This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json) Hash identifier: e1J8301JcIVlkJ1oDsF25j2gf0IJJHY5paCUtkImgfQ= Subject key identifier: 27:66:C0:BA:3F:83:AF:C5:AA:1D:16:80:EF:0F:AB:A3:D4:DA:B1:F1 Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019AF61CE90077DECF0FFA013C2A6F44793B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft Manifest number: 0C73 Signing time: Sun 07 Dec 2025 00:01:20 +0000 Manifest this update: Sun 07 Dec 2025 00:01:20 +0000 Manifest next update: Mon 08 Dec 2025 00:01:20 +0000 Files and hashes: 1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=) 2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=) 3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: YATynDinhVeLNjYVFLLSTixWnxBeRokdRjFPoU49nsA=) 4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=) 5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=) 6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=) 7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:e9:00:77:de:cf:0f:fa:01:3c:2a:6f:44:79:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Dec 7 00:01:20 2025 GMT Not After : Dec 8 00:01:20 2025 GMT Subject: CN=2766c0ba3f83afc5aa1d1680ef0faba3d4dab1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:b7:2a:66:99:55:86:e7:be:1f:4c:40:d5: f6:c8:25:8d:3f:75:90:50:d8:b0:ba:e6:4f:d7:2c: d0:75:ad:96:43:64:72:f1:48:b8:b9:bd:4c:8a:47: cb:c9:11:e7:05:70:a3:8f:f7:f0:08:75:81:fc:be: 30:f7:5b:37:c7:d5:f4:5b:4d:7c:8e:01:d2:b7:1f: 10:a5:f6:e7:c7:03:4d:ed:e4:f9:fb:62:c4:e2:2b: cf:a9:57:ce:6b:9d:6b:13:00:c7:dd:b1:9f:77:d1: 23:37:9e:69:4f:98:9e:b1:dd:e3:a3:7d:49:f1:f2: 3d:a1:db:9b:10:d2:e1:b8:f7:13:f2:a9:e2:a6:72: c1:1b:f9:13:4a:70:c4:83:cc:4a:18:36:97:54:df: a5:b2:0f:d4:e5:0c:97:cf:10:bc:1d:8f:d1:0a:57: 8b:fc:47:60:5f:35:9c:b3:6e:cb:ab:60:04:3c:6e: 7c:c9:8e:a6:24:ec:a1:5e:8b:d6:87:47:09:cd:d9: c0:d0:8e:5e:a3:62:f0:d6:58:1e:d4:f9:c5:c2:74: b3:d9:a4:0b:c0:31:c6:a8:0c:16:11:04:bc:e0:eb: 42:de:d6:ff:00:1f:3b:4f:5b:16:2b:06:ce:49:53: 79:3c:73:e5:65:1a:30:b9:c9:7e:91:5a:aa:40:b0: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:66:C0:BA:3F:83:AF:C5:AA:1D:16:80:EF:0F:AB:A3:D4:DA:B1:F1 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b8:95:4c:74:25:57:d0:c2:2a:ee:53:69:69:78:9b:01:5e: 95:31:a4:3d:08:ec:4a:91:4f:5d:c7:fd:8d:6e:d2:12:64:d7: 4f:15:bb:51:45:11:68:50:ec:a2:24:f0:57:6e:ea:e7:96:4f: 8c:ce:0b:9f:40:97:20:ea:20:96:f9:08:7e:83:ec:7d:e6:cf: 6f:4a:50:12:2b:8c:8e:7e:4b:fe:38:fc:47:25:97:51:e5:a7: 43:7a:28:8b:c0:0e:f3:b5:4d:12:18:f4:8d:bd:32:a9:f8:a8: 8d:07:44:e4:79:e2:5f:76:5c:15:d9:da:9d:0c:e8:3d:92:90: 60:0e:a6:92:5e:50:a3:96:07:be:db:52:51:77:92:65:95:ed: 3a:ce:1d:55:cf:ba:47:6e:8d:4c:9a:6b:0d:43:fc:9e:3a:c4: 70:f3:99:30:96:0d:27:50:8a:c2:d4:b8:73:33:34:d9:f9:b5: 21:e9:8a:8c:b2:78:21:ff:bd:4b:25:63:7a:e5:e5:45:0c:f4: f1:9d:4d:09:dc:f7:d7:bc:6b:af:45:f4:05:6f:b9:b9:7d:41: 6f:ab:b1:a2:08:41:9f:15:56:37:1e:2e:73:c4:10:02:93:78: 0c:4a:91:4f:33:98:97:09:1e:8b:bb:ab:f9:08:53:6e:f3:2a: 48:be:ee:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HOkAd97PD/oBPCpvRHk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjUxMjA3MDAwMTIwWhcNMjUxMjA4MDAwMTIwWjAzMTEwLwYDVQQD EygyNzY2YzBiYTNmODNhZmM1YWExZDE2ODBlZjBmYWJhM2Q0ZGFiMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rK3KmaZVYbnvh9MQNX2yCWNP3WQ UNiwuuZP1yzQda2WQ2Ry8Ui4ub1MikfLyRHnBXCjj/fwCHWB/L4w91s3x9X0W018 jgHStx8QpfbnxwNN7eT5+2LE4ivPqVfOa51rEwDH3bGfd9EjN55pT5iesd3jo31J 8fI9odubENLhuPcT8qnipnLBG/kTSnDEg8xKGDaXVN+lsg/U5QyXzxC8HY/RCleL /EdgXzWcs27Lq2AEPG58yY6mJOyhXovWh0cJzdnA0I5eo2Lw1lge1PnFwnSz2aQL wDHGqAwWEQS84OtC3tb/AB87T1sWKwbOSVN5PHPlZRowucl+kVqqQLCu6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdmwLo/g6/Fqh0WgO8Pq6PU2rHxMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7iVTHQl V9DCKu5TaWl4mwFelTGkPQjsSpFPXcf9jW7SEmTXTxW7UUURaFDsoiTwV27q55ZP jM4Ln0CXIOoglvkIfoPsfebPb0pQEiuMjn5L/jj8RyWXUeWnQ3ooi8AO87VNEhj0 jb0yqfiojQdE5HniX3ZcFdnanQzoPZKQYA6mkl5Qo5YHvttSUXeSZZXtOs4dVc+6 R26NTJprDUP8njrEcPOZMJYNJ1CKwtS4czM02fm1IemKjLJ4If+9SyVjeuXlRQz0 8Z1NCdz317xrr0X0BW+5uX1Bb6uxoghBnxVWNx4uc8QQApN4DEqRTzOYlwkei7ur +QhTbvMqSL7ubw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:26:07 2025 by rpki-client