This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json) Hash identifier: deEKJJKpW9vrKH9HjzYmsOeHdT7BtA/sTbKuU86xkbA= Subject key identifier: 1E:23:1D:4F:43:DF:75:2D:54:BC:78:8F:54:7B:5E:1C:09:47:10:EC Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 019B42492C808230147A19807D26B7051DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft Manifest number: 0E94 Signing time: Sun 21 Dec 2025 19:00:50 +0000 Manifest this update: Sun 21 Dec 2025 19:00:50 +0000 Manifest next update: Mon 22 Dec 2025 19:00:50 +0000 Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=) 2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=) 3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=) 4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: SPnQNJaEpztk1u6ov6ECnzd+NWIuw+7wQDgGVC1xT6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:2c:80:82:30:14:7a:19:80:7d:26:b7:05:1d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Dec 21 19:00:50 2025 GMT Not After : Dec 22 19:00:50 2025 GMT Subject: CN=1e231d4f43df752d54bc788f547b5e1c094710ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:d1:42:79:96:cc:30:8c:f8:5b:8c:a2:a9: 4d:4c:11:39:93:b5:08:d4:2e:a9:f6:57:70:be:a6: 45:cf:31:38:d0:8d:cc:02:76:00:b9:71:da:52:86: 9f:ce:3b:0c:bb:dd:78:ad:d0:88:a5:40:78:c2:50: eb:20:02:bc:b9:a9:26:c9:2d:92:2a:c4:00:82:01: eb:48:02:0a:6e:dc:eb:4e:b5:04:30:5d:21:c6:4f: 91:10:09:b5:c9:3c:e6:45:0d:d9:ac:65:7b:08:17: 47:71:08:67:a9:64:7c:50:86:9f:74:f0:eb:89:cc: e2:73:d0:70:db:48:a3:27:98:3c:be:9d:00:ac:6c: 76:eb:ec:8e:72:b2:a8:93:25:a9:49:4c:76:a3:18: 24:07:d7:b1:1b:fa:11:95:a8:fa:a4:79:f1:bd:bd: 5b:4d:f4:c7:96:57:46:e0:d0:f2:1d:f7:8f:09:ad: d3:70:af:79:35:62:5f:93:5e:fa:cb:d9:7b:6d:21: 01:ea:71:a1:de:0d:46:22:2f:4b:1c:a0:e7:1b:7f: 01:10:56:6d:69:94:ab:b5:73:fc:cd:bd:74:c0:e7: 57:57:40:d0:8a:8e:92:18:f8:cf:ef:81:97:0b:73: 66:0d:6d:5c:40:6b:38:ee:d2:f6:d2:6d:59:fa:60: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:23:1D:4F:43:DF:75:2D:54:BC:78:8F:54:7B:5E:1C:09:47:10:EC X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:29:c5:a3:b9:73:b6:e7:66:96:92:ac:53:35:36:cc:ff:b8: a3:f1:59:26:48:f4:d5:d9:fb:76:24:7d:62:c5:45:25:cf:70: 39:13:01:11:17:27:91:81:70:c7:6c:f6:cd:6b:62:63:e5:50: fd:9f:a1:9e:2e:02:92:e3:55:8a:cf:7e:a8:1e:16:d9:62:00: cd:75:03:a1:5b:06:f9:36:25:ca:9c:b7:91:09:7b:29:dd:97: df:d5:d4:11:49:52:ae:74:0f:95:43:90:c7:e1:f9:ce:4d:b4: 8a:88:f6:be:b9:8f:96:0a:97:06:36:b6:9e:70:ae:d1:8e:e2: 9b:a5:9a:73:f1:2e:ff:5e:00:9d:aa:84:5b:e2:9c:5b:dd:60: 60:66:50:9f:9e:a7:89:c9:43:be:2c:61:ce:03:c7:ba:bf:48: 38:b8:6d:10:74:f5:8c:cc:0f:f1:0f:a3:4a:5d:6d:30:b5:10: 92:e4:ae:7f:02:b4:e2:d2:a4:da:d2:ca:c8:ab:8a:15:89:31: df:f2:4b:7d:57:1b:5a:20:ed:97:6c:e8:5b:ca:a2:e6:f9:88: 3c:57:a4:c1:a9:5e:96:a1:ab:7c:8a:2f:6b:b8:a8:d8:2b:96: 5d:b2:54:35:07:eb:38:6e:c0:d2:3e:23:8a:40:17:55:c8:e4: 52:aa:8a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSSyAgjAUehmAfSa3BR3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjUxMjIxMTkwMDUwWhcNMjUxMjIyMTkwMDUwWjAzMTEwLwYDVQQD EygxZTIzMWQ0ZjQzZGY3NTJkNTRiYzc4OGY1NDdiNWUxYzA5NDcxMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriTRQnmWzDCM+FuMoqlNTBE5k7UI 1C6p9ldwvqZFzzE40I3MAnYAuXHaUoafzjsMu914rdCIpUB4wlDrIAK8uakmyS2S KsQAggHrSAIKbtzrTrUEMF0hxk+REAm1yTzmRQ3ZrGV7CBdHcQhnqWR8UIafdPDr iczic9Bw20ijJ5g8vp0ArGx26+yOcrKokyWpSUx2oxgkB9exG/oRlaj6pHnxvb1b TfTHlldG4NDyHfePCa3TcK95NWJfk176y9l7bSEB6nGh3g1GIi9LHKDnG38BEFZt aZSrtXP8zb10wOdXV0DQio6SGPjP74GXC3NmDW1cQGs47tL20m1Z+mCI3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4jHU9D33UtVLx4j1R7XhwJRxDsMB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWynFo7lz tudmlpKsUzU2zP+4o/FZJkj01dn7diR9YsVFJc9wORMBERcnkYFwx2z2zWtiY+VQ /Z+hni4CkuNVis9+qB4W2WIAzXUDoVsG+TYlypy3kQl7Kd2X39XUEUlSrnQPlUOQ x+H5zk20ioj2vrmPlgqXBja2nnCu0Y7im6Wac/Eu/14AnaqEW+KcW91gYGZQn56n iclDvixhzgPHur9IOLhtEHT1jMwP8Q+jSl1tMLUQkuSufwK04tKk2tLKyKuKFYkx 3/JLfVcbWiDtl2zoW8qi5vmIPFekwalelqGrfIova7io2CuWXbJUNQfrOG7A0j4j ikAXVcjkUqqKiw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:48 2025 by rpki-client