This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json) Hash identifier: HdG4iuk1e9zva+nDpNfbkzElDHL2n6jwr+dDy5V2kkU= Subject key identifier: E9:0E:B0:26:21:C2:30:54:47:34:6A:0D:CE:A8:90:22:80:A8:DF:C8 Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964 Certificate serial: 019AF276610CC3CBB69A28CDE921953FABFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft Manifest number: 0597 Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: aYGywPE1iW6LWJGHyHbBGmj8+jHExYtBoT2niggMBvw=) 2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:61:0c:c3:cb:b6:9a:28:cd:e9:21:95:3f:ab:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=e90eb02621c2305447346a0dcea8902280a8dfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:3b:28:1a:17:55:f7:94:88:41:cc:f8:7e: 87:7e:b4:29:8e:6e:66:1d:34:3f:5a:15:fc:aa:2e: 56:80:0c:45:8f:44:13:05:f0:7b:f4:92:89:b7:40: c2:65:ef:4e:68:5f:56:46:13:75:77:3f:77:d4:2f: c2:b5:aa:ab:52:8b:91:f8:67:b1:f3:13:07:4a:63: 4e:8f:d6:16:5a:f9:6e:8a:83:2e:70:79:e6:75:f5: b3:84:f7:10:63:e8:cd:f8:64:b1:6f:7c:aa:4e:b3: be:f7:e2:a2:81:7b:6b:d8:4c:c6:98:4d:c1:b4:9f: 4e:96:66:94:ee:81:72:8d:57:de:dd:eb:d5:94:87: 31:ee:b2:26:34:4b:1b:5e:76:00:17:0d:5b:80:76: c1:61:c6:8c:8e:d2:cb:87:68:81:cf:a9:36:08:26: dd:ee:e8:4b:fa:69:08:e6:77:7d:81:b4:ee:5b:48: a7:d9:90:eb:f8:0e:e1:1a:50:b7:14:49:f3:de:d8: 33:a9:2a:89:35:ff:e5:16:45:6d:5d:ba:33:5b:ed: 9c:72:47:b5:ef:4f:11:bb:8a:f4:16:73:13:8f:e6: f3:e0:5e:67:b1:e5:bb:23:24:22:1a:dc:48:c7:95: 5c:3e:fb:88:aa:b2:88:bc:0d:1b:27:f7:79:a6:69: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0E:B0:26:21:C2:30:54:47:34:6A:0D:CE:A8:90:22:80:A8:DF:C8 X509v3 Authority Key Identifier: keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e0:39:ba:49:7d:c8:78:87:75:b9:8d:eb:bf:9f:5b:42:5c: c1:39:e6:b2:a0:96:dd:90:f2:79:14:a7:c2:19:33:4a:bf:03: e1:bb:81:a1:41:85:83:e6:cf:7c:6a:50:5c:a8:90:4d:0f:47: b5:ed:cb:a8:00:e0:b3:75:3e:91:ee:82:b8:57:8d:ba:9f:3e: b3:39:6d:d4:cd:bd:59:6b:4f:4a:3b:f2:dd:fc:60:d4:72:bd: d8:da:59:68:09:37:f1:a1:8c:76:c5:8e:cb:f0:8f:f0:82:d6: 05:e8:fe:ac:93:7d:b7:4e:76:7d:77:94:e9:ab:81:61:54:f3: 78:54:f5:db:28:69:e5:ea:8c:e9:80:bc:a5:be:08:52:a5:21: 31:64:9d:9a:fc:f6:1d:09:3e:ae:a6:01:d5:e9:6a:4b:12:c8: f7:f7:31:a6:e7:37:19:9e:da:61:62:ef:07:39:a2:21:02:bf: 63:ad:bd:23:d1:78:88:79:80:f2:1a:44:28:4d:e3:16:32:fb: 65:62:d2:06:51:d2:92:0a:fd:67:f1:c8:22:3a:17:6b:de:18: 4c:8a:53:79:12:20:50:22:fc:3d:f4:36:0b:a2:01:c3:77:84: 0d:8c:4f:b0:f9:16:96:f4:c3:f7:f2:00:4f:f5:c2:a4:a1:c2: 4e:6e:2a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmEMw8u2mijN6SGVP6v7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm ZjU5NjQwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhlOTBlYjAyNjIxYzIzMDU0NDczNDZhMGRjZWE4OTAyMjgwYThkZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P87KBoXVfeUiEHM+H6HfrQpjm5m HTQ/WhX8qi5WgAxFj0QTBfB79JKJt0DCZe9OaF9WRhN1dz931C/CtaqrUouR+Gex 8xMHSmNOj9YWWvluioMucHnmdfWzhPcQY+jN+GSxb3yqTrO+9+KigXtr2EzGmE3B tJ9OlmaU7oFyjVfe3evVlIcx7rImNEsbXnYAFw1bgHbBYcaMjtLLh2iBz6k2CCbd 7uhL+mkI5nd9gbTuW0in2ZDr+A7hGlC3FEnz3tgzqSqJNf/lFkVtXbozW+2ccke1 708Ru4r0FnMTj+bz4F5nseW7IyQiGtxIx5VcPvuIqrKIvA0bJ/d5pmn+/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkOsCYhwjBURzRqDc6okCKAqN/IMB8GA1UdIwQY MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt ZTA1MjkwMTZjYmEwLzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeA5ukl9 yHiHdbmN67+fW0JcwTnmsqCW3ZDyeRSnwhkzSr8D4buBoUGFg+bPfGpQXKiQTQ9H te3LqADgs3U+ke6CuFeNup8+szlt1M29WWtPSjvy3fxg1HK92NpZaAk38aGMdsWO y/CP8ILWBej+rJN9t052fXeU6auBYVTzeFT12yhp5eqM6YC8pb4IUqUhMWSdmvz2 HQk+rqYB1elqSxLI9/cxpuc3GZ7aYWLvBzmiIQK/Y629I9F4iHmA8hpEKE3jFjL7 ZWLSBlHSkgr9Z/HIIjoXa94YTIpTeRIgUCL8PfQ2C6IBw3eEDYxPsPkWlvTD9/IA T/XCpKHCTm4qpg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:13 2025 by rpki-client