This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json) Hash identifier: a6hQYPUxObe/9RjTfxFbH1QHygCeFXSMK78RWHbZzuk= Subject key identifier: 3F:8C:67:64:3C:86:13:B7:B6:DA:45:46:4D:82:5C:26:EC:AB:77:E1 Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Certificate serial: 019B3569ACDBCCE0D414E8E0190BAAC98907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft Manifest number: 099E Signing time: Fri 19 Dec 2025 07:01:16 +0000 Manifest this update: Fri 19 Dec 2025 07:01:16 +0000 Manifest next update: Sat 20 Dec 2025 07:01:16 +0000 Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=) 2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=) 3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=) 4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: 3GHl2TEF3KxwKQR/1bSKJk2NV5Eh6jYxqKsr6Lv38f4=) 5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=) 6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=) 7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=) 8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:ac:db:cc:e0:d4:14:e8:e0:19:0b:aa:c9:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Validity Not Before: Dec 19 07:01:16 2025 GMT Not After : Dec 20 07:01:16 2025 GMT Subject: CN=3f8c67643c8613b7b6da45464d825c26ecab77e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:fd:33:26:3a:a8:97:4c:77:00:85:fb:c1: f5:66:15:f0:30:02:65:09:74:5f:9f:9f:5a:e5:3c: 9a:f9:9c:25:1e:ab:14:38:fc:9d:e8:24:c2:ec:23: 60:6c:2a:94:24:c6:b3:c9:b4:c9:a0:c5:f0:cd:42: 1b:0b:ae:8c:08:2c:48:bc:a3:53:f8:65:52:64:e9: 16:0e:5c:e5:8c:28:fe:6c:9e:f7:c3:9b:05:25:41: 3d:97:d3:dd:fa:9f:2d:86:f7:a9:fe:94:15:ec:e3: 26:c7:6c:77:d5:c1:f0:1c:f9:92:87:c6:59:de:47: 2f:13:a1:00:5d:5b:e9:b5:c4:98:0c:f6:af:0d:e1: a5:5a:2a:a3:3a:87:18:22:ae:2b:ab:1e:e9:de:2a: aa:95:50:b8:fb:2e:78:75:e4:cb:7a:7a:c0:a9:7f: bc:68:80:e5:3b:01:dd:4a:e8:58:80:a7:64:cb:db: c9:85:2c:06:35:b3:59:5f:0c:9e:a3:17:06:30:62: 77:0f:05:02:2e:05:3c:f7:5b:2f:e2:2c:19:9e:b4: 5c:9f:35:c1:b9:6e:2a:cc:b3:4e:7c:f9:bf:cd:ef: fa:65:4a:ad:b2:8e:c8:0d:3a:9e:ff:ec:bc:74:97: 8c:fe:a0:b4:69:0e:1e:d4:b4:b8:5e:96:5a:63:d7: c4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8C:67:64:3C:86:13:B7:B6:DA:45:46:4D:82:5C:26:EC:AB:77:E1 X509v3 Authority Key Identifier: keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4c:d0:e2:66:20:a4:10:aa:07:f1:6b:c9:47:49:a7:57:39: e7:d2:bd:93:ab:80:5b:53:33:de:95:c3:14:51:ba:0b:2d:d9: aa:36:a5:df:ea:54:9f:16:f0:5a:70:1f:1c:c4:40:26:83:b3: a8:ca:98:06:c9:d6:d8:a8:de:1f:ec:73:8a:ad:11:22:ef:a6: 46:e3:1b:60:c3:c2:66:0f:6a:8b:28:26:91:4e:3c:94:39:1d: b0:fa:e2:8a:80:dd:61:5a:c9:f6:3e:5e:e6:9d:e4:e3:80:ef: 55:4a:fa:9d:e5:86:00:52:26:4a:19:21:93:81:1f:46:94:bb: 26:3d:bd:51:bd:68:e8:be:08:4a:73:32:a0:d8:b5:70:5e:20: 87:b1:60:da:9f:d4:71:db:57:a0:83:9e:38:6d:fb:40:7e:8a: e2:d7:fd:34:9b:c4:14:62:d3:ac:e1:0c:48:23:e2:1f:1a:30: 99:b0:26:da:a9:c1:0e:12:68:82:93:e3:8d:93:46:26:3d:7e: 0e:0f:8a:8b:a5:e7:31:ec:35:e6:fa:80:28:d9:f5:d1:9e:ec: c6:36:45:86:02:ac:b3:cc:89:30:37:45:87:66:be:8b:d3:5b: aa:7d:41:1a:34:bf:5c:47:5f:da:74:5e:f3:02:10:a9:00:b6: 77:89:d2:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aazbzODUFOjgGQuqyYkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl ZTdlZjcwHhcNMjUxMjE5MDcwMTE2WhcNMjUxMjIwMDcwMTE2WjAzMTEwLwYDVQQD EygzZjhjNjc2NDNjODYxM2I3YjZkYTQ1NDY0ZDgyNWMyNmVjYWI3N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/f9MyY6qJdMdwCF+8H1ZhXwMAJl CXRfn59a5Tya+ZwlHqsUOPyd6CTC7CNgbCqUJMazybTJoMXwzUIbC66MCCxIvKNT +GVSZOkWDlzljCj+bJ73w5sFJUE9l9Pd+p8thvep/pQV7OMmx2x31cHwHPmSh8ZZ 3kcvE6EAXVvptcSYDPavDeGlWiqjOocYIq4rqx7p3iqqlVC4+y54deTLenrAqX+8 aIDlOwHdSuhYgKdky9vJhSwGNbNZXwyeoxcGMGJ3DwUCLgU891sv4iwZnrRcnzXB uW4qzLNOfPm/ze/6ZUqtso7IDTqe/+y8dJeM/qC0aQ4e1LS4XpZaY9fEowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+MZ2Q8hhO3ttpFRk2CXCbsq3fhMB8GA1UdIwQY MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3 LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEzQ4mYg pBCqB/FryUdJp1c559K9k6uAW1Mz3pXDFFG6Cy3Zqjal3+pUnxbwWnAfHMRAJoOz qMqYBsnW2KjeH+xziq0RIu+mRuMbYMPCZg9qiygmkU48lDkdsPriioDdYVrJ9j5e 5p3k44DvVUr6neWGAFImShkhk4EfRpS7Jj29Ub1o6L4ISnMyoNi1cF4gh7Fg2p/U cdtXoIOeOG37QH6K4tf9NJvEFGLTrOEMSCPiHxowmbAm2qnBDhJogpPjjZNGJj1+ Dg+Ki6XnMew15vqAKNn10Z7sxjZFhgKss8yJMDdFh2a+i9Nbqn1BGjS/XEdf2nRe 8wIQqQC2d4nSBA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:49:03 2025 by rpki-client