This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft File: VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json) Hash identifier: 8qOxTQVeS9zo7VrH6H0FbLxoKa/Ciy8XCKAw5ooG5Y4= Subject key identifier: 15:6B:D7:A9:8C:C1:60:C4:E0:A4:F6:A5:98:5C:EC:7B:51:00:FA:C4 Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09 Certificate issuer: /CN=54b42d5237be33fdcd36f05d949cc918e4972709 Certificate serial: 019B281BFCA212B2279D1F693EF18E09117A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft Manifest number: 0559 Signing time: Tue 16 Dec 2025 17:01:21 +0000 Manifest this update: Tue 16 Dec 2025 17:01:21 +0000 Manifest next update: Wed 17 Dec 2025 17:01:21 +0000 Files and hashes: 1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: fsvjO7HS/gt2JUHkJrchY9ZKK1mhb2ZUtaUvun96WQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:fc:a2:12:b2:27:9d:1f:69:3e:f1:8e:09:11:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709 Validity Not Before: Dec 16 17:01:21 2025 GMT Not After : Dec 17 17:01:21 2025 GMT Subject: CN=156bd7a98cc160c4e0a4f6a5985cec7b5100fac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:01:30:fe:40:22:2b:1b:d1:a1:bd:c8:25: 44:ef:d8:d3:75:e0:27:20:da:2b:88:12:94:6c:e2: 97:af:51:7b:cd:1c:c4:1b:94:b9:d7:82:95:ac:db: e1:a1:de:4f:38:c5:94:7e:1b:ac:ed:fe:8c:e1:ef: 98:9a:f8:e8:13:33:d4:71:ba:2d:46:6a:10:2e:9a: 08:c6:de:a6:a2:84:91:80:a6:42:68:b9:13:c4:75: 39:67:72:f2:70:d4:7f:b3:16:af:22:ce:df:53:c0: bd:3f:4e:11:cb:37:eb:f0:cc:cc:1e:d0:ea:ac:32: b7:80:a8:7c:e7:a5:4a:f7:a1:15:fd:0d:61:27:93: f0:d4:99:e5:e6:23:42:fd:7e:af:d0:11:ff:32:df: a5:50:a9:7c:b9:4d:49:31:a4:e2:1d:7f:53:fc:bf: 75:9c:a5:96:00:22:c7:35:c5:f7:97:dc:ea:8d:31: 68:bd:93:61:7c:7a:2d:04:60:0c:1a:f8:fb:ec:34: 9e:63:d2:7b:4f:ed:83:5f:bb:b7:1f:c4:88:a5:c2: e7:0f:d3:78:a7:92:1f:40:78:14:34:34:a6:a9:bc: 9e:15:fc:99:4d:56:bc:61:9c:64:b2:ad:8f:f0:bc: 91:98:c7:b9:73:b7:0a:36:7c:d4:e9:69:9e:86:99: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6B:D7:A9:8C:C1:60:C4:E0:A4:F6:A5:98:5C:EC:7B:51:00:FA:C4 X509v3 Authority Key Identifier: keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:06:57:1c:f8:58:34:b2:91:37:fb:aa:47:37:0e:53:f8:ae: 99:9b:bf:8c:d4:e5:f4:3a:36:3c:6b:ca:0b:f6:a9:8a:3a:6f: 18:6f:aa:0b:38:7a:da:f9:2c:ba:7e:df:a7:13:43:d6:83:ab: 3c:41:e2:80:2e:66:b5:85:bf:a5:f0:24:ac:f6:5e:d7:3a:c4: 48:94:04:89:7c:26:10:08:5a:04:05:1c:27:eb:b9:a5:57:74: 5e:9a:19:df:ae:8f:5d:30:8e:9c:01:dd:d3:10:69:2f:1f:2a: c6:23:5e:d7:39:78:ae:fc:03:d9:d5:0e:62:1a:80:1c:27:57: 30:35:04:da:16:e2:ae:2b:d6:17:20:9f:2a:d6:7a:b5:8a:d3: 61:2c:06:c7:96:b4:11:17:c1:61:3e:97:04:bd:25:4c:41:9c: 67:30:97:95:77:de:d9:f3:5e:f5:6d:60:5b:ac:66:a4:a0:4d: 43:e2:e3:93:8c:b6:92:8a:46:0d:56:66:31:40:ae:28:da:64: a8:70:f2:dd:d0:0f:30:b3:64:6d:93:40:32:f3:bb:40:c2:02: fd:5e:e2:40:61:b8:76:40:d5:d4:6e:17:e3:4a:a3:d3:2f:27: 6b:9b:66:c6:e9:cc:33:28:a5:bd:75:ee:23:44:93:75:66:35: 44:40:0b:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG/yiErInnR9pPvGOCRF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjQyZDUyMzdiZTMzZmRjZDM2ZjA1ZDk0OWNjOTE4ZTQ5 NzI3MDkwHhcNMjUxMjE2MTcwMTIxWhcNMjUxMjE3MTcwMTIxWjAzMTEwLwYDVQQD EygxNTZiZDdhOThjYzE2MGM0ZTBhNGY2YTU5ODVjZWM3YjUxMDBmYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQYBMP5AIisb0aG9yCVE79jTdeAn INoriBKUbOKXr1F7zRzEG5S514KVrNvhod5POMWUfhus7f6M4e+YmvjoEzPUcbot RmoQLpoIxt6mooSRgKZCaLkTxHU5Z3LycNR/sxavIs7fU8C9P04Ryzfr8MzMHtDq rDK3gKh856VK96EV/Q1hJ5Pw1Jnl5iNC/X6v0BH/Mt+lUKl8uU1JMaTiHX9T/L91 nKWWACLHNcX3l9zqjTFovZNhfHotBGAMGvj77DSeY9J7T+2DX7u3H8SIpcLnD9N4 p5IfQHgUNDSmqbyeFfyZTVa8YZxksq2P8LyRmMe5c7cKNnzU6Wmehpmt+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVr16mMwWDE4KT2pZhc7HtRAPrEMB8GA1UdIwQY MBaAFFS0LVI3vjP9zTbwXZScyRjklycJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTkt Yjg1NTEzYzZmMjM2LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTktYjg1NTEzYzZmMjM2 LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQZXHPhY NLKRN/uqRzcOU/iumZu/jNTl9Do2PGvKC/apijpvGG+qCzh62vksun7fpxND1oOr PEHigC5mtYW/pfAkrPZe1zrESJQEiXwmEAhaBAUcJ+u5pVd0XpoZ366PXTCOnAHd 0xBpLx8qxiNe1zl4rvwD2dUOYhqAHCdXMDUE2hbirivWFyCfKtZ6tYrTYSwGx5a0 ERfBYT6XBL0lTEGcZzCXlXfe2fNe9W1gW6xmpKBNQ+Ljk4y2kopGDVZmMUCuKNpk qHDy3dAPMLNkbZNAMvO7QMIC/V7iQGG4dkDV1G4X40qj0y8na5tmxunMMyilvXXu I0STdWY1REALew== -----END CERTIFICATE-----Generated at Tue Dec 16 19:13:01 2025 by rpki-client