This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft File: VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json) Hash identifier: r45xvCX9+HAli6CYGuftU/Ed47DoWzP2mjX1J0OcPqM= Subject key identifier: 9C:5A:D9:A1:79:14:CA:DB:DB:01:3F:A3:EF:8B:DD:92:55:7A:59:F5 Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09 Certificate issuer: /CN=54b42d5237be33fdcd36f05d949cc918e4972709 Certificate serial: 019B262D9F0F7A3A5F9AF1F31D95C5B5DB50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft Manifest number: 0558 Signing time: Tue 16 Dec 2025 08:01:22 +0000 Manifest this update: Tue 16 Dec 2025 08:01:22 +0000 Manifest next update: Wed 17 Dec 2025 08:01:22 +0000 Files and hashes: 1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: 2cLs/pMvqkdot/wLjbQrup/VcMpIodvcSjWOBNc2b2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:9f:0f:7a:3a:5f:9a:f1:f3:1d:95:c5:b5:db:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709 Validity Not Before: Dec 16 08:01:22 2025 GMT Not After : Dec 17 08:01:22 2025 GMT Subject: CN=9c5ad9a17914cadbdb013fa3ef8bdd92557a59f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:62:39:8f:4c:f5:6a:51:ef:30:50:fe:bb: 9f:71:fb:14:cc:b1:d9:83:9e:b9:57:8a:db:ae:ee: 4b:d7:b7:c5:4e:14:89:b8:ae:e8:e1:b8:6e:07:ec: d8:34:23:df:04:fa:18:bf:a7:57:df:6a:52:f3:1e: cb:2e:7f:28:84:a2:12:c2:b0:4f:d9:55:d0:31:d6: 29:a2:5e:b2:15:a6:83:62:dd:61:d6:2e:6c:e1:6c: 2f:c2:72:a8:72:e8:21:f7:fb:cf:7f:d8:46:61:db: 5d:67:20:c6:07:6f:1e:5c:25:0b:17:d8:c2:05:57: 43:e1:80:3f:6c:80:40:71:a9:00:25:b7:52:18:09: cb:b2:16:05:c4:2d:af:50:11:b5:1e:7c:77:32:5c: 44:77:91:27:75:32:b3:af:13:cf:4b:e8:1d:84:a8: 12:f6:a6:e8:21:11:27:a1:fa:58:8e:fe:0f:7d:a7: b6:88:01:c4:c1:e6:62:06:7c:5e:96:2d:b6:94:e2: e0:87:13:71:ac:f5:5a:e8:d8:55:af:c4:a6:97:f2: 23:dc:a9:db:08:f7:e9:1c:fe:e5:bb:0b:96:a8:07: 0a:e2:4a:06:f7:bf:40:b0:5b:8f:50:2b:2f:74:b6: f4:00:e5:91:6a:10:c7:62:ea:fb:a6:4f:e7:cc:64: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5A:D9:A1:79:14:CA:DB:DB:01:3F:A3:EF:8B:DD:92:55:7A:59:F5 X509v3 Authority Key Identifier: keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6c:37:c8:8b:06:b3:24:b8:3e:78:f2:49:11:a4:f7:8b:bd: d1:28:db:11:c3:a5:ee:9f:28:48:b9:c0:21:f0:c2:14:1a:cc: b6:99:3d:27:2e:22:a9:3d:b1:62:b7:8a:1a:09:bb:77:fc:83: f8:1b:cb:13:62:dc:c5:71:1d:6d:de:91:47:79:c6:82:7d:51: ef:f8:44:ee:91:20:92:55:e0:d9:87:aa:0e:11:72:4b:e7:5f: 9a:c5:24:d6:5e:45:db:35:d2:7b:bf:4e:9a:9f:9d:c3:cb:b7: 66:a5:7d:dc:94:16:70:ab:2d:87:c8:e2:ea:f2:a5:a9:01:77: 41:76:ca:4a:99:68:4f:a2:8c:06:b0:e3:43:eb:67:9f:c3:03: 45:62:e4:13:86:42:cc:36:37:d5:2f:84:81:d4:69:bb:05:d7: da:98:db:a8:11:33:73:1c:cf:bb:c0:1c:59:d3:2e:fa:ed:cd: 5b:a0:7c:fa:6f:44:ff:95:63:e1:53:73:7c:95:8e:3c:b8:31: c9:e3:69:f7:19:18:34:d7:db:65:ff:1a:c6:1c:09:97:fa:60: 1e:3d:fc:25:be:4d:ac:68:74:4c:54:94:18:e3:bb:5c:65:66: ca:67:a2:63:3f:e1:46:a5:38:68:00:f9:ea:89:5d:ed:b0:57: f1:38:1f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLZ8PejpfmvHzHZXFtdtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjQyZDUyMzdiZTMzZmRjZDM2ZjA1ZDk0OWNjOTE4ZTQ5 NzI3MDkwHhcNMjUxMjE2MDgwMTIyWhcNMjUxMjE3MDgwMTIyWjAzMTEwLwYDVQQD Eyg5YzVhZDlhMTc5MTRjYWRiZGIwMTNmYTNlZjhiZGQ5MjU1N2E1OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje9iOY9M9WpR7zBQ/rufcfsUzLHZ g565V4rbru5L17fFThSJuK7o4bhuB+zYNCPfBPoYv6dX32pS8x7LLn8ohKISwrBP 2VXQMdYpol6yFaaDYt1h1i5s4WwvwnKocugh9/vPf9hGYdtdZyDGB28eXCULF9jC BVdD4YA/bIBAcakAJbdSGAnLshYFxC2vUBG1Hnx3MlxEd5EndTKzrxPPS+gdhKgS 9qboIREnofpYjv4Pfae2iAHEweZiBnxeli22lOLghxNxrPVa6NhVr8Sml/Ij3Knb CPfpHP7luwuWqAcK4koG979AsFuPUCsvdLb0AOWRahDHYur7pk/nzGT/vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxa2aF5FMrb2wE/o++L3ZJVeln1MB8GA1UdIwQY MBaAFFS0LVI3vjP9zTbwXZScyRjklycJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTkt Yjg1NTEzYzZmMjM2LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTktYjg1NTEzYzZmMjM2 LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGw3yIsG syS4PnjySRGk94u90SjbEcOl7p8oSLnAIfDCFBrMtpk9Jy4iqT2xYreKGgm7d/yD +BvLE2LcxXEdbd6RR3nGgn1R7/hE7pEgklXg2YeqDhFyS+dfmsUk1l5F2zXSe79O mp+dw8u3ZqV93JQWcKsth8ji6vKlqQF3QXbKSploT6KMBrDjQ+tnn8MDRWLkE4ZC zDY31S+EgdRpuwXX2pjbqBEzcxzPu8AcWdMu+u3NW6B8+m9E/5Vj4VNzfJWOPLgx yeNp9xkYNNfbZf8axhwJl/pgHj38Jb5NrGh0TFSUGOO7XGVmymeiYz/hRqU4aAD5 6old7bBX8Tgflw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:59:33 2025 by rpki-client