This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json) Hash identifier: 8Sv/Prdoz6Ei6w/Kz8xqI5fuoWZfEOl/CfnJFxObr4M= Subject key identifier: EE:C0:B5:76:6A:F9:1E:99:CC:0B:FF:E2:AC:74:5B:EB:B9:97:87:E5 Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5 Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5 Certificate serial: 019B2B1D0DB0EB5EF39DCEFA1CE74E48AC92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft Manifest number: 0C00 Signing time: Wed 17 Dec 2025 07:01:22 +0000 Manifest this update: Wed 17 Dec 2025 07:01:22 +0000 Manifest next update: Thu 18 Dec 2025 07:01:22 +0000 Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: 5LuT1zR1atHuQbqc/FUqfbjv8JQ22ytWmtE6OiDhO8U=) 2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:0d:b0:eb:5e:f3:9d:ce:fa:1c:e7:4e:48:ac:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5 Validity Not Before: Dec 17 07:01:22 2025 GMT Not After : Dec 18 07:01:22 2025 GMT Subject: CN=eec0b5766af91e99cc0bffe2ac745bebb99787e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:7c:ae:b3:d7:5c:48:25:26:3b:79:b3:a9: 3b:c8:fd:60:13:0e:25:e8:5b:22:4f:65:91:89:de: c2:11:e0:ec:ef:ed:5a:46:39:56:c2:bc:f1:a0:55: b3:41:a8:31:05:f3:e6:74:5a:fb:98:d5:37:86:2a: bc:27:46:bd:9b:08:a8:81:1c:06:9f:f6:ae:00:0a: fb:7d:1b:35:0d:58:bb:01:9e:41:37:99:4b:d8:cd: 5a:7d:98:62:15:55:d0:f3:36:fe:44:72:2a:b8:9f: 00:a9:0d:4a:53:97:e2:7c:29:00:46:3e:7d:18:7e: fc:07:2a:26:8e:de:75:a9:e5:4c:47:f0:39:32:2b: 87:74:fe:57:34:e4:bb:8c:d6:71:f7:c7:3f:e0:55: ac:79:7e:5e:00:2a:dc:7b:cc:85:13:53:1c:4b:a1: 73:05:8f:7e:05:53:c3:35:d2:5a:3a:ca:b4:fe:6b: 5c:d8:ac:10:7d:fa:b9:10:34:7f:c6:f3:2b:e6:67: b7:22:f9:0e:85:f9:48:7d:90:9a:93:2a:82:e3:2d: 31:76:b8:60:dd:8a:e6:cf:bf:5e:a4:b0:cb:ea:e4: f1:0d:6d:28:7c:ba:73:44:5f:f9:68:52:d9:9c:e0: 71:40:83:f6:3d:a6:4a:09:d0:a3:47:68:d5:04:94: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C0:B5:76:6A:F9:1E:99:CC:0B:FF:E2:AC:74:5B:EB:B9:97:87:E5 X509v3 Authority Key Identifier: keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:58:6f:95:d7:30:6d:0b:45:65:e0:42:40:51:b5:c1:11:86: 56:00:2d:b3:b6:09:2c:58:9c:07:cb:52:98:82:24:03:83:a4: 9d:1f:6f:1f:b8:ca:db:d3:a3:f9:5c:25:70:31:78:cc:05:62: bb:21:c4:ca:27:ac:7f:fc:85:9b:d6:1e:d0:1b:d1:aa:c4:c1: 87:ef:18:76:98:d2:20:92:23:4c:49:07:bc:46:09:0a:95:e0: 21:e5:3f:ff:6a:d0:19:78:34:22:15:30:df:e3:31:4e:a9:11: 72:88:fc:c5:21:b5:2b:79:3f:07:ef:94:4c:d6:2f:af:24:1c: 8a:4a:d0:c0:8d:ef:e5:fc:55:67:56:92:c1:01:fe:45:ed:28: 2a:ef:88:50:24:33:e5:8b:a8:71:2a:34:fc:7a:99:1d:1a:97: 4d:ba:f1:56:4f:95:ae:d5:54:c8:ed:de:15:e6:e6:78:43:29: 2e:ac:da:5b:97:bd:ef:0e:78:2f:3d:37:80:a5:86:7e:45:59: a3:b9:26:6f:b8:e3:c6:45:8b:81:65:e1:79:51:8f:3b:6c:13: 4c:91:05:50:4f:f1:c6:92:a6:c9:24:f6:ad:be:e6:9b:d4:6c: 1a:2c:fd:0f:ed:6d:c7:c1:7a:8a:bd:d4:41:6d:db:b8:b3:be: d3:ba:84:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHQ2w617znc76HOdOSKySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZjQyZGJhNTFlYzI4MzVkM2U0ZDBhM2Q4YzQ4YmYzMjJm NmJkYjUwHhcNMjUxMjE3MDcwMTIyWhcNMjUxMjE4MDcwMTIyWjAzMTEwLwYDVQQD EyhlZWMwYjU3NjZhZjkxZTk5Y2MwYmZmZTJhYzc0NWJlYmI5OTc4N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKZ8rrPXXEglJjt5s6k7yP1gEw4l 6FsiT2WRid7CEeDs7+1aRjlWwrzxoFWzQagxBfPmdFr7mNU3hiq8J0a9mwiogRwG n/auAAr7fRs1DVi7AZ5BN5lL2M1afZhiFVXQ8zb+RHIquJ8AqQ1KU5fifCkARj59 GH78Byomjt51qeVMR/A5MiuHdP5XNOS7jNZx98c/4FWseX5eACrce8yFE1McS6Fz BY9+BVPDNdJaOsq0/mtc2KwQffq5EDR/xvMr5me3IvkOhflIfZCakyqC4y0xdrhg 3Yrmz79epLDL6uTxDW0ofLpzRF/5aFLZnOBxQIP2PaZKCdCjR2jVBJQOyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7AtXZq+R6ZzAv/4qx0W+u5l4flMB8GA1UdIwQY MBaAFFT0LbpR7Cg10+TQo9jEi/Mi9r21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgt YTI0ZmFiZjU2ZGFkLzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgtYTI0ZmFiZjU2ZGFk LzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1hvldcw bQtFZeBCQFG1wRGGVgAts7YJLFicB8tSmIIkA4OknR9vH7jK29Oj+VwlcDF4zAVi uyHEyiesf/yFm9Ye0BvRqsTBh+8YdpjSIJIjTEkHvEYJCpXgIeU//2rQGXg0IhUw 3+MxTqkRcoj8xSG1K3k/B++UTNYvryQcikrQwI3v5fxVZ1aSwQH+Re0oKu+IUCQz 5YuocSo0/HqZHRqXTbrxVk+VrtVUyO3eFebmeEMpLqzaW5e97w54Lz03gKWGfkVZ o7kmb7jjxkWLgWXheVGPO2wTTJEFUE/xxpKmyST2rb7mm9RsGiz9D+1tx8F6ir3U QW3buLO+07qETg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:46:07 2025 by rpki-client