This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json) Hash identifier: ksGnt3mDNIsynlCg/8RQH4z5WgEewieIl1z8Fy+KS88= Subject key identifier: AD:89:6D:CA:36:C4:4F:58:83:EC:42:11:03:1F:B5:E6:0A:80:F0:4E Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61 Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461 Certificate serial: 019B2C2F368E4151F19B6566664427AD82EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft Manifest number: 0A83 Signing time: Wed 17 Dec 2025 12:00:50 +0000 Manifest this update: Wed 17 Dec 2025 12:00:50 +0000 Manifest next update: Thu 18 Dec 2025 12:00:50 +0000 Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: BAZcSBKHramh3mXZV6WUe64ui53Y7Cv86wMd6JeSvFA=) 2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:36:8e:41:51:f1:9b:65:66:66:44:27:ad:82:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54913026f079cda241aef4514fd353c28330e461 Validity Not Before: Dec 17 12:00:50 2025 GMT Not After : Dec 18 12:00:50 2025 GMT Subject: CN=ad896dca36c44f5883ec4211031fb5e60a80f04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:9b:ed:c5:0e:1e:c1:5b:71:f6:51:a1:1b: 19:d5:ec:81:83:93:d7:e5:54:2a:b5:55:47:d6:bb: 0b:f3:4d:b2:ed:24:a1:50:5c:dc:f3:d6:49:99:48: 01:64:5a:8b:e7:72:33:19:ee:32:13:5d:e1:9a:83: b6:34:11:17:01:1e:71:17:13:4a:f3:eb:cc:cc:38: b4:45:08:5e:08:ec:c3:b4:37:ac:30:ab:d3:b9:7f: 24:19:81:80:e4:03:43:31:bd:24:84:48:0d:10:2a: a5:db:b5:2e:3d:a6:c6:a9:3d:fb:7d:55:3f:54:47: 18:50:a8:62:96:b9:48:24:0f:bc:0a:ae:da:3e:66: f8:48:9a:85:01:20:0d:ff:7d:82:d1:d0:bf:b0:69: c3:16:4c:a6:1f:d6:64:5b:de:d2:f1:85:c3:9e:83: 71:9c:8b:c9:bb:1f:2b:b9:9d:76:5a:ea:8f:5f:2b: af:1f:a6:a2:f0:28:d3:c2:2b:5b:66:06:59:59:20: c9:86:7f:1d:f3:e9:33:90:3c:62:c6:4d:d1:e1:e3: e3:7c:05:44:68:c3:91:fa:e4:f3:4f:28:79:ee:47: e6:fc:52:a6:80:07:3f:99:54:0b:9e:b4:e8:bc:e0: 26:6d:5c:05:5c:f0:45:27:2c:d0:bb:08:1c:60:f8: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:89:6D:CA:36:C4:4F:58:83:EC:42:11:03:1F:B5:E6:0A:80:F0:4E X509v3 Authority Key Identifier: keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a8:c3:19:86:ba:ff:34:bb:4f:99:fe:f1:3f:33:6d:d6:86: 60:a5:b6:8a:65:28:29:61:6f:4f:3b:79:1e:50:8d:83:08:9f: a2:20:7a:98:7c:1c:12:5f:9f:74:59:01:6d:27:24:bc:3f:91: ed:2e:4c:4a:7a:fb:35:97:12:f2:e9:1f:1a:4f:36:83:bb:ac: 27:ff:9e:dd:43:c4:87:c2:a4:d1:ad:f3:31:b4:98:43:1b:51: 4a:75:7a:5c:e6:39:50:b3:f4:3e:38:1a:70:17:8b:5c:00:53: 75:7d:26:9c:66:1c:a9:e4:dd:5b:05:56:05:c8:20:b6:2b:7f: dd:7c:f7:8a:55:1f:c9:dd:44:30:de:d0:f5:82:ba:e3:e3:c9: ac:2b:1b:4b:6d:34:d3:d9:46:af:1d:be:ad:92:e0:aa:6b:5a: 64:37:ec:f1:7c:97:46:1f:74:6e:b5:bb:4e:49:2e:f7:2b:e0: 51:97:6b:98:f0:eb:e0:af:d1:9f:d2:a0:b1:e5:45:06:d1:28: a7:d5:0d:80:c4:5f:51:64:74:9d:9e:23:a2:0e:d7:e3:26:12: 2b:12:73:e3:f3:86:bc:1e:0f:4c:4d:8a:67:ac:eb:eb:ea:74: 68:ce:d0:d9:0c:07:17:99:3c:9e:d9:7c:89:05:c0:34:b4:b8: f4:b3:03:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLzaOQVHxm2VmZkQnrYLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OTEzMDI2ZjA3OWNkYTI0MWFlZjQ1MTRmZDM1M2MyODMz MGU0NjEwHhcNMjUxMjE3MTIwMDUwWhcNMjUxMjE4MTIwMDUwWjAzMTEwLwYDVQQD EyhhZDg5NmRjYTM2YzQ0ZjU4ODNlYzQyMTEwMzFmYjVlNjBhODBmMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUab7cUOHsFbcfZRoRsZ1eyBg5PX 5VQqtVVH1rsL802y7SShUFzc89ZJmUgBZFqL53IzGe4yE13hmoO2NBEXAR5xFxNK 8+vMzDi0RQheCOzDtDesMKvTuX8kGYGA5ANDMb0khEgNECql27UuPabGqT37fVU/ VEcYUKhilrlIJA+8Cq7aPmb4SJqFASAN/32C0dC/sGnDFkymH9ZkW97S8YXDnoNx nIvJux8ruZ12WuqPXyuvH6ai8CjTwitbZgZZWSDJhn8d8+kzkDxixk3R4ePjfAVE aMOR+uTzTyh57kfm/FKmgAc/mVQLnrTovOAmbVwFXPBFJyzQuwgcYPh6kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2Jbco2xE9Yg+xCEQMfteYKgPBOMB8GA1UdIwQY MBaAFFSRMCbwec2iQa70UU/TU8KDMORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZjYzZGYtYjZmNy00ZDQyLWE5YTkt MWE3Njc4NGEwYTIxLzEvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZjYzZGYtYjZmNy00ZDQyLWE5YTktMWE3Njc4NGEwYTIx LzEvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6jDGYa6 /zS7T5n+8T8zbdaGYKW2imUoKWFvTzt5HlCNgwifoiB6mHwcEl+fdFkBbSckvD+R 7S5MSnr7NZcS8ukfGk82g7usJ/+e3UPEh8Kk0a3zMbSYQxtRSnV6XOY5ULP0Pjga cBeLXABTdX0mnGYcqeTdWwVWBcggtit/3Xz3ilUfyd1EMN7Q9YK64+PJrCsbS200 09lGrx2+rZLgqmtaZDfs8XyXRh90brW7Tkku9yvgUZdrmPDr4K/Rn9KgseVFBtEo p9UNgMRfUWR0nZ4jog7X4yYSKxJz4/OGvB4PTE2KZ6zr6+p0aM7Q2QwHF5k8ntl8 iQXANLS49LMD6Q== -----END CERTIFICATE-----Generated at Wed Dec 17 21:39:25 2025 by rpki-client