This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json) Hash identifier: jNzBxmnRQpvzsKZeiAXDAMaY4Tj4u5iIaRrouYSc+TY= Subject key identifier: 2C:3B:3E:19:59:7D:A5:3A:A7:A2:8A:54:C1:87:60:B9:02:90:F4:EC Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Certificate serial: 019AF42DE99364B0389369B98F181744C7A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft Manifest number: 1241 Signing time: Sat 06 Dec 2025 15:00:40 +0000 Manifest this update: Sat 06 Dec 2025 15:00:40 +0000 Manifest next update: Sun 07 Dec 2025 15:00:40 +0000 Files and hashes: 1: EDy93mAhA2FhoPZrv_qXDnBaEPY.roa (hash: gcQKa9NBtqbmaNQOkXvvz+TImpW4xhVs+8xtbTy1SZU=) 2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: WA6L3Gox1e8y8sUqniU7LqA13SiwF1znye2CMakwDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:e9:93:64:b0:38:93:69:b9:8f:18:17:44:c7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Validity Not Before: Dec 6 15:00:40 2025 GMT Not After : Dec 7 15:00:40 2025 GMT Subject: CN=2c3b3e19597da53aa7a28a54c18760b90290f4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:49:9c:0d:95:fe:20:40:9d:c3:50:38:5c: 3e:00:d7:c0:a1:2c:a6:ae:18:a0:91:35:fc:24:f2: 39:db:ed:70:c4:d1:c5:51:79:06:f1:ae:6c:9c:41: 20:e6:73:57:c3:38:a5:57:22:f3:2f:2a:4d:67:c4: 64:27:9e:9b:69:5b:dd:59:e5:db:58:7f:87:2c:de: 30:3f:24:a0:9a:3b:70:9b:64:f0:c3:e3:44:d6:a1: ba:f7:35:d4:d7:4c:3a:46:4a:71:fd:8a:db:a4:a8: 5f:59:09:ca:3f:53:a1:57:39:e6:ef:14:19:f8:53: 61:f5:f8:0f:a4:78:18:28:bc:f6:11:4d:89:06:09: bd:1c:52:01:0d:2e:d1:21:77:8d:aa:36:00:73:79: ea:97:14:18:d9:b7:51:4a:88:6c:59:e5:49:ac:57: 95:49:d5:f7:7b:e4:7e:9a:33:33:92:f0:f1:83:85: 15:e2:eb:58:56:44:d1:d1:7a:79:dd:c6:0c:76:f9: 34:7c:23:29:f8:8e:f8:aa:cc:03:f3:64:83:63:a0: f1:38:5a:5d:25:c0:8a:f8:80:36:e8:85:06:ad:b6: 55:55:08:40:75:82:b8:36:09:e6:54:d0:29:ed:42: 16:5a:00:7d:6f:61:e5:c3:d6:c9:3f:dd:4e:99:81: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3B:3E:19:59:7D:A5:3A:A7:A2:8A:54:C1:87:60:B9:02:90:F4:EC X509v3 Authority Key Identifier: keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:20:f5:33:ab:c0:ff:ad:86:ab:56:ab:6a:e4:d7:3a:51:d0: e7:14:21:c2:6f:6c:75:09:6a:20:1f:40:87:df:20:f7:8c:07: 8c:7e:4c:65:fa:c0:05:c8:42:b5:92:84:9b:25:4f:fb:f2:64: e4:4a:6f:d1:82:8f:d9:3e:85:08:d8:b7:60:1f:e8:2a:9c:4f: a0:a3:a1:11:88:96:13:4d:7e:d8:73:de:75:13:c3:ae:a3:02: e7:a2:45:70:2a:22:10:16:92:28:ea:98:1c:be:46:87:43:e0: 15:73:6f:22:ba:5b:16:dd:ed:b2:e7:b4:57:9a:8c:2b:40:94: 49:76:f8:d2:49:53:27:bb:01:9f:a4:97:6c:65:25:7c:04:36: fe:fd:b1:3f:59:b9:1f:f8:d2:fa:2a:85:50:a7:11:e7:bb:f5: 22:dc:e0:6c:cc:9f:ab:b3:65:dc:94:6f:81:5d:79:97:25:42: 42:05:17:e5:bf:7b:b1:95:42:09:be:12:74:b8:6a:16:5a:bc: 5e:24:11:20:a7:f4:fc:df:c1:70:c1:40:bd:ea:93:2d:c3:8f: 01:49:f5:96:93:9a:b4:d7:5a:1b:d5:79:17:61:a3:dc:c9:5d: 22:b2:ba:9c:91:ca:a6:da:5a:3b:70:29:b9:0f:21:e5:0d:2b: 8d:f6:8c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LemTZLA4k2m5jxgXRMehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3 ZjBmZTYwHhcNMjUxMjA2MTUwMDQwWhcNMjUxMjA3MTUwMDQwWjAzMTEwLwYDVQQD EygyYzNiM2UxOTU5N2RhNTNhYTdhMjhhNTRjMTg3NjBiOTAyOTBmNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs9JnA2V/iBAncNQOFw+ANfAoSym rhigkTX8JPI52+1wxNHFUXkG8a5snEEg5nNXwzilVyLzLypNZ8RkJ56baVvdWeXb WH+HLN4wPySgmjtwm2Tww+NE1qG69zXU10w6Rkpx/YrbpKhfWQnKP1OhVznm7xQZ +FNh9fgPpHgYKLz2EU2JBgm9HFIBDS7RIXeNqjYAc3nqlxQY2bdRSohsWeVJrFeV SdX3e+R+mjMzkvDxg4UV4utYVkTR0Xp53cYMdvk0fCMp+I74qswD82SDY6DxOFpd JcCK+IA26IUGrbZVVQhAdYK4NgnmVNAp7UIWWgB9b2Hlw9bJP91OmYEYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw7PhlZfaU6p6KKVMGHYLkCkPTsMB8GA1UdIwQY MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4 LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCD1M6vA /62Gq1arauTXOlHQ5xQhwm9sdQlqIB9Ah98g94wHjH5MZfrABchCtZKEmyVP+/Jk 5Epv0YKP2T6FCNi3YB/oKpxPoKOhEYiWE01+2HPedRPDrqMC56JFcCoiEBaSKOqY HL5Gh0PgFXNvIrpbFt3tsue0V5qMK0CUSXb40klTJ7sBn6SXbGUlfAQ2/v2xP1m5 H/jS+iqFUKcR57v1ItzgbMyfq7Nl3JRvgV15lyVCQgUX5b97sZVCCb4SdLhqFlq8 XiQRIKf0/N/BcMFAveqTLcOPAUn1lpOatNdaG9V5F2Gj3MldIrK6nJHKptpaO3Ap uQ8h5Q0rjfaM5A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:56 2025 by rpki-client