This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json) Hash identifier: 0KCA3Br86/q95mYWRvCws0xu1Tc9UFwy+OTw2RojD2s= Subject key identifier: B6:11:72:88:5D:66:7F:72:40:65:D4:65:62:78:3C:B6:D8:FD:C3:CE Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720 Certificate serial: 019AF49BAE9435E16D98E9E0F9058CAE0EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=) 2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: OEhVmcc0p4BiqMJrbcL0waqJmN+hacr6qH5W9O3ILWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ae:94:35:e1:6d:98:e9:e0:f9:05:8c:ae:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720 Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=b61172885d667f724065d46562783cb6d8fdc3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:ad:e5:f5:47:5c:8c:43:ed:f8:8c:66:e6: 87:f3:d8:51:54:4d:b1:a8:8f:8f:bf:41:c4:7a:9e: 99:e2:e5:96:a9:de:d7:b3:f0:9a:72:2e:da:e5:0d: ce:0e:d7:b1:d1:8f:5b:07:4f:68:15:97:84:07:f1: 88:5b:4b:55:60:73:55:91:f4:13:4b:e2:6d:54:d9: 4e:37:f4:55:05:11:10:bc:bd:a1:15:79:a8:50:c3: 59:16:ca:ad:ea:e2:12:83:87:d6:94:82:6d:f4:00: d6:e4:c6:5c:e4:72:dd:ec:dd:44:35:96:23:92:13: df:d4:5e:3b:65:1f:22:d0:b4:db:84:eb:ad:d5:5d: af:cc:38:ef:11:dc:3d:4b:01:d3:a2:55:12:59:27: 5a:1d:6a:38:f5:c1:d2:fb:f3:04:2b:36:de:44:7b: c0:62:85:3b:d6:e1:62:90:8c:e0:28:08:0a:71:bc: 29:ff:cc:93:57:b6:27:34:d9:be:b4:b2:a5:6c:0a: 29:e4:6f:78:de:a7:72:7f:1e:cf:fa:b4:3c:a9:ff: 1c:0d:fe:14:ab:35:7a:a9:65:39:06:a8:c5:07:3a: 29:f6:b1:2a:d6:0d:e5:41:cd:c9:b4:3a:f0:b5:dd: 21:6d:8a:8d:b0:88:7d:9b:b3:2c:e3:a4:6a:91:ac: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:11:72:88:5D:66:7F:72:40:65:D4:65:62:78:3C:B6:D8:FD:C3:CE X509v3 Authority Key Identifier: keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d5:87:b2:7f:d3:08:20:83:65:8b:62:bc:13:1b:77:81:af: b6:60:52:ff:fe:5a:c2:70:d6:62:31:16:0f:30:f2:e1:55:e4: 0e:7e:5d:48:7c:8d:43:44:a2:d5:79:04:c6:ec:94:99:f7:71: a8:46:cf:85:d8:f9:ff:24:6d:35:eb:93:45:cb:2a:61:ed:c7: 9a:f6:d7:35:61:22:ab:b9:67:6f:ac:d4:18:02:b6:3f:d2:7b: 00:6c:0b:61:7b:ea:c2:bc:26:fe:03:c9:06:05:06:3a:05:56: a0:40:22:13:d2:46:f9:2c:08:92:8c:70:65:c8:32:cd:87:fb: 04:a4:5a:b5:32:4d:b6:f7:80:18:37:4c:fb:01:9a:ed:58:52: fb:61:48:88:88:92:4b:39:4a:8f:da:ba:30:ca:c6:89:1c:8c: 59:fa:9b:ba:3c:af:27:48:d5:b3:01:99:9e:7d:53:59:c7:c3: ca:80:4a:bb:2d:8c:ab:b2:a4:06:53:45:51:d9:c9:38:31:22: 7e:60:c6:f1:0a:83:f9:e4:3b:1a:7f:d3:48:4c:3c:21:0b:04: b8:ab:2d:b7:fa:83:6f:d5:47:3e:a4:52:d8:7d:d1:69:36:fa: 79:8d:a3:91:73:8c:de:da:22:75:b3:0a:a1:c2:3e:2c:c4:35: eb:43:9c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m66UNeFtmOng+QWMrg6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjg1ZmZlZTk3MzEyYzUxYzNhODA1ZmY5MzQwZWJlYzMz NTI3MjAwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD EyhiNjExNzI4ODVkNjY3ZjcyNDA2NWQ0NjU2Mjc4M2NiNmQ4ZmRjM2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreut5fVHXIxD7fiMZuaH89hRVE2x qI+Pv0HEep6Z4uWWqd7Xs/Caci7a5Q3ODtex0Y9bB09oFZeEB/GIW0tVYHNVkfQT S+JtVNlON/RVBREQvL2hFXmoUMNZFsqt6uISg4fWlIJt9ADW5MZc5HLd7N1ENZYj khPf1F47ZR8i0LTbhOut1V2vzDjvEdw9SwHTolUSWSdaHWo49cHS+/MEKzbeRHvA YoU71uFikIzgKAgKcbwp/8yTV7YnNNm+tLKlbAop5G943qdyfx7P+rQ8qf8cDf4U qzV6qWU5BqjFBzop9rEq1g3lQc3JtDrwtd0hbYqNsIh9m7Ms46Rqkay/dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYRcohdZn9yQGXUZWJ4PLbY/cPOMB8GA1UdIwQY MBaAFFQoX/7pcxLFHDqAX/k0Dr7DNScgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjIt OGE3ZTYzZThjZDc1LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjItOGE3ZTYzZThjZDc1 LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtWHsn/T CCCDZYtivBMbd4GvtmBS//5awnDWYjEWDzDy4VXkDn5dSHyNQ0Si1XkExuyUmfdx qEbPhdj5/yRtNeuTRcsqYe3HmvbXNWEiq7lnb6zUGAK2P9J7AGwLYXvqwrwm/gPJ BgUGOgVWoEAiE9JG+SwIkoxwZcgyzYf7BKRatTJNtveAGDdM+wGa7VhS+2FIiIiS SzlKj9q6MMrGiRyMWfqbujyvJ0jVswGZnn1TWcfDyoBKuy2Mq7KkBlNFUdnJODEi fmDG8QqD+eQ7Gn/TSEw8IQsEuKstt/qDb9VHPqRS2H3RaTb6eY2jkXOM3toidbMK ocI+LMQ160OcZA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:38 2025 by rpki-client