This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json) Hash identifier: 9h1cAiv7BXX/mtcF2ANU3XXxwtZwMbqQI1Ho9SY3EJI= Subject key identifier: AD:F5:89:E5:83:83:CE:5F:F2:A6:7E:72:88:62:58:54:13:42:EA:16 Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Certificate serial: 019B33B264EE9F94607CBF5FE649A245FF72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft Manifest number: 0F38 Signing time: Thu 18 Dec 2025 23:01:27 +0000 Manifest this update: Thu 18 Dec 2025 23:01:27 +0000 Manifest next update: Fri 19 Dec 2025 23:01:27 +0000 Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: dBTqpFn2p2kf1c1lTfBgN8Rdt1NcUIBTSoZVpseLoSs=) 2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:64:ee:9f:94:60:7c:bf:5f:e6:49:a2:45:ff:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58 Validity Not Before: Dec 18 23:01:27 2025 GMT Not After : Dec 19 23:01:27 2025 GMT Subject: CN=adf589e58383ce5ff2a67e72886258541342ea16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:38:66:20:de:d9:14:8d:0b:7f:10:be:1e: f4:e0:64:95:96:cd:d4:b2:3a:f5:3e:19:79:c0:68: 63:38:0e:1b:46:0c:97:65:ae:d7:d7:0f:9b:76:2b: ec:09:41:57:1c:28:43:ae:b2:01:49:53:af:93:04: 83:1f:fc:90:e8:15:a0:ed:29:d6:86:de:fd:18:56: 9f:b8:d7:75:d5:2c:a0:e6:f3:aa:e0:27:08:47:48: 13:0a:f4:1b:2e:d6:15:0d:35:1a:9d:9c:71:f2:c4: 41:99:4f:a1:69:58:c6:21:85:55:f3:de:88:16:f4: f6:5b:34:86:d5:5e:ed:dd:d1:c4:d0:7f:13:6e:5c: f0:9f:1f:c4:14:01:3e:19:ff:fd:c7:d8:27:88:3e: a8:94:35:9d:f1:45:ed:f2:a0:8c:d4:bc:61:b3:72: f0:ed:46:03:95:c5:e8:23:fc:76:20:95:b2:f1:48: 4a:92:a7:ce:25:fb:9e:30:67:8b:a8:6c:a3:cd:3b: 56:5c:9f:13:6e:e8:7b:4d:29:cb:7e:0f:1f:a6:4d: f6:a3:95:98:ae:ed:b1:d6:8c:40:4a:17:b6:36:7c: 30:e6:05:96:ab:f4:26:60:9c:ca:ca:a7:66:ea:2f: 07:fd:bf:73:80:bb:7e:52:30:45:20:b0:30:33:d4: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F5:89:E5:83:83:CE:5F:F2:A6:7E:72:88:62:58:54:13:42:EA:16 X509v3 Authority Key Identifier: keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:21:76:80:e5:12:bd:02:dd:59:84:9f:c2:19:77:1a:c7:17: 94:53:8a:db:11:a1:24:c3:84:e9:76:07:de:0a:c8:bf:f4:83: 91:5d:ab:7f:9d:d7:45:32:0b:38:43:36:19:19:ff:55:f1:08: f7:bd:39:9f:86:66:e6:b4:11:38:bd:1d:4c:07:0b:55:6c:86: 63:2d:03:11:1e:d8:1c:49:75:19:bd:93:75:e8:dc:52:a5:4c: 20:a8:10:8a:7a:f4:3c:a2:dc:53:f3:a7:99:08:44:d1:8e:c3: 9b:71:56:25:bb:13:1a:2c:7a:b2:f4:6d:d0:24:cc:71:06:42: ca:85:ee:39:9b:80:ba:ab:5a:c5:77:a0:2c:61:7d:5a:95:c4: f3:1e:57:60:31:ea:13:85:ae:20:3c:21:c4:9a:50:b2:c0:0d: e7:a2:23:01:4a:0e:d1:57:26:c6:c1:af:f4:fe:11:96:73:8e: 70:3e:cb:80:9b:13:4f:ad:67:4c:59:ca:4f:cd:d9:ab:49:ee: 72:5a:4c:8a:4a:92:81:74:17:ae:5c:e6:a5:6e:05:70:c8:e5: df:d7:3b:88:e0:e2:62:54:37:aa:6d:9e:b6:cd:4e:c2:57:b3: af:d2:91:ee:77:6a:4f:0f:56:93:bc:82:c6:2b:48:c7:5f:3a: 27:6b:60:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsmTun5RgfL9f5kmiRf9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTRkMDgxZjY1ZjBjOGIwNGYxZDJmZTczZTA5MGIwN2Fi MWFiNTgwHhcNMjUxMjE4MjMwMTI3WhcNMjUxMjE5MjMwMTI3WjAzMTEwLwYDVQQD EyhhZGY1ODllNTgzODNjZTVmZjJhNjdlNzI4ODYyNTg1NDEzNDJlYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjk4ZiDe2RSNC38Qvh704GSVls3U sjr1Phl5wGhjOA4bRgyXZa7X1w+bdivsCUFXHChDrrIBSVOvkwSDH/yQ6BWg7SnW ht79GFafuNd11Syg5vOq4CcIR0gTCvQbLtYVDTUanZxx8sRBmU+haVjGIYVV896I FvT2WzSG1V7t3dHE0H8Tblzwnx/EFAE+Gf/9x9gniD6olDWd8UXt8qCM1Lxhs3Lw 7UYDlcXoI/x2IJWy8UhKkqfOJfueMGeLqGyjzTtWXJ8Tbuh7TSnLfg8fpk32o5WY ru2x1oxAShe2Nnww5gWWq/QmYJzKyqdm6i8H/b9zgLt+UjBFILAwM9T6hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK31ieWDg85f8qZ+cohiWFQTQuoWMB8GA1UdIwQY MBaAFFcU0IH2XwyLBPHS/nPgkLB6satYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODIt ZmMyNzRhZDkyMTBiLzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODItZmMyNzRhZDkyMTBi LzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCF2gOUS vQLdWYSfwhl3GscXlFOK2xGhJMOE6XYH3grIv/SDkV2rf53XRTILOEM2GRn/VfEI 9705n4Zm5rQROL0dTAcLVWyGYy0DER7YHEl1Gb2TdejcUqVMIKgQinr0PKLcU/On mQhE0Y7Dm3FWJbsTGix6svRt0CTMcQZCyoXuOZuAuqtaxXegLGF9WpXE8x5XYDHq E4WuIDwhxJpQssAN56IjAUoO0VcmxsGv9P4RlnOOcD7LgJsTT61nTFnKT83Zq0nu clpMikqSgXQXrlzmpW4FcMjl39c7iODiYlQ3qm2ets1Owlezr9KR7ndqTw9Wk7yC xitIx186J2tg1A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:19:12 2025 by rpki-client