This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json) Hash identifier: +IEXBnrMM4Z1iPR34M1cmDgQsVxIEcTEQa6fifNFsQM= Subject key identifier: E1:98:EB:88:07:38:4F:97:BB:F4:F3:A2:D3:65:2A:2A:7A:D7:01:CE Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Certificate serial: 019AF61C2CDA69F94F3BCD6477A0378E5DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 00:00:32 +0000 Manifest this update: Sun 07 Dec 2025 00:00:32 +0000 Manifest next update: Mon 08 Dec 2025 00:00:32 +0000 Files and hashes: 1: QgsJlqJcTUYG8ULdRGgE3NFD82g.roa (hash: js71yBiScUO+PfDSCeaEzOg8Fh9K6ktXB24Y7dBG/Eo=) 2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: uIQJOUGjfLVLpx2Un7NugfuYWtS6tHy/WPF9pMfcnsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:2c:da:69:f9:4f:3b:cd:64:77:a0:37:8e:5d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Validity Not Before: Dec 7 00:00:32 2025 GMT Not After : Dec 8 00:00:32 2025 GMT Subject: CN=e198eb8807384f97bbf4f3a2d3652a2a7ad701ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:86:c1:81:5f:ef:3b:f3:2c:e1:28:4d:2d: 3d:52:2b:ad:76:49:31:71:9d:52:20:79:b2:40:f1: 51:b0:f1:90:da:fe:84:51:9e:bc:94:18:a0:92:f5: cf:90:94:89:8a:69:a2:3f:ca:13:3a:d1:03:fb:af: 58:8d:cb:4e:a0:4d:1b:79:98:f8:e2:e8:bd:19:ea: 83:52:9f:ee:78:a3:18:4f:2e:c1:c2:13:1c:c0:5f: 03:7d:97:76:74:b8:30:48:d8:d5:b6:04:e4:ff:b7: 8f:e2:99:78:80:14:d3:39:95:b1:ad:21:9f:f7:33: 09:25:3b:1b:ef:2f:e2:9a:6d:cc:33:ff:28:a1:95: 26:f3:89:30:d2:ab:97:e3:46:05:bb:4d:7c:a0:bf: 06:ac:ca:79:83:14:2e:4b:30:55:23:22:7f:d3:57: 52:0c:25:43:5e:09:7c:56:92:9d:7d:9e:29:ec:3c: bc:be:ec:04:00:22:ab:08:22:14:28:7a:f6:5f:79: 08:46:23:3b:b9:1a:91:8a:42:22:38:d9:6c:11:4c: d9:1c:1e:bf:48:61:f2:8c:0e:7d:60:29:ac:3f:a1: 8b:9f:2d:47:48:af:d9:8f:5c:ea:81:91:30:fc:21: ec:d1:8a:d7:39:a9:0e:e6:31:9e:a9:49:af:66:0d: 1f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:98:EB:88:07:38:4F:97:BB:F4:F3:A2:D3:65:2A:2A:7A:D7:01:CE X509v3 Authority Key Identifier: keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c7:f6:df:8b:a8:bf:f1:50:fc:8c:39:6d:11:6c:89:79:f2: 8d:bb:36:96:1a:15:f7:21:07:a4:29:c9:56:40:75:db:d4:1a: d1:f4:b9:c6:fc:89:07:0d:35:3e:7c:5b:f0:43:29:f6:c5:be: 7c:8e:0e:36:8a:6d:39:fe:3a:21:4e:1b:5c:55:d6:7c:1d:44: 2d:f7:f1:c9:ce:11:34:09:a0:86:c9:10:a4:7d:38:b4:01:3e: de:6c:af:82:c1:20:b1:4b:98:ea:b7:7d:8b:3c:8c:11:ea:97: b9:82:1b:48:64:db:37:9d:29:25:fe:aa:bf:ea:18:03:0d:ae: bd:01:4b:70:ce:ed:32:cf:b9:bf:a7:bd:5f:ea:0a:7c:3c:36: 09:e3:9c:ea:d2:33:fa:56:8d:6b:b7:32:69:fd:07:b6:89:cf: d4:3c:ce:9a:55:d1:06:32:01:67:1b:33:08:eb:6d:1f:53:bc: 09:18:f9:0d:b2:c4:50:23:86:d0:13:1e:2d:c9:35:ba:1f:ea: 9d:da:6a:23:e7:54:ae:2c:e5:14:ea:4b:b7:78:74:a8:db:90: a4:90:c8:4c:7c:44:18:a8:82:29:50:be:78:f2:7b:0f:15:3a: 95:34:37:93:95:2b:81:4f:25:df:47:20:75:22:48:9f:bf:5f: 90:23:d2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCzaaflPO81kd6A3jl3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGI2M2QxOWQ4NmVhMzQ1YzliNWYxNjkzMDBjM2EyOWQ0 YzMxYzQwHhcNMjUxMjA3MDAwMDMyWhcNMjUxMjA4MDAwMDMyWjAzMTEwLwYDVQQD EyhlMTk4ZWI4ODA3Mzg0Zjk3YmJmNGYzYTJkMzY1MmEyYTdhZDcwMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmWGwYFf7zvzLOEoTS09Uiutdkkx cZ1SIHmyQPFRsPGQ2v6EUZ68lBigkvXPkJSJimmiP8oTOtED+69YjctOoE0beZj4 4ui9GeqDUp/ueKMYTy7BwhMcwF8DfZd2dLgwSNjVtgTk/7eP4pl4gBTTOZWxrSGf 9zMJJTsb7y/imm3MM/8ooZUm84kw0quX40YFu018oL8GrMp5gxQuSzBVIyJ/01dS DCVDXgl8VpKdfZ4p7Dy8vuwEACKrCCIUKHr2X3kIRiM7uRqRikIiONlsEUzZHB6/ SGHyjA59YCmsP6GLny1HSK/Zj1zqgZEw/CHs0YrXOakO5jGeqUmvZg0ffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGY64gHOE+Xu/TzotNlKip61wHOMB8GA1UdIwQY MBaAFFQLY9Gdhuo0XJtfFpMAw6KdTDHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWIt MDAwNGIyNzQ2MzBiLzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWItMDAwNGIyNzQ2MzBi LzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMf234uo v/FQ/Iw5bRFsiXnyjbs2lhoV9yEHpCnJVkB129Qa0fS5xvyJBw01Pnxb8EMp9sW+ fI4ONoptOf46IU4bXFXWfB1ELffxyc4RNAmghskQpH04tAE+3myvgsEgsUuY6rd9 izyMEeqXuYIbSGTbN50pJf6qv+oYAw2uvQFLcM7tMs+5v6e9X+oKfDw2CeOc6tIz +laNa7cyaf0HtonP1DzOmlXRBjIBZxszCOttH1O8CRj5DbLEUCOG0BMeLck1uh/q ndpqI+dUrizlFOpLt3h0qNuQpJDITHxEGKiCKVC+ePJ7DxU6lTQ3k5UrgU8l30cg dSJIn79fkCPSTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:35:18 2025 by rpki-client