This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json) Hash identifier: tpo8p5+K8/rrPldvD2kYThUGOwud2eiJN75C+vFLsAc= Subject key identifier: EF:0F:4D:A0:65:AD:7B:0B:5A:30:10:74:64:D7:2A:FB:29:BB:B5:33 Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef Certificate serial: 019B126F7EEC964E8339C7741F01B25F9C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 12:00:55 +0000 Manifest this update: Fri 12 Dec 2025 12:00:55 +0000 Manifest next update: Sat 13 Dec 2025 12:00:55 +0000 Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=) 2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: iXlH5de7BgrkcncIdG4CYjKkmj9SqM/6UYZccMElYhU=) 3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:7e:ec:96:4e:83:39:c7:74:1f:01:b2:5f:9c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef Validity Not Before: Dec 12 12:00:55 2025 GMT Not After : Dec 13 12:00:55 2025 GMT Subject: CN=ef0f4da065ad7b0b5a30107464d72afb29bbb533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:6e:25:81:27:dd:6c:d3:c3:61:bc:e0:15: 17:b1:a3:d7:71:2d:d1:7e:bc:92:1a:c5:29:1b:5e: 69:17:1e:0b:53:c5:2d:00:f2:5e:64:f1:d1:15:e0: e5:6b:90:dc:cc:d2:8d:2c:4a:63:d5:11:c0:f1:57: 96:3b:2a:28:77:f2:e3:88:b0:c4:ec:1d:70:5e:f8: 9a:6a:57:ee:d6:d1:13:45:ec:fd:f9:d7:3a:57:4a: 6e:f0:31:03:d3:1c:52:08:4b:c5:fd:d7:84:62:db: 23:f8:ae:64:2a:f8:7c:46:13:86:ca:a1:e1:ca:db: 54:fc:66:e4:de:a1:41:4f:dc:e9:be:5f:0c:24:ba: 16:91:25:70:b4:2f:b2:6d:6f:1f:e9:09:89:54:4b: d1:a9:1f:36:09:e6:09:ae:39:23:7a:4d:e6:38:5f: 8f:87:83:b8:1c:f7:fc:3a:67:9c:11:41:67:d0:a3: c1:00:6e:55:dc:40:41:fe:7c:6e:ac:7b:91:46:af: 48:9f:73:bc:f4:cf:a1:7c:65:f8:f8:60:35:91:0e: 77:fd:b1:66:e9:f0:6a:9a:be:09:df:fd:94:11:1c: 9a:ff:05:02:59:12:74:10:41:48:35:da:1e:0d:8a: 0c:04:c3:d3:8e:96:de:7d:49:7f:95:a7:1f:2b:ff: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0F:4D:A0:65:AD:7B:0B:5A:30:10:74:64:D7:2A:FB:29:BB:B5:33 X509v3 Authority Key Identifier: keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:be:a5:3e:e9:a5:c7:e3:9d:f2:b0:be:61:d4:7c:51:b1:48: cc:99:6f:8f:d9:43:ca:50:c7:c1:ca:40:05:30:fe:70:ff:3b: 32:41:4f:d9:41:f0:eb:d7:6a:6f:1e:a7:e4:2c:8d:62:da:cc: 8f:a0:c4:85:99:f7:36:9d:08:18:93:f4:21:4d:6f:28:7a:8f: 97:3f:d1:08:86:af:2e:b0:2f:fe:a0:cf:2e:e5:cf:eb:33:28: db:89:41:a7:0d:6e:29:84:6d:63:f3:e9:81:8b:4c:b4:12:38: c8:61:c6:25:97:d0:b1:cb:7f:c2:8c:65:29:10:82:d2:24:51: 70:6b:6d:5f:c4:4b:ff:17:1d:a6:e9:bb:5d:73:36:a9:0b:14: e3:96:7b:84:40:9a:43:8e:3a:d5:18:a5:7a:13:6c:41:e6:47: e6:9d:04:51:64:9c:fa:d6:f2:f2:96:d0:4b:d0:1c:7b:d3:c7: 38:1d:5b:99:17:d3:79:0b:bb:4e:3c:7d:ec:28:49:80:a9:73: 34:11:e8:3a:19:0b:cd:da:04:f9:e2:a3:07:c2:0f:3f:3e:20: c6:0c:d6:88:d2:e2:1b:61:06:ab:fd:97:2d:43:54:ed:c6:4f: 93:a6:57:9b:a3:1d:6b:ad:a1:f3:4f:62:83:c7:7c:d6:e8:51: 70:2f:fb:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb37slk6DOcd0HwGyX5yWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzE5MDg1NDc4NmExNmFmYTZiMGVjNzhkZmIwNjIwYWJh YWNmZWYwHhcNMjUxMjEyMTIwMDU1WhcNMjUxMjEzMTIwMDU1WjAzMTEwLwYDVQQD EyhlZjBmNGRhMDY1YWQ3YjBiNWEzMDEwNzQ2NGQ3MmFmYjI5YmJiNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdBuJYEn3WzTw2G84BUXsaPXcS3R frySGsUpG15pFx4LU8UtAPJeZPHRFeDla5DczNKNLEpj1RHA8VeWOyood/LjiLDE 7B1wXviaalfu1tETRez9+dc6V0pu8DED0xxSCEvF/deEYtsj+K5kKvh8RhOGyqHh yttU/Gbk3qFBT9zpvl8MJLoWkSVwtC+ybW8f6QmJVEvRqR82CeYJrjkjek3mOF+P h4O4HPf8OmecEUFn0KPBAG5V3EBB/nxurHuRRq9In3O89M+hfGX4+GA1kQ53/bFm 6fBqmr4J3/2UERya/wUCWRJ0EEFINdoeDYoMBMPTjpbefUl/lacfK/+sAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8PTaBlrXsLWjAQdGTXKvspu7UzMB8GA1UdIwQY MBaAFFZxkIVHhqFq+msOx437BiCrqs/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEt NzNmZjQwOTU5MzQ4LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNGMzMjQtYTE1ZS00Y2QwLTk0YzEtNzNmZjQwOTU5MzQ4 LzEvVm5HUWhVZUdvV3I2YXc3SGpmc0dJS3Vxei04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr6lPuml x+Od8rC+YdR8UbFIzJlvj9lDylDHwcpABTD+cP87MkFP2UHw69dqbx6n5CyNYtrM j6DEhZn3Np0IGJP0IU1vKHqPlz/RCIavLrAv/qDPLuXP6zMo24lBpw1uKYRtY/Pp gYtMtBI4yGHGJZfQsct/woxlKRCC0iRRcGttX8RL/xcdpum7XXM2qQsU45Z7hECa Q4461RilehNsQeZH5p0EUWSc+tby8pbQS9Ace9PHOB1bmRfTeQu7Tjx97ChJgKlz NBHoOhkLzdoE+eKjB8IPPz4gxgzWiNLiG2EGq/2XLUNU7cZPk6ZXm6Mda62h809i g8d81uhRcC/78A== -----END CERTIFICATE-----Generated at Fri Dec 12 17:53:36 2025 by rpki-client