This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft File: VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json) Hash identifier: A7e5FgbQl4ulww8deGmicdkAR71h8/KY31C7iPJ56XA= Subject key identifier: 5D:58:9F:A1:8D:1D:CF:90:57:CB:84:4C:AA:55:E7:55:E7:7B:8D:55 Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61 Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461 Certificate serial: 019B18DFDF08C24A104FCF0DC5D3D8DD93F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft Manifest number: 0A79 Signing time: Sat 13 Dec 2025 18:01:23 +0000 Manifest this update: Sat 13 Dec 2025 18:01:23 +0000 Manifest next update: Sun 14 Dec 2025 18:01:23 +0000 Files and hashes: 1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: VFGETJ9EAo9OvcPTTSfGdII5+4j+Lyz2bYckbtHPbzk=) 2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:df:08:c2:4a:10:4f:cf:0d:c5:d3:d8:dd:93:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54913026f079cda241aef4514fd353c28330e461 Validity Not Before: Dec 13 18:01:23 2025 GMT Not After : Dec 14 18:01:23 2025 GMT Subject: CN=5d589fa18d1dcf9057cb844caa55e755e77b8d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:e9:79:60:05:5b:92:29:67:b2:25:df:b9: 05:8a:30:bf:82:8a:37:9a:b8:32:d2:cd:b0:cc:be: c6:bf:a2:90:44:13:43:90:62:91:f0:0c:a3:ee:9f: e6:06:6b:f1:af:ad:e1:c3:8d:97:45:ef:bc:68:6a: 1d:fc:66:f1:83:19:87:a5:05:18:18:00:7f:6d:ab: aa:f2:4f:d0:2d:79:0b:b3:5a:ab:4a:52:21:81:7d: 18:25:0a:4b:3b:00:0d:46:f0:33:62:d2:63:16:69: 67:8c:3b:f7:f4:b6:f9:a6:0b:dc:bc:ad:ad:13:22: e3:2f:c3:f3:12:22:14:3c:f0:0d:50:b5:82:37:1e: df:d3:6b:28:78:6c:ce:ff:fd:1b:90:dc:bc:a6:3e: 64:59:35:6e:49:ad:97:3a:d8:f6:1d:46:a1:66:7a: 4e:35:a1:a2:a5:ec:82:c8:2b:4d:5e:cd:25:3e:8e: 0e:6e:22:82:a0:1c:fe:08:2a:a9:ac:09:d7:7f:17: 66:ea:b6:83:05:78:a3:f4:87:e7:b1:d0:d7:4c:73: 77:63:c5:66:7e:44:c4:a8:e6:b1:60:de:44:bd:7b: d2:3e:fb:a3:5a:e3:3b:9f:7e:36:da:4c:88:0a:4a: b1:e4:44:ff:1c:ea:d7:5d:d5:8b:9e:c5:17:a0:ca: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:58:9F:A1:8D:1D:CF:90:57:CB:84:4C:AA:55:E7:55:E7:7B:8D:55 X509v3 Authority Key Identifier: keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:00:92:72:21:01:d3:9f:90:93:2d:a8:96:a8:d5:d9:a6:1b: 55:75:31:52:43:0b:b9:c3:60:3b:31:e5:83:1e:28:7f:cd:00: ff:6e:7f:32:d5:3d:95:8e:f3:7a:3d:91:b8:95:9a:f0:b4:6b: a1:d5:c6:b8:48:61:23:44:aa:0e:7f:d9:b3:92:a9:4f:21:4b: fa:47:66:c2:87:7b:73:f2:64:34:89:bb:1a:94:9f:25:4f:3b: 66:54:f3:3f:26:a0:0c:95:a8:43:f5:81:46:1b:00:95:10:97: 2e:1b:a1:54:b1:2d:b8:3a:32:0f:75:cb:ba:e0:d7:3b:67:8d: e6:53:00:aa:b7:28:1b:14:88:ad:36:f0:77:85:95:3b:a9:2d: 68:93:65:7b:09:ff:61:2b:7e:f7:96:b6:10:1d:bd:eb:34:00: 76:50:b4:d8:15:0e:cc:2a:c1:12:fb:19:13:58:bb:00:80:83: 7e:10:66:9f:19:bd:6b:f7:e2:29:b8:87:b8:dd:11:6a:9e:4e: 49:b9:ac:c1:bd:0f:b6:9a:fb:6f:fb:26:e2:47:93:bc:2e:f6: 61:9b:aa:90:d5:75:00:42:78:82:b0:34:1b:bb:1c:a8:a6:a6: 2c:5b:1e:2d:44:06:a2:78:7e:ba:5f:15:83:0d:ab:fa:e1:60: 64:55:05:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY398IwkoQT88NxdPY3ZP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OTEzMDI2ZjA3OWNkYTI0MWFlZjQ1MTRmZDM1M2MyODMz MGU0NjEwHhcNMjUxMjEzMTgwMTIzWhcNMjUxMjE0MTgwMTIzWjAzMTEwLwYDVQQD Eyg1ZDU4OWZhMThkMWRjZjkwNTdjYjg0NGNhYTU1ZTc1NWU3N2I4ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqHpeWAFW5IpZ7Il37kFijC/goo3 mrgy0s2wzL7Gv6KQRBNDkGKR8Ayj7p/mBmvxr63hw42XRe+8aGod/GbxgxmHpQUY GAB/bauq8k/QLXkLs1qrSlIhgX0YJQpLOwANRvAzYtJjFmlnjDv39Lb5pgvcvK2t EyLjL8PzEiIUPPANULWCNx7f02soeGzO//0bkNy8pj5kWTVuSa2XOtj2HUahZnpO NaGipeyCyCtNXs0lPo4ObiKCoBz+CCqprAnXfxdm6raDBXij9IfnsdDXTHN3Y8Vm fkTEqOaxYN5EvXvSPvujWuM7n3422kyICkqx5ET/HOrXXdWLnsUXoMqitQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1Yn6GNHc+QV8uETKpV51Xne41VMB8GA1UdIwQY MBaAFFSRMCbwec2iQa70UU/TU8KDMORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZjYzZGYtYjZmNy00ZDQyLWE5YTkt MWE3Njc4NGEwYTIxLzEvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZjYzZGYtYjZmNy00ZDQyLWE5YTktMWE3Njc4NGEwYTIx LzEvVkpFd0p2QjV6YUpCcnZSUlQ5TlR3b013NUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwCSciEB 05+Qky2olqjV2aYbVXUxUkMLucNgOzHlgx4of80A/25/MtU9lY7zej2RuJWa8LRr odXGuEhhI0SqDn/Zs5KpTyFL+kdmwod7c/JkNIm7GpSfJU87ZlTzPyagDJWoQ/WB RhsAlRCXLhuhVLEtuDoyD3XLuuDXO2eN5lMAqrcoGxSIrTbwd4WVO6ktaJNlewn/ YSt+95a2EB296zQAdlC02BUOzCrBEvsZE1i7AICDfhBmnxm9a/fiKbiHuN0Rap5O Sbmswb0Ptpr7b/sm4keTvC72YZuqkNV1AEJ4grA0G7scqKamLFseLUQGonh+ul8V gw2r+uFgZFUFSA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:56 2025 by rpki-client