This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json) Hash identifier: ZLJ6+GaDHkSKcs9anoOygVAKPjLrV5jfK2ipwrKdDsY= Subject key identifier: EC:92:D1:5E:10:5D:6A:A4:79:1F:EF:C2:F2:71:18:12:0F:1D:1D:E3 Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a Certificate serial: 019B29651FFDAEF1B1BF351EF562699DB70F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft Manifest number: 0573 Signing time: Tue 16 Dec 2025 23:00:51 +0000 Manifest this update: Tue 16 Dec 2025 23:00:51 +0000 Manifest next update: Wed 17 Dec 2025 23:00:51 +0000 Files and hashes: 1: O7wVhYp5aN-EHbBcAt5o4QIzfyg.roa (hash: 1pH3pLqu6QshZ8HwYPfHNSe335AW5zx9SMrVG3Y2btc=) 2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: tQISp5xbvfSM+KMksfAoAeDg5JaWYrvwQOb09zxA54I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:65:1f:fd:ae:f1:b1:bf:35:1e:f5:62:69:9d:b7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c7018034725963a971c96a8caab598cae638a Validity Not Before: Dec 16 23:00:51 2025 GMT Not After : Dec 17 23:00:51 2025 GMT Subject: CN=ec92d15e105d6aa4791fefc2f27118120f1d1de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:1b:23:a0:70:6a:29:19:c7:ef:f8:36:9f: 91:05:9b:30:0c:3a:02:ba:6e:3c:7d:f4:37:36:e0: 05:1b:66:aa:1b:df:96:06:d3:de:03:b2:dc:ae:73: 65:a0:7c:c2:68:5a:12:78:26:e3:a1:44:6f:68:80: 2d:f7:46:4a:fb:54:a2:43:24:53:52:87:02:59:ae: 6a:25:ca:30:37:66:58:99:6e:cc:ea:6f:14:e3:98: f1:0e:55:90:8e:2a:1d:dc:d4:42:ad:ca:69:40:66: 83:1b:e0:73:4d:b5:57:0f:11:19:e6:98:9c:b5:02: 9d:45:92:6e:dc:b4:de:91:37:2d:41:5d:b9:ec:85: 39:f4:09:9f:50:62:92:69:5f:42:b2:b5:bb:40:e3: d4:ac:c7:50:e5:3c:59:91:85:68:ac:be:8c:84:e9: 80:22:c6:9f:27:ea:65:69:91:41:3e:d5:91:e9:c3: f8:d4:72:ce:b2:b7:f6:a9:c9:63:dd:50:49:15:9c: bf:81:42:e8:e3:32:6a:a2:7d:ea:86:4b:70:05:6d: 8d:fc:6e:ff:47:09:e0:96:19:94:b7:7f:4a:18:a7: b0:dd:0b:fe:90:dc:4a:12:cf:47:2f:83:47:7d:f8: 14:7e:4d:d8:71:72:d8:67:f9:d3:b2:de:21:48:e2: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:92:D1:5E:10:5D:6A:A4:79:1F:EF:C2:F2:71:18:12:0F:1D:1D:E3 X509v3 Authority Key Identifier: keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7a:22:ab:3b:58:f8:d1:e6:f5:bc:50:f6:05:5b:ff:7d:aa: b9:25:68:68:ae:17:75:10:ea:74:ec:6c:c6:aa:0e:a2:82:78: 52:3a:50:20:ed:e3:2f:2f:01:89:61:6d:d2:2b:a6:e8:c8:23: 73:9a:7e:39:33:9b:4c:3c:d0:8f:a0:21:eb:97:2b:57:12:6d: f2:3d:c9:0b:9a:bd:40:36:af:43:95:45:78:8f:26:0e:f0:06: c3:81:2f:13:16:f1:05:d7:54:f7:ac:c8:a4:e9:f1:72:b6:0b: 05:80:00:c4:c0:a3:c3:6f:1d:b6:d6:e3:3e:c8:7e:3e:b2:6c: 6a:77:e1:c5:5d:22:81:ea:23:87:92:05:98:2d:32:a4:d7:30: fd:ec:79:db:fb:d5:a5:6f:44:fb:90:9b:66:63:b0:74:73:d7: 43:26:88:b5:57:6f:60:f3:78:1b:a8:14:7f:27:f6:16:63:bd: af:b0:af:2c:17:eb:af:4c:23:6e:b9:c6:94:23:f7:ac:d8:6c: c1:e5:84:16:7d:2c:ec:02:fe:bf:5a:44:71:ec:92:d5:66:34: 2f:ff:54:cb:24:c3:b8:5f:42:be:5f:d6:01:fd:fc:6e:6b:e6: d1:b5:d0:f9:44:a9:c1:be:ee:3a:03:54:b0:8a:73:12:cd:f9: 4e:74:22:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspZR/9rvGxvzUe9WJpnbcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M3MDE4MDM0NzI1OTYzYTk3MWM5NmE4Y2FhYjU5OGNh ZTYzOGEwHhcNMjUxMjE2MjMwMDUxWhcNMjUxMjE3MjMwMDUxWjAzMTEwLwYDVQQD EyhlYzkyZDE1ZTEwNWQ2YWE0NzkxZmVmYzJmMjcxMTgxMjBmMWQxZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1gbI6BwaikZx+/4Np+RBZswDDoC um48ffQ3NuAFG2aqG9+WBtPeA7LcrnNloHzCaFoSeCbjoURvaIAt90ZK+1SiQyRT UocCWa5qJcowN2ZYmW7M6m8U45jxDlWQjiod3NRCrcppQGaDG+BzTbVXDxEZ5pic tQKdRZJu3LTekTctQV257IU59AmfUGKSaV9CsrW7QOPUrMdQ5TxZkYVorL6MhOmA IsafJ+plaZFBPtWR6cP41HLOsrf2qclj3VBJFZy/gULo4zJqon3qhktwBW2N/G7/ RwnglhmUt39KGKew3Qv+kNxKEs9HL4NHffgUfk3YcXLYZ/nTst4hSOLBuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyS0V4QXWqkeR/vwvJxGBIPHR3jMB8GA1UdIwQY MBaAFFQ8cBgDRyWWOpcclqjKq1mMrmOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2Qt Mzc1ZjI0NDlhOGMxLzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2QtMzc1ZjI0NDlhOGMx LzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3oiqztY +NHm9bxQ9gVb/32quSVoaK4XdRDqdOxsxqoOooJ4UjpQIO3jLy8BiWFt0ium6Mgj c5p+OTObTDzQj6Ah65crVxJt8j3JC5q9QDavQ5VFeI8mDvAGw4EvExbxBddU96zI pOnxcrYLBYAAxMCjw28dttbjPsh+PrJsanfhxV0igeojh5IFmC0ypNcw/ex52/vV pW9E+5CbZmOwdHPXQyaItVdvYPN4G6gUfyf2FmO9r7CvLBfrr0wjbrnGlCP3rNhs weWEFn0s7AL+v1pEceyS1WY0L/9UyyTDuF9Cvl/WAf38bmvm0bXQ+USpwb7uOgNU sIpzEs35TnQiTQ== -----END CERTIFICATE-----Generated at Wed Dec 17 04:37:20 2025 by rpki-client