This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft File: VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json) Hash identifier: vSyfld7ugr7dbcnk4jeH9pDoC1nG9KsJcJaRcXDnD/E= Subject key identifier: 71:C2:60:A4:83:97:46:21:23:85:64:49:20:DA:A4:EF:92:14:32:77 Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e Certificate serial: 019B11CA790AD679003D466329385CE9E9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft Manifest number: EE Signing time: Fri 12 Dec 2025 09:00:40 +0000 Manifest this update: Fri 12 Dec 2025 09:00:40 +0000 Manifest next update: Sat 13 Dec 2025 09:00:40 +0000 Files and hashes: 1: 1QnOxejfk5XuuYbYlllCBsBaG9c.roa (hash: P2RSq1ow6j3BlPvu76+kMbIlFbKzSTT3UqfFarTiLBQ=) 2: D6r05J6D3sA79ZZwq1eEGmeTVdE.roa (hash: 4BzqyVO9j3Co5UPBfledlmasXeXWcyyXJrp3dBPxaTE=) 3: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: uiPkaAooKvMRfJ8ZXPjO9iKCj8vAru5lHBTr3uIopsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:79:0a:d6:79:00:3d:46:63:29:38:5c:e9:e9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e Validity Not Before: Dec 12 09:00:40 2025 GMT Not After : Dec 13 09:00:40 2025 GMT Subject: CN=71c260a4839746212385644920daa4ef92143277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:c0:66:8a:7d:41:eb:85:49:9a:98:b8:2e: 99:70:a7:24:a3:64:e2:12:ab:73:b5:d4:45:45:45: 25:97:e5:02:a1:6c:35:2f:98:68:c4:59:61:d8:a2: 31:a4:a5:cb:40:85:f7:56:74:ab:9f:85:15:d1:6b: 5a:f5:f4:65:5e:93:77:3c:58:aa:95:45:e8:70:92: 5e:94:6e:fe:6f:18:d2:b0:1a:18:68:29:c8:dc:53: ea:73:d0:1d:9f:78:1b:e2:38:27:9d:d3:7f:1c:96: 1b:0b:1f:25:ba:56:05:22:d3:60:89:7c:1e:86:c1: 4f:88:e1:bb:84:f8:ca:ae:b7:74:a1:76:e5:e4:91: a4:cc:8d:99:91:f9:b7:4c:4a:bf:54:f8:a9:2b:53: f7:07:dc:29:8a:51:4e:da:79:dc:da:6a:bb:4d:88: 6d:63:c2:40:f5:84:11:63:b6:21:3d:3e:38:3f:bb: ed:be:64:39:12:5d:18:5d:55:ce:88:11:60:70:b9: a2:68:0d:b6:79:f6:43:33:37:f0:a7:8f:b2:6d:ba: 02:37:64:bb:88:a2:28:a3:55:71:81:7c:58:ed:ba: f2:16:bc:ca:c0:12:cc:89:08:60:1e:e2:f3:f3:d0: 07:55:bb:56:0a:c8:cf:ab:aa:c8:3b:b0:f7:9e:b2: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:60:A4:83:97:46:21:23:85:64:49:20:DA:A4:EF:92:14:32:77 X509v3 Authority Key Identifier: keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:62:c9:b9:f3:c5:49:69:28:d1:59:ee:3e:74:e2:67:55: 5f:0f:27:a4:7e:8c:ef:e3:ba:f8:bf:31:95:61:c9:3a:70:73: 89:7c:27:89:35:6b:1b:aa:93:f1:e3:d9:17:a2:81:b2:84:52: 52:b1:94:2f:bd:af:d6:76:0a:cc:bd:42:9c:7f:24:10:ed:7b: 04:f5:39:0f:89:1f:64:6d:56:b2:09:c7:ca:1e:bc:da:4f:e3: 97:a0:af:6c:dc:9d:68:5a:e0:74:97:a5:18:60:ae:38:d5:5b: 60:c2:08:6f:02:a5:90:32:b3:76:c5:b4:e7:f5:cd:51:12:b3: d0:62:da:0c:7d:48:97:d7:17:59:d2:43:86:39:2a:40:13:ad: 7e:46:ac:d8:1d:a0:f9:e1:40:2c:ef:ce:e4:b9:a7:a9:af:2a: 89:98:ec:19:5a:bc:74:4c:93:92:da:ff:8a:64:85:84:f6:57: ae:d0:e1:14:33:62:0a:ed:2c:c5:1a:e2:fe:09:b8:97:8f:41: 37:03:f2:d1:cb:b5:57:8d:8d:8f:6c:c8:5b:77:9f:80:e5:7d: 47:ec:9d:55:4f:34:ed:a5:81:be:50:b5:ac:38:9d:c6:e0:6a: b5:76:b0:3d:1b:d1:8b:ea:b8:7b:e0:95:6e:f7:88:6b:54:6d: a5:ed:01:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRynkK1nkAPUZjKThc6enOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1 NDQ5N2UwHhcNMjUxMjEyMDkwMDQwWhcNMjUxMjEzMDkwMDQwWjAzMTEwLwYDVQQD Eyg3MWMyNjBhNDgzOTc0NjIxMjM4NTY0NDkyMGRhYTRlZjkyMTQzMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X/AZop9QeuFSZqYuC6ZcKcko2Ti EqtztdRFRUUll+UCoWw1L5hoxFlh2KIxpKXLQIX3VnSrn4UV0Wta9fRlXpN3PFiq lUXocJJelG7+bxjSsBoYaCnI3FPqc9Adn3gb4jgnndN/HJYbCx8lulYFItNgiXwe hsFPiOG7hPjKrrd0oXbl5JGkzI2Zkfm3TEq/VPipK1P3B9wpilFO2nnc2mq7TYht Y8JA9YQRY7YhPT44P7vtvmQ5El0YXVXOiBFgcLmiaA22efZDMzfwp4+ybboCN2S7 iKIoo1VxgXxY7bryFrzKwBLMiQhgHuLz89AHVbtWCsjPq6rIO7D3nrIpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHCYKSDl0YhI4VkSSDapO+SFDJ3MB8GA1UdIwQY MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt MDJkZTAxMjQyMjhlLzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjt5iybnz xUlpKNFZ7j504mdVXw8npH6M7+O6+L8xlWHJOnBziXwniTVrG6qT8ePZF6KBsoRS UrGUL72v1nYKzL1CnH8kEO17BPU5D4kfZG1WsgnHyh682k/jl6CvbNydaFrgdJel GGCuONVbYMIIbwKlkDKzdsW05/XNURKz0GLaDH1Il9cXWdJDhjkqQBOtfkas2B2g +eFALO/O5Lmnqa8qiZjsGVq8dEyTktr/imSFhPZXrtDhFDNiCu0sxRri/gm4l49B NwPy0cu1V42Nj2zIW3efgOV9R+ydVU807aWBvlC1rDidxuBqtXawPRvRi+q4e+CV bveIa1Rtpe0B+Q== -----END CERTIFICATE-----Generated at Fri Dec 12 14:19:45 2025 by rpki-client