This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json) Hash identifier: s3JVgv5PT62EfuO8jpmepyQytuQul3A5Gw5CQTe2Wiw= Subject key identifier: 3F:A7:4D:31:E6:5F:A5:AE:A8:26:9E:28:55:BF:C9:C4:D7:82:53:A0 Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5 Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5 Certificate serial: 019AF31C2B1C4DCD4763C386870AD753092D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft Manifest number: 0BE3 Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: tpewDOlk8X6UDPjjSEBaEd/zpO5NzRUf4RnY9sI081I=) 2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2b:1c:4d:cd:47:63:c3:86:87:0a:d7:53:09:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5 Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=3fa74d31e65fa5aea8269e2855bfc9c4d78253a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:ab:56:b5:98:d8:c7:76:a3:77:c1:9f:f3: 1f:86:38:5e:46:b8:ff:f4:2e:2e:72:8e:f7:5d:86: b8:2e:90:54:a7:39:67:74:7c:bb:1b:47:c8:21:5c: 52:a5:7d:18:e4:a8:7c:cc:1d:40:09:d3:64:24:b4: 6b:b8:ae:f2:19:65:0a:7f:68:a9:68:79:05:b1:c5: 7c:60:17:5d:d5:64:c2:d5:b4:fa:19:f7:1e:a5:a4: 36:6c:1f:d2:03:c5:48:1a:fe:35:42:f2:ad:17:56: 1b:09:b1:cb:3f:4d:98:03:c0:69:ce:64:00:ab:6f: 54:92:a1:af:03:00:0d:58:50:cd:6e:ad:4d:2e:f8: f7:37:fe:79:06:ae:cb:75:c8:70:54:9b:ae:6c:71: 06:c1:64:af:32:2e:7c:06:4f:24:12:24:39:d8:6c: 91:d3:ef:c9:83:26:97:7e:6b:6b:e4:86:d1:6d:8c: ae:85:3d:f2:28:84:9a:7f:e1:4a:df:f2:e1:5a:69: cb:26:36:f4:31:ce:f9:98:15:a4:81:02:ff:77:3d: 66:f7:31:23:13:f3:34:22:84:79:3b:52:1c:68:98: 58:7f:2f:0e:23:88:9d:43:c9:9d:28:a1:a6:3d:14: 9f:b0:3b:e9:a5:42:5d:d2:dc:73:c9:6c:71:9d:23: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:4D:31:E6:5F:A5:AE:A8:26:9E:28:55:BF:C9:C4:D7:82:53:A0 X509v3 Authority Key Identifier: keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1e:fb:68:79:2b:d8:15:81:03:9e:c6:d8:4f:07:4b:ea:1f: 5a:9a:6b:99:21:e2:ca:35:21:26:d4:e3:77:88:fb:ea:b4:d9: ea:28:a2:56:10:84:ae:a7:4a:c3:2f:3b:ee:ba:ca:a1:c3:73: 2f:91:c0:a2:a5:c1:69:cf:5c:a7:fc:46:10:f7:cf:af:cb:00: 2c:38:c0:55:26:5e:9c:f4:e3:99:2a:90:9a:a6:f4:46:f3:a0: c5:7b:01:6b:69:81:2f:13:3b:0e:d6:f2:7e:b1:69:3b:d2:d1: 88:79:65:55:10:02:9d:6c:e2:f7:07:6e:61:8e:ad:f0:08:30: a0:64:9d:93:d8:7f:5c:42:36:ec:75:a0:c4:54:03:41:5e:4e: d5:b4:d9:e6:b8:e6:fc:f0:cb:ed:ba:3b:96:30:b1:62:72:3d: f2:a8:65:23:a2:cf:b1:36:09:7a:8f:01:65:8f:d5:30:6c:05: bd:b7:c1:0b:22:78:96:e1:c4:bc:39:36:3b:0d:f2:a3:b1:da: fc:cf:1e:bb:98:53:98:e2:1f:ed:0c:6a:32:a1:40:06:fd:f7: 92:a8:b5:39:77:64:40:7c:28:7a:10:33:65:7b:4f:b9:9b:c3: ae:2a:f0:25:4f:f1:7b:57:b0:3e:27:ea:0e:a8:9d:ea:95:69: d2:a8:c1:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCscTc1HY8OGhwrXUwktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZjQyZGJhNTFlYzI4MzVkM2U0ZDBhM2Q4YzQ4YmYzMjJm NmJkYjUwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD EygzZmE3NGQzMWU2NWZhNWFlYTgyNjllMjg1NWJmYzljNGQ3ODI1M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0arVrWY2Md2o3fBn/MfhjheRrj/ 9C4uco73XYa4LpBUpzlndHy7G0fIIVxSpX0Y5Kh8zB1ACdNkJLRruK7yGWUKf2ip aHkFscV8YBdd1WTC1bT6GfcepaQ2bB/SA8VIGv41QvKtF1YbCbHLP02YA8BpzmQA q29UkqGvAwANWFDNbq1NLvj3N/55Bq7LdchwVJuubHEGwWSvMi58Bk8kEiQ52GyR 0+/JgyaXfmtr5IbRbYyuhT3yKISaf+FK3/LhWmnLJjb0Mc75mBWkgQL/dz1m9zEj E/M0IoR5O1IcaJhYfy8OI4idQ8mdKKGmPRSfsDvppUJd0txzyWxxnSPfWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+nTTHmX6WuqCaeKFW/ycTXglOgMB8GA1UdIwQY MBaAFFT0LbpR7Cg10+TQo9jEi/Mi9r21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgt YTI0ZmFiZjU2ZGFkLzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85YTllMTQtMDRlYS00MTNmLThjNDgtYTI0ZmFiZjU2ZGFk LzEvVlBRdHVsSHNLRFhUNU5DajJNU0w4eUwydmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB77aHkr 2BWBA57G2E8HS+ofWpprmSHiyjUhJtTjd4j76rTZ6iiiVhCErqdKwy877rrKocNz L5HAoqXBac9cp/xGEPfPr8sALDjAVSZenPTjmSqQmqb0RvOgxXsBa2mBLxM7Dtby frFpO9LRiHllVRACnWzi9wduYY6t8AgwoGSdk9h/XEI27HWgxFQDQV5O1bTZ5rjm /PDL7bo7ljCxYnI98qhlI6LPsTYJeo8BZY/VMGwFvbfBCyJ4luHEvDk2Ow3yo7Ha /M8eu5hTmOIf7QxqMqFABv33kqi1OXdkQHwoehAzZXtPuZvDrirwJU/xe1ewPifq Dqid6pVp0qjBeA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:27 2025 by rpki-client