This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json) Hash identifier: fvjLoUX90ToqZHp3QUbJ0qWvK2ELv3TM6dIEtMLbbrc= Subject key identifier: 48:78:8F:EC:08:88:B6:1D:94:C8:74:5E:71:5F:8F:D7:D9:F6:D6:F1 Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb Certificate serial: 019B3C7DCAE193B816745F034ED26E8DCDF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft Manifest number: 0602 Signing time: Sat 20 Dec 2025 16:00:35 +0000 Manifest this update: Sat 20 Dec 2025 16:00:35 +0000 Manifest next update: Sun 21 Dec 2025 16:00:35 +0000 Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=) 2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: rujvkGDyXY+s3avZT76XYaeNOv8LER6QmKkA7+jSf5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ca:e1:93:b8:16:74:5f:03:4e:d2:6e:8d:cd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb Validity Not Before: Dec 20 16:00:35 2025 GMT Not After : Dec 21 16:00:35 2025 GMT Subject: CN=48788fec0888b61d94c8745e715f8fd7d9f6d6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:0b:98:b0:1e:83:75:57:ff:57:e2:41:e1: 60:a6:54:97:7b:0c:13:97:a2:fb:e2:f5:83:e0:c4: 1c:cd:4c:c2:d2:3f:52:92:b1:a4:5f:cb:ed:78:9a: 48:66:2f:23:f4:8e:99:97:e1:c2:cf:e9:76:4f:8c: 0c:c1:22:df:c1:0d:b8:83:4d:df:8c:80:af:a5:af: db:92:d4:9c:16:25:c8:93:50:33:86:ac:49:7c:84: f2:bc:f6:b7:8b:e0:2d:74:a3:f6:27:15:fd:ed:a8: 62:3e:c7:7c:27:f2:3d:60:16:cf:8d:53:40:84:16: 86:98:66:6a:59:3b:32:5d:ad:eb:62:85:b5:1e:0a: e4:f6:12:12:43:51:a1:ce:00:78:10:a8:48:a6:4d: 47:68:52:c8:d6:c8:b2:8d:7a:7e:16:f4:37:5d:b7: b5:4a:75:bb:f8:b4:ed:e5:18:9b:62:73:dd:cc:14: 50:67:1b:46:c5:a4:bb:20:33:e3:b8:e0:99:77:18: 44:69:36:d2:d0:a9:6f:dd:24:6f:02:99:86:49:85: 91:fd:0f:d9:2f:fc:d1:f8:89:50:7f:2e:19:d7:85: 0f:78:e7:f9:c1:6e:5a:5a:c6:ea:96:84:74:78:64: 46:f8:57:3c:17:de:a2:a1:31:23:0c:cd:e3:a3:a5: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:78:8F:EC:08:88:B6:1D:94:C8:74:5E:71:5F:8F:D7:D9:F6:D6:F1 X509v3 Authority Key Identifier: keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:26:01:b3:bd:bb:89:e7:5a:c3:83:a7:7c:fe:ae:65:ec:08: f2:50:45:75:04:a9:90:d5:0c:c9:8b:2e:d7:e9:da:a1:84:06: 49:22:06:3f:59:4a:6f:77:da:b4:84:f0:77:9c:05:51:23:4c: 7e:68:9f:a6:99:1c:5c:c1:06:15:93:6a:b4:2b:49:62:df:41: ea:a1:76:03:71:87:18:40:2e:85:a8:52:49:5a:8a:02:13:0d: c0:9e:a9:e2:38:b9:28:0b:24:0e:53:c9:c5:7b:0c:d0:c4:e2: 25:71:c4:0b:32:35:dd:43:62:c6:07:d4:84:cc:8f:0b:5e:c9: 09:f0:d1:35:49:27:bf:cf:e0:e6:c8:4f:77:e8:68:fa:70:f5: 5f:2c:f1:4f:4d:e5:e2:9e:f0:79:f1:3c:b9:e1:0a:5e:b8:5d: a6:26:1f:8f:f3:e8:19:4c:76:07:3b:bb:ca:f2:61:da:3f:34: 20:5c:95:57:ac:ed:ec:47:9b:41:30:d6:c9:31:0b:1e:3d:91: f0:f8:e4:53:29:f6:9e:47:5d:b8:47:3e:74:36:d0:ad:21:cd: 00:fe:3c:74:28:c9:9a:4c:c2:40:04:af:45:28:52:11:83:b3: 96:16:73:1e:fc:00:77:4e:a9:b2:9d:33:71:21:45:84:9d:5a: 75:48:aa:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcrhk7gWdF8DTtJujc3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Mzc2ZGVmMTIyNDgzOWE2MTEzZDFkMGNkZDM5ODEwNGZh YWYyZmIwHhcNMjUxMjIwMTYwMDM1WhcNMjUxMjIxMTYwMDM1WjAzMTEwLwYDVQQD Eyg0ODc4OGZlYzA4ODhiNjFkOTRjODc0NWU3MTVmOGZkN2Q5ZjZkNmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKsLmLAeg3VX/1fiQeFgplSXewwT l6L74vWD4MQczUzC0j9SkrGkX8vteJpIZi8j9I6Zl+HCz+l2T4wMwSLfwQ24g03f jICvpa/bktScFiXIk1AzhqxJfITyvPa3i+AtdKP2JxX97ahiPsd8J/I9YBbPjVNA hBaGmGZqWTsyXa3rYoW1Hgrk9hISQ1GhzgB4EKhIpk1HaFLI1siyjXp+FvQ3Xbe1 SnW7+LTt5RibYnPdzBRQZxtGxaS7IDPjuOCZdxhEaTbS0Klv3SRvApmGSYWR/Q/Z L/zR+IlQfy4Z14UPeOf5wW5aWsbqloR0eGRG+Fc8F96ioTEjDM3jo6WnfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh4j+wIiLYdlMh0XnFfj9fZ9tbxMB8GA1UdIwQY MBaAFFY3be8SJIOaYRPR0M3TmBBPqvL7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYt ZDgwODQ3MzNlOTgwLzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYtZDgwODQ3MzNlOTgw LzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACYBs727 iedaw4OnfP6uZewI8lBFdQSpkNUMyYsu1+naoYQGSSIGP1lKb3fatITwd5wFUSNM fmifppkcXMEGFZNqtCtJYt9B6qF2A3GHGEAuhahSSVqKAhMNwJ6p4ji5KAskDlPJ xXsM0MTiJXHECzI13UNixgfUhMyPC17JCfDRNUknv8/g5shPd+ho+nD1XyzxT03l 4p7wefE8ueEKXrhdpiYfj/PoGUx2Bzu7yvJh2j80IFyVV6zt7EebQTDWyTELHj2R 8PjkUyn2nkdduEc+dDbQrSHNAP48dCjJmkzCQASvRShSEYOzlhZzHvwAd06psp0z cSFFhJ1adUiq8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:16 2025 by rpki-client