This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json) Hash identifier: IMZEsfki0s8zjmkg7xv5kMJep8PAHLtGBbGP5zZf5oE= Subject key identifier: 19:F2:1E:F3:8F:24:A6:67:86:53:05:1C:6F:56:82:57:74:A2:F8:8D Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33 Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033 Certificate serial: 019B4A715B3AC1903975DD91682E58FF3FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft Manifest number: 1231 Signing time: Tue 23 Dec 2025 09:01:41 +0000 Manifest this update: Tue 23 Dec 2025 09:01:41 +0000 Manifest next update: Wed 24 Dec 2025 09:01:41 +0000 Files and hashes: 1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=) 2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=) 3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: buznvLQAoEWI1msNI7NEymhV8aC/41tR7f5RaOHarEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:5b:3a:c1:90:39:75:dd:91:68:2e:58:ff:3f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033 Validity Not Before: Dec 23 09:01:41 2025 GMT Not After : Dec 24 09:01:41 2025 GMT Subject: CN=19f21ef38f24a6678653051c6f56825774a2f88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:74:46:c4:c4:e3:d1:cf:84:e7:7b:85:e4: 01:51:d3:67:48:2d:7e:0c:02:31:db:8c:83:4c:15: d4:88:40:64:9b:a7:db:b8:f4:10:18:45:4c:14:c0: b7:2f:44:44:8e:29:5b:92:8c:ef:c9:e8:8f:e1:d2: 81:0f:ac:dd:16:62:91:79:b2:83:8b:72:fc:0b:7a: 52:f8:c2:19:41:e7:36:9f:b6:97:a2:df:e9:47:ed: bb:49:aa:b3:75:bb:d7:55:0c:86:2e:1a:10:da:02: 34:88:e2:18:d9:56:85:43:98:90:00:ba:c8:70:b5: 18:ff:75:20:5b:44:3c:f8:8c:31:8c:d6:57:b7:d3: ae:da:61:e4:c8:2c:91:23:5d:0e:5d:38:32:04:44: 1a:81:01:e9:60:3b:a8:be:0e:aa:f9:31:15:f6:a6: ee:9c:ea:1c:68:57:f1:13:43:5a:ac:b3:aa:e0:8d: ce:d1:da:13:96:d7:8e:05:15:f3:36:aa:e3:5c:4e: b4:53:04:b4:20:af:f1:12:ff:20:89:72:5c:42:5f: 7f:35:ed:31:ac:e0:a5:55:02:2a:67:b6:aa:e3:54: 44:f7:96:dc:c5:8d:14:e7:c2:fc:16:e4:19:e5:cb: 99:76:1a:e9:6c:f2:de:c9:93:df:e2:cb:b1:d2:3a: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F2:1E:F3:8F:24:A6:67:86:53:05:1C:6F:56:82:57:74:A2:F8:8D X509v3 Authority Key Identifier: keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ff:c9:54:0b:ba:a4:4c:7f:f2:0b:21:33:f8:aa:d6:00:43: ec:3b:24:10:8e:14:16:24:fa:b2:03:0a:db:88:57:86:46:bd: 8b:ed:0f:d2:bf:17:ab:2a:56:ac:2d:3d:e4:07:68:ca:29:e8: 50:fa:4c:d2:b8:20:ee:bf:8a:f7:f4:c4:32:3f:58:27:be:03: 4e:a7:8e:5b:cf:e3:3d:d0:97:f8:6e:ec:9a:16:f6:7a:10:9e: 92:ac:59:ea:17:19:f0:39:7f:f7:ed:11:3d:90:f1:9e:b2:50: 01:f1:a9:a2:55:02:93:98:dd:0a:97:79:4c:4d:f5:87:6e:ca: e9:13:21:53:44:27:cc:0c:74:2e:e5:cc:28:00:cc:71:af:d2: 8c:5f:51:2a:66:21:62:de:16:c3:67:c6:84:8b:2a:9c:86:6b: ab:ac:62:0a:2d:ed:86:0b:fc:3a:c3:b7:1c:22:e3:c4:dc:a8: e2:a2:46:fb:d3:24:89:d9:56:b9:f8:7e:08:d2:40:8c:01:6f: 0c:1c:c5:5c:0e:c3:f8:ec:7b:85:d7:b1:aa:2b:be:f8:a4:52: d0:2c:e6:5c:d4:62:74:c5:3a:99:ae:5a:69:2f:ec:07:a0:48: a2:15:3f:41:7e:1d:e7:63:d7:19:56:ff:cb:03:c1:0d:37:37: 01:24:f5:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcVs6wZA5dd2RaC5Y/z+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OGY3NTdhNTZkMTc2ODBkNmQ2NjkwYjE5ZDlmMzkwNjE5 ODAwMzMwHhcNMjUxMjIzMDkwMTQxWhcNMjUxMjI0MDkwMTQxWjAzMTEwLwYDVQQD EygxOWYyMWVmMzhmMjRhNjY3ODY1MzA1MWM2ZjU2ODI1Nzc0YTJmODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bl0RsTE49HPhOd7heQBUdNnSC1+ DAIx24yDTBXUiEBkm6fbuPQQGEVMFMC3L0REjilbkozvyeiP4dKBD6zdFmKRebKD i3L8C3pS+MIZQec2n7aXot/pR+27SaqzdbvXVQyGLhoQ2gI0iOIY2VaFQ5iQALrI cLUY/3UgW0Q8+IwxjNZXt9Ou2mHkyCyRI10OXTgyBEQagQHpYDuovg6q+TEV9qbu nOocaFfxE0NarLOq4I3O0doTlteOBRXzNqrjXE60UwS0IK/xEv8giXJcQl9/Ne0x rOClVQIqZ7aq41RE95bcxY0U58L8FuQZ5cuZdhrpbPLeyZPf4sux0jraAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnyHvOPJKZnhlMFHG9Wgld0oviNMB8GA1UdIwQY MBaAFFSPdXpW0XaA1tZpCxnZ85BhmAAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUt YjhlNjU2NmEyNzlhLzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUtYjhlNjU2NmEyNzlh LzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANP/JVAu6 pEx/8gshM/iq1gBD7DskEI4UFiT6sgMK24hXhka9i+0P0r8XqypWrC095Adoyino UPpM0rgg7r+K9/TEMj9YJ74DTqeOW8/jPdCX+G7smhb2ehCekqxZ6hcZ8Dl/9+0R PZDxnrJQAfGpolUCk5jdCpd5TE31h27K6RMhU0QnzAx0LuXMKADMca/SjF9RKmYh Yt4Ww2fGhIsqnIZrq6xiCi3thgv8OsO3HCLjxNyo4qJG+9MkidlWufh+CNJAjAFv DBzFXA7D+Ox7hdexqiu++KRS0CzmXNRidMU6ma5aaS/sB6BIohU/QX4d52PXGVb/ ywPBDTc3AST1gQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:39:40 2025 by rpki-client