This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json) Hash identifier: /QxeKepEZvrL7jUuB2Rt0hb97cliHumYsFj2LiiCSwY= Subject key identifier: AA:32:38:52:2D:1C:BD:5F:71:72:96:C7:77:E5:DE:C4:F5:AE:C2:C0 Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3 Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3 Certificate serial: 019B3D5A84F24A662AEFA516D3381BE74724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft Manifest number: 03F1 Signing time: Sat 20 Dec 2025 20:01:40 +0000 Manifest this update: Sat 20 Dec 2025 20:01:40 +0000 Manifest next update: Sun 21 Dec 2025 20:01:40 +0000 Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=) 2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=) 3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: zkLYCMktUKwfr1Q0aAVb8D9RQhbRQP+GlqAtD7PQ7jQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:84:f2:4a:66:2a:ef:a5:16:d3:38:1b:e7:47:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3 Validity Not Before: Dec 20 20:01:40 2025 GMT Not After : Dec 21 20:01:40 2025 GMT Subject: CN=aa3238522d1cbd5f717296c777e5dec4f5aec2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e0:54:97:15:5f:13:16:d3:b2:01:f9:1e:3e: 0c:90:0b:58:9c:1f:55:34:04:f8:3b:f0:d2:64:10: de:63:37:cc:ef:57:17:2c:6c:9b:75:cb:85:83:9c: 5d:d7:a5:2e:31:f9:94:76:9c:62:e0:52:cb:04:42: 90:65:dd:a1:bf:ee:e8:14:f8:3a:63:d0:e2:0a:52: 44:f9:ae:97:96:43:59:24:01:6c:c4:35:d9:0d:34: c7:39:4e:c7:7a:5f:8b:f2:33:49:be:0c:0a:3a:94: 7b:c2:4d:02:48:6a:cd:61:d2:a3:b6:68:da:fd:cc: b3:6c:32:57:1a:9d:50:61:e6:9d:9c:d8:63:80:ea: 36:2f:ea:c3:68:08:c4:c3:a2:83:7a:08:48:99:5d: 3d:bb:0b:72:9b:e8:bb:cf:d2:2e:13:2b:d1:bb:d0: 94:6c:b7:59:58:be:6a:e6:8c:c1:48:5f:8e:e8:8b: 84:eb:dc:04:a9:a4:d5:4a:9c:e8:5d:de:48:62:8d: f5:63:3c:ae:72:09:9e:3a:30:7d:8c:77:37:bf:64: 98:d9:d3:ce:2d:5a:73:7a:f8:40:fd:f7:56:b6:dd: 40:3d:59:0d:1f:15:70:0b:50:47:79:a4:0f:cc:c0: 9e:b7:c3:ec:6b:0c:68:cd:62:e9:c5:00:1a:d1:5f: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:32:38:52:2D:1C:BD:5F:71:72:96:C7:77:E5:DE:C4:F5:AE:C2:C0 X509v3 Authority Key Identifier: keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:64:17:8b:49:a5:e0:56:92:92:42:66:3a:d7:f4:24:77:f8: c2:c9:a9:51:96:75:97:a4:f2:30:25:16:d8:79:38:a9:b0:4f: d2:be:d4:03:66:a8:ef:83:5a:c8:46:63:d7:b8:8e:69:9e:eb: b5:44:3c:2b:0b:bb:1a:b6:02:8b:68:45:db:10:e6:1b:17:1a: b8:b1:1c:bd:bb:d2:52:11:d6:16:5e:22:28:8f:2f:b1:da:0a: 00:e1:fd:21:f5:34:5d:bf:e1:a2:e7:60:d1:85:9c:c2:30:f4: ea:27:a2:35:59:19:23:41:28:51:60:0b:2b:16:29:c1:96:0b: ae:0b:5d:f3:1b:76:9a:38:ae:7f:c9:fe:fc:2d:90:69:98:92: cd:f4:35:d6:86:23:0a:46:e3:ae:ea:f2:f2:c9:68:c6:7c:fa: fe:06:3a:95:92:cb:75:bd:63:2c:0e:ad:75:95:a9:fb:db:c3: c1:74:a3:99:8c:b7:84:31:93:4f:38:10:9f:51:df:2f:04:6a: b3:f4:7a:f7:b9:f1:d9:cc:6d:b0:14:84:ab:6c:74:68:d2:e4: 3c:fc:f6:30:44:ff:23:c4:7a:38:d2:67:74:e7:c9:66:79:e0: b1:c8:34:56:84:d8:f9:26:64:11:ef:35:b8:ca:22:a7:d7:e1: 84:ed:33:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WoTySmYq76UW0zgb50ckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj ZDcyZjMwHhcNMjUxMjIwMjAwMTQwWhcNMjUxMjIxMjAwMTQwWjAzMTEwLwYDVQQD EyhhYTMyMzg1MjJkMWNiZDVmNzE3Mjk2Yzc3N2U1ZGVjNGY1YWVjMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uBUlxVfExbTsgH5Hj4MkAtYnB9V NAT4O/DSZBDeYzfM71cXLGybdcuFg5xd16UuMfmUdpxi4FLLBEKQZd2hv+7oFPg6 Y9DiClJE+a6XlkNZJAFsxDXZDTTHOU7Hel+L8jNJvgwKOpR7wk0CSGrNYdKjtmja /cyzbDJXGp1QYeadnNhjgOo2L+rDaAjEw6KDeghImV09uwtym+i7z9IuEyvRu9CU bLdZWL5q5ozBSF+O6IuE69wEqaTVSpzoXd5IYo31YzyucgmeOjB9jHc3v2SY2dPO LVpzevhA/fdWtt1APVkNHxVwC1BHeaQPzMCet8PsawxozWLpxQAa0V/lRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoyOFItHL1fcXKWx3fl3sT1rsLAMB8GA1UdIwQY MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2QXi0ml 4FaSkkJmOtf0JHf4wsmpUZZ1l6TyMCUW2Hk4qbBP0r7UA2ao74NayEZj17iOaZ7r tUQ8Kwu7GrYCi2hF2xDmGxcauLEcvbvSUhHWFl4iKI8vsdoKAOH9IfU0Xb/houdg 0YWcwjD06ieiNVkZI0EoUWALKxYpwZYLrgtd8xt2mjiuf8n+/C2QaZiSzfQ11oYj Ckbjrury8sloxnz6/gY6lZLLdb1jLA6tdZWp+9vDwXSjmYy3hDGTTzgQn1HfLwRq s/R697nx2cxtsBSEq2x0aNLkPPz2MET/I8R6ONJndOfJZnngscg0VoTY+SZkEe81 uMoip9fhhO0zXA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:49:24 2025 by rpki-client