This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json) Hash identifier: 3x7CRjwozbg1Klmn6ukTtMnQAKuCr4vWYvomZnZBlhc= Subject key identifier: 3C:CB:87:CB:50:B8:CB:E0:8F:29:DA:2D:CE:28:BB:06:CC:B3:DC:D3 Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3 Certificate serial: 019B30435CDAF5A5838258125A6DC1F7AE87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 07:01:19 +0000 Manifest this update: Thu 18 Dec 2025 07:01:19 +0000 Manifest next update: Fri 19 Dec 2025 07:01:19 +0000 Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=) 2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: ZlWUr+7FRQLXDUwpbhGpaBooAAvVv/rC9aWv7XhTW5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:5c:da:f5:a5:83:82:58:12:5a:6d:c1:f7:ae:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3 Validity Not Before: Dec 18 07:01:19 2025 GMT Not After : Dec 19 07:01:19 2025 GMT Subject: CN=3ccb87cb50b8cbe08f29da2dce28bb06ccb3dcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:bb:8f:11:17:e2:1f:fb:3f:02:2a:56:d6: 76:20:f0:ad:74:c2:72:7a:d1:ac:90:a8:9f:0c:8e: 61:62:0e:25:5e:7a:fc:58:46:28:74:5a:9d:a5:17: db:26:13:77:1f:86:1e:92:d9:c0:6f:eb:02:27:52: fd:a3:bc:ee:64:cb:2e:70:46:ed:20:5e:5b:1c:b0: 5c:83:c1:23:81:59:47:d0:0f:01:64:62:03:be:04: 40:d6:78:f8:28:39:ea:07:51:a2:3b:05:bd:ae:c7: 12:0b:25:87:f5:31:e2:4b:3f:fe:df:41:cb:e7:04: 07:aa:fe:e3:d0:38:aa:ae:7c:da:08:b0:dd:af:18: e5:3d:20:cf:89:5e:22:a6:db:cc:68:7c:d6:cc:b0: 0a:23:5f:42:23:2a:0d:ed:dd:a5:3c:35:dd:a9:f2: c6:d8:fa:30:2e:69:fe:5d:96:df:d5:14:ca:d9:b0: 0f:e7:11:b8:9b:df:57:da:23:70:c1:c0:1d:e5:ba: b7:ab:50:a8:4a:45:6f:16:2e:45:51:11:78:9a:95: 2e:15:01:ac:00:fd:c7:16:fb:11:df:e0:6c:af:3c: 95:39:e8:92:d0:fe:e9:fe:58:51:ac:95:6b:23:8d: 52:5f:5d:b9:a9:e5:8b:fe:32:2a:05:1f:c8:da:ef: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:87:CB:50:B8:CB:E0:8F:29:DA:2D:CE:28:BB:06:CC:B3:DC:D3 X509v3 Authority Key Identifier: keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c5:70:6d:b2:41:45:38:4f:83:8e:e6:7d:89:e1:e8:33:07: 34:79:bc:6d:d4:bc:b2:a0:cf:40:70:be:4f:b0:d1:75:8a:9d: 9d:61:2c:b8:0e:25:ae:c5:48:ca:ec:8e:a9:88:22:0f:19:84: 49:7a:2a:5f:67:90:a9:8c:ab:12:16:23:75:b7:76:d1:3d:32: ff:1e:7c:62:79:f8:1c:ed:9c:e9:ba:9d:1b:66:52:d2:f8:a1: ac:61:92:ed:b1:f9:8b:9c:96:6a:62:e9:33:8d:0b:94:cc:63: 35:fc:e3:a4:ac:95:7b:85:d4:97:6a:bb:0c:e7:a1:3f:14:07: 0b:fa:ca:9a:b6:af:c4:ad:fe:56:b8:2f:55:8c:00:5d:be:4b: 7e:a9:c0:cf:e3:98:c6:c7:16:d1:9a:ce:9c:6d:1e:61:b3:f2: c4:17:c3:b8:c8:44:de:48:dd:70:46:1f:1d:d6:de:ad:98:f9: a4:45:1d:79:0f:bf:7d:ba:e1:dd:88:45:d1:69:e0:27:0d:cf: 15:b0:0a:bf:67:30:b1:9f:e0:3d:ee:db:97:b2:d7:6a:e7:b3: 2a:95:25:7c:0d:3d:42:f0:07:4a:0d:d0:0b:f1:89:33:a1:aa: 70:d8:d6:65:21:50:00:b4:90:38:70:24:89:12:54:65:9d:45: c3:29:e8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ1za9aWDglgSWm3B966HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NTk4NDA4ZDIzY2VmNTI1NjBmN2VhYWQ0ZTFkYjBjODYy MDYyYzMwHhcNMjUxMjE4MDcwMTE5WhcNMjUxMjE5MDcwMTE5WjAzMTEwLwYDVQQD EygzY2NiODdjYjUwYjhjYmUwOGYyOWRhMmRjZTI4YmIwNmNjYjNkY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiK7jxEX4h/7PwIqVtZ2IPCtdMJy etGskKifDI5hYg4lXnr8WEYodFqdpRfbJhN3H4YektnAb+sCJ1L9o7zuZMsucEbt IF5bHLBcg8EjgVlH0A8BZGIDvgRA1nj4KDnqB1GiOwW9rscSCyWH9THiSz/+30HL 5wQHqv7j0DiqrnzaCLDdrxjlPSDPiV4iptvMaHzWzLAKI19CIyoN7d2lPDXdqfLG 2PowLmn+XZbf1RTK2bAP5xG4m99X2iNwwcAd5bq3q1CoSkVvFi5FURF4mpUuFQGs AP3HFvsR3+BsrzyVOeiS0P7p/lhRrJVrI41SX125qeWL/jIqBR/I2u8ZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzLh8tQuMvgjynaLc4ouwbMs9zTMB8GA1UdIwQY MBaAFFRZhAjSPO9SVg9+qtTh2wyGIGLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEt ZTkwOTNmZWUzZmQzLzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEtZTkwOTNmZWUzZmQz LzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsVwbbJB RThPg47mfYnh6DMHNHm8bdS8sqDPQHC+T7DRdYqdnWEsuA4lrsVIyuyOqYgiDxmE SXoqX2eQqYyrEhYjdbd20T0y/x58Ynn4HO2c6bqdG2ZS0vihrGGS7bH5i5yWamLp M40LlMxjNfzjpKyVe4XUl2q7DOehPxQHC/rKmravxK3+VrgvVYwAXb5LfqnAz+OY xscW0ZrOnG0eYbPyxBfDuMhE3kjdcEYfHdberZj5pEUdeQ+/fbrh3YhF0WngJw3P FbAKv2cwsZ/gPe7bl7LXauezKpUlfA09QvAHSg3QC/GJM6GqcNjWZSFQALSQOHAk iRJUZZ1Fwynofg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:15:46 2025 by rpki-client