This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json) Hash identifier: QjI9jEzcp93EzYfQOUqcFHZnDZ9UV6THM6hpSrBf8oc= Subject key identifier: 1C:72:32:96:F3:1A:E9:86:66:0E:80:0A:39:62:EA:E4:8E:35:52:94 Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72 Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572 Certificate serial: 019B2B53EF310747F2DA09CF7095EE675A60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft Manifest number: 1497 Signing time: Wed 17 Dec 2025 08:01:19 +0000 Manifest this update: Wed 17 Dec 2025 08:01:19 +0000 Manifest next update: Thu 18 Dec 2025 08:01:19 +0000 Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=) 2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: s/PZjscMRYyQ/VGzKqACncb79lSiemZhqOX5E2NhWVM=) 3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:ef:31:07:47:f2:da:09:cf:70:95:ee:67:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572 Validity Not Before: Dec 17 08:01:19 2025 GMT Not After : Dec 18 08:01:19 2025 GMT Subject: CN=1c723296f31ae986660e800a3962eae48e355294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:cc:57:4b:2c:85:df:83:b9:08:33:41:16: 64:d6:33:5e:b2:cc:18:fb:4d:39:bc:1f:db:8b:ac: 32:44:2e:3d:38:b8:9a:d9:82:f1:0c:83:49:84:e6: 84:61:30:54:a2:77:72:1f:3e:fb:21:f7:f5:52:e9: 2c:60:6c:6b:0f:3e:53:eb:da:fb:f8:c8:b2:3b:7c: d6:ce:bb:1a:58:60:04:a6:f4:98:df:60:d5:66:ad: f9:2e:32:ff:a4:33:5e:1c:74:71:d4:16:db:a2:98: 3d:33:13:d9:df:c8:36:89:2f:e3:eb:d5:88:89:2a: 40:cd:f9:7b:ae:97:0a:2a:ce:05:4c:d2:d6:e6:92: c5:68:05:44:fa:ea:17:8f:25:0b:5b:8d:da:29:13: 7c:96:32:e5:2a:7c:0e:1a:1f:e3:0c:c9:27:3f:48: 06:9a:ec:e2:0d:35:1d:59:85:d3:ce:6c:21:56:7a: 4d:55:76:0e:33:e6:2c:e5:2b:a6:fd:66:b6:47:30: 35:c1:55:be:aa:f1:a4:e8:27:e5:73:a0:fa:c1:0e: 5d:78:56:a7:32:99:78:f4:25:c7:e8:ee:eb:b9:96: 26:ab:8f:76:e8:85:5e:66:c4:8f:a2:af:fc:6d:fa: ba:4e:11:3f:ea:d4:66:c7:a1:2d:b8:2e:52:27:a8: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:32:96:F3:1A:E9:86:66:0E:80:0A:39:62:EA:E4:8E:35:52:94 X509v3 Authority Key Identifier: keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:32:50:52:85:7b:ea:50:00:53:30:0b:e0:2c:1c:55:cc:37: 88:26:98:f7:66:3a:5c:d3:24:e7:e0:e7:12:38:73:1d:23:68: d0:e6:80:91:7c:4d:3c:0c:90:e0:fd:9d:1e:49:f6:35:57:c6: da:7d:b5:de:b5:d7:8e:bb:ed:bf:25:b5:ba:c5:22:06:aa:35: 92:48:e7:d8:58:a6:5e:7b:fe:b3:b9:13:7c:b6:00:3d:d8:af: 0a:8b:c8:d7:51:45:29:93:ba:ca:ed:f8:5d:1e:2d:40:3f:16: e0:8f:b2:29:7a:93:da:79:1a:cb:4e:26:b1:68:84:c7:9f:c8: c4:ac:eb:3d:42:92:e6:b9:59:9d:bf:1c:b7:4a:07:de:29:ad: e6:51:a4:8b:1c:e5:5f:ec:ea:d0:33:a5:5d:fa:22:f0:33:c7: e6:c4:c2:4e:ca:6b:1b:92:96:db:38:3e:2d:67:0d:27:39:fe: 65:0b:b5:2d:9e:86:20:75:ca:c5:6e:85:d4:23:26:fa:01:5b: 57:e6:82:0f:46:87:61:71:47:5b:7b:b3:f9:a4:4d:8e:0d:ea: 86:a0:9f:9c:36:a8:62:4a:96:b1:05:68:81:c6:96:30:da:30: 2b:86:b0:5f:d8:bd:2f:48:e8:f6:29:d4:6e:cc:40:52:fc:73: 01:6a:91:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU+8xB0fy2gnPcJXuZ1pgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDVkYzllMjIwMTEyYTI3YzE1MmJjMzIzODkwMzg5NzRh ZTQ1NzIwHhcNMjUxMjE3MDgwMTE5WhcNMjUxMjE4MDgwMTE5WjAzMTEwLwYDVQQD EygxYzcyMzI5NmYzMWFlOTg2NjYwZTgwMGEzOTYyZWFlNDhlMzU1Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu27MV0sshd+DuQgzQRZk1jNesswY +005vB/bi6wyRC49OLia2YLxDINJhOaEYTBUondyHz77Iff1UuksYGxrDz5T69r7 +MiyO3zWzrsaWGAEpvSY32DVZq35LjL/pDNeHHRx1Bbbopg9MxPZ38g2iS/j69WI iSpAzfl7rpcKKs4FTNLW5pLFaAVE+uoXjyULW43aKRN8ljLlKnwOGh/jDMknP0gG muziDTUdWYXTzmwhVnpNVXYOM+Ys5Sum/Wa2RzA1wVW+qvGk6Cflc6D6wQ5deFan Mpl49CXH6O7ruZYmq4926IVeZsSPoq/8bfq6ThE/6tRmx6EtuC5SJ6hEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxyMpbzGumGZg6ACjli6uSONVKUMB8GA1UdIwQY MBaAFFXV3J4iARKifBUrwyOJA4l0rkVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRYY25pSUJFcUo4RlN2REk0a0RpWFN1UlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOGVkNDEtNzFmNi00YmI3LWEzZWUt YTBiYjE0MGE1OTZlLzEvVmRYY25pSUJFcUo4RlN2REk0a0RpWFN1UlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kOGVkNDEtNzFmNi00YmI3LWEzZWUtYTBiYjE0MGE1OTZl LzEvVmRYY25pSUJFcUo4RlN2REk0a0RpWFN1UlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzJQUoV7 6lAAUzAL4CwcVcw3iCaY92Y6XNMk5+DnEjhzHSNo0OaAkXxNPAyQ4P2dHkn2NVfG 2n213rXXjrvtvyW1usUiBqo1kkjn2FimXnv+s7kTfLYAPdivCovI11FFKZO6yu34 XR4tQD8W4I+yKXqT2nkay04msWiEx5/IxKzrPUKS5rlZnb8ct0oH3imt5lGkixzl X+zq0DOlXfoi8DPH5sTCTsprG5KW2zg+LWcNJzn+ZQu1LZ6GIHXKxW6F1CMm+gFb V+aCD0aHYXFHW3uz+aRNjg3qhqCfnDaoYkqWsQVogcaWMNowK4awX9i9L0jo9inU bsxAUvxzAWqR0w== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:32 2025 by rpki-client