This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json) Hash identifier: utJEP1dsbntLqIGkWwSnWaPXsH1EjvzZ5mQEyp4tnfc= Subject key identifier: 25:40:3C:C7:7F:1F:D9:92:81:B9:3F:D3:24:53:16:8A:98:19:48:32 Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d Certificate serial: 019AF49C0FBE03AD4BAB1577679B789ADF5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft Manifest number: 1295 Signing time: Sat 06 Dec 2025 17:00:59 +0000 Manifest this update: Sat 06 Dec 2025 17:00:59 +0000 Manifest next update: Sun 07 Dec 2025 17:00:59 +0000 Files and hashes: 1: P9bs-w5DkWpu1aBuTV3PHAzvH6Q.roa (hash: oAepJ4+j0gmtz7XxqoB+yGPsz6tmKuFLhq6h9fcVyTY=) 2: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: d9qM1o9X2lj2GCjGJ/F/gefPzErDu0gecAxBydEFx1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0f:be:03:ad:4b:ab:15:77:67:9b:78:9a:df:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d Validity Not Before: Dec 6 17:00:59 2025 GMT Not After : Dec 7 17:00:59 2025 GMT Subject: CN=25403cc77f1fd99281b93fd32453168a98194832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:e0:bd:f2:c7:5c:33:b9:bc:fc:00:fa:51: c9:4f:71:6b:ad:c4:44:db:59:52:59:8b:7b:2a:6f: 78:08:16:9b:f2:f3:fb:eb:53:2a:80:09:79:24:cb: dc:2a:11:56:72:4a:37:5f:af:ac:31:ff:f4:cc:24: 41:64:78:97:ac:5f:80:b0:b3:43:36:93:f0:7e:05: cd:b2:fa:64:7b:ca:a9:36:9d:04:e0:6d:fd:3a:f2: ab:11:5f:3e:0a:a3:da:69:af:30:e9:75:ee:d3:e4: 75:46:e7:89:db:ea:13:72:e9:c3:e7:21:4c:fc:15: 24:73:87:7d:49:20:08:8e:07:60:aa:b7:a5:30:9a: aa:4e:38:b1:e9:4a:35:a6:a5:9f:c0:72:3b:b1:a1: 33:50:db:15:e3:59:73:32:ba:bf:83:13:45:e6:f5: ab:cd:03:d4:bd:02:d5:93:6c:ef:d4:76:ab:55:61: 84:dc:35:80:e4:2d:21:e7:81:ce:df:f6:ff:3d:79: 02:7f:ad:09:98:2a:01:de:bc:ed:42:bc:20:25:02: 42:ec:1e:90:02:a9:69:d8:bc:94:23:b5:4a:cf:34: 2b:4e:5c:4b:20:aa:87:9a:c4:42:4c:a0:fa:60:f1: db:c5:5b:aa:fe:6c:a5:72:fb:9c:e8:13:4c:15:dd: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:40:3C:C7:7F:1F:D9:92:81:B9:3F:D3:24:53:16:8A:98:19:48:32 X509v3 Authority Key Identifier: keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6b:03:56:a0:65:80:8c:3d:0f:67:97:2e:2b:f6:40:4b:30: 42:09:ee:9d:73:f6:c2:ca:a6:27:fc:01:91:13:6c:76:18:ea: e1:db:f7:0e:b6:2b:82:2d:bc:28:c1:1f:53:01:8d:bb:7a:02: 4d:eb:56:54:1d:1e:70:ec:5a:0a:49:52:48:74:c0:ab:f4:57: 88:89:c2:d0:fe:c2:bc:90:46:c8:1f:9b:2b:b2:d4:44:ec:0d: 0f:de:9d:f3:cd:02:9a:5a:3a:57:c0:18:c9:e7:20:c9:3b:9e: a5:3f:1f:51:4d:8c:42:4b:45:61:88:78:ba:60:4b:4a:32:5c: 6e:ed:49:4f:8a:a6:0b:ba:23:78:1e:52:b3:b7:9f:9c:b1:8d: 44:c2:fd:97:16:5d:7e:ca:49:4b:25:52:9c:83:0f:5b:cc:30: 4e:3a:8e:64:86:19:e4:51:bd:9a:79:35:27:c9:48:aa:df:48: b0:fc:88:8a:a5:8b:f7:60:01:31:a5:6c:8e:36:e9:14:b6:61: 76:43:7d:79:19:d3:b4:8b:55:c8:4f:87:20:f8:e5:9f:8f:30: aa:a4:2b:69:9c:80:87:35:f0:77:6b:22:6a:0d:be:15:4c:d1: 9e:71:13:dd:18:fb:9c:7d:db:a6:da:27:4e:d3:97:ad:a3:f0: 1f:c2:26:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nA++A61LqxV3Z5t4mt9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NzdiNGI4N2FiODZhY2E1NzdlNTZlMzhkNWI4YTU4MTNj Y2NjM2QwHhcNMjUxMjA2MTcwMDU5WhcNMjUxMjA3MTcwMDU5WjAzMTEwLwYDVQQD EygyNTQwM2NjNzdmMWZkOTkyODFiOTNmZDMyNDUzMTY4YTk4MTk0ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K3gvfLHXDO5vPwA+lHJT3FrrcRE 21lSWYt7Km94CBab8vP761MqgAl5JMvcKhFWcko3X6+sMf/0zCRBZHiXrF+AsLND NpPwfgXNsvpke8qpNp0E4G39OvKrEV8+CqPaaa8w6XXu0+R1RueJ2+oTcunD5yFM /BUkc4d9SSAIjgdgqrelMJqqTjix6Uo1pqWfwHI7saEzUNsV41lzMrq/gxNF5vWr zQPUvQLVk2zv1HarVWGE3DWA5C0h54HO3/b/PXkCf60JmCoB3rztQrwgJQJC7B6Q Aqlp2LyUI7VKzzQrTlxLIKqHmsRCTKD6YPHbxVuq/mylcvuc6BNMFd0TYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVAPMd/H9mSgbk/0yRTFoqYGUgyMB8GA1UdIwQY MBaAFFV3tLh6uGrKV35W441bilgTzMw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhlMHVIcTRhc3BYZmxiampWdUtXQlBNekQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kMTU4ZTEtNTEyYi00NDg2LWFmODct YjQ5MGE2ZDZiZTI1LzEvVlhlMHVIcTRhc3BYZmxiampWdUtXQlBNekQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kMTU4ZTEtNTEyYi00NDg2LWFmODctYjQ5MGE2ZDZiZTI1 LzEvVlhlMHVIcTRhc3BYZmxiampWdUtXQlBNekQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmsDVqBl gIw9D2eXLiv2QEswQgnunXP2wsqmJ/wBkRNsdhjq4dv3DrYrgi28KMEfUwGNu3oC TetWVB0ecOxaCklSSHTAq/RXiInC0P7CvJBGyB+bK7LUROwND96d880Cmlo6V8AY yecgyTuepT8fUU2MQktFYYh4umBLSjJcbu1JT4qmC7ojeB5Ss7efnLGNRML9lxZd fspJSyVSnIMPW8wwTjqOZIYZ5FG9mnk1J8lIqt9IsPyIiqWL92ABMaVsjjbpFLZh dkN9eRnTtItVyE+HIPjln48wqqQraZyAhzXwd2siag2+FUzRnnET3Rj7nH3bpton TtOXraPwH8Imew== -----END CERTIFICATE-----Generated at Sat Dec 6 22:22:17 2025 by rpki-client