This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft File: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json) Hash identifier: fX9EpX2o997yZMlFVD7rQY6ytPryZyUa+ukM07EjXpg= Subject key identifier: EF:8D:D4:EB:89:A7:1E:27:4E:73:BD:D9:7E:66:25:E3:81:56:5B:C0 Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 Certificate issuer: /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Certificate serial: 019B4F2939D8B8AA35C678C15AC8D0D060E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft Manifest number: 0204 Signing time: Wed 24 Dec 2025 07:01:00 +0000 Manifest this update: Wed 24 Dec 2025 07:01:00 +0000 Manifest next update: Thu 25 Dec 2025 07:01:00 +0000 Files and hashes: 1: 0KZX05rL8h9xkUYSwRaJ35ZtOBw.roa (hash: 0p1i5WbBLqVZcu2ejejVhnVH/tBsiXUpsUEhbMpG3eU=) 2: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: tbTr8OwA5Rf5JWIdisFi28VVtchQmQLW2mOQ5UXwxCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:39:d8:b8:aa:35:c6:78:c1:5a:c8:d0:d0:60:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Validity Not Before: Dec 24 07:01:00 2025 GMT Not After : Dec 25 07:01:00 2025 GMT Subject: CN=ef8dd4eb89a71e274e73bdd97e6625e381565bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:8f:a8:43:28:c8:05:9c:2d:40:dd:fc:ef: d5:a2:b4:df:74:b7:0d:30:cd:6d:32:7f:7b:41:53: a4:ba:ff:67:3b:18:b9:94:e7:86:ae:76:d4:5e:ae: 8f:9f:39:84:2b:60:1c:17:7a:4f:f4:f9:fd:f9:bb: 32:03:07:4d:04:60:30:5d:d7:18:b4:6a:53:da:1f: 99:2a:2f:7a:85:6b:84:01:d4:3c:e7:0a:a8:44:f5: a7:66:e5:86:61:b2:08:49:68:f2:33:c3:82:09:a1: 0e:35:3b:c8:6c:d3:04:4f:eb:73:de:66:38:51:1c: 65:a3:3b:b9:91:c5:c7:8f:a8:52:01:17:90:cc:49: 64:6b:31:36:18:0b:a3:8d:f4:b1:42:81:1f:e9:dd: f2:72:bb:7d:5f:d3:d1:0c:6c:ca:46:e9:ad:a2:7e: 43:7f:7e:da:4f:56:28:eb:d9:29:99:fe:19:75:70: 05:47:14:37:f3:92:46:df:af:7d:97:08:06:cb:1a: 8d:6f:38:14:bd:06:63:d0:91:b0:c7:8b:7f:b5:67: 40:3d:bc:00:78:52:e2:48:a0:28:44:40:9a:9e:67: b2:59:f0:2f:c8:0c:96:bc:ec:a3:70:09:5b:e7:f3: 82:4d:a6:42:11:c6:6a:62:91:0b:be:02:31:22:6b: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8D:D4:EB:89:A7:1E:27:4E:73:BD:D9:7E:66:25:E3:81:56:5B:C0 X509v3 Authority Key Identifier: keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:06:d0:da:b1:68:7b:73:cf:fe:9e:4c:62:37:a3:bf:8e:00: f9:85:59:31:37:8f:bd:a1:27:96:c4:78:3d:f8:e5:ec:60:93: 09:cd:8d:9d:50:d7:f3:ca:1e:a3:b2:6b:74:25:4d:0c:f3:11: 90:b7:97:08:06:60:18:68:bd:27:8d:67:b1:2d:b1:59:3f:22: 0c:92:2f:22:d8:01:82:17:2f:c2:35:55:be:7c:62:a0:fc:14: 10:67:6a:0a:b6:1a:7b:6a:51:2c:5a:30:10:e7:6a:8f:80:a3: 41:3b:8f:44:53:02:41:a7:5b:f2:dd:07:94:25:76:db:79:a7: cf:9d:90:12:8c:d2:e6:e1:e1:d8:c6:86:2e:d7:6f:f3:9f:65: a6:5d:eb:98:c3:a2:79:3e:33:3a:f8:67:ac:3c:8d:c0:9d:2a: f1:29:53:fa:b1:9b:db:b3:9b:79:a0:7a:15:0b:3d:21:bd:6d: f0:5f:b0:87:8f:c4:37:79:bd:fd:3e:d9:04:a7:47:78:e3:9d: 5e:8e:8d:f0:54:0f:7d:dd:35:f7:71:90:f1:9c:d0:77:67:e6: e1:e2:58:29:18:d7:a4:f7:a3:9c:6e:c2:91:13:10:be:1e:44: 62:69:2c:35:96:48:88:4f:94:d8:1f:b2:91:2b:c6:dc:7e:30: de:3f:67:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKTnYuKo1xnjBWsjQ0GDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZGViMWQ2YTM3N2FjOWQxZjViODg4YzVjZDFkNDAwYzc5 OTcyNzEwHhcNMjUxMjI0MDcwMTAwWhcNMjUxMjI1MDcwMTAwWjAzMTEwLwYDVQQD EyhlZjhkZDRlYjg5YTcxZTI3NGU3M2JkZDk3ZTY2MjVlMzgxNTY1YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxziPqEMoyAWcLUDd/O/VorTfdLcN MM1tMn97QVOkuv9nOxi5lOeGrnbUXq6PnzmEK2AcF3pP9Pn9+bsyAwdNBGAwXdcY tGpT2h+ZKi96hWuEAdQ85wqoRPWnZuWGYbIISWjyM8OCCaEONTvIbNMET+tz3mY4 URxlozu5kcXHj6hSAReQzElkazE2GAujjfSxQoEf6d3ycrt9X9PRDGzKRumton5D f37aT1Yo69kpmf4ZdXAFRxQ385JG3699lwgGyxqNbzgUvQZj0JGwx4t/tWdAPbwA eFLiSKAoRECanmeyWfAvyAyWvOyjcAlb5/OCTaZCEcZqYpELvgIxImuf2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+N1OuJpx4nTnO92X5mJeOBVlvAMB8GA1UdIwQY MBaAFFTesdajd6ydH1uIjFzR1ADHmXJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2It YjMzNmYzMWU0YTc0LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2ItYjMzNmYzMWU0YTc0 LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAbQ2rFo e3PP/p5MYjejv44A+YVZMTePvaEnlsR4Pfjl7GCTCc2NnVDX88oeo7JrdCVNDPMR kLeXCAZgGGi9J41nsS2xWT8iDJIvItgBghcvwjVVvnxioPwUEGdqCrYae2pRLFow EOdqj4CjQTuPRFMCQadb8t0HlCV223mnz52QEozS5uHh2MaGLtdv859lpl3rmMOi eT4zOvhnrDyNwJ0q8SlT+rGb27ObeaB6FQs9Ib1t8F+wh4/EN3m9/T7ZBKdHeOOd Xo6N8FQPfd0193GQ8ZzQd2fm4eJYKRjXpPejnG7CkRMQvh5EYmksNZZIiE+U2B+y kSvG3H4w3j9nlA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:24:02 2025 by rpki-client