This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json) Hash identifier: 1YdWj7o0mGrKKisz012bOFuA+ziyJDJtK/Fpvd7T4BY= Subject key identifier: 50:32:A3:90:62:3A:35:48:B2:2C:E5:D3:6C:54:45:C7:5E:18:82:53 Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Certificate serial: 019B416D75421943882BF9339784CD3DA28E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 15:00:51 +0000 Manifest this update: Sun 21 Dec 2025 15:00:51 +0000 Manifest next update: Mon 22 Dec 2025 15:00:51 +0000 Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=) 2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: 0zdjm5TZ57jGwo0wd/oWY9wPfLv13/zwlBdQHGmT2UU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:75:42:19:43:88:2b:f9:33:97:84:cd:3d:a2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Validity Not Before: Dec 21 15:00:51 2025 GMT Not After : Dec 22 15:00:51 2025 GMT Subject: CN=5032a390623a3548b22ce5d36c5445c75e188253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:34:a6:b2:c9:58:ee:ed:22:a3:18:1f:0f: c8:b6:67:31:1a:22:03:0b:f5:31:d7:dc:f7:10:a1: eb:35:4f:0c:65:96:8c:f2:86:ce:69:cb:f4:6e:0c: 91:40:c4:91:f6:2d:94:7c:aa:58:a0:bf:f4:d7:0a: d1:28:a9:d3:c9:be:a5:b1:67:d4:b5:79:cd:45:98: 89:58:ea:dc:4a:ba:26:d3:5e:28:81:36:89:4e:c7: 9c:50:c9:1c:97:06:f2:a2:b0:72:64:f8:f8:e9:6b: a5:0b:5d:ac:dd:04:7b:9e:1e:24:88:93:58:2d:06: 9f:f6:f5:a2:db:c3:f2:63:31:8a:67:dd:f6:19:c0: a6:ad:a7:9c:8f:ad:52:00:57:73:c7:4b:8f:ea:df: af:d0:85:05:4f:87:2a:c3:b8:86:57:d8:11:f6:0b: 22:a8:3f:73:77:5d:ae:8d:a0:b3:67:f8:b1:73:8f: b5:2c:45:da:9f:44:b4:77:40:32:a6:07:0f:e2:30: 33:31:c5:c2:06:cd:1e:bd:8a:4b:81:8f:df:f3:1a: eb:42:04:87:82:e6:ab:64:6b:e8:fa:8e:13:79:23: bf:4b:82:61:3d:98:55:bf:1b:d4:ab:25:14:86:74: d2:0e:c1:98:50:dd:d0:c5:22:98:01:b9:40:27:bc: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:32:A3:90:62:3A:35:48:B2:2C:E5:D3:6C:54:45:C7:5E:18:82:53 X509v3 Authority Key Identifier: keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:81:bf:22:83:19:78:53:dc:9b:76:44:1d:bb:ce:df:b9:55: 52:38:ee:0e:82:bc:fd:c1:72:19:18:66:7c:a3:65:d6:d9:4c: c2:f6:3d:72:20:21:1f:32:74:d4:35:fe:44:0f:ca:d9:0b:3b: 29:f2:39:19:26:16:ac:4f:b8:67:73:68:03:1e:6a:fd:6b:79: 8e:8f:7e:e3:30:a9:c3:88:93:a6:4e:d3:f3:ee:41:a4:e8:9c: b2:db:45:51:8f:1b:56:7e:7b:a0:5b:eb:ff:bd:bc:70:5f:15: d0:d4:de:75:d1:02:70:e9:c3:87:e8:59:09:68:2a:40:8a:1f: c5:40:fd:d1:cf:de:12:ac:a7:34:85:39:e2:80:3b:0b:f6:75: a7:c7:c9:a9:61:95:f3:02:f6:b9:e2:57:35:35:72:40:5d:7e: d5:c1:e9:12:e1:79:e9:2a:73:ea:31:2a:1d:a0:c8:e5:f5:95: bf:11:ba:61:ed:84:f1:74:ff:11:6f:8c:80:d1:b4:7a:42:1c: e7:25:d9:bc:f7:8d:9e:8e:68:c4:53:c1:cd:2b:ad:05:bf:a4: c2:d9:a6:07:ef:6e:6a:64:30:9b:c0:54:97:c3:3b:ae:e5:ec: 8e:49:2f:1e:ff:fb:7b:f5:39:67:94:e4:5f:c8:51:d2:02:67: 7b:13:85:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbXVCGUOIK/kzl4TNPaKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGI2M2QxOWQ4NmVhMzQ1YzliNWYxNjkzMDBjM2EyOWQ0 YzMxYzQwHhcNMjUxMjIxMTUwMDUxWhcNMjUxMjIyMTUwMDUxWjAzMTEwLwYDVQQD Eyg1MDMyYTM5MDYyM2EzNTQ4YjIyY2U1ZDM2YzU0NDVjNzVlMTg4MjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXY0prLJWO7tIqMYHw/ItmcxGiID C/Ux19z3EKHrNU8MZZaM8obOacv0bgyRQMSR9i2UfKpYoL/01wrRKKnTyb6lsWfU tXnNRZiJWOrcSrom014ogTaJTsecUMkclwbyorByZPj46WulC12s3QR7nh4kiJNY LQaf9vWi28PyYzGKZ932GcCmraecj61SAFdzx0uP6t+v0IUFT4cqw7iGV9gR9gsi qD9zd12ujaCzZ/ixc4+1LEXan0S0d0AypgcP4jAzMcXCBs0evYpLgY/f8xrrQgSH guarZGvo+o4TeSO/S4JhPZhVvxvUqyUUhnTSDsGYUN3QxSKYAblAJ7xvFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAyo5BiOjVIsizl02xURcdeGIJTMB8GA1UdIwQY MBaAFFQLY9Gdhuo0XJtfFpMAw6KdTDHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWIt MDAwNGIyNzQ2MzBiLzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWItMDAwNGIyNzQ2MzBi LzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4G/IoMZ eFPcm3ZEHbvO37lVUjjuDoK8/cFyGRhmfKNl1tlMwvY9ciAhHzJ01DX+RA/K2Qs7 KfI5GSYWrE+4Z3NoAx5q/Wt5jo9+4zCpw4iTpk7T8+5BpOicsttFUY8bVn57oFvr /728cF8V0NTeddECcOnDh+hZCWgqQIofxUD90c/eEqynNIU54oA7C/Z1p8fJqWGV 8wL2ueJXNTVyQF1+1cHpEuF56Spz6jEqHaDI5fWVvxG6Ye2E8XT/EW+MgNG0ekIc 5yXZvPeNno5oxFPBzSutBb+kwtmmB+9uamQwm8BUl8M7ruXsjkkvHv/7e/U5Z5Tk X8hR0gJnexOFjg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:04:34 2025 by rpki-client