This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft File: VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json) Hash identifier: YTc+/higjVJz4WjNZfFWf+ZkrfGmM8YcAFN5f/a4Gzc= Subject key identifier: E9:A2:13:84:7B:D1:43:8C:E6:DD:AF:C6:D9:9F:47:9F:D1:E8:35:D5 Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12 Certificate issuer: /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012 Certificate serial: 019B360E53D9B1D268C55125F72430B7008A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft Manifest number: 1761 Signing time: Fri 19 Dec 2025 10:01:07 +0000 Manifest this update: Fri 19 Dec 2025 10:01:07 +0000 Manifest next update: Sat 20 Dec 2025 10:01:07 +0000 Files and hashes: 1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: P5hX8bUPt6M3IjwPKgK8Mk0dXIYbuRF8xS5OKLHKRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:53:d9:b1:d2:68:c5:51:25:f7:24:30:b7:00:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012 Validity Not Before: Dec 19 10:01:07 2025 GMT Not After : Dec 20 10:01:07 2025 GMT Subject: CN=e9a213847bd1438ce6ddafc6d99f479fd1e835d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:a6:f7:30:22:52:b9:a6:f1:23:b3:e9:41: 41:ad:5f:b9:4f:1a:fa:ca:6c:52:d6:ee:2a:1c:a9: 70:2e:36:dc:a2:67:d8:37:b5:9c:e5:d0:e9:a9:a8: bc:fd:27:d5:fb:1a:77:06:75:c0:14:fa:29:46:c3: 9f:a4:3f:1c:5f:11:09:fc:c1:50:17:45:32:e9:8d: 03:39:78:86:fe:3d:b1:25:c8:ae:52:22:8b:8e:af: 57:b4:8a:67:19:48:e1:8c:42:d6:ab:9f:7a:26:81: e4:b8:a7:47:7b:46:f7:9c:84:f2:3f:49:23:21:4c: af:79:6f:bb:41:71:52:2d:ae:28:f5:96:e0:c2:cf: fa:34:ab:51:76:8b:a7:81:84:42:21:91:20:80:25: d0:9a:1d:45:bf:56:ae:70:5f:53:8e:73:7d:66:eb: 9c:12:74:5c:79:6f:a2:a1:f3:f0:3a:74:1e:90:94: 4a:47:01:7c:3d:0e:ae:69:a7:a9:56:80:58:95:d7: eb:72:37:3f:bb:26:06:bb:76:91:5b:26:1f:97:33: 27:87:14:61:63:84:62:e2:22:9b:7a:44:a3:e4:92: 5f:16:38:38:c2:30:06:52:60:6b:68:42:b6:1e:7e: 47:cf:4d:32:45:29:35:52:78:1f:79:d9:e7:26:4e: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A2:13:84:7B:D1:43:8C:E6:DD:AF:C6:D9:9F:47:9F:D1:E8:35:D5 X509v3 Authority Key Identifier: keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:82:a7:fd:e1:1c:f4:65:35:4c:0f:b6:b9:4f:2b:84:09:bd: 71:48:b1:81:58:44:40:7d:02:58:f8:70:4b:cf:28:18:ca:c1: 0c:99:16:84:1c:0b:5b:c6:b2:e5:08:1f:db:c4:4c:28:ac:6b: 17:08:5f:13:6d:68:1c:ae:7d:7c:16:ee:58:ce:16:c7:04:0a: f9:d6:33:50:d3:4b:00:86:9f:95:eb:26:fa:37:e2:17:ff:7d: 67:44:57:11:f0:ff:46:d5:10:58:e8:22:ed:85:16:0b:78:6f: 75:52:42:bd:04:75:ed:f4:7a:9a:ef:94:d4:fc:fc:a7:7b:39: 44:22:20:20:9c:99:a5:f5:46:d4:89:49:a3:db:08:3c:1c:4c: f7:9b:67:d0:0c:49:96:86:02:79:82:36:68:2b:77:61:77:85: c3:69:ba:42:38:17:4b:ec:7f:38:4d:bb:c4:b7:e4:68:d1:8a: 22:42:48:5c:f7:6a:cb:1a:15:63:3a:9b:a0:c1:da:93:8e:b5: 4a:62:99:8a:2a:c1:c7:77:2f:f4:a5:51:9c:b7:ca:f1:d5:ce: 6b:25:db:41:12:a2:49:4b:44:b0:47:a1:a4:19:19:77:d0:9c: 6e:ef:32:4d:db:b6:ae:cf:f3:69:2c:30:a1:76:b1:92:27:8c: 0d:13:a1:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlPZsdJoxVEl9yQwtwCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzI5ZDQ5ZDJiMmUwMGJiY2IyODUzYTc0Y2JjMGU5NDY3 M2YwMTIwHhcNMjUxMjE5MTAwMTA3WhcNMjUxMjIwMTAwMTA3WjAzMTEwLwYDVQQD EyhlOWEyMTM4NDdiZDE0MzhjZTZkZGFmYzZkOTlmNDc5ZmQxZTgzNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzim9zAiUrmm8SOz6UFBrV+5Txr6 ymxS1u4qHKlwLjbcomfYN7Wc5dDpqai8/SfV+xp3BnXAFPopRsOfpD8cXxEJ/MFQ F0Uy6Y0DOXiG/j2xJciuUiKLjq9XtIpnGUjhjELWq596JoHkuKdHe0b3nITyP0kj IUyveW+7QXFSLa4o9Zbgws/6NKtRdoungYRCIZEggCXQmh1Fv1aucF9TjnN9Zuuc EnRceW+iofPwOnQekJRKRwF8PQ6uaaepVoBYldfrcjc/uyYGu3aRWyYflzMnhxRh Y4Ri4iKbekSj5JJfFjg4wjAGUmBraEK2Hn5Hz00yRSk1UngfednnJk6+5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmiE4R70UOM5t2vxtmfR5/R6DXVMB8GA1UdIwQY MBaAFFRynUnSsuALvLKFOnTLwOlGc/ASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTVlZjctYjhmZS00NjU5LTk2OTgt MGZjMDYwMjIwNjI5LzEvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTVlZjctYjhmZS00NjU5LTk2OTgtMGZjMDYwMjIwNjI5 LzEvVkhLZFNkS3k0QXU4c29VNmRNdkE2VVp6OEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIKn/eEc 9GU1TA+2uU8rhAm9cUixgVhEQH0CWPhwS88oGMrBDJkWhBwLW8ay5Qgf28RMKKxr FwhfE21oHK59fBbuWM4WxwQK+dYzUNNLAIaflesm+jfiF/99Z0RXEfD/RtUQWOgi 7YUWC3hvdVJCvQR17fR6mu+U1Pz8p3s5RCIgIJyZpfVG1IlJo9sIPBxM95tn0AxJ loYCeYI2aCt3YXeFw2m6QjgXS+x/OE27xLfkaNGKIkJIXPdqyxoVYzqboMHak461 SmKZiirBx3cv9KVRnLfK8dXOayXbQRKiSUtEsEehpBkZd9Ccbu8yTdu2rs/zaSww oXaxkieMDROhTg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:49:53 2025 by rpki-client