This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json) Hash identifier: m+P8PQy/ahJLE353mdrEbbC2LnaALJUiGqo7N+HUHaQ= Subject key identifier: 6A:6E:74:65:C6:37:AB:E3:99:64:35:D6:46:A7:5C:01:70:75:DF:F4 Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3 Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3 Certificate serial: 019B1F86539502C65BCACF69EA66944B7483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft Manifest number: 1260 Signing time: Mon 15 Dec 2025 01:00:55 +0000 Manifest this update: Mon 15 Dec 2025 01:00:55 +0000 Manifest next update: Tue 16 Dec 2025 01:00:55 +0000 Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: 28F3ZmDJRTza6bpcxaZDPFy8NgxSgvg6eOXeMFped9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:53:95:02:c6:5b:ca:cf:69:ea:66:94:4b:74:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3 Validity Not Before: Dec 15 01:00:55 2025 GMT Not After : Dec 16 01:00:55 2025 GMT Subject: CN=6a6e7465c637abe3996435d646a75c017075dff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2b:9c:7b:b5:8f:a7:1a:b4:4b:81:1c:62:d5: 5e:df:bf:bf:ee:ae:43:25:39:e2:c2:2d:cc:55:53: a0:bd:d2:da:41:d3:20:e3:a8:7f:09:b5:18:2c:20: 93:96:eb:e0:08:a2:98:87:97:ff:3f:6e:d0:09:43: 98:6e:75:9b:b4:34:63:5c:63:86:65:37:8d:00:7b: 3f:c4:f7:35:60:a7:32:43:91:03:55:4e:89:d6:08: b6:c2:63:0f:82:f1:ed:63:4f:53:3e:ad:4f:ab:d9: 37:da:d8:b7:c4:89:b4:9a:0a:5c:51:36:24:fc:c9: 37:53:6c:56:48:b1:3e:4b:7a:e8:83:64:52:e7:de: f1:a3:fa:80:29:5d:69:aa:3a:77:66:3e:b4:31:79: d7:81:d7:60:73:c8:82:d8:10:64:92:6f:52:3f:aa: 39:cc:84:93:44:b7:bf:46:82:66:ce:25:49:34:6b: 09:03:56:a3:06:70:2f:5d:99:22:ae:7b:83:94:e0: ca:8f:c5:ad:90:73:30:01:40:9e:c9:f1:13:0c:b8: 00:f4:c2:a2:41:97:ad:12:b6:3e:2e:13:c5:56:b4: 6c:be:ee:6d:ed:2b:f2:f9:c1:92:4b:09:e1:cd:93: 0a:62:6e:79:ca:df:7b:a5:60:cc:7f:1f:7b:f9:63: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6E:74:65:C6:37:AB:E3:99:64:35:D6:46:A7:5C:01:70:75:DF:F4 X509v3 Authority Key Identifier: keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:42:95:8b:4a:d2:58:43:4d:72:53:c7:6d:c0:3b:00:c9:62: 26:3e:4b:db:4a:81:8a:31:40:79:4a:a7:13:78:db:22:29:89: 6a:6c:d7:4f:e5:99:1b:12:eb:bd:1b:79:26:a8:f3:8c:2a:85: 52:2d:79:3e:b2:92:8d:e5:d6:d6:71:11:66:20:40:ef:2c:60: 6c:0f:5a:c5:9e:eb:91:81:40:86:d2:1d:ef:2e:84:2b:a3:58: 9d:c9:f3:74:4e:ee:b5:f4:e4:3f:5d:1e:56:27:2a:9c:f4:b4: f8:af:dd:dd:82:58:fc:06:a7:b2:f3:24:43:43:e9:59:5b:ee: fa:3a:23:0f:9b:fe:8c:c1:a1:ca:7b:76:00:6c:94:18:ca:19: ea:be:10:e6:14:98:02:19:22:8a:2c:fa:0f:52:02:cf:19:0d: b6:b0:c9:2b:39:88:d3:cb:e6:fa:13:31:fe:ef:77:d8:7b:34: 1d:c3:d2:ae:0f:93:3c:4e:f3:4b:28:47:63:e5:21:9c:c3:b7: 76:0b:b4:2a:67:e0:9d:37:e5:6e:44:4b:6e:32:aa:80:cd:48: 51:04:db:44:53:9b:8b:c1:1d:61:33:52:6b:48:bf:70:14:42: 7f:40:95:9a:24:89:38:d6:89:12:cf:2e:69:d8:93:ef:50:1c: 74:4b:ac:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhlOVAsZbys9p6maUS3SDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NThkZGE2ZmFkOTM2ZGE4OTUyMDAwMWFhMjgyYmZhY2M4 YjgyZTMwHhcNMjUxMjE1MDEwMDU1WhcNMjUxMjE2MDEwMDU1WjAzMTEwLwYDVQQD Eyg2YTZlNzQ2NWM2MzdhYmUzOTk2NDM1ZDY0NmE3NWMwMTcwNzVkZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iuce7WPpxq0S4EcYtVe37+/7q5D JTniwi3MVVOgvdLaQdMg46h/CbUYLCCTluvgCKKYh5f/P27QCUOYbnWbtDRjXGOG ZTeNAHs/xPc1YKcyQ5EDVU6J1gi2wmMPgvHtY09TPq1Pq9k32ti3xIm0mgpcUTYk /Mk3U2xWSLE+S3rog2RS597xo/qAKV1pqjp3Zj60MXnXgddgc8iC2BBkkm9SP6o5 zISTRLe/RoJmziVJNGsJA1ajBnAvXZkirnuDlODKj8WtkHMwAUCeyfETDLgA9MKi QZetErY+LhPFVrRsvu5t7Svy+cGSSwnhzZMKYm55yt97pWDMfx97+WOtPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpudGXGN6vjmWQ11kanXAFwdd/0MB8GA1UdIwQY MBaAFFRY3ab62TbaiVIAAaooK/rMi4LjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzgxZWEtMGEzMi00M2Y5LTk4OTAt ZGU5N2JjZDQwMzY4LzEvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC80NzgxZWEtMGEzMi00M2Y5LTk4OTAtZGU5N2JjZDQwMzY4 LzEvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0KVi0rS WENNclPHbcA7AMliJj5L20qBijFAeUqnE3jbIimJamzXT+WZGxLrvRt5JqjzjCqF Ui15PrKSjeXW1nERZiBA7yxgbA9axZ7rkYFAhtId7y6EK6NYncnzdE7utfTkP10e VicqnPS0+K/d3YJY/AansvMkQ0PpWVvu+jojD5v+jMGhynt2AGyUGMoZ6r4Q5hSY Ahkiiiz6D1ICzxkNtrDJKzmI08vm+hMx/u932Hs0HcPSrg+TPE7zSyhHY+UhnMO3 dgu0KmfgnTflbkRLbjKqgM1IUQTbRFObi8EdYTNSa0i/cBRCf0CVmiSJONaJEs8u adiT71AcdEusYA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:13 2025 by rpki-client