This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json) Hash identifier: qq5OhOqhk/lvU3w5i82eLK6tjQkX1Fy6Rhi/vR4PjrQ= Subject key identifier: 55:9A:35:F9:09:2A:F6:72:07:A2:12:BF:2D:0E:76:DA:CB:91:46:E8 Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3 Certificate serial: 019AF2767DE5D9DE367C7F1E0D7877E6581F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=) 2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: Ge3nHwZhjfF/Tfb37mLv77ctA9ThA6AvqbMonr1mYJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7d:e5:d9:de:36:7c:7f:1e:0d:78:77:e6:58:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=559a35f9092af67207a212bf2d0e76dacb9146e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:db:fb:6e:a8:f1:b5:0a:d3:85:1b:74:e2: 60:3f:55:e8:21:c7:0d:ae:23:67:1b:c3:91:4c:5b: b7:42:27:c7:d6:a7:a6:16:53:48:f9:1d:05:f2:6a: 4b:cc:4f:f5:4a:71:8a:85:90:d9:ab:74:32:3a:0b: 98:89:ad:2b:9e:58:02:10:1d:eb:ee:65:3b:90:d3: 13:bd:c9:f9:17:bc:3a:b8:77:24:b3:c0:8b:b3:d6: 55:87:36:d1:fc:9a:a3:cb:c1:f5:1b:18:0b:2a:28: 7b:14:21:40:8f:02:ee:9f:90:47:cb:33:1b:ff:a8: b8:27:cc:49:aa:9e:e9:56:0b:4a:c6:47:db:38:ac: 28:3b:67:2e:87:f9:46:40:72:fc:54:cc:62:b9:92: 1a:70:a8:3e:28:ca:61:2f:9f:ea:07:33:fd:a8:0a: 34:98:d7:5f:f6:13:dd:42:e6:d8:8e:9b:db:f5:b8: a0:af:64:d4:cb:a6:05:67:ec:d9:4e:fa:b0:71:5e: 3d:f2:30:3b:60:f7:36:14:03:2d:73:27:18:a5:89: b4:4b:c1:b3:56:8e:92:9c:b9:bc:95:a8:60:bc:16: b6:70:23:05:65:24:1a:5f:75:e6:81:8b:82:21:81: 71:f7:4e:ad:7a:7f:24:53:6e:e2:53:c3:96:b2:44: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9A:35:F9:09:2A:F6:72:07:A2:12:BF:2D:0E:76:DA:CB:91:46:E8 X509v3 Authority Key Identifier: keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:ad:dc:8b:fe:ae:8c:97:0a:71:77:44:af:11:6a:c5:1b:fe: 74:66:92:c3:27:9f:e3:ea:80:f8:b3:e6:97:68:0d:55:c2:e0: 8e:b9:0d:94:ae:6d:3f:4b:43:3c:de:64:50:ec:db:ee:49:3d: fe:1e:5b:7c:20:50:3c:74:e6:ed:87:37:2a:51:b5:88:70:7b: b7:88:5a:bc:31:ac:ae:82:c0:03:e8:fe:03:d5:d8:c1:ed:b6: 2f:0a:28:8d:92:2b:45:4d:1e:9d:2a:3d:dc:0b:bc:a3:07:e8: 4e:09:3c:aa:58:fb:6f:c4:d1:21:50:4e:ee:11:75:7f:37:d5: 2b:bc:83:fe:77:97:60:86:85:fe:36:ab:e9:53:ca:4f:d6:28: ec:5f:dc:9d:db:87:98:5d:59:05:ab:ef:71:c9:67:fb:d8:42: b1:07:08:53:6d:b4:e0:4c:6f:0d:c5:a2:3f:55:df:10:f4:4a: a5:92:75:00:a7:98:2a:c7:7f:c2:31:28:42:ff:1e:70:e6:60: cf:45:e2:c5:9a:5d:b5:38:ef:84:f8:7a:4f:9e:73:ab:90:c4: f7:56:ce:ae:a2:9d:ed:bb:dc:b1:7e:1e:f8:05:24:05:fc:ec: d8:ef:33:4b:a3:82:34:b6:5e:ef:6e:98:dd:5e:ba:91:59:f4: 39:06:50:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn3l2d42fH8eDXh35lgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NTk4NDA4ZDIzY2VmNTI1NjBmN2VhYWQ0ZTFkYjBjODYy MDYyYzMwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD Eyg1NTlhMzVmOTA5MmFmNjcyMDdhMjEyYmYyZDBlNzZkYWNiOTE0NmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Db+26o8bUK04UbdOJgP1XoIccN riNnG8ORTFu3QifH1qemFlNI+R0F8mpLzE/1SnGKhZDZq3QyOguYia0rnlgCEB3r 7mU7kNMTvcn5F7w6uHcks8CLs9ZVhzbR/Jqjy8H1GxgLKih7FCFAjwLun5BHyzMb /6i4J8xJqp7pVgtKxkfbOKwoO2cuh/lGQHL8VMxiuZIacKg+KMphL5/qBzP9qAo0 mNdf9hPdQubYjpvb9bigr2TUy6YFZ+zZTvqwcV498jA7YPc2FAMtcycYpYm0S8Gz Vo6SnLm8lahgvBa2cCMFZSQaX3XmgYuCIYFx906ten8kU27iU8OWskS9KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWaNfkJKvZyB6ISvy0OdtrLkUboMB8GA1UdIwQY MBaAFFRZhAjSPO9SVg9+qtTh2wyGIGLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEt ZTkwOTNmZWUzZmQzLzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEtZTkwOTNmZWUzZmQz LzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2q3ci/6u jJcKcXdErxFqxRv+dGaSwyef4+qA+LPml2gNVcLgjrkNlK5tP0tDPN5kUOzb7kk9 /h5bfCBQPHTm7Yc3KlG1iHB7t4havDGsroLAA+j+A9XYwe22LwoojZIrRU0enSo9 3Au8owfoTgk8qlj7b8TRIVBO7hF1fzfVK7yD/neXYIaF/jar6VPKT9Yo7F/cnduH mF1ZBavvccln+9hCsQcIU2204ExvDcWiP1XfEPRKpZJ1AKeYKsd/wjEoQv8ecOZg z0XixZpdtTjvhPh6T55zq5DE91bOrqKd7bvcsX4e+AUkBfzs2O8zS6OCNLZe726Y 3V66kVn0OQZQoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:30 2025 by rpki-client