This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json) Hash identifier: AQ0BqipN5q6en/kaPIkv/aeUvNUObvYGw2x+B9B1eGA= Subject key identifier: 1B:4B:55:3B:9A:A9:4C:A9:32:4C:23:7F:99:E6:CA:7D:ED:04:E0:8D Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225 Certificate serial: 019AF31CFEBE41337804F2F21E6055D8E32F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft Manifest number: 05AD Signing time: Sat 06 Dec 2025 10:02:34 +0000 Manifest this update: Sat 06 Dec 2025 10:02:34 +0000 Manifest next update: Sun 07 Dec 2025 10:02:34 +0000 Files and hashes: 1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=) 2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: fgTojEuEftazflMnRv+uqMAjzmBssbDYvXH56zyNGoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:fe:be:41:33:78:04:f2:f2:1e:60:55:d8:e3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e610c2abd3664c11204580f748996555c22225 Validity Not Before: Dec 6 10:02:34 2025 GMT Not After : Dec 7 10:02:34 2025 GMT Subject: CN=1b4b553b9aa94ca9324c237f99e6ca7ded04e08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:d9:31:b7:f0:0c:c4:b4:c1:42:71:21:ad: 00:ed:bd:b8:60:4c:23:e3:ec:22:cc:1e:e4:0c:a4: 4b:1e:1e:7c:68:35:1c:11:54:85:bc:50:df:07:37: cb:1f:9f:43:c9:88:2a:2f:f5:49:88:32:4c:bb:a6: d7:70:49:19:1b:1c:38:37:7c:09:94:df:12:87:05: 9e:b6:72:21:95:ad:cb:f6:3f:2b:ec:6e:32:1d:2a: 0b:18:66:cc:dc:48:9b:24:35:f8:6a:9d:28:b6:cd: 9a:c4:f4:6b:c3:77:d8:74:97:3a:e7:08:fa:e6:9c: d5:18:6a:50:8e:a9:75:f1:67:f2:f0:b1:dc:6b:23: 2a:32:9f:15:d0:dc:71:3d:32:19:d1:9e:6c:de:94: 60:f4:86:d8:bd:81:3d:9a:4d:f7:7d:55:d4:e3:1c: 22:e7:4e:c9:e1:8f:70:02:94:2e:f5:ce:2e:4f:b1: db:88:87:6c:17:05:97:e9:df:7e:fc:87:34:bc:5f: fe:2f:cf:f9:93:41:69:8b:22:0f:bc:8a:bb:d9:4b: f9:b7:d8:d0:00:46:d0:e4:f6:81:65:59:c4:0e:a3: fc:38:0c:22:3c:90:26:bf:19:c3:30:85:c2:fe:77: 1b:f1:8f:e1:ec:7d:8c:be:50:0c:70:b3:b2:25:a0: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4B:55:3B:9A:A9:4C:A9:32:4C:23:7F:99:E6:CA:7D:ED:04:E0:8D X509v3 Authority Key Identifier: keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9a:fd:31:8b:cf:35:c4:e8:64:78:d4:96:39:5b:6d:1b:79: b3:5b:6f:02:47:03:40:67:da:6c:f7:1e:b9:62:5d:48:4f:32: e7:4f:c2:48:7b:b9:f3:2c:7f:fe:e7:29:61:bc:1b:bd:a1:53: 4d:40:2f:dd:4b:43:28:ea:e7:b5:88:40:5e:1c:e5:8b:cd:1a: cf:41:03:51:cc:83:e6:cc:ec:a5:27:05:27:45:20:96:32:49: fe:29:81:2f:33:46:c0:fb:39:4c:2b:dd:46:ad:b2:51:4a:46: fc:c2:0a:35:95:59:ea:bd:d2:6b:e3:03:33:7c:c1:23:99:f9: b1:06:cb:cd:bc:c9:11:39:a6:6b:db:58:51:f4:59:42:8f:5a: 56:ce:e5:0e:7a:98:23:b6:0e:74:34:48:33:63:5a:ca:fa:e4: 65:9a:73:84:8f:82:a3:44:80:c3:20:7c:a2:76:62:72:03:8e: 10:6c:01:31:12:00:a4:b9:ca:ce:ca:7a:f1:95:02:a0:a1:2a: 83:74:b7:92:87:fc:b6:dd:56:0b:ff:67:11:e1:32:96:b8:39: 2e:08:c9:d1:47:0b:f8:91:eb:d2:e4:e0:e3:3b:12:59:91:3a: 7b:ed:45:e1:97:d9:ea:b0:3b:f0:54:e2:7e:27:24:d3:4f:c3: e2:b3:82:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHP6+QTN4BPLyHmBV2OMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj MjIyMjUwHhcNMjUxMjA2MTAwMjM0WhcNMjUxMjA3MTAwMjM0WjAzMTEwLwYDVQQD EygxYjRiNTUzYjlhYTk0Y2E5MzI0YzIzN2Y5OWU2Y2E3ZGVkMDRlMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQTZMbfwDMS0wUJxIa0A7b24YEwj 4+wizB7kDKRLHh58aDUcEVSFvFDfBzfLH59DyYgqL/VJiDJMu6bXcEkZGxw4N3wJ lN8ShwWetnIhla3L9j8r7G4yHSoLGGbM3EibJDX4ap0ots2axPRrw3fYdJc65wj6 5pzVGGpQjql18Wfy8LHcayMqMp8V0NxxPTIZ0Z5s3pRg9IbYvYE9mk33fVXU4xwi 507J4Y9wApQu9c4uT7HbiIdsFwWX6d9+/Ic0vF/+L8/5k0FpiyIPvIq72Uv5t9jQ AEbQ5PaBZVnEDqP8OAwiPJAmvxnDMIXC/ncb8Y/h7H2MvlAMcLOyJaD+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtLVTuaqUypMkwjf5nmyn3tBOCNMB8GA1UdIwQY MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZr9MYvP NcToZHjUljlbbRt5s1tvAkcDQGfabPceuWJdSE8y50/CSHu58yx//ucpYbwbvaFT TUAv3UtDKOrntYhAXhzli80az0EDUcyD5szspScFJ0UgljJJ/imBLzNGwPs5TCvd Rq2yUUpG/MIKNZVZ6r3Sa+MDM3zBI5n5sQbLzbzJETmma9tYUfRZQo9aVs7lDnqY I7YOdDRIM2NayvrkZZpzhI+Co0SAwyB8onZicgOOEGwBMRIApLnKzsp68ZUCoKEq g3S3kof8tt1WC/9nEeEylrg5LgjJ0UcL+JHr0uTg4zsSWZE6e+1F4ZfZ6rA78FTi fick00/D4rOCWw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:13 2025 by rpki-client