This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json) Hash identifier: xMbnKro9EOAFV2D81t+sHSSOlDv03kawLmrmdVvocN4= Subject key identifier: 80:C6:3B:3B:47:A7:52:0C:8E:3D:C4:0C:5D:83:A5:90:EF:02:C8:05 Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Certificate serial: 019B0F00A507AED298601C0B8750CF37E503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft Manifest number: 13BF Signing time: Thu 11 Dec 2025 20:00:59 +0000 Manifest this update: Thu 11 Dec 2025 20:00:59 +0000 Manifest next update: Fri 12 Dec 2025 20:00:59 +0000 Files and hashes: 1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=) 2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: LglaTnpBfu3XFI1L2eDyQPBSrDm7U1eqsj2NRx0Ssq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a5:07:ae:d2:98:60:1c:0b:87:50:cf:37:e5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Validity Not Before: Dec 11 20:00:59 2025 GMT Not After : Dec 12 20:00:59 2025 GMT Subject: CN=80c63b3b47a7520c8e3dc40c5d83a590ef02c805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:ba:97:82:6c:63:ef:24:6a:db:8f:56:1b: f0:d4:8f:0d:18:05:a1:ec:07:1d:50:9d:7b:35:75: f8:89:9d:82:c9:22:33:fe:d4:d5:35:f1:2c:f1:07: 37:7f:47:8e:d4:29:a0:34:4d:40:4c:00:20:68:6c: 68:9a:e9:c1:cb:7b:a5:f2:17:1c:44:97:cf:6d:60: 65:bc:76:14:93:39:20:72:60:8f:e4:88:28:16:65: e4:00:89:64:3e:ef:49:be:e1:52:1c:81:04:c3:b4: da:8c:35:7e:d8:35:6c:8d:f5:ab:50:43:ef:09:b1: 9f:56:28:2a:22:0e:1d:d2:ba:e8:d1:ff:87:6f:e2: a1:fb:f4:3f:b1:f0:40:7a:72:58:9b:03:20:7c:80: 2d:a9:3e:7d:dc:9e:d5:c2:76:88:2d:e2:e6:f1:33: a5:6b:3c:96:af:54:28:11:13:fd:fb:dd:68:ab:13: 5a:5a:b6:6a:50:74:f8:75:c4:e3:12:c5:40:66:e2: 6e:62:2f:31:03:ef:bc:3d:54:65:7d:38:ac:6f:a1: 1d:e0:c9:e6:ca:6e:eb:06:ff:1f:50:22:3d:62:a3: 47:b7:0d:17:12:ad:35:a7:19:72:3b:81:3b:8d:00: ef:bb:9a:7c:4d:15:64:e1:37:3c:dc:7d:a0:69:7d: 6c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C6:3B:3B:47:A7:52:0C:8E:3D:C4:0C:5D:83:A5:90:EF:02:C8:05 X509v3 Authority Key Identifier: keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:99:76:a0:21:bb:c4:8d:5f:e7:de:23:d9:3a:5f:4a:a5:89: 91:d6:45:b5:bf:ff:e8:36:a7:53:8f:d1:f5:e6:9d:71:ea:b0: bf:a1:46:25:7c:c4:83:be:a9:3a:85:a8:19:e8:db:35:af:fe: c2:c4:b7:74:28:01:4f:a6:d5:b2:a1:35:e5:e0:c3:cc:7e:9e: 64:f5:43:47:fd:1e:8b:10:7d:c5:96:95:10:8b:a5:38:40:78: b4:eb:e3:5f:d8:95:78:f4:7e:c2:b2:89:6f:a7:7f:8b:8e:ab: 12:d9:f4:c5:a6:fe:94:17:b6:f4:20:6b:bf:cf:8c:80:b7:27: 6d:82:89:ab:42:52:f7:39:3d:dd:bd:22:a8:ba:61:1a:a1:8d: 9e:cd:32:53:3c:c2:bb:93:8b:cf:ba:69:ed:90:e9:f1:70:27: 53:84:e8:4e:27:ad:3d:31:df:0b:73:10:3d:cb:a5:c0:1f:0a: c0:9e:43:24:bf:fa:aa:a2:e3:91:6a:b6:ba:41:a0:3b:48:b8: 67:54:f2:93:a9:6c:94:e1:c4:e0:98:ac:49:de:31:5c:87:94: b2:23:bf:b0:d5:c6:fc:2c:49:4b:ea:2e:87:18:fc:c4:b9:f7: fe:e6:d9:cc:44:fa:d7:d6:17:1d:01:63:1e:05:e0:0a:29:35: 50:a3:7e:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKUHrtKYYBwLh1DPN+UDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi NDExZDEwHhcNMjUxMjExMjAwMDU5WhcNMjUxMjEyMjAwMDU5WjAzMTEwLwYDVQQD Eyg4MGM2M2IzYjQ3YTc1MjBjOGUzZGM0MGM1ZDgzYTU5MGVmMDJjODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhK6l4JsY+8katuPVhvw1I8NGAWh 7AcdUJ17NXX4iZ2CySIz/tTVNfEs8Qc3f0eO1CmgNE1ATAAgaGxomunBy3ul8hcc RJfPbWBlvHYUkzkgcmCP5IgoFmXkAIlkPu9JvuFSHIEEw7TajDV+2DVsjfWrUEPv CbGfVigqIg4d0rro0f+Hb+Kh+/Q/sfBAenJYmwMgfIAtqT593J7VwnaILeLm8TOl azyWr1QoERP9+91oqxNaWrZqUHT4dcTjEsVAZuJuYi8xA++8PVRlfTisb6Ed4Mnm ym7rBv8fUCI9YqNHtw0XEq01pxlyO4E7jQDvu5p8TRVk4Tc83H2gaX1sKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDGOztHp1IMjj3EDF2DpZDvAsgFMB8GA1UdIwQY MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4 LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZl2oCG7 xI1f594j2TpfSqWJkdZFtb//6DanU4/R9eadceqwv6FGJXzEg76pOoWoGejbNa/+ wsS3dCgBT6bVsqE15eDDzH6eZPVDR/0eixB9xZaVEIulOEB4tOvjX9iVePR+wrKJ b6d/i46rEtn0xab+lBe29CBrv8+MgLcnbYKJq0JS9zk93b0iqLphGqGNns0yUzzC u5OLz7pp7ZDp8XAnU4ToTietPTHfC3MQPculwB8KwJ5DJL/6qqLjkWq2ukGgO0i4 Z1Tyk6lslOHE4JisSd4xXIeUsiO/sNXG/CxJS+ouhxj8xLn3/ubZzET619YXHQFj HgXgCik1UKN+NQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:25:15 2025 by rpki-client