: e2:38:41:52:3d:53:dc:ce:4b:19:a4:6f:29:59:77:95:16:3a: 98:dd:7f:85:17:1f:f4:65:e6:63:35:3e:f0:83:29:37:81:22: 8e:f6:db:63:6c:a7:81:40:93:ac:16:02:08:e2:c3:12:65:78: 2f:94:45:60:bc:5b:4c:40:e2:f0:bf:dd:c3:17:bc:74:c0:14: 11:26:6f:2c:73:0e:b3:72:c3:70:b3:43:36:bb:12:46:ac:e2: 4a:d6:69:bd:a3:f1:b5:ff:3c:21:d6:a9:e1:30:17:01:cc:05: ab:1f:a2:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xbg3xoPOnCbIqgFIP9GoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0 M2Q4MGMwHhcNMjUxMjE5MTgwMTAzWhcNMjUxMjIwMTgwMTAzWjAzMTEwLwYDVQQD EygxYjcxODRiMDc0Njg3MDcwYWY0MzY2MGNhNjFiZThhOWM2NTViNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA4XZbEXyst10M79Xryel7DZ5YUw wfSgKXD7eQF8qlKeGNZcw9rOhgVarfPKqWu0kB4qySDfUF1efO8t31OaSuJ9+78Y fAwtV13KBRmsKW87qypRCdZ7nAA09RobJs/QTy7p1JMkYZBIqwOMcyKovMmIsT5z NCZ6wkDy6/ax0F9FzCpPFSwPBg5OGiGLVJ3oiIQ0lWPNDWp6bsSuk0jYZOMi49I9 zgtsJcIP70N0ovCwzQMFf5a8q0PX/F0L70JOeadW8lK0KUkL4gaAhXTgYzZqmbs5 uG8l+R8ZqsZdOXoxE7RBb3UdAklOGgrNWjEFQRFz4HYeNrfB7Vi7ggvHBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtxhLB0aHBwr0NmDKYb6KnGVbZCMB8GA1UdIwQY MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt NjliOTUzYzlkNWFhLzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsd7snBHi k8DklNC/6NxLzfOORSOkZu+BomonW+Xf95ttJTCIUOSnU39b7r7HZvt3NZ1lHJ9r fYShDojc+s/s9sZ0IVOjAWcH2/ZotD1hi2foHhtlEA1nZxcWv1Pj8TiWSWgZipAy mSiGIPSZdMkkrb2qfGKcpMlAKEAJWXMas3QtNqKG+YCwnZTT5oe8V6cX4jhBUj1T 3M5LGaRvKVl3lRY6mN1/hRcf9GXmYzU+8IMpN4EijvbbY2yngUCTrBYCCOLDEmV4 L5RFYLxbTEDi8L/dwxe8dMAUESZvLHMOs3LDcLNDNrsSRqziStZpvaPxtf88Idap 4TAXAcwFqx+iUA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:22:40 2025 by rpki-client