This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft File: VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json) Hash identifier: NsEzhfzmF5Uer1Nm1w3n49U1ShBJoYNBVYPHJmn4aHo= Subject key identifier: 34:1E:03:45:B1:CD:A4:6C:BE:84:D0:F5:C8:42:C2:AC:B0:43:3F:74 Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09 Certificate issuer: /CN=54b42d5237be33fdcd36f05d949cc918e4972709 Certificate serial: 019AF20968D467DB52B2DAB39DA15A604716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft Manifest number: 053D Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: oX/SVZhBkpUNSGvdefgLVs2Nbnt8FtABy7jKG1VlDDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:68:d4:67:db:52:b2:da:b3:9d:a1:5a:60:47:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709 Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=341e0345b1cda46cbe84d0f5c842c2acb0433f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:85:7a:c4:aa:3d:e9:18:c5:88:68:c8:62: 30:37:b6:73:e7:f7:c1:c5:74:84:28:aa:42:27:25: e8:24:61:16:fb:db:62:cb:66:2a:f5:80:b3:c0:31: bd:69:0c:75:85:41:2c:f9:fa:86:98:0b:af:52:e3: bc:78:31:4d:bf:9e:d8:78:03:73:3a:16:f9:15:4e: 25:73:37:ba:98:d6:5d:d7:39:d2:10:e8:f4:3b:90: 46:08:60:ac:9b:fa:1c:ea:8d:d9:3f:e7:bc:c3:12: bf:cd:f3:3c:91:8b:83:3e:6f:ca:56:9a:2f:66:65: a4:e5:26:ce:ef:75:a5:d1:b4:2c:93:1a:71:c4:9e: b5:82:c5:44:d4:53:0d:fc:e1:4c:fd:9d:8c:01:c5: ef:a5:c2:1b:5c:f7:4b:ca:0a:79:54:37:cf:6b:a4: 09:a1:44:85:62:a3:9d:43:35:90:85:da:9f:d3:8c: f4:85:56:57:e3:30:3c:af:4d:d5:5f:e3:5f:fa:18: c7:38:1c:f5:23:37:99:fb:02:bd:fd:3a:53:93:3b: 3a:26:6b:13:65:3d:64:15:a1:ad:35:36:64:35:11: 63:58:40:ae:0c:f9:a2:83:f2:5d:61:3e:e5:e9:45: a3:c7:20:d9:92:4b:94:68:38:34:8c:92:a3:79:b4: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:03:45:B1:CD:A4:6C:BE:84:D0:F5:C8:42:C2:AC:B0:43:3F:74 X509v3 Authority Key Identifier: keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:61:aa:e5:e1:be:7a:0a:19:e7:5f:a2:41:ff:77:59:3e:89: 3a:8b:56:55:e9:a4:a0:c5:6b:13:a4:3c:2c:90:f3:ae:b9:44: 0f:0f:6c:9d:a1:39:4e:6e:35:a3:4d:ea:25:86:e7:79:14:b1: c4:6e:ce:15:a5:3a:eb:4f:50:78:57:e1:60:d8:a2:43:59:13: e4:d6:59:7c:64:30:28:9a:75:56:e1:c6:73:9c:b8:9d:53:08: 0d:d2:30:25:d6:e1:b9:57:d9:ac:de:05:6f:37:b0:be:f9:dd: a9:df:f7:e5:06:99:2f:0c:f7:a7:c9:72:e9:5f:29:8e:96:8d: 8b:3f:ff:6f:00:79:97:b8:7a:e2:e0:63:49:c5:9e:b9:64:ac: e1:44:be:91:bf:14:1a:4a:63:d3:da:a3:24:a0:c4:f6:f8:e7: 2b:de:5b:69:7d:41:31:45:63:4e:d3:9d:44:91:9d:c6:63:2e: f8:f7:7d:9d:e7:24:f8:9e:7c:cd:bf:8e:92:35:9e:92:bf:78: 76:d7:5c:0c:3e:46:89:29:3f:64:a5:61:b6:15:3a:7d:81:81: f2:f7:c7:ec:f1:9a:64:94:77:01:55:58:86:a8:19:c4:7d:22: 7b:cf:66:cf:76:47:5e:0e:d9:36:1a:52:ff:45:4a:c9:75:7c: 26:9c:71:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWjUZ9tSstqznaFaYEcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjQyZDUyMzdiZTMzZmRjZDM2ZjA1ZDk0OWNjOTE4ZTQ5 NzI3MDkwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EygzNDFlMDM0NWIxY2RhNDZjYmU4NGQwZjVjODQyYzJhY2IwNDMzZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0KFesSqPekYxYhoyGIwN7Zz5/fB xXSEKKpCJyXoJGEW+9tiy2Yq9YCzwDG9aQx1hUEs+fqGmAuvUuO8eDFNv57YeANz Ohb5FU4lcze6mNZd1znSEOj0O5BGCGCsm/oc6o3ZP+e8wxK/zfM8kYuDPm/KVpov ZmWk5SbO73Wl0bQskxpxxJ61gsVE1FMN/OFM/Z2MAcXvpcIbXPdLygp5VDfPa6QJ oUSFYqOdQzWQhdqf04z0hVZX4zA8r03VX+Nf+hjHOBz1IzeZ+wK9/TpTkzs6JmsT ZT1kFaGtNTZkNRFjWECuDPmig/JdYT7l6UWjxyDZkkuUaDg0jJKjebS8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQeA0WxzaRsvoTQ9chCwqywQz90MB8GA1UdIwQY MBaAFFS0LVI3vjP9zTbwXZScyRjklycJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTkt Yjg1NTEzYzZmMjM2LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mNGVkNWYtNWEzMC00OWVkLTkyYTktYjg1NTEzYzZmMjM2 LzEvVkxRdFVqZS1NXzNOTnZCZGxKekpHT1NYSndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGGq5eG+ egoZ51+iQf93WT6JOotWVemkoMVrE6Q8LJDzrrlEDw9snaE5Tm41o03qJYbneRSx xG7OFaU6609QeFfhYNiiQ1kT5NZZfGQwKJp1VuHGc5y4nVMIDdIwJdbhuVfZrN4F bzewvvndqd/35QaZLwz3p8ly6V8pjpaNiz//bwB5l7h64uBjScWeuWSs4US+kb8U Gkpj09qjJKDE9vjnK95baX1BMUVjTtOdRJGdxmMu+Pd9neck+J58zb+OkjWekr94 dtdcDD5GiSk/ZKVhthU6fYGB8vfH7PGaZJR3AVVYhqgZxH0ie89mz3ZHXg7ZNhpS /0VKyXV8Jpxxyw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:16 2025 by rpki-client