This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json) Hash identifier: ZlHxNWg59II0gnydEYvgRtSrqijHWw48hjR60ze1GG4= Subject key identifier: D8:A2:3B:24:01:68:F3:62:C6:E1:54:AE:BD:FB:6A:CD:C9:7D:F3:C0 Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Certificate serial: 019B3B350EA1AE8CDE2BD5CC84044D8E2C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft Manifest number: 09A1 Signing time: Sat 20 Dec 2025 10:01:31 +0000 Manifest this update: Sat 20 Dec 2025 10:01:31 +0000 Manifest next update: Sun 21 Dec 2025 10:01:31 +0000 Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=) 2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=) 3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=) 4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: 6A3BD4d5FHzyKd5Z3ERfoNtaRb76/qNs+dJBDu+nfnQ=) 5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=) 6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=) 7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=) 8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:0e:a1:ae:8c:de:2b:d5:cc:84:04:4d:8e:2c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Validity Not Before: Dec 20 10:01:31 2025 GMT Not After : Dec 21 10:01:31 2025 GMT Subject: CN=d8a23b240168f362c6e154aebdfb6acdc97df3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:db:01:0e:23:ba:f1:4f:51:de:8e:18:45: 8d:29:35:15:00:bf:c9:9d:ea:15:22:24:d1:fb:9e: 6d:9c:7d:5d:1c:ed:66:9e:d9:62:b8:67:0c:70:8d: f0:95:b2:36:9a:c8:88:8c:38:6b:e7:dc:b0:dc:08: 80:57:af:8c:86:38:cf:42:4e:52:4c:b6:87:36:bc: 22:10:86:aa:00:a8:85:6f:99:2e:58:77:21:ee:e0: 33:dc:fa:9c:36:5f:80:bb:f2:2d:11:59:ec:f4:58: d4:84:0a:ba:2e:69:6f:00:2e:15:b8:a9:93:f6:5c: 19:e5:1a:65:a2:ee:c6:64:64:ff:d7:e1:a1:e9:43: 58:01:a4:77:bd:77:c2:18:d2:99:5c:fb:ed:14:c3: c4:49:c9:30:77:4a:7e:d9:a4:c9:58:48:ff:b3:59: 97:95:31:ff:43:e5:bb:0c:f5:fd:1f:b4:47:62:f3: 91:db:31:ea:2f:34:18:aa:bd:7f:ff:76:f2:89:68: 9a:e7:3b:c8:e0:f2:b5:50:be:d5:4c:42:46:be:7e: 73:83:d4:db:52:b9:b9:3d:94:0a:0c:ea:c0:0d:e3: 37:6e:3e:be:7b:4f:a6:91:6d:f7:2d:e8:9d:9a:0a: 1e:37:f3:8d:86:cb:f1:f4:d7:ef:1a:62:33:3d:91: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A2:3B:24:01:68:F3:62:C6:E1:54:AE:BD:FB:6A:CD:C9:7D:F3:C0 X509v3 Authority Key Identifier: keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1b:86:ab:96:60:e9:7c:09:88:1b:26:b0:91:ae:b9:d0:77: 4f:a1:03:2b:32:93:94:c0:26:c4:20:ab:6c:b4:bc:00:c9:5c: 40:a2:30:07:0b:e3:be:48:14:7f:23:4f:4c:17:3b:c6:77:8b: fc:71:60:4f:73:22:ac:b5:d4:c4:0a:3a:1e:2d:ca:b7:49:d7: 4a:6d:51:38:9b:57:88:bf:69:cf:79:72:5d:c6:3c:e6:83:83: 9a:bf:3a:c7:67:02:49:f0:ec:cd:d4:08:bf:5d:1c:b5:58:11: 1e:0c:96:e6:cf:4f:58:d0:fe:ca:ab:02:8c:65:6c:79:e8:10: de:53:ae:53:16:6c:a3:f2:ed:cf:a4:92:d3:cf:3e:fd:33:e2: d7:63:b8:b0:d4:49:f3:d6:72:e8:2e:72:fe:b1:11:c1:bb:07: 32:8a:ee:52:52:8d:e1:d4:82:fc:11:d6:af:2a:6c:36:4e:d4: 51:2c:d9:9e:e5:27:76:9d:ae:07:a8:41:0d:11:f6:83:01:76: b2:73:98:fa:56:5d:35:e7:0e:df:81:26:fa:cf:cc:ab:fc:a0: 45:07:a8:fa:e4:00:bd:18:5b:a1:5c:b4:d1:fd:38:a6:ef:73: 32:39:76:80:f6:1f:a8:1c:90:e0:eb:b2:7b:7e:e8:c6:62:76: 58:13:a2:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQ6hrozeK9XMhARNjiwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl ZTdlZjcwHhcNMjUxMjIwMTAwMTMxWhcNMjUxMjIxMTAwMTMxWjAzMTEwLwYDVQQD EyhkOGEyM2IyNDAxNjhmMzYyYzZlMTU0YWViZGZiNmFjZGM5N2RmM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCbbAQ4juvFPUd6OGEWNKTUVAL/J neoVIiTR+55tnH1dHO1mntliuGcMcI3wlbI2msiIjDhr59yw3AiAV6+MhjjPQk5S TLaHNrwiEIaqAKiFb5kuWHch7uAz3PqcNl+Au/ItEVns9FjUhAq6LmlvAC4VuKmT 9lwZ5Rplou7GZGT/1+Gh6UNYAaR3vXfCGNKZXPvtFMPESckwd0p+2aTJWEj/s1mX lTH/Q+W7DPX9H7RHYvOR2zHqLzQYqr1//3byiWia5zvI4PK1UL7VTEJGvn5zg9Tb Urm5PZQKDOrADeM3bj6+e0+mkW33LeidmgoeN/ONhsvx9NfvGmIzPZEthwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiiOyQBaPNixuFUrr37as3JffPAMB8GA1UdIwQY MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3 LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxuGq5Zg 6XwJiBsmsJGuudB3T6EDKzKTlMAmxCCrbLS8AMlcQKIwBwvjvkgUfyNPTBc7xneL /HFgT3MirLXUxAo6Hi3Kt0nXSm1ROJtXiL9pz3lyXcY85oODmr86x2cCSfDszdQI v10ctVgRHgyW5s9PWND+yqsCjGVseegQ3lOuUxZso/Ltz6SS088+/TPi12O4sNRJ 89Zy6C5y/rERwbsHMoruUlKN4dSC/BHWrypsNk7UUSzZnuUndp2uB6hBDRH2gwF2 snOY+lZdNecO34Em+s/Mq/ygRQeo+uQAvRhboVy00f04pu9zMjl2gPYfqByQ4Ouy e37oxmJ2WBOiIg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:38 2025 by rpki-client