This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft File: VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft (raw, json) Hash identifier: wcHaRSMa+WxeF5eAgZYMntFQPbtypTNazyyne1pUtx0= Subject key identifier: C4:EA:52:A2:C9:0E:B3:37:0C:05:B1:9E:02:9C:19:C1:7D:1A:8C:48 Authority key identifier: 54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00 Certificate issuer: /CN=5448a5c5c577b53cc298af0443edd4352e1b1300 Certificate serial: 019B3F11BD8FD422B7421346C4DFB9088596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft Manifest number: 029C Signing time: Sun 21 Dec 2025 04:01:25 +0000 Manifest this update: Sun 21 Dec 2025 04:01:25 +0000 Manifest next update: Mon 22 Dec 2025 04:01:25 +0000 Files and hashes: 1: VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl (hash: nXg0dAUAnjDDlRPLidxfmruhj2VwSaq1wFrzeVchUtQ=) 2: z7A1F9yPjL55IibPa20Kjx9HdWo.roa (hash: n2Ln9x6dFYLELeltpBs/l+euwSQGs6r6YausDD8SqV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:bd:8f:d4:22:b7:42:13:46:c4:df:b9:08:85:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5448a5c5c577b53cc298af0443edd4352e1b1300 Validity Not Before: Dec 21 04:01:25 2025 GMT Not After : Dec 22 04:01:25 2025 GMT Subject: CN=c4ea52a2c90eb3370c05b19e029c19c17d1a8c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:89:9c:e1:26:ce:81:7d:98:c3:eb:9e:8d: c1:2b:62:b0:06:d9:59:65:85:7f:7a:ad:a2:87:a4: f0:73:12:3d:ab:83:76:86:0d:d5:4b:62:e8:36:90: d6:a3:d6:bb:72:98:d8:d1:d1:e9:ed:2a:9d:bf:38: 2d:4c:47:31:d7:4a:eb:b5:df:4d:f5:6a:64:9c:92: 36:cb:80:42:d3:e8:b2:30:ed:7d:08:b0:53:cc:d6: ef:de:33:66:2d:20:83:01:c0:aa:be:b5:bc:44:78: 2a:84:ac:e7:10:77:00:15:25:d4:ee:14:b8:22:06: a4:57:03:bd:2e:43:9c:b0:54:e6:8b:60:b1:ab:cb: 39:f2:95:e6:d5:47:1b:48:12:0d:02:62:4a:e8:79: 17:52:b8:63:f4:d4:85:2d:b2:71:3e:4a:d6:3f:00: ac:aa:8a:f6:24:2d:3f:e0:41:e9:c1:7a:06:db:22: df:50:eb:c5:2e:c0:0e:a7:a3:71:0f:a4:fd:7b:7f: f7:ef:15:a4:79:8b:c3:4b:78:36:72:6c:40:27:e6: a0:fc:4c:b3:4d:f5:da:f2:5b:0f:7c:27:7e:25:53: a5:d2:eb:89:83:3e:33:13:2b:13:84:c4:65:5d:41: 6b:ed:c1:ac:df:c6:de:88:c5:98:0a:b4:9d:b9:89: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:52:A2:C9:0E:B3:37:0C:05:B1:9E:02:9C:19:C1:7D:1A:8C:48 X509v3 Authority Key Identifier: keyid:54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9c:78:4a:98:f1:30:4e:e5:e2:40:e6:1f:56:39:ce:13:b7: a9:da:45:dd:e6:d2:b5:34:5f:27:39:d2:ad:a7:9b:bb:3f:a0: 77:43:99:ae:6d:79:46:c6:a0:94:5c:23:ae:19:92:04:bc:bf: a1:03:42:43:39:52:2c:2e:4f:7b:5d:16:56:d9:58:e3:23:76: 2a:37:9c:90:74:c1:6a:52:35:94:cd:98:6e:d0:11:e1:ed:1a: 96:0a:21:5a:a6:c2:9b:ed:eb:76:3b:43:f5:03:f3:a2:7e:d5: d9:cb:36:4e:fc:07:ae:ad:c4:b4:98:e7:88:5e:da:ce:44:62: fe:aa:1d:79:67:da:bc:b6:4c:37:71:cb:ae:52:4d:12:7f:b5: 7b:a2:2f:a1:92:9b:51:24:15:b5:a3:c4:09:d3:6e:8e:00:6b: 10:8b:4b:56:6e:d7:02:6c:ad:46:68:e0:7f:d9:f5:63:83:19: d5:5e:6a:98:f6:cf:ee:ee:76:f1:2f:56:3d:5f:a4:6e:71:53: 6b:0d:90:18:64:bc:01:f3:09:76:17:73:b5:9c:c4:15:ed:b7: 60:2d:0c:a7:b5:2f:01:8d:4a:a4:b6:a4:66:1b:9b:01:ba:45: c9:dd:fd:44:3f:0b:43:54:f1:c4:b2:c1:ff:aa:5c:99:a3:f7: 20:97:f7:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/Eb2P1CK3QhNGxN+5CIWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDhhNWM1YzU3N2I1M2NjMjk4YWYwNDQzZWRkNDM1MmUx YjEzMDAwHhcNMjUxMjIxMDQwMTI1WhcNMjUxMjIyMDQwMTI1WjAzMTEwLwYDVQQD EyhjNGVhNTJhMmM5MGViMzM3MGMwNWIxOWUwMjljMTljMTdkMWE4YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1uJnOEmzoF9mMPrno3BK2KwBtlZ ZYV/eq2ih6TwcxI9q4N2hg3VS2LoNpDWo9a7cpjY0dHp7SqdvzgtTEcx10rrtd9N 9WpknJI2y4BC0+iyMO19CLBTzNbv3jNmLSCDAcCqvrW8RHgqhKznEHcAFSXU7hS4 IgakVwO9LkOcsFTmi2Cxq8s58pXm1UcbSBINAmJK6HkXUrhj9NSFLbJxPkrWPwCs qor2JC0/4EHpwXoG2yLfUOvFLsAOp6NxD6T9e3/37xWkeYvDS3g2cmxAJ+ag/Eyz TfXa8lsPfCd+JVOl0uuJgz4zEysThMRlXUFr7cGs38beiMWYCrSduYknhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTqUqLJDrM3DAWxngKcGcF9GoxIMB8GA1UdIwQY MBaAFFRIpcXFd7U8wpivBEPt1DUuGxMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYWM1ZmUtYjkxNC00YWVmLWI3Y2Et M2QwYzY4M2ZhOWM5LzEvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9kYWM1ZmUtYjkxNC00YWVmLWI3Y2EtM2QwYzY4M2ZhOWM5 LzEvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5x4Spjx ME7l4kDmH1Y5zhO3qdpF3ebStTRfJznSraebuz+gd0OZrm15RsaglFwjrhmSBLy/ oQNCQzlSLC5Pe10WVtlY4yN2KjeckHTBalI1lM2YbtAR4e0algohWqbCm+3rdjtD 9QPzon7V2cs2TvwHrq3EtJjniF7azkRi/qodeWfavLZMN3HLrlJNEn+1e6IvoZKb USQVtaPECdNujgBrEItLVm7XAmytRmjgf9n1Y4MZ1V5qmPbP7u528S9WPV+kbnFT aw2QGGS8AfMJdhdztZzEFe23YC0Mp7UvAY1KpLakZhubAbpFyd39RD8LQ1TxxLLB /6pcmaP3IJf3ow== -----END CERTIFICATE-----Generated at Sun Dec 21 05:26:03 2025 by rpki-client