This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json) Hash identifier: V1GHyhZOzTadItzveqPLJKLDMD0pB2qho25LjqNHS+0= Subject key identifier: C1:46:76:57:C7:51:2F:48:96:6F:87:39:8F:DF:CA:98:8E:13:A6:DA Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720 Certificate serial: 019B3C0FE9824F236CA5D5312E57F63EB095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:00:34 +0000 Manifest this update: Sat 20 Dec 2025 14:00:34 +0000 Manifest next update: Sun 21 Dec 2025 14:00:34 +0000 Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=) 2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: cchwyuM+31M4PWU/R1CDUN6yrDB8Eb3JQ7zgyW6E0bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:e9:82:4f:23:6c:a5:d5:31:2e:57:f6:3e:b0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720 Validity Not Before: Dec 20 14:00:34 2025 GMT Not After : Dec 21 14:00:34 2025 GMT Subject: CN=c1467657c7512f48966f87398fdfca988e13a6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:ea:b5:5d:24:28:02:47:81:ad:83:1f:0d: 35:5d:4a:3c:61:de:d8:8e:b3:dd:5f:b3:55:9d:de: d8:b2:87:2e:15:6e:83:45:d1:1b:d6:e3:30:fb:f0: cc:a3:c5:67:67:d1:a7:ac:e3:d3:7b:94:4d:b2:a9: 2b:ad:3e:67:fc:aa:1a:58:23:0d:ce:de:e6:87:52: 7a:e8:1f:bf:dd:7e:38:73:83:ad:29:47:33:37:ae: 41:33:3d:58:93:39:40:20:e0:a1:5a:1b:af:31:b8: b8:74:73:7d:aa:cf:f2:61:c1:26:7a:a1:2a:04:63: 2e:ed:2e:eb:07:5c:90:82:4d:fa:35:d6:99:8b:40: b9:ff:03:db:1a:5c:e8:8c:b3:cb:63:7b:9c:b2:bc: 29:5f:11:1d:91:ca:ec:5a:b3:d6:3b:87:37:c5:58: ea:13:17:cd:ad:cc:63:45:cb:15:85:ed:61:67:7e: d5:0f:32:83:d3:a8:cb:78:a6:94:34:7e:d1:24:ef: 88:c1:71:77:d0:0b:ba:71:01:65:03:23:c6:af:15: a9:88:6a:7c:87:56:87:d9:2f:61:4f:2f:5e:61:1c: 91:fa:34:dd:6f:e7:02:13:b5:74:3a:f2:69:57:d6: 7e:40:04:4c:4f:d1:c6:77:ab:fa:13:a9:26:0b:4d: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:46:76:57:C7:51:2F:48:96:6F:87:39:8F:DF:CA:98:8E:13:A6:DA X509v3 Authority Key Identifier: keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:04:70:30:05:dc:4b:2a:94:d9:e5:c4:66:0a:a1:57:d1:dd: d2:b1:c7:87:bb:21:d4:23:71:90:b7:87:04:8b:e2:b3:bb:35: db:9e:92:e2:7a:ad:41:1c:c3:0f:e2:52:b8:99:b1:55:4c:82: 6f:7f:fa:05:2c:7e:fc:45:72:e1:90:2e:62:4e:0a:15:02:2f: 48:5e:82:32:e9:31:f8:84:b0:82:42:02:63:d3:ff:73:38:5a: 71:17:ca:ea:b9:0e:20:c1:5d:bb:a5:c2:b9:3d:b1:a9:3d:16: f3:ce:92:4e:40:db:6f:62:fc:64:b9:16:00:83:e4:aa:16:27: f7:6e:3f:eb:e1:e9:54:b4:7e:4c:64:97:e4:42:84:28:80:2c: dd:7a:a7:df:46:bc:08:9f:80:22:53:12:65:03:04:27:27:4b: 1e:72:b8:d1:97:a8:e0:ef:ab:f9:bb:22:70:ca:b1:ce:29:ef: fb:11:b3:a9:0a:d2:fe:6f:81:61:4f:dc:6c:aa:0f:ee:4b:4e: d9:dd:6c:f7:6a:f5:c5:82:e7:21:2e:31:bd:76:15:ab:43:ea: fe:a0:44:5b:99:5d:ba:db:7f:02:0a:e5:2f:d9:ed:ff:ee:cf: 9f:fb:90:9a:49:33:dd:fc:4c:a7:49:2e:b8:1a:54:1e:3e:a0: 84:3a:bb:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+mCTyNspdUxLlf2PrCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjg1ZmZlZTk3MzEyYzUxYzNhODA1ZmY5MzQwZWJlYzMz NTI3MjAwHhcNMjUxMjIwMTQwMDM0WhcNMjUxMjIxMTQwMDM0WjAzMTEwLwYDVQQD EyhjMTQ2NzY1N2M3NTEyZjQ4OTY2Zjg3Mzk4ZmRmY2E5ODhlMTNhNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqHqtV0kKAJHga2DHw01XUo8Yd7Y jrPdX7NVnd7YsocuFW6DRdEb1uMw+/DMo8VnZ9GnrOPTe5RNsqkrrT5n/KoaWCMN zt7mh1J66B+/3X44c4OtKUczN65BMz1YkzlAIOChWhuvMbi4dHN9qs/yYcEmeqEq BGMu7S7rB1yQgk36NdaZi0C5/wPbGlzojLPLY3ucsrwpXxEdkcrsWrPWO4c3xVjq ExfNrcxjRcsVhe1hZ37VDzKD06jLeKaUNH7RJO+IwXF30Au6cQFlAyPGrxWpiGp8 h1aH2S9hTy9eYRyR+jTdb+cCE7V0OvJpV9Z+QARMT9HGd6v6E6kmC001fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFGdlfHUS9Ilm+HOY/fypiOE6baMB8GA1UdIwQY MBaAFFQoX/7pcxLFHDqAX/k0Dr7DNScgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjIt OGE3ZTYzZThjZDc1LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjItOGE3ZTYzZThjZDc1 LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0QRwMAXc SyqU2eXEZgqhV9Hd0rHHh7sh1CNxkLeHBIvis7s1256S4nqtQRzDD+JSuJmxVUyC b3/6BSx+/EVy4ZAuYk4KFQIvSF6CMukx+ISwgkICY9P/czhacRfK6rkOIMFdu6XC uT2xqT0W886STkDbb2L8ZLkWAIPkqhYn924/6+HpVLR+TGSX5EKEKIAs3Xqn30a8 CJ+AIlMSZQMEJydLHnK40Zeo4O+r+bsicMqxzinv+xGzqQrS/m+BYU/cbKoP7ktO 2d1s92r1xYLnIS4xvXYVq0Pq/qBEW5ldutt/AgrlL9nt/+7Pn/uQmkkz3fxMp0ku uBpUHj6ghDq7fg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:42 2025 by rpki-client