This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json) Hash identifier: +s50XgrT5Usc8w8RXGZe5rL4yhTRa199av7Kz1kPspg= Subject key identifier: F0:44:50:C7:7A:C8:A7:3A:DC:E9:50:23:DF:6A:AE:9B:B5:F7:86:3D Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225 Certificate serial: 019B2551A5ECE6C4A47D1033F7B9567AC988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft Manifest number: 05C7 Signing time: Tue 16 Dec 2025 04:01:06 +0000 Manifest this update: Tue 16 Dec 2025 04:01:06 +0000 Manifest next update: Wed 17 Dec 2025 04:01:06 +0000 Files and hashes: 1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=) 2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: E6JAHU43OMUSTjTs28ZFnoQUkwhjLzpHh0zAGumsjOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:a5:ec:e6:c4:a4:7d:10:33:f7:b9:56:7a:c9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e610c2abd3664c11204580f748996555c22225 Validity Not Before: Dec 16 04:01:06 2025 GMT Not After : Dec 17 04:01:06 2025 GMT Subject: CN=f04450c77ac8a73adce95023df6aae9bb5f7863d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:bf:67:7c:7f:a2:bc:5d:45:19:6a:c0:89: 48:77:44:6c:56:82:bb:63:82:03:05:03:11:c8:03: 7e:09:a6:2d:ad:96:66:2b:b1:a3:a8:b2:ae:47:8c: 9f:26:c6:6b:80:1e:80:4b:a9:c4:74:7c:6d:83:c0: 4d:71:d2:cc:6b:ee:87:50:7f:ec:d7:70:d9:0f:ac: 5a:f0:2a:83:59:9d:ee:f2:5e:f3:fe:49:9a:e1:3f: 6d:9c:45:e9:79:68:63:f6:13:a5:c0:5d:38:8c:48: 1e:05:f7:02:de:bd:29:b4:80:c4:74:2c:06:90:fd: a2:8e:01:67:91:49:fb:28:21:10:4c:b2:18:72:b5: b9:db:c3:1d:22:52:19:b5:a0:ed:fd:f0:f1:61:86: 09:9a:6e:95:82:41:42:90:c2:06:5c:46:dc:47:30: 74:09:a7:64:fd:5e:d1:8a:44:91:dc:ff:67:69:ac: 82:1a:3f:ed:d1:09:be:44:34:81:75:e8:02:38:00: 2a:85:61:f3:67:cf:cc:ac:8f:b1:d7:5c:be:0e:74: 76:f9:e8:15:a6:30:9a:22:33:91:24:8a:3e:82:83: c0:cf:15:64:a7:ca:84:e5:ba:e3:7a:05:08:cf:73: 4f:e7:74:b2:a0:5f:83:c1:27:16:70:e0:e8:c7:20: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:44:50:C7:7A:C8:A7:3A:DC:E9:50:23:DF:6A:AE:9B:B5:F7:86:3D X509v3 Authority Key Identifier: keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:49:e4:eb:0b:ca:cb:bd:6c:28:1c:c2:c7:10:08:45:49:f8: 5c:06:1f:51:4a:48:6d:a6:f7:e1:70:25:b6:bb:62:d4:f5:43: 37:a5:e3:4f:81:95:df:89:62:80:b3:a5:62:d7:23:c2:26:d7: 82:39:1e:d9:f3:be:29:e8:db:aa:c9:97:4a:5f:e5:bb:88:56: 62:a1:2e:7a:90:e8:15:35:cf:62:ed:80:40:d4:bd:26:88:b2: 3f:99:c9:b6:66:36:a7:6e:45:f7:3f:6e:82:f4:a6:e4:bf:0d: e8:ab:b2:b7:4b:7e:94:fb:6a:05:1c:a9:20:cb:af:28:ab:30: 1d:f2:56:28:bb:77:08:22:43:01:34:65:75:1b:93:c5:8d:5a: f8:aa:1a:c3:d1:ca:63:f8:a1:b4:af:91:61:48:8b:26:43:ca: 2b:7f:38:bf:53:86:4e:3d:e8:5c:07:17:67:09:3e:4e:2e:93: 38:27:ca:c6:0a:4e:6d:38:4c:7c:74:cf:b1:4e:b0:fd:f9:62: 32:c4:d2:17:42:f9:11:2d:bf:80:d0:a3:35:e8:7f:b0:89:2e: e6:f2:19:35:7a:1c:54:23:f2:0c:8d:20:72:f0:1e:7d:17:a2: d4:e0:4d:1d:0b:27:0c:fa:2a:e9:15:42:fe:ca:c3:8a:a2:39: 36:56:b4:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUaXs5sSkfRAz97lWesmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj MjIyMjUwHhcNMjUxMjE2MDQwMTA2WhcNMjUxMjE3MDQwMTA2WjAzMTEwLwYDVQQD EyhmMDQ0NTBjNzdhYzhhNzNhZGNlOTUwMjNkZjZhYWU5YmI1Zjc4NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFK/Z3x/orxdRRlqwIlId0RsVoK7 Y4IDBQMRyAN+CaYtrZZmK7GjqLKuR4yfJsZrgB6AS6nEdHxtg8BNcdLMa+6HUH/s 13DZD6xa8CqDWZ3u8l7z/kma4T9tnEXpeWhj9hOlwF04jEgeBfcC3r0ptIDEdCwG kP2ijgFnkUn7KCEQTLIYcrW528MdIlIZtaDt/fDxYYYJmm6VgkFCkMIGXEbcRzB0 Cadk/V7RikSR3P9naayCGj/t0Qm+RDSBdegCOAAqhWHzZ8/MrI+x11y+DnR2+egV pjCaIjORJIo+goPAzxVkp8qE5brjegUIz3NP53SyoF+DwScWcODoxyDcnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBEUMd6yKc63OlQI99qrpu194Y9MB8GA1UdIwQY MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAknk6wvK y71sKBzCxxAIRUn4XAYfUUpIbab34XAltrti1PVDN6XjT4GV34ligLOlYtcjwibX gjke2fO+KejbqsmXSl/lu4hWYqEuepDoFTXPYu2AQNS9JoiyP5nJtmY2p25F9z9u gvSm5L8N6Kuyt0t+lPtqBRypIMuvKKswHfJWKLt3CCJDATRldRuTxY1a+Koaw9HK Y/ihtK+RYUiLJkPKK384v1OGTj3oXAcXZwk+Ti6TOCfKxgpObThMfHTPsU6w/fli MsTSF0L5ES2/gNCjNeh/sIku5vIZNXocVCPyDI0gcvAefRei1OBNHQsnDPoq6RVC /srDiqI5Nla0JQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:44:34 2025 by rpki-client