This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json) Hash identifier: P55HMSl5TjqCLag96On+R5hX6S+0MZW930NnHRw6wm8= Subject key identifier: 25:C5:74:F7:72:08:CA:E4:A8:FC:BF:50:07:D9:1D:F2:F0:CE:D7:18 Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Certificate serial: 019AF209A034F1336A76C1C126F99FC54EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft Manifest number: 0F16 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: zrDBvOiS51AI1pX7rGewHqG1juU2zanwuWjhcQXIPcQ=) 2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a0:34:f1:33:6a:76:c1:c1:26:f9:9f:c5:4e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=25c574f77208cae4a8fcbf5007d91df2f0ced718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:17:3d:3b:25:17:d4:cf:2c:6e:14:ea:49: 92:71:ae:85:cc:d2:07:ea:8c:0a:1b:aa:2c:57:f7: 70:ff:d1:84:b0:c8:44:0f:8c:87:20:74:68:4d:9c: 06:31:b6:9d:33:9d:4a:3d:19:e7:23:d8:b8:bc:1d: 71:ea:ac:27:4d:ec:d1:20:50:02:48:34:13:21:60: 62:ec:e2:bd:1a:8c:13:06:2a:97:38:1b:ef:46:85: df:8c:37:cb:e3:ba:dc:a6:d0:49:6d:a2:c6:47:29: 29:79:28:fd:0e:e5:49:be:0e:b4:8a:81:9c:cf:a1: 1d:09:de:dd:3d:c7:c4:9d:23:5f:06:ba:d4:e5:a2: 8a:ad:d7:10:03:25:63:c2:b1:d3:77:d3:2a:a3:bd: b4:b5:7a:36:68:6c:cd:17:8e:b6:f1:f7:1b:2f:f7: 41:59:36:79:e9:be:67:8a:13:ee:4d:0e:dc:52:59: 8d:78:49:fb:76:85:b6:37:d3:ba:50:bb:f3:d8:a9: 29:01:33:cd:5e:81:89:70:70:3f:4a:17:7a:f0:0d: d4:e3:c9:07:81:5f:cf:7e:7b:c9:b8:cf:8b:3d:56: 39:46:d0:cb:cd:66:0b:75:71:62:c6:29:80:d1:88: 0e:34:8f:90:29:dd:72:1d:3c:97:bf:bd:2c:3b:89: 0b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:74:F7:72:08:CA:E4:A8:FC:BF:50:07:D9:1D:F2:F0:CE:D7:18 X509v3 Authority Key Identifier: keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b0:4c:8d:5d:89:e3:42:9f:8a:0d:25:6a:4f:51:7c:94:83: d9:60:18:c5:50:89:df:8c:03:88:f7:94:0e:2f:a7:34:d4:fe: 40:b4:40:16:11:0f:11:c5:16:fe:d8:b3:4e:8a:71:d8:d4:f4: 80:01:fd:ca:ba:bf:71:83:b2:68:ef:b7:a6:72:4a:a8:d2:a5: 66:7c:47:65:4b:7c:02:b4:09:d9:54:22:1d:ed:29:3a:dd:ac: 78:21:83:ec:e0:e4:75:67:06:a8:c0:cd:a9:e5:32:66:66:79: 1e:95:14:63:e4:19:fa:12:65:29:80:26:fb:11:2e:45:35:eb: 2f:ef:ab:13:f3:fb:17:9d:7c:0d:c9:1b:e2:ff:5d:a1:ba:45: 59:f6:53:20:1c:07:1a:b1:24:dd:14:49:a7:cd:cb:71:6b:4d: 14:b7:8e:98:69:cf:f5:96:14:62:19:43:90:e7:44:2f:8e:af: 03:82:ce:d2:ea:24:25:57:7e:35:34:9e:b4:9d:da:18:ad:2f: 9d:d4:ab:19:a6:f7:11:f6:e3:be:29:c6:57:d9:45:19:5f:19: b3:7a:8f:4b:30:42:04:23:c4:90:13:af:71:0e:14:ab:b7:f7: cb:c4:bd:90:49:ba:04:6d:c9:fc:76:e5:4a:d4:04:65:c7:d4: 33:59:84:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaA08TNqdsHBJvmfxU69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTRkMDgxZjY1ZjBjOGIwNGYxZDJmZTczZTA5MGIwN2Fi MWFiNTgwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EygyNWM1NzRmNzcyMDhjYWU0YThmY2JmNTAwN2Q5MWRmMmYwY2VkNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreAXPTslF9TPLG4U6kmSca6FzNIH 6owKG6osV/dw/9GEsMhED4yHIHRoTZwGMbadM51KPRnnI9i4vB1x6qwnTezRIFAC SDQTIWBi7OK9GowTBiqXOBvvRoXfjDfL47rcptBJbaLGRykpeSj9DuVJvg60ioGc z6EdCd7dPcfEnSNfBrrU5aKKrdcQAyVjwrHTd9Mqo720tXo2aGzNF4628fcbL/dB WTZ56b5nihPuTQ7cUlmNeEn7doW2N9O6ULvz2KkpATPNXoGJcHA/Shd68A3U48kH gV/PfnvJuM+LPVY5RtDLzWYLdXFiximA0YgONI+QKd1yHTyXv70sO4kLawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXFdPdyCMrkqPy/UAfZHfLwztcYMB8GA1UdIwQY MBaAFFcU0IH2XwyLBPHS/nPgkLB6satYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODIt ZmMyNzRhZDkyMTBiLzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODItZmMyNzRhZDkyMTBi LzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrBMjV2J 40Kfig0lak9RfJSD2WAYxVCJ34wDiPeUDi+nNNT+QLRAFhEPEcUW/tizTopx2NT0 gAH9yrq/cYOyaO+3pnJKqNKlZnxHZUt8ArQJ2VQiHe0pOt2seCGD7ODkdWcGqMDN qeUyZmZ5HpUUY+QZ+hJlKYAm+xEuRTXrL++rE/P7F518Dckb4v9dobpFWfZTIBwH GrEk3RRJp83LcWtNFLeOmGnP9ZYUYhlDkOdEL46vA4LO0uokJVd+NTSetJ3aGK0v ndSrGab3EfbjvinGV9lFGV8Zs3qPSzBCBCPEkBOvcQ4Uq7f3y8S9kEm6BG3J/Hbl StQEZcfUM1mExQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:17 2025 by rpki-client