This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json) Hash identifier: 4WDPktcU/Iqwt3uYtraBq/b9Lk2lYwQV2xcXJMumrUg= Subject key identifier: 3A:57:F9:58:FA:2E:78:C2:66:B4:A1:45:1B:85:17:56:D9:64:1E:53 Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54 Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454 Certificate serial: 019AF2400D856DC9120FF9DA0152995D21FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft Manifest number: 151D Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=) 2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: Q+jOsC0EEpgYbMnRC+4x9Lu+EyKdWcvDFPY0Aknm7AE=) 3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0d:85:6d:c9:12:0f:f9:da:01:52:99:5d:21:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=3a57f958fa2e78c266b4a1451b851756d9641e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:40:96:13:5d:81:b0:14:68:13:13:cb:ed: b1:4c:56:df:13:f6:1b:b3:4c:52:a0:38:64:36:83: eb:01:f0:f3:e0:a8:c0:44:32:61:94:9b:96:51:3a: 05:05:bd:bb:89:32:81:37:97:26:59:3e:f4:98:72: ac:a5:38:66:ea:4d:a5:a6:f8:43:10:7c:5f:a0:77: 5d:3e:3e:f1:1f:80:2f:59:48:05:3f:0f:b7:52:9b: 12:03:ec:06:ad:58:ee:78:31:0a:9f:ef:15:08:00: eb:05:c5:9c:b7:cf:96:1a:23:04:35:1c:da:d2:58: b2:5a:cc:ab:c4:c3:42:f1:61:35:20:ec:9e:8c:29: b3:46:32:f7:e8:90:21:c1:a3:79:be:0f:5e:b6:5c: 0f:4d:8a:f8:5f:9e:a4:8f:6a:5a:67:38:e6:9f:5a: 63:d9:95:05:87:23:3d:13:78:64:28:44:9d:72:f1: 02:80:bb:4f:44:f0:7f:2c:2f:a6:65:8e:ad:75:aa: 58:ea:8b:f2:b0:56:97:1e:a8:30:4d:cc:3d:5c:ca: b1:83:7a:b4:7f:83:b5:08:0f:ed:ed:47:ce:87:fe: b1:65:57:fa:8a:e1:70:73:64:d2:f2:d0:f2:28:a2: 71:f0:ad:83:db:d8:d1:4a:aa:f6:e5:e9:fe:af:50: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:57:F9:58:FA:2E:78:C2:66:B4:A1:45:1B:85:17:56:D9:64:1E:53 X509v3 Authority Key Identifier: keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:32:6d:4e:ec:b0:fc:b6:f9:54:fb:9d:b0:b0:a7:48:a0:61: fb:80:f7:7b:fc:ab:af:30:8a:6a:1c:0b:c4:3e:45:a1:3a:93: b4:52:59:da:02:ba:2e:2a:61:b7:49:fa:7a:dd:24:36:5e:58: db:b4:b1:2b:7f:89:b3:48:ad:78:ac:b3:51:10:d2:9b:19:ff: 04:e1:f5:93:ca:3b:11:f3:1b:ed:4d:22:7d:b1:da:0d:b4:1f: 91:d1:4f:db:12:70:c3:ed:36:d6:25:b2:ce:d3:9f:98:7b:58: ae:c8:aa:6c:21:aa:14:ef:60:62:35:c3:1a:46:cd:84:db:07: d5:fe:5e:b9:77:9c:8f:d1:53:0d:77:68:c4:52:40:20:56:7d: 31:ad:0c:2a:6d:34:89:ae:fb:d5:ac:ba:91:ad:7b:df:be:6d: be:66:ff:d7:aa:58:07:af:a8:7b:bc:03:69:01:fc:0c:61:f0: 39:50:0a:0a:32:32:82:ff:0d:3c:a6:ab:3d:00:65:33:62:cd: 98:47:51:73:2d:0a:f5:fe:98:f6:93:80:b0:19:c4:f9:e8:ae: 66:be:8d:7e:05:97:46:e7:5a:79:6d:5c:b7:f2:fd:35:cd:a6: 43:4a:0c:85:26:9e:39:b7:30:89:14:96:9c:ef:57:d9:cb:f2: ea:cc:74:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQA2FbckSD/naAVKZXSH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzkxZGRlMmM5YmRlYTM2NmNlN2VjNmM1YTgwMGM1ZGE2 MzM0NTQwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EygzYTU3Zjk1OGZhMmU3OGMyNjZiNGExNDUxYjg1MTc1NmQ5NjQxZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRdAlhNdgbAUaBMTy+2xTFbfE/Yb s0xSoDhkNoPrAfDz4KjARDJhlJuWUToFBb27iTKBN5cmWT70mHKspThm6k2lpvhD EHxfoHddPj7xH4AvWUgFPw+3UpsSA+wGrVjueDEKn+8VCADrBcWct8+WGiMENRza 0liyWsyrxMNC8WE1IOyejCmzRjL36JAhwaN5vg9etlwPTYr4X56kj2paZzjmn1pj 2ZUFhyM9E3hkKESdcvECgLtPRPB/LC+mZY6tdapY6ovysFaXHqgwTcw9XMqxg3q0 f4O1CA/t7UfOh/6xZVf6iuFwc2TS8tDyKKJx8K2D29jRSqr25en+r1DPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpX+Vj6LnjCZrShRRuFF1bZZB5TMB8GA1UdIwQY MBaAFFR5Hd4sm96jZs5+xsWoAMXaYzRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQt MThiMzRiZWE5YjA2LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQtMThiMzRiZWE5YjA2 LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDJtTuyw /Lb5VPudsLCnSKBh+4D3e/yrrzCKahwLxD5FoTqTtFJZ2gK6Lipht0n6et0kNl5Y 27SxK3+Js0iteKyzURDSmxn/BOH1k8o7EfMb7U0ifbHaDbQfkdFP2xJww+021iWy ztOfmHtYrsiqbCGqFO9gYjXDGkbNhNsH1f5euXecj9FTDXdoxFJAIFZ9Ma0MKm00 ia771ay6ka17375tvmb/16pYB6+oe7wDaQH8DGHwOVAKCjIygv8NPKarPQBlM2LN mEdRcy0K9f6Y9pOAsBnE+eiuZr6NfgWXRudaeW1ct/L9Nc2mQ0oMhSaeObcwiRSW nO9X2cvy6sx0eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:03 2025 by rpki-client