This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json) Hash identifier: eHyDz4EKr9/HbpgAv6ILLkGW8d/fjVFJj/cK2TMu8yk= Subject key identifier: 49:CD:96:87:3D:52:06:03:C9:28:20:AA:22:05:12:DB:6A:F9:C2:59 Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79 Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079 Certificate serial: 019B3343D3DF173E6F85421C09BE340E4249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft Manifest number: 0E7B Signing time: Thu 18 Dec 2025 21:00:41 +0000 Manifest this update: Thu 18 Dec 2025 21:00:41 +0000 Manifest next update: Fri 19 Dec 2025 21:00:41 +0000 Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: xCOZght9Mfod69LeJautLZGJrn90zE6SE+o88BHgaiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:d3:df:17:3e:6f:85:42:1c:09:be:34:0e:42:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079 Validity Not Before: Dec 18 21:00:41 2025 GMT Not After : Dec 19 21:00:41 2025 GMT Subject: CN=49cd96873d520603c92820aa220512db6af9c259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:17:10:af:e4:6f:73:73:7c:1b:0f:12:62: a7:38:c8:dd:fe:5b:ba:fe:14:af:da:1a:fe:43:b6: 2d:3b:9e:4e:25:55:a3:78:c6:87:94:74:ef:77:13: ac:df:5b:04:d7:07:dd:f7:9f:37:d9:c8:53:fd:51: 3a:0b:c5:98:a7:b5:1a:c6:86:66:91:18:a7:88:77: b5:91:75:0d:13:8a:38:98:a0:69:21:3b:b8:9e:85: 39:63:04:1f:b0:15:99:a2:54:30:09:8b:a6:b6:ec: 1a:80:1e:96:f5:99:43:78:89:ad:69:64:66:86:87: c1:66:47:af:3e:df:98:3d:2a:f2:84:43:ee:5c:9a: c8:17:0f:89:ad:f0:cd:25:29:aa:82:ea:9e:eb:b9: 7f:78:fd:de:ad:76:3f:06:4c:0d:61:3d:8b:9a:99: e2:2e:0b:df:27:1c:42:d6:67:9d:97:1b:a0:56:24: 96:f5:cf:12:77:41:39:1e:6c:8e:75:44:c5:d1:12: b2:75:c2:fe:89:60:37:60:ff:e1:46:dc:2d:2c:03: d1:57:21:22:e5:b9:d9:66:da:a8:55:fa:9d:0c:72: 04:9c:f9:df:be:22:13:1f:13:c8:87:b7:a2:11:75: 1a:53:e3:ff:29:9d:63:2f:27:47:53:2d:69:e0:6b: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CD:96:87:3D:52:06:03:C9:28:20:AA:22:05:12:DB:6A:F9:C2:59 X509v3 Authority Key Identifier: keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:65:12:9f:61:d5:5a:d6:6c:b4:77:f6:05:93:40:0e:37:30: 77:05:91:9e:a2:1c:00:5e:f8:db:6b:37:ae:b3:80:d5:18:a1: 38:c8:b3:42:06:ee:06:9e:51:c1:d3:3c:3c:db:ab:b3:b7:40: 06:f6:f3:3c:9a:5e:70:cd:dc:93:2d:2c:3b:8d:7b:8f:15:38: 53:04:e0:5d:6a:09:0f:8c:25:17:b5:e8:f6:89:ea:a1:57:45: d8:b6:69:88:e7:a3:c1:09:f7:ee:3f:e2:e1:99:18:19:b4:3c: 26:04:8c:1c:c1:a0:cf:8c:98:bf:b2:c6:cf:74:00:83:4d:ac: 7f:a1:5d:9a:2e:7d:af:69:48:57:ba:5b:61:2b:30:90:04:e2: 35:fa:85:91:d7:39:36:ba:a4:0c:6c:b3:f2:06:0d:d8:ea:a2: 36:4e:a5:2d:3d:50:ec:44:50:8b:09:6e:64:1e:f5:12:7a:30: d4:be:cd:65:e8:30:8b:df:b9:96:c8:3e:cb:0a:bd:eb:1a:75: 5f:40:bb:2c:36:c4:e0:0c:59:35:fc:16:b0:d2:ce:3f:8c:4e: b8:5d:45:1e:b6:ca:6c:92:e4:e6:0b:dd:da:05:f3:0c:9e:33: 31:31:79:b1:0a:55:27:d2:64:aa:fc:81:39:76:2a:5b:eb:c6: 67:52:15:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9PfFz5vhUIcCb40DkJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NGQ1YTZjMzkxOWY1MWY4ZmRiOTUwNTBjMTljNTNlZjg0 OWQwNzkwHhcNMjUxMjE4MjEwMDQxWhcNMjUxMjE5MjEwMDQxWjAzMTEwLwYDVQQD Eyg0OWNkOTY4NzNkNTIwNjAzYzkyODIwYWEyMjA1MTJkYjZhZjljMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujAXEK/kb3NzfBsPEmKnOMjd/lu6 /hSv2hr+Q7YtO55OJVWjeMaHlHTvdxOs31sE1wfd95832chT/VE6C8WYp7UaxoZm kRiniHe1kXUNE4o4mKBpITu4noU5YwQfsBWZolQwCYumtuwagB6W9ZlDeImtaWRm hofBZkevPt+YPSryhEPuXJrIFw+JrfDNJSmqguqe67l/eP3erXY/BkwNYT2Lmpni LgvfJxxC1medlxugViSW9c8Sd0E5HmyOdUTF0RKydcL+iWA3YP/hRtwtLAPRVyEi 5bnZZtqoVfqdDHIEnPnfviITHxPIh7eiEXUaU+P/KZ1jLydHUy1p4GuhGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnNloc9UgYDySggqiIFEttq+cJZMB8GA1UdIwQY MBaAFFRNWmw5GfUfj9uVBQwZxT74SdB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEt NjE2ZTQzOWZkMDBkLzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEtNjE2ZTQzOWZkMDBk LzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2USn2HV WtZstHf2BZNADjcwdwWRnqIcAF7422s3rrOA1RihOMizQgbuBp5RwdM8PNurs7dA BvbzPJpecM3cky0sO417jxU4UwTgXWoJD4wlF7Xo9onqoVdF2LZpiOejwQn37j/i 4ZkYGbQ8JgSMHMGgz4yYv7LGz3QAg02sf6Fdmi59r2lIV7pbYSswkATiNfqFkdc5 NrqkDGyz8gYN2OqiNk6lLT1Q7ERQiwluZB71Enow1L7NZegwi9+5lsg+ywq96xp1 X0C7LDbE4AxZNfwWsNLOP4xOuF1FHrbKbJLk5gvd2gXzDJ4zMTF5sQpVJ9JkqvyB OXYqW+vGZ1IVwA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:41 2025 by rpki-client