This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json) Hash identifier: +lEbrHBHBDKDqCguGF0mpVNrIxOTExwI6qwKZjE2qms= Subject key identifier: DE:3E:47:88:26:DA:10:81:56:6B:7C:B2:FF:7A:04:2D:E0:36:B5:AE Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720 Certificate serial: 019B1D29F225692F73C42BD8CFA3AEF97A3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 14:00:46 +0000 Manifest this update: Sun 14 Dec 2025 14:00:46 +0000 Manifest next update: Mon 15 Dec 2025 14:00:46 +0000 Files and hashes: 1: Ca-8iz_zQCrKysmx5A1KTglY5iE.roa (hash: QQcsgeeci4CpJE1THj53EE0/b4qFL4RDwyCbpu7M9gI=) 2: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: RaQtKFEa1AwZySEwWoPaXx/9mIk1jBCEJrh+Wwe2+SA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:29:f2:25:69:2f:73:c4:2b:d8:cf:a3:ae:f9:7a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720 Validity Not Before: Dec 14 14:00:46 2025 GMT Not After : Dec 15 14:00:46 2025 GMT Subject: CN=de3e478826da1081566b7cb2ff7a042de036b5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:6e:55:f4:8a:e0:df:15:4e:0a:01:bb:2c: ce:b2:e2:38:e4:ee:a8:33:21:8b:3f:73:cc:a5:13: 60:18:5c:fc:86:a4:10:c9:61:2f:0f:11:1f:c9:51: 02:fc:2e:e0:14:7d:37:8c:c1:2a:6f:c5:f9:be:8c: ad:03:07:46:79:1a:a8:bd:fb:d4:d4:57:bb:72:a6: dc:76:e9:e8:e5:e8:b0:8f:66:ec:c9:d0:c6:44:5a: 8c:2f:1f:de:cb:c5:14:e1:98:3e:5f:45:b6:62:8c: 58:17:10:98:ee:55:5c:24:59:22:69:11:3f:65:b5: f8:7c:91:95:37:5c:0a:85:70:0c:bb:7d:4a:9a:d7: 95:3e:09:60:19:a2:63:49:4f:99:d8:0e:13:dd:6f: 07:9d:f2:d2:f0:3d:89:5e:38:6f:8b:03:9d:cc:82: f8:92:d2:12:58:11:43:1e:b4:39:07:96:35:cc:a1: 75:4f:44:b8:a8:10:95:e5:6f:d9:fb:dd:75:ac:90: c8:65:7f:76:14:24:4e:bd:8b:2f:49:73:6e:87:dd: ab:de:85:aa:82:1c:1b:a3:86:b8:80:c1:78:67:37: 61:f4:6e:35:0c:1e:db:95:97:f7:8d:bb:ea:ca:1e: 76:01:a2:f3:5e:2d:76:a1:ec:21:00:3a:09:6e:e5: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:47:88:26:DA:10:81:56:6B:7C:B2:FF:7A:04:2D:E0:36:B5:AE X509v3 Authority Key Identifier: keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:65:e5:ec:9c:48:95:16:c0:57:77:de:d6:a2:90:30:7b:7b: 38:05:c5:ec:a1:db:cb:14:35:0d:6e:2c:5b:c7:ab:95:5e:d8: 0a:11:18:d3:4e:7b:46:f9:0e:d3:ea:ba:e1:90:fe:09:dc:a1: 40:39:92:b3:f9:83:ab:93:ab:d3:94:a9:e8:b5:1d:c9:48:b8: 2b:3b:ce:32:c1:67:03:6c:fe:7c:6a:32:04:8d:4b:de:8e:61: 1b:8a:b8:ef:b4:29:1a:18:a2:72:bd:38:23:5e:b4:31:20:9d: 4d:ab:48:d9:87:e2:5d:6c:b6:55:0e:ab:7c:39:6c:fa:ed:03: fb:ba:c8:ad:9d:cd:30:b3:da:81:04:11:ae:01:21:1e:6f:82: 17:69:5a:7f:12:67:0c:f0:eb:94:b0:d2:56:79:1f:04:f0:dd: 50:f4:f7:48:fe:9c:8d:71:11:1a:c9:05:17:71:a9:b3:89:5a: 62:e1:b4:65:49:d7:2c:a8:26:97:a1:b6:d3:dc:4b:58:12:f0: 1e:7a:ef:cc:96:a6:03:44:b9:62:ee:4c:15:c6:b9:81:9d:8d: 63:0a:4e:15:8e:bb:c4:76:16:c8:f5:08:d2:cf:1d:ea:c6:36: 22:b5:61:d3:0a:40:d0:b0:17:5b:35:a6:2c:ee:67:d4:0a:a5: 7f:5b:4f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKfIlaS9zxCvYz6Ou+Xo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjg1ZmZlZTk3MzEyYzUxYzNhODA1ZmY5MzQwZWJlYzMz NTI3MjAwHhcNMjUxMjE0MTQwMDQ2WhcNMjUxMjE1MTQwMDQ2WjAzMTEwLwYDVQQD EyhkZTNlNDc4ODI2ZGExMDgxNTY2YjdjYjJmZjdhMDQyZGUwMzZiNWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtduVfSK4N8VTgoBuyzOsuI45O6o MyGLP3PMpRNgGFz8hqQQyWEvDxEfyVEC/C7gFH03jMEqb8X5voytAwdGeRqovfvU 1Fe7cqbcduno5eiwj2bsydDGRFqMLx/ey8UU4Zg+X0W2YoxYFxCY7lVcJFkiaRE/ ZbX4fJGVN1wKhXAMu31KmteVPglgGaJjSU+Z2A4T3W8HnfLS8D2JXjhviwOdzIL4 ktISWBFDHrQ5B5Y1zKF1T0S4qBCV5W/Z+911rJDIZX92FCROvYsvSXNuh92r3oWq ghwbo4a4gMF4Zzdh9G41DB7blZf3jbvqyh52AaLzXi12oewhADoJbuWlCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4+R4gm2hCBVmt8sv96BC3gNrWuMB8GA1UdIwQY MBaAFFQoX/7pcxLFHDqAX/k0Dr7DNScgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjIt OGE3ZTYzZThjZDc1LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWJjYmQtZWU2NS00Zjk3LTlhMjItOGE3ZTYzZThjZDc1 LzEvVkNoZl91bHpFc1VjT29CZi1UUU92c00xSnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2Xl7JxI lRbAV3fe1qKQMHt7OAXF7KHbyxQ1DW4sW8erlV7YChEY0057RvkO0+q64ZD+Cdyh QDmSs/mDq5Or05Sp6LUdyUi4KzvOMsFnA2z+fGoyBI1L3o5hG4q477QpGhiicr04 I160MSCdTatI2YfiXWy2VQ6rfDls+u0D+7rIrZ3NMLPagQQRrgEhHm+CF2lafxJn DPDrlLDSVnkfBPDdUPT3SP6cjXERGskFF3Gps4laYuG0ZUnXLKgml6G209xLWBLw HnrvzJamA0S5Yu5MFca5gZ2NYwpOFY67xHYWyPUI0s8d6sY2IrVh0wpA0LAXWzWm LO5n1Aqlf1tP+A== -----END CERTIFICATE-----Generated at Sun Dec 14 17:26:41 2025 by rpki-client