This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json) Hash identifier: ZX2tHSfyhO7TsPnrGR6sHcY6YfxnRrDi4CiC2e3Wxg4= Subject key identifier: 34:41:78:BB:C0:9B:E3:C6:67:97:FC:FA:A0:FB:1A:0A:FA:D2:8F:E9 Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Certificate serial: 019B3F7EEBB97CCAE0130F3154532CA1AB9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft Manifest number: 1268 Signing time: Sun 21 Dec 2025 06:00:40 +0000 Manifest this update: Sun 21 Dec 2025 06:00:40 +0000 Manifest next update: Mon 22 Dec 2025 06:00:40 +0000 Files and hashes: 1: EDy93mAhA2FhoPZrv_qXDnBaEPY.roa (hash: gcQKa9NBtqbmaNQOkXvvz+TImpW4xhVs+8xtbTy1SZU=) 2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: DBgcY6QgwSTswe5lm7gsTAyfvKzeoSbBXu0TZS6Fqxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:eb:b9:7c:ca:e0:13:0f:31:54:53:2c:a1:ab:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Validity Not Before: Dec 21 06:00:40 2025 GMT Not After : Dec 22 06:00:40 2025 GMT Subject: CN=344178bbc09be3c66797fcfaa0fb1a0afad28fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:55:9a:04:69:76:e6:b0:c8:4f:90:c0:03: 2f:f5:c8:5a:35:71:09:eb:77:49:1a:85:b3:6a:01: e1:3e:68:e1:2f:6c:e0:96:1f:a1:24:dc:d8:73:5f: d7:ee:ac:4f:cc:80:4a:3e:3a:a9:81:43:bd:29:84: d9:7c:92:26:e9:eb:af:b7:dd:94:71:c2:e0:19:20: 3f:02:7d:31:f7:b5:67:b1:01:1a:92:b6:03:60:0b: 2f:ec:9a:72:c5:3c:15:31:20:d8:ed:f6:7f:7e:00: 8e:14:51:a5:5a:d4:fc:1e:05:9a:5c:d5:41:38:2b: d4:4a:ab:76:93:14:77:11:d3:bc:c1:c6:b9:4a:8c: 16:5d:94:3d:38:3b:1c:3c:d6:9e:7c:65:70:ab:5b: 51:8c:fe:01:a7:a9:de:ab:62:52:b9:f3:19:6b:da: 86:a9:46:b5:7d:52:93:d0:fb:65:75:14:a4:c9:b3: 1e:99:ac:91:2c:73:39:70:4c:a4:f3:e9:0e:74:25: 3e:2e:16:3f:9d:9e:34:8d:b6:41:fa:b2:c1:9f:18: 50:c9:04:8c:b8:a8:38:3c:48:98:12:58:53:ef:7d: b2:cc:26:49:43:70:21:58:55:60:6e:73:cd:2c:03: 6d:82:02:aa:6e:e3:25:25:62:1f:8f:65:37:a1:e6: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:41:78:BB:C0:9B:E3:C6:67:97:FC:FA:A0:FB:1A:0A:FA:D2:8F:E9 X509v3 Authority Key Identifier: keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b8:9f:2f:97:f9:e6:86:81:03:22:d7:ef:87:e6:c1:fa:9a: f2:55:90:b8:82:b9:52:d5:7a:d3:7b:e5:77:9c:92:08:85:e2: 48:40:eb:cd:f3:0e:17:a4:27:c6:6c:12:34:32:64:2e:80:1a: d0:8a:61:9b:d7:a6:b9:f0:ce:43:c9:34:e2:75:c6:47:48:d0: 9d:f9:40:6e:fa:2a:da:b9:97:a3:dc:96:2a:d9:07:9c:1f:67: 8f:af:32:37:72:6a:5d:aa:96:ee:0b:1f:b3:9c:61:e2:22:bc: eb:45:87:28:d1:da:34:cc:76:a0:75:97:10:30:06:59:f4:ba: 93:04:4e:ef:9e:a7:a1:e5:27:07:ee:31:24:4b:5b:52:62:83: 39:60:ea:82:fa:f6:e9:75:84:06:1f:c0:2e:d5:48:fb:c9:95: 5d:83:80:64:1a:5c:41:c9:dc:90:bb:01:20:44:2c:ab:75:8c: f0:74:82:63:10:b1:23:9d:12:c3:f5:5c:13:b7:75:ef:93:fb: f0:36:9b:0e:a2:54:ee:8f:f9:51:fe:a1:59:c7:56:cf:9c:57: 78:bc:df:0f:43:1d:1c:1d:77:52:e1:cc:d3:88:ef:af:5e:07: 67:90:81:8f:55:93:fe:b1:fd:85:b2:67:ec:bc:4d:70:34:86: b7:7f:8f:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuu5fMrgEw8xVFMsoauaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3 ZjBmZTYwHhcNMjUxMjIxMDYwMDQwWhcNMjUxMjIyMDYwMDQwWjAzMTEwLwYDVQQD EygzNDQxNzhiYmMwOWJlM2M2Njc5N2ZjZmFhMGZiMWEwYWZhZDI4ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBZVmgRpduawyE+QwAMv9chaNXEJ 63dJGoWzagHhPmjhL2zglh+hJNzYc1/X7qxPzIBKPjqpgUO9KYTZfJIm6euvt92U ccLgGSA/An0x97VnsQEakrYDYAsv7JpyxTwVMSDY7fZ/fgCOFFGlWtT8HgWaXNVB OCvUSqt2kxR3EdO8wca5SowWXZQ9ODscPNaefGVwq1tRjP4Bp6neq2JSufMZa9qG qUa1fVKT0PtldRSkybMemayRLHM5cEyk8+kOdCU+LhY/nZ40jbZB+rLBnxhQyQSM uKg4PEiYElhT732yzCZJQ3AhWFVgbnPNLANtggKqbuMlJWIfj2U3oebWYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRBeLvAm+PGZ5f8+qD7Ggr60o/pMB8GA1UdIwQY MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4 LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7ifL5f5 5oaBAyLX74fmwfqa8lWQuIK5UtV603vld5ySCIXiSEDrzfMOF6QnxmwSNDJkLoAa 0Iphm9emufDOQ8k04nXGR0jQnflAbvoq2rmXo9yWKtkHnB9nj68yN3JqXaqW7gsf s5xh4iK860WHKNHaNMx2oHWXEDAGWfS6kwRO756noeUnB+4xJEtbUmKDOWDqgvr2 6XWEBh/ALtVI+8mVXYOAZBpcQcnckLsBIEQsq3WM8HSCYxCxI50Sw/VcE7d175P7 8DabDqJU7o/5Uf6hWcdWz5xXeLzfD0MdHB13UuHM04jvr14HZ5CBj1WT/rH9hbJn 7LxNcDSGt3+PKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:47:07 2025 by rpki-client