This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft File: VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft (raw, json) Hash identifier: f1T7VKZuWJW9j8Ouf1MUrh1CE0CGrkAlNyLQen5znTQ= Subject key identifier: B3:AA:CA:D8:0E:2C:4F:8A:C6:97:BB:9D:15:70:D6:0C:F2:52:85:78 Authority key identifier: 54:3D:02:17:97:41:37:2E:18:28:11:E1:85:2D:58:4E:FD:CF:7B:A2 Certificate issuer: /CN=543d02179741372e182811e1852d584efdcf7ba2 Certificate serial: 019AF1D1F55C6A8317A65521871676E18D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft Manifest number: C0 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: 8ACVm-ce43MmeBVev4dyWlkx0NY.roa (hash: +7/RIUg9QZFa+udK/mANETDLIR4ZdvLXsBeIxkf5Veg=) 2: VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl (hash: XaO64fgbHpbW5lt7iXj/MK0RWc17tjJiPTLAcH6SDQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f5:5c:6a:83:17:a6:55:21:87:16:76:e1:8d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543d02179741372e182811e1852d584efdcf7ba2 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=b3aacad80e2c4f8ac697bb9d1570d60cf2528578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:1e:89:1e:13:77:d1:db:3d:14:f0:44:98: f9:f5:39:b1:ef:08:32:07:d5:50:c5:cb:21:b3:d9: 90:1d:a5:8c:ad:66:9d:cb:5f:df:ec:b5:7d:49:b6: c9:13:0c:71:06:3b:27:45:7c:e2:58:1c:b1:a4:ac: a7:9a:04:0a:f4:0e:1f:b0:78:90:e9:37:93:47:57: 9f:0f:54:f7:cc:b9:c9:36:33:db:11:db:70:64:c7: 40:cf:73:ef:7a:0a:a5:d6:1c:b4:b6:2e:4a:55:ec: 19:99:e2:fc:14:b6:fd:2c:83:7e:c0:1b:7b:fe:49: f8:bf:9d:e1:93:f8:df:3d:41:2c:81:e5:6d:c6:4c: 3a:0f:ea:3d:b8:f9:89:34:71:be:a5:f8:df:92:22: 49:88:c8:3a:0b:d5:d3:65:2f:ae:b3:c7:52:f1:2e: 47:30:df:4d:98:66:aa:68:a6:4a:a3:8f:0d:b8:b5: d2:4b:84:c1:71:5e:d3:cd:f8:4a:68:14:46:83:88: a6:91:bb:05:04:a0:a2:e4:f3:71:85:b3:10:22:c5: b3:ec:40:4c:14:2c:4a:67:d0:d1:ef:8b:41:4b:d4: 61:03:e2:a6:36:22:93:b7:b3:0d:90:d1:4a:0a:ce: ff:e3:d1:f2:48:1a:33:d8:e1:91:fa:0d:d8:16:aa: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AA:CA:D8:0E:2C:4F:8A:C6:97:BB:9D:15:70:D6:0C:F2:52:85:78 X509v3 Authority Key Identifier: keyid:54:3D:02:17:97:41:37:2E:18:28:11:E1:85:2D:58:4E:FD:CF:7B:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6df87-dd55-466c-8b6c-cd598e8b2d45/1/VD0CF5dBNy4YKBHhhS1YTv3Pe6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:42:aa:fb:c9:f8:d3:c3:42:d3:ae:16:a9:3f:d8:bc:39:30: e6:ae:b2:4e:d2:2e:ab:d4:4b:69:03:b1:0f:e8:25:4e:57:e6: bf:fd:c1:30:d4:bc:03:e5:68:61:ae:23:64:de:df:e9:f0:6b: 2a:d8:a2:09:5b:65:37:6e:5f:1a:e1:8f:e8:e4:04:65:89:68: 3c:0e:9f:6e:ce:88:61:0b:b0:94:bc:ef:a3:98:3f:c9:69:1c: c6:a2:c7:73:cb:1a:a4:8b:e2:0a:e2:29:67:75:e1:8f:46:30: 09:a2:1a:7f:31:09:e0:29:ec:9f:b1:72:2d:81:ac:6e:c9:f7: a2:81:66:4b:ee:74:3a:83:13:b5:65:6a:c8:8c:cc:bb:4d:bc: 3c:c4:ad:e4:fa:05:bf:bc:0b:88:bb:98:33:23:58:17:59:bd: 90:ec:9c:0d:b2:c0:bb:6e:8a:82:c5:3a:62:b7:cf:88:f5:7a: 1e:d8:80:9d:ec:f8:a4:dc:50:d2:46:63:22:79:ae:5b:a2:11: fb:2b:8b:78:34:69:f5:b2:87:12:a1:5f:06:0b:2c:43:a5:25: a5:e0:73:6c:c4:7b:41:4a:3a:ec:c1:f3:1b:d1:ee:59:fd:a8: 45:7c:76:5f:62:9e:db:2b:60:28:4c:3d:54:92:3d:3d:1a:af: 56:54:21:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fVcaoMXplUhhxZ24Y1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2QwMjE3OTc0MTM3MmUxODI4MTFlMTg1MmQ1ODRlZmRj ZjdiYTIwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EyhiM2FhY2FkODBlMmM0ZjhhYzY5N2JiOWQxNTcwZDYwY2YyNTI4NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOceiR4Td9HbPRTwRJj59Tmx7wgy B9VQxcshs9mQHaWMrWady1/f7LV9SbbJEwxxBjsnRXziWByxpKynmgQK9A4fsHiQ 6TeTR1efD1T3zLnJNjPbEdtwZMdAz3Pvegql1hy0ti5KVewZmeL8FLb9LIN+wBt7 /kn4v53hk/jfPUEsgeVtxkw6D+o9uPmJNHG+pfjfkiJJiMg6C9XTZS+us8dS8S5H MN9NmGaqaKZKo48NuLXSS4TBcV7TzfhKaBRGg4imkbsFBKCi5PNxhbMQIsWz7EBM FCxKZ9DR74tBS9RhA+KmNiKTt7MNkNFKCs7/49HySBoz2OGR+g3YFqpjdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOqytgOLE+Kxpe7nRVw1gzyUoV4MB8GA1UdIwQY MBaAFFQ9AheXQTcuGCgR4YUtWE79z3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkQwQ0Y1ZEJOeTRZS0JIaGhTMVlUdjNQZTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jNmRmODctZGQ1NS00NjZjLThiNmMt Y2Q1OThlOGIyZDQ1LzEvVkQwQ0Y1ZEJOeTRZS0JIaGhTMVlUdjNQZTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jNmRmODctZGQ1NS00NjZjLThiNmMtY2Q1OThlOGIyZDQ1 LzEvVkQwQ0Y1ZEJOeTRZS0JIaGhTMVlUdjNQZTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUKq+8n4 08NC064WqT/YvDkw5q6yTtIuq9RLaQOxD+glTlfmv/3BMNS8A+VoYa4jZN7f6fBr KtiiCVtlN25fGuGP6OQEZYloPA6fbs6IYQuwlLzvo5g/yWkcxqLHc8sapIviCuIp Z3Xhj0YwCaIafzEJ4Cnsn7FyLYGsbsn3ooFmS+50OoMTtWVqyIzMu028PMSt5PoF v7wLiLuYMyNYF1m9kOycDbLAu26KgsU6YrfPiPV6HtiAnez4pNxQ0kZjInmuW6IR +yuLeDRp9bKHEqFfBgssQ6UlpeBzbMR7QUo67MHzG9HuWf2oRXx2X2Ke2ytgKEw9 VJI9PRqvVlQhMA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:37 2025 by rpki-client