This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json) Hash identifier: zsIJv5EKAq+30jz5/v6JmG0KDnFrlKz7/EaBHwXPxDA= Subject key identifier: 6D:C1:B6:9C:67:91:92:EF:52:8F:38:63:B8:FA:B2:A4:50:EB:CE:A0 Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe Certificate serial: 019B40FF8C0BB675BBB1F7965B90B0387E0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft Manifest number: 0C09 Signing time: Sun 21 Dec 2025 13:00:47 +0000 Manifest this update: Sun 21 Dec 2025 13:00:47 +0000 Manifest next update: Mon 22 Dec 2025 13:00:47 +0000 Files and hashes: 1: 2GddVKlLqDHz3jGINuxAaNndgi4.roa (hash: NX+DTGci6J0ZuUfn1NcxftSpxOGbzEMso8wgVo2GWr0=) 2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=) 3: SHaKbFPNsLxfj0s-D5n21WdMWXU.roa (hash: WwVmn3+VNOBpT8pGoSZiYks1QQTfhs67OIXLYD1YY2w=) 4: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: uOOGjeg0UV3igd3iBaGmRobnqrJQS2TjB3qlV3KXwMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:8c:0b:b6:75:bb:b1:f7:96:5b:90:b0:38:7e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe Validity Not Before: Dec 21 13:00:47 2025 GMT Not After : Dec 22 13:00:47 2025 GMT Subject: CN=6dc1b69c679192ef528f3863b8fab2a450ebcea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:2a:fd:e7:cc:5b:9d:cd:41:8f:44:b7:e5: 6d:13:83:50:54:4b:20:d0:ad:ae:70:99:9a:a2:d7: 0e:bf:79:bd:84:82:c0:e2:8b:8e:ea:b3:ac:bd:c1: ff:8e:31:9f:64:87:6f:f3:2f:f7:47:28:03:2e:ee: 56:a0:bf:60:dd:13:78:ed:07:27:05:96:93:c8:af: 08:18:d5:6c:86:fe:a6:c0:62:e2:43:70:05:69:c3: d4:2c:3b:22:be:f5:9b:3e:21:82:ab:57:f5:09:fa: 4d:8f:7f:d8:f1:ea:ac:97:96:b7:55:ab:6e:fa:35: 88:75:ee:6f:7d:8c:c7:44:27:fc:e6:5b:6e:c4:07: ba:95:f1:ef:78:f6:93:24:cd:02:02:bd:d6:d6:5d: 30:8f:1a:66:1f:fc:57:bf:02:78:cc:07:fe:da:de: 79:df:0e:b3:50:38:12:3a:77:ac:4c:bf:c2:e2:30: 15:4a:57:4d:cf:c8:57:51:ff:9d:2a:67:7e:00:10: fa:1f:44:c0:db:2b:3e:1a:62:2f:d3:06:e1:b1:a2: e0:9f:ac:d4:b1:dc:cd:6e:66:d2:b1:4b:b2:23:59: 53:37:6b:b4:53:83:bc:03:6c:03:b7:e8:57:cf:57: 5f:c8:2d:f7:55:2c:79:53:42:02:28:90:97:12:e1: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C1:B6:9C:67:91:92:EF:52:8F:38:63:B8:FA:B2:A4:50:EB:CE:A0 X509v3 Authority Key Identifier: keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c6:de:5e:94:46:d3:e5:e8:5e:65:a7:37:b7:c3:c0:ee:76: 91:42:08:21:fb:1d:8c:7e:9c:f0:f2:c8:88:3b:00:07:8b:74: 74:4b:65:6e:de:aa:7d:55:67:08:91:f5:54:f5:5b:13:15:29: 53:98:91:f6:6f:ef:98:62:3f:b7:39:0e:2c:95:ee:54:0e:7b: d2:86:13:72:5b:8e:a6:70:ee:b7:4a:39:f4:90:83:00:c1:f0: 89:f3:ba:fa:99:37:c1:bf:d5:b3:7e:df:01:58:73:00:1b:0f: e6:04:8a:83:87:96:61:fe:44:1d:c2:fb:0d:30:1b:2a:00:6d: fc:c7:63:fe:03:ad:b2:fe:2d:f1:27:73:bc:6f:7f:83:56:58: 86:80:b3:23:bd:32:2d:3f:fe:b3:14:fa:dc:0d:1c:20:00:cc: aa:96:66:81:7d:1b:9a:14:2e:46:f3:45:16:2d:88:c3:8e:84: 52:c8:ed:9b:d9:a5:10:d5:0d:ae:36:c3:0b:87:fd:ad:0e:40: 65:92:b1:34:7d:5a:9b:52:50:ba:00:05:f3:35:35:df:72:ab: 20:be:6c:ab:dc:d2:fa:77:5b:de:3f:f9:51:63:77:3e:b9:77: c1:5e:d2:d9:27:a5:46:ce:e4:6e:db:1c:6c:fb:24:e2:fb:2f: 9f:87:e4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/4wLtnW7sfeWW5CwOH4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3 MDliZmUwHhcNMjUxMjIxMTMwMDQ3WhcNMjUxMjIyMTMwMDQ3WjAzMTEwLwYDVQQD Eyg2ZGMxYjY5YzY3OTE5MmVmNTI4ZjM4NjNiOGZhYjJhNDUwZWJjZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvgq/efMW53NQY9Et+VtE4NQVEsg 0K2ucJmaotcOv3m9hILA4ouO6rOsvcH/jjGfZIdv8y/3RygDLu5WoL9g3RN47Qcn BZaTyK8IGNVshv6mwGLiQ3AFacPULDsivvWbPiGCq1f1CfpNj3/Y8eqsl5a3Vatu +jWIde5vfYzHRCf85ltuxAe6lfHvePaTJM0CAr3W1l0wjxpmH/xXvwJ4zAf+2t55 3w6zUDgSOnesTL/C4jAVSldNz8hXUf+dKmd+ABD6H0TA2ys+GmIv0wbhsaLgn6zU sdzNbmbSsUuyI1lTN2u0U4O8A2wDt+hXz1dfyC33VSx5U0ICKJCXEuFyrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3BtpxnkZLvUo84Y7j6sqRQ686gMB8GA1UdIwQY MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt NWRmY2NkNjFhOWIxLzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8beXpRG 0+XoXmWnN7fDwO52kUIIIfsdjH6c8PLIiDsAB4t0dEtlbt6qfVVnCJH1VPVbExUp U5iR9m/vmGI/tzkOLJXuVA570oYTcluOpnDut0o59JCDAMHwifO6+pk3wb/Vs37f AVhzABsP5gSKg4eWYf5EHcL7DTAbKgBt/Mdj/gOtsv4t8SdzvG9/g1ZYhoCzI70y LT/+sxT63A0cIADMqpZmgX0bmhQuRvNFFi2Iw46EUsjtm9mlENUNrjbDC4f9rQ5A ZZKxNH1am1JQugAF8zU133KrIL5sq9zS+ndb3j/5UWN3Prl3wV7S2SelRs7kbtsc bPsk4vsvn4fksg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:02 2025 by rpki-client