This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft File: VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft (raw, json) Hash identifier: h+salexTqpxPbzzBnmBocNCzEEHfRwcLmE9yB7cdKd4= Subject key identifier: D4:1B:86:07:5F:36:7D:C6:F3:6F:76:AD:9E:1F:83:E7:AE:49:47:F5 Authority key identifier: 54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00 Certificate issuer: /CN=5448a5c5c577b53cc298af0443edd4352e1b1300 Certificate serial: 019B48B912B459E5AB25FDDC225EA24E1F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft Manifest number: 02A1 Signing time: Tue 23 Dec 2025 01:00:47 +0000 Manifest this update: Tue 23 Dec 2025 01:00:47 +0000 Manifest next update: Wed 24 Dec 2025 01:00:47 +0000 Files and hashes: 1: VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl (hash: OUm1cVks+rwzZmNWD/V1gJzitSlQOPYa9LynjnJ2JHo=) 2: z7A1F9yPjL55IibPa20Kjx9HdWo.roa (hash: n2Ln9x6dFYLELeltpBs/l+euwSQGs6r6YausDD8SqV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:12:b4:59:e5:ab:25:fd:dc:22:5e:a2:4e:1f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5448a5c5c577b53cc298af0443edd4352e1b1300 Validity Not Before: Dec 23 01:00:47 2025 GMT Not After : Dec 24 01:00:47 2025 GMT Subject: CN=d41b86075f367dc6f36f76ad9e1f83e7ae4947f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:79:67:0a:f4:0e:36:15:61:95:1e:47:0b: 87:3d:94:64:fe:82:48:52:39:ff:f8:b9:cb:fd:ea: 0c:9e:54:7b:6b:b5:10:2e:3a:1b:eb:0b:7a:6a:71: c6:79:1f:2e:93:aa:82:04:ed:31:de:c2:cf:f5:7e: 3a:92:b6:87:5e:80:bf:e4:40:b8:f5:c1:0d:9d:dd: d3:a0:fa:e6:9b:8a:41:83:d9:09:1b:8d:21:ee:89: 5f:7c:b3:91:79:b0:9d:db:11:82:c8:ef:c7:86:df: 0d:f7:aa:7f:b0:2c:5d:19:cc:59:70:1d:84:09:38: 56:ff:a7:33:a6:b7:74:f2:22:f5:24:f6:be:d3:8f: 88:6f:e2:be:68:36:a9:15:00:8d:bf:08:5a:42:3e: bb:a1:75:37:1b:12:41:fe:64:0e:86:9e:08:61:0a: 4b:bb:e9:cf:24:ee:90:fe:3e:4a:88:8f:60:f7:d3: 4c:50:9e:e0:78:bc:29:ae:19:42:a3:c6:5a:6a:27: 77:3b:70:da:21:9e:49:2d:8f:4f:81:af:51:9f:10: 2e:cf:64:76:b8:d3:04:3d:59:f9:ed:5d:7a:0d:95: f2:1b:5f:b2:30:6e:27:3d:62:1e:e6:a7:ab:4d:e5: 75:5d:99:a4:e3:41:6e:97:a6:7b:64:23:da:88:f3: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1B:86:07:5F:36:7D:C6:F3:6F:76:AD:9E:1F:83:E7:AE:49:47:F5 X509v3 Authority Key Identifier: keyid:54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f4:5f:19:d9:5e:3a:e1:26:41:58:3b:2b:d0:95:2f:72:3b: 7a:e2:04:0c:fb:36:6b:72:f4:f9:8f:4c:36:e3:07:c2:95:2d: 9b:2e:46:b6:97:94:db:a6:b2:ab:5b:c9:f8:de:c6:c1:90:ec: d1:23:3c:66:0e:94:f8:e6:97:9c:9e:c1:2a:b6:03:bb:3a:36: 04:16:6e:1c:29:0a:33:fc:c8:a0:42:fb:13:41:c9:22:0e:c5: 31:44:02:fc:f9:41:28:36:95:68:1c:5f:a9:64:53:c4:3c:42: bb:c8:58:ee:54:4a:00:1c:9b:2e:de:21:3f:21:fa:9d:fc:58: e8:12:8f:e6:9a:a8:87:07:b8:de:69:c3:45:22:8a:ed:1b:d9: bf:e4:c3:0a:23:a0:32:79:8c:e7:d8:1f:f6:a6:2e:1a:2e:27: f3:1e:17:bd:83:39:ee:b9:67:9b:10:c4:26:69:30:85:29:51: b9:9f:c9:b7:ea:69:1c:0b:e0:6d:a7:3e:0b:4a:23:bd:55:a3: 26:2c:df:b8:b9:99:4b:54:ff:31:32:54:78:15:43:5c:88:fe: bf:07:b9:00:38:59:be:f5:6c:28:0a:44:bd:65:a2:65:a1:3a: 59:b1:cc:bd:9e:43:9a:a1:74:19:dc:38:23:75:1e:04:a7:93: 34:d1:d6:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuRK0WeWrJf3cIl6iTh9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDhhNWM1YzU3N2I1M2NjMjk4YWYwNDQzZWRkNDM1MmUx YjEzMDAwHhcNMjUxMjIzMDEwMDQ3WhcNMjUxMjI0MDEwMDQ3WjAzMTEwLwYDVQQD EyhkNDFiODYwNzVmMzY3ZGM2ZjM2Zjc2YWQ5ZTFmODNlN2FlNDk0N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcx5Zwr0DjYVYZUeRwuHPZRk/oJI Ujn/+LnL/eoMnlR7a7UQLjob6wt6anHGeR8uk6qCBO0x3sLP9X46kraHXoC/5EC4 9cENnd3ToPrmm4pBg9kJG40h7olffLORebCd2xGCyO/Hht8N96p/sCxdGcxZcB2E CThW/6czprd08iL1JPa+04+Ib+K+aDapFQCNvwhaQj67oXU3GxJB/mQOhp4IYQpL u+nPJO6Q/j5KiI9g99NMUJ7geLwprhlCo8Zaaid3O3DaIZ5JLY9Pga9RnxAuz2R2 uNMEPVn57V16DZXyG1+yMG4nPWIe5qerTeV1XZmk40Ful6Z7ZCPaiPO4ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQbhgdfNn3G8292rZ4fg+euSUf1MB8GA1UdIwQY MBaAFFRIpcXFd7U8wpivBEPt1DUuGxMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYWM1ZmUtYjkxNC00YWVmLWI3Y2Et M2QwYzY4M2ZhOWM5LzEvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9kYWM1ZmUtYjkxNC00YWVmLWI3Y2EtM2QwYzY4M2ZhOWM5 LzEvVkVpbHhjVjN0VHpDbUs4RVEtM1VOUzRiRXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/RfGdle OuEmQVg7K9CVL3I7euIEDPs2a3L0+Y9MNuMHwpUtmy5GtpeU26ayq1vJ+N7GwZDs 0SM8Zg6U+OaXnJ7BKrYDuzo2BBZuHCkKM/zIoEL7E0HJIg7FMUQC/PlBKDaVaBxf qWRTxDxCu8hY7lRKABybLt4hPyH6nfxY6BKP5pqohwe43mnDRSKK7RvZv+TDCiOg MnmM59gf9qYuGi4n8x4XvYM57rlnmxDEJmkwhSlRuZ/Jt+ppHAvgbac+C0ojvVWj JizfuLmZS1T/MTJUeBVDXIj+vwe5ADhZvvVsKApEvWWiZaE6WbHMvZ5DmqF0Gdw4 I3UeBKeTNNHWIw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:41 2025 by rpki-client