This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json) Hash identifier: v8nv27GkoQx4U+t3IHue5MlM1aqtagK9oQUKn5GYmQQ= Subject key identifier: 7B:22:21:C9:A0:14:9B:62:1D:72:21:18:B1:25:AD:BB:94:B1:BC:A7 Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Certificate serial: 019AF2E44E00B69DC4CEF08BD6C69C02E6E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft Manifest number: 0521 Signing time: Sat 06 Dec 2025 09:00:39 +0000 Manifest this update: Sat 06 Dec 2025 09:00:39 +0000 Manifest next update: Sun 07 Dec 2025 09:00:39 +0000 Files and hashes: 1: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: s8TriiOfzTvNAny7JCcADXUivLo1/iSrLzn2kyQ49DE=) 2: vpuxeaHDeU0YuoI4VZ-AbH6xUG8.roa (hash: eIEFy1yDoK+25Rit4ml59XB1+5/uDD/+W5x8ZUibOIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4e:00:b6:9d:c4:ce:f0:8b:d6:c6:9c:02:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Validity Not Before: Dec 6 09:00:39 2025 GMT Not After : Dec 7 09:00:39 2025 GMT Subject: CN=7b2221c9a0149b621d722118b125adbb94b1bca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:be:14:70:e3:12:15:21:e4:c9:98:cf:dc: 31:01:16:81:22:f2:90:68:68:a4:11:50:55:6a:5d: 37:68:8f:e8:12:72:e0:05:31:df:ee:90:fe:0f:7f: 23:60:14:e1:24:74:47:3a:39:11:e5:81:0f:72:5e: b7:ed:ab:f1:02:1f:26:d1:41:25:3f:99:11:3d:2b: 33:e7:b6:f8:d2:b3:f6:04:55:ed:4f:ba:c7:3e:48: 67:39:be:61:e5:6c:b4:38:85:48:7e:91:10:5e:f5: d0:f0:7a:a3:f4:fd:05:9c:fa:16:ea:c7:ec:a2:68: e0:e9:0e:9d:4f:d1:23:39:4f:e9:29:58:03:f9:a5: 1a:99:2e:30:11:3a:e6:a3:9d:f2:8d:84:1e:4c:0d: 89:c2:b2:b3:b3:17:99:86:8d:2b:db:6b:5a:f1:50: 86:c5:ed:59:2d:59:cd:41:11:e3:da:b5:09:77:b3: ea:61:1e:41:ce:77:aa:ca:42:00:ab:c1:fe:4a:13: 5e:27:e1:ac:f8:c3:34:c1:e8:31:d6:43:58:41:62: db:5e:25:18:9b:c0:87:26:a7:b7:c2:97:99:2f:60: d3:6e:c3:0e:7d:93:a1:ec:d2:d0:bb:9a:50:66:dd: 83:cc:2e:50:c7:cb:51:fb:1b:31:5a:90:8c:87:7f: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:21:C9:A0:14:9B:62:1D:72:21:18:B1:25:AD:BB:94:B1:BC:A7 X509v3 Authority Key Identifier: keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ff:0d:ae:c8:b9:fe:e1:90:0d:24:67:99:95:f1:3f:ee:81: c4:66:0a:7d:47:be:ee:53:4f:87:1b:36:86:6c:25:be:fa:5d: 81:9e:52:0b:b1:ef:f2:4e:80:82:a5:b5:67:e0:b5:31:b8:02: 41:cb:5a:11:52:68:18:0b:f5:29:6f:8a:99:00:4e:e5:18:7e: e7:44:f0:14:48:06:fa:42:c5:c0:5a:f0:fd:c9:4f:22:42:83: 46:93:d5:a7:09:cb:74:e3:da:cd:a6:7b:61:ab:0f:41:00:3b: 4c:ee:3d:26:18:48:42:dc:8c:30:d4:b6:b9:9a:9a:62:06:86: 3a:e5:af:5a:46:f8:66:1c:6f:42:37:cc:b3:c7:52:11:ab:e6: 82:15:a6:1e:18:32:25:cc:52:88:27:10:b5:38:c6:b4:4f:6e: 69:fc:0c:c0:6c:f3:46:e4:14:b4:5f:4c:e3:dc:ae:61:6b:a7: de:25:33:b6:9a:1f:ba:a0:3e:83:66:25:7b:2f:e0:1e:4f:d8: 51:ae:ac:4b:41:58:5e:d9:e3:7a:c3:aa:9e:9c:d4:74:18:59: 8f:c8:89:ac:c6:e4:0f:07:17:d4:91:47:db:65:0d:9b:b9:15: da:38:e7:43:0f:cc:a0:45:eb:33:a9:b1:c1:7a:72:e9:a1:92: fb:06:c0:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5E4Atp3EzvCL1sacAubgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2QyMTQ0ZGQxYjcxNGU5ZTNjYTA5MDFmZTY3NTA0YmY0 NTdlZWIwHhcNMjUxMjA2MDkwMDM5WhcNMjUxMjA3MDkwMDM5WjAzMTEwLwYDVQQD Eyg3YjIyMjFjOWEwMTQ5YjYyMWQ3MjIxMThiMTI1YWRiYjk0YjFiY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z6+FHDjEhUh5MmYz9wxARaBIvKQ aGikEVBVal03aI/oEnLgBTHf7pD+D38jYBThJHRHOjkR5YEPcl637avxAh8m0UEl P5kRPSsz57b40rP2BFXtT7rHPkhnOb5h5Wy0OIVIfpEQXvXQ8Hqj9P0FnPoW6sfs omjg6Q6dT9EjOU/pKVgD+aUamS4wETrmo53yjYQeTA2JwrKzsxeZho0r22ta8VCG xe1ZLVnNQRHj2rUJd7PqYR5BzneqykIAq8H+ShNeJ+Gs+MM0wegx1kNYQWLbXiUY m8CHJqe3wpeZL2DTbsMOfZOh7NLQu5pQZt2DzC5Qx8tR+xsxWpCMh38ThwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsiIcmgFJtiHXIhGLElrbuUsbynMB8GA1UdIwQY MBaAFFV9IUTdG3FOnjygkB/mdQS/RX7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlgwaFJOMGJjVTZlUEtDUUgtWjFCTDlGZnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xZjA4MzEtZmM2Yi00ODY1LWE4YTgt ZWRmNDJkNWM0ODFmLzEvVlgwaFJOMGJjVTZlUEtDUUgtWjFCTDlGZnVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xZjA4MzEtZmM2Yi00ODY1LWE4YTgtZWRmNDJkNWM0ODFm LzEvVlgwaFJOMGJjVTZlUEtDUUgtWjFCTDlGZnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef8Nrsi5 /uGQDSRnmZXxP+6BxGYKfUe+7lNPhxs2hmwlvvpdgZ5SC7Hv8k6AgqW1Z+C1MbgC QctaEVJoGAv1KW+KmQBO5Rh+50TwFEgG+kLFwFrw/clPIkKDRpPVpwnLdOPazaZ7 YasPQQA7TO49JhhIQtyMMNS2uZqaYgaGOuWvWkb4ZhxvQjfMs8dSEavmghWmHhgy JcxSiCcQtTjGtE9uafwMwGzzRuQUtF9M49yuYWun3iUztpofuqA+g2Yley/gHk/Y Ua6sS0FYXtnjesOqnpzUdBhZj8iJrMbkDwcX1JFH22UNm7kV2jjnQw/MoEXrM6mx wXpy6aGS+wbAwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:55 2025 by rpki-client