This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json) Hash identifier: ms+N+xsQU1atg2QD8vDft4z33wSbZU2JHn/MHJ2+XWI= Subject key identifier: B5:3A:87:45:15:A5:37:21:38:A9:59:FE:EB:1E:4D:D3:88:F2:F3:D0 Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Certificate serial: 019AF209074DAEC24C51840527B2C8580C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft Manifest number: 13B0 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=) 2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: q+VNbg2kNuiBfh15d+otElQBdAcLEZvqDFTC7cy5T1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:07:4d:ae:c2:4c:51:84:05:27:b2:c8:58:0c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=b53a874515a5372138a959feeb1e4dd388f2f3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:74:dd:c7:83:40:ab:0a:0a:a1:99:56:2f: 9e:11:34:1c:39:be:e2:ea:1b:89:d0:7a:2b:bc:4e: 3d:51:22:bd:78:2e:72:f8:e7:67:ec:3e:d6:a8:17: 0b:af:ff:e4:38:9d:bd:a4:59:c2:28:fa:42:1f:05: af:f0:df:1a:b5:57:60:08:c8:e0:06:23:08:55:25: c5:78:5a:c5:05:23:73:1d:02:47:a3:50:38:f7:de: 8c:7f:7e:d5:7f:ad:c9:2a:83:93:5f:92:7c:e6:89: dd:52:72:48:c1:0f:fc:93:ac:70:5b:b8:08:c7:a1: 0e:6c:20:66:3c:18:ba:a1:45:29:ae:64:de:5d:15: fd:c7:e1:39:d2:88:69:6a:f0:8a:eb:74:c5:e2:a1: 8a:75:18:a0:11:e1:56:3a:83:b2:3c:ab:10:ec:a7: f8:88:ea:94:d6:fe:a0:d7:9f:a6:46:41:d6:4d:3e: 97:e8:9f:39:63:78:61:64:73:e7:1b:3d:7b:09:2e: 0e:51:76:0f:1a:72:be:10:1b:a3:a9:fa:cf:85:2a: 30:66:12:32:98:59:f8:11:22:39:6b:35:c4:15:33: e0:57:24:4e:02:7d:2f:b9:62:77:6c:22:7b:ad:01: 7d:cf:17:d6:7a:d4:e4:a5:17:bf:bd:bd:01:f1:9b: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3A:87:45:15:A5:37:21:38:A9:59:FE:EB:1E:4D:D3:88:F2:F3:D0 X509v3 Authority Key Identifier: keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e4:80:80:e4:2b:23:f7:7a:f4:a9:02:51:f5:50:28:d7:3c: a0:da:5e:cb:a8:81:68:fa:1d:a0:05:d3:6e:4b:d4:1a:81:9e: 81:71:aa:d1:b1:69:7c:a9:58:78:e9:70:4b:e6:1a:ef:4f:03: 91:2d:58:17:38:b9:19:33:84:81:25:bf:b9:16:c6:1e:c0:3c: a2:b9:92:69:4e:fc:7a:91:58:cc:fa:0a:a6:b5:12:7a:04:72: 45:ca:a9:9a:bd:2f:b3:52:cb:55:23:cc:03:6b:87:e4:ef:1a: bc:b4:d2:62:a9:30:32:f0:fc:45:03:25:db:97:54:ce:af:c0: e7:ec:57:38:8b:05:5b:22:45:51:94:4d:12:57:a8:a7:2e:78: 07:73:e0:78:e0:e3:81:ee:c6:e2:22:11:3b:00:71:c7:98:2b: c4:81:18:01:1c:90:d4:de:be:98:8d:bb:a5:fb:e0:01:fb:5c: a9:bd:85:9c:45:58:18:62:79:53:4e:ca:7c:9d:ad:ce:a8:93: ac:e0:eb:a2:22:e9:5c:c4:56:73:24:2d:72:44:2c:fd:e8:7b: fc:e2:da:bb:65:f6:63:98:77:5e:af:26:42:0c:08:6b:b5:4c: 1f:08:98:0b:43:1c:ab:e6:fc:28:35:99:c6:56:85:66:ed:ed: fa:06:40:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQdNrsJMUYQFJ7LIWAw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi NDExZDEwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD EyhiNTNhODc0NTE1YTUzNzIxMzhhOTU5ZmVlYjFlNGRkMzg4ZjJmM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRJ03ceDQKsKCqGZVi+eETQcOb7i 6huJ0HorvE49USK9eC5y+Odn7D7WqBcLr//kOJ29pFnCKPpCHwWv8N8atVdgCMjg BiMIVSXFeFrFBSNzHQJHo1A4996Mf37Vf63JKoOTX5J85ondUnJIwQ/8k6xwW7gI x6EObCBmPBi6oUUprmTeXRX9x+E50ohpavCK63TF4qGKdRigEeFWOoOyPKsQ7Kf4 iOqU1v6g15+mRkHWTT6X6J85Y3hhZHPnGz17CS4OUXYPGnK+EBujqfrPhSowZhIy mFn4ESI5azXEFTPgVyROAn0vuWJ3bCJ7rQF9zxfWetTkpRe/vb0B8Zvl7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU6h0UVpTchOKlZ/useTdOI8vPQMB8GA1UdIwQY MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4 LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOSAgOQr I/d69KkCUfVQKNc8oNpey6iBaPodoAXTbkvUGoGegXGq0bFpfKlYeOlwS+Ya708D kS1YFzi5GTOEgSW/uRbGHsA8ormSaU78epFYzPoKprUSegRyRcqpmr0vs1LLVSPM A2uH5O8avLTSYqkwMvD8RQMl25dUzq/A5+xXOIsFWyJFUZRNEleopy54B3PgeODj ge7G4iIROwBxx5grxIEYARyQ1N6+mI27pfvgAftcqb2FnEVYGGJ5U07KfJ2tzqiT rODroiLpXMRWcyQtckQs/eh7/OLau2X2Y5h3Xq8mQgwIa7VMHwiYC0Mcq+b8KDWZ xlaFZu3t+gZA0A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:22 2025 by rpki-client