This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json) Hash identifier: 4OjCugA1mImzUY4KDZDU2rw+TOIjagfIULhyRtr+Hkw= Subject key identifier: 28:EE:3C:62:AC:F5:B4:8E:DF:32:C7:FB:1A:D1:41:C8:6E:75:32:7E Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0 Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0 Certificate serial: 019B405C464F3299E7A012887BC7BB777CEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft Manifest number: 0F1D Signing time: Sun 21 Dec 2025 10:02:27 +0000 Manifest this update: Sun 21 Dec 2025 10:02:27 +0000 Manifest next update: Mon 22 Dec 2025 10:02:27 +0000 Files and hashes: 1: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: ZeovV6mX7IJV96kMpexwuyTQrTi1mOCK0CfmM122I6I=) 2: qCD8L1dMgJ9yzf77qP7Yswj5ta4.roa (hash: oyvr0Mb88tpow7HpmKv7H5W0zqdzX3mbbm1lwxbPABw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:46:4f:32:99:e7:a0:12:88:7b:c7:bb:77:7c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0 Validity Not Before: Dec 21 10:02:27 2025 GMT Not After : Dec 22 10:02:27 2025 GMT Subject: CN=28ee3c62acf5b48edf32c7fb1ad141c86e75327e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:3c:82:e0:08:3c:7f:dc:b9:db:da:91:0c: fe:f3:8c:58:fe:86:89:3f:76:ad:80:54:07:e6:4f: fc:b7:70:2c:7b:80:d0:8b:c8:3a:89:cc:5c:6b:17: e7:2d:5e:f8:16:79:b5:de:89:36:71:55:0c:9f:4c: 39:f4:87:9c:83:0c:a7:14:56:18:6d:b4:55:aa:af: 86:5c:21:a8:c7:fe:f5:44:c5:72:8c:ad:1d:56:d6: 94:21:a2:7a:f7:40:40:fa:79:a1:e2:2b:1d:51:0d: b4:a5:74:3d:d7:59:90:ed:79:69:6b:83:38:29:d5: 18:c9:e4:39:c7:36:a6:f1:19:cd:52:8d:dd:e5:8e: b2:df:92:74:00:48:9b:8c:93:44:8a:c2:7f:12:ce: eb:2f:f0:51:72:36:d1:0f:5e:75:b6:e2:e6:9a:4c: a2:2b:0f:f1:55:05:b8:cb:c2:c3:da:09:c3:fa:e6: ff:db:6d:1d:28:e5:9e:7c:6a:77:f4:55:1d:21:62: 26:37:96:bb:49:a3:1d:94:97:ad:cc:8b:e0:a1:a4: 8e:dd:a9:12:fd:20:79:9a:ba:e4:17:b5:3a:3d:d7: 0c:1a:30:bc:86:6f:ee:c8:d8:22:2f:fd:51:aa:7e: 5c:db:e4:a5:48:76:c1:b1:d6:ee:92:24:07:89:25: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EE:3C:62:AC:F5:B4:8E:DF:32:C7:FB:1A:D1:41:C8:6E:75:32:7E X509v3 Authority Key Identifier: keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cc:a8:de:35:d0:01:2b:66:2e:60:cf:97:a6:f1:f6:ae:db: bc:e8:12:40:b3:e5:b7:5c:54:13:fe:f2:df:b5:3d:3d:e9:ae: 31:a0:43:be:91:28:37:20:f1:12:f0:0a:30:3f:3a:f1:31:df: 63:b3:99:2c:44:2d:dd:6e:29:65:ed:fe:af:63:06:a3:97:c5: 23:9b:af:dc:b8:3b:e9:32:25:98:d8:27:05:34:15:70:19:0d: 00:0c:84:71:d0:7b:63:6e:dd:6d:4a:4b:b3:3e:0f:d0:93:0c: 61:82:7e:ac:42:c4:58:4f:2c:2b:96:b0:89:88:3c:82:82:54: d0:1f:58:71:6d:95:f0:52:41:84:d7:10:34:fe:94:d8:86:48: 8c:22:44:f6:26:92:19:d9:e8:a5:b9:a4:c1:a3:cd:24:42:9c: 30:e4:0f:01:4d:5f:4a:cd:6a:29:22:9c:82:69:18:7b:f5:6d: fb:82:f2:65:84:cd:f6:3f:2d:16:a2:51:b3:e6:1e:13:85:a3: 1c:2f:ad:db:49:f3:a1:b7:16:ae:64:4b:6c:b9:26:40:05:ee: a1:56:70:92:e1:61:30:e3:23:e2:40:ea:98:34:90:92:cf:e5: 12:d0:ae:f3:18:d8:13:1d:1f:2b:eb:66:8c:4d:b3:bc:b7:20: db:63:50:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXEZPMpnnoBKIe8e7d3zsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2UyNDQ1YTJlODg3NDMxOGJmMjQ5YjczYTY1NGM5OTA5 MTllZTAwHhcNMjUxMjIxMTAwMjI3WhcNMjUxMjIyMTAwMjI3WjAzMTEwLwYDVQQD EygyOGVlM2M2MmFjZjViNDhlZGYzMmM3ZmIxYWQxNDFjODZlNzUzMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxw8guAIPH/cudvakQz+84xY/oaJ P3atgFQH5k/8t3Ase4DQi8g6icxcaxfnLV74Fnm13ok2cVUMn0w59IecgwynFFYY bbRVqq+GXCGox/71RMVyjK0dVtaUIaJ690BA+nmh4isdUQ20pXQ911mQ7Xlpa4M4 KdUYyeQ5xzam8RnNUo3d5Y6y35J0AEibjJNEisJ/Es7rL/BRcjbRD151tuLmmkyi Kw/xVQW4y8LD2gnD+ub/220dKOWefGp39FUdIWImN5a7SaMdlJetzIvgoaSO3akS /SB5mrrkF7U6PdcMGjC8hm/uyNgiL/1Rqn5c2+SlSHbBsdbukiQHiSUf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjuPGKs9bSO3zLH+xrRQchudTJ+MB8GA1UdIwQY MBaAFFTOJEWi6IdDGL8km3OmVMmQkZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc3ODAtZWI1My00YzFkLWFjY2Ut Y2ZlN2UzZjlmOTJkLzEvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iZDc3ODAtZWI1My00YzFkLWFjY2UtY2ZlN2UzZjlmOTJk LzEvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsyo3jXQ AStmLmDPl6bx9q7bvOgSQLPlt1xUE/7y37U9PemuMaBDvpEoNyDxEvAKMD868THf Y7OZLEQt3W4pZe3+r2MGo5fFI5uv3Lg76TIlmNgnBTQVcBkNAAyEcdB7Y27dbUpL sz4P0JMMYYJ+rELEWE8sK5awiYg8goJU0B9YcW2V8FJBhNcQNP6U2IZIjCJE9iaS GdnopbmkwaPNJEKcMOQPAU1fSs1qKSKcgmkYe/Vt+4LyZYTN9j8tFqJRs+YeE4Wj HC+t20nzobcWrmRLbLkmQAXuoVZwkuFhMOMj4kDqmDSQks/lEtCu8xjYEx0fK+tm jE2zvLcg22NQgg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:18 2025 by rpki-client