This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json) Hash identifier: z2ZKRulV9oHHuL0fz+OSGYQ9GTBZOvv6a++eK93yZRI= Subject key identifier: 0B:0A:E3:5E:87:8A:03:CF:1C:96:BB:54:9F:B4:21:1F:1B:21:CA:FE Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Certificate serial: 019B35693899673CFF5C74AA97E8E8024638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft Manifest number: 1178 Signing time: Fri 19 Dec 2025 07:00:46 +0000 Manifest this update: Fri 19 Dec 2025 07:00:46 +0000 Manifest next update: Sat 20 Dec 2025 07:00:46 +0000 Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=) 2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: qurwAqZvyIzKSwgHuMGlRWFg6G0WbUmh249PY7Mr0xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:38:99:67:3c:ff:5c:74:aa:97:e8:e8:02:46:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Validity Not Before: Dec 19 07:00:46 2025 GMT Not After : Dec 20 07:00:46 2025 GMT Subject: CN=0b0ae35e878a03cf1c96bb549fb4211f1b21cafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:0c:39:c2:0c:f2:0a:c1:a9:da:aa:f7:31: 93:c3:b8:d5:e1:b3:65:ab:8c:73:96:cb:94:ee:c0: 07:03:6f:a1:2e:6b:8b:d7:61:df:cc:06:5f:f6:13: 9a:e0:5e:c2:df:ea:73:27:33:4d:99:6a:e0:40:2b: 5f:65:cd:de:d6:71:bf:54:32:52:6b:af:cf:82:ab: f9:74:d5:63:a4:5c:6d:50:10:98:b3:db:bd:f7:5a: 6a:15:06:50:10:40:05:8f:e6:e1:9a:5d:3e:54:0c: 7b:da:ea:85:3a:69:08:7d:71:8e:6a:9a:7d:5f:61: df:ef:95:20:49:95:67:54:70:89:ef:b8:23:6b:11: c2:a2:b8:18:29:21:31:06:9d:0b:f0:29:ab:cc:3c: 4b:76:d6:bd:ad:0e:24:ec:f3:c4:c8:99:b5:40:3e: c7:68:84:0f:cc:e1:a5:26:f4:60:3c:b3:45:e9:79: 9f:38:9b:b9:0a:0b:53:35:f3:8f:d0:46:02:43:0f: 78:9e:54:56:ad:21:9d:6c:a4:5d:fc:c9:55:4c:58: 65:db:4b:8e:43:57:d8:73:54:12:51:91:8b:b6:06: 46:ef:90:86:94:6d:52:95:9e:85:91:71:5f:5b:e1: 36:02:67:b8:74:88:20:74:f0:8a:49:61:a3:28:7c: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0A:E3:5E:87:8A:03:CF:1C:96:BB:54:9F:B4:21:1F:1B:21:CA:FE X509v3 Authority Key Identifier: keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:51:51:a7:71:a1:86:15:40:dc:0c:b7:27:a3:84:43:41:74: bc:df:12:8f:6c:96:3f:96:4b:2f:ab:09:5d:fb:68:1e:cd:99: 0a:2b:69:df:6d:a1:b0:f0:2a:eb:22:fd:2b:34:78:d0:33:6c: 64:5b:76:43:31:d7:67:8f:82:58:31:04:98:c8:91:ad:e1:d1: 76:8f:09:af:ed:f8:5c:3e:aa:65:81:1d:7f:f4:41:dd:62:53: 30:2e:59:45:f0:e9:fb:0a:6e:bf:08:ca:be:75:df:60:ef:3d: 50:3e:aa:e8:9b:04:0d:4a:cd:46:12:3e:9b:7d:42:17:6b:c7: fa:d0:fc:6e:d6:3e:97:85:44:db:e1:fd:19:2a:44:ea:09:90: 58:a3:b7:11:e3:1d:b0:52:a5:50:8f:5e:91:d2:42:35:fb:aa: 9f:ca:21:88:a3:3f:bb:70:f4:93:d3:4a:34:57:63:e0:ef:de: ce:31:b9:a5:c0:f1:f8:a9:ef:75:5e:d9:eb:cd:e4:f3:e8:92: 52:2a:75:8a:cf:4d:6b:56:c3:3f:56:dd:a0:45:9b:34:11:a7: 1a:db:50:fc:41:71:26:eb:25:bb:a8:02:21:e3:4e:2c:7c:88: b0:94:21:7c:3a:25:35:74:92:ef:50:a2:83:33:14:9f:72:f7: 0f:e3:49:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aTiZZzz/XHSql+joAkY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1 MTVkOTkwHhcNMjUxMjE5MDcwMDQ2WhcNMjUxMjIwMDcwMDQ2WjAzMTEwLwYDVQQD EygwYjBhZTM1ZTg3OGEwM2NmMWM5NmJiNTQ5ZmI0MjExZjFiMjFjYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLgMOcIM8grBqdqq9zGTw7jV4bNl q4xzlsuU7sAHA2+hLmuL12HfzAZf9hOa4F7C3+pzJzNNmWrgQCtfZc3e1nG/VDJS a6/Pgqv5dNVjpFxtUBCYs9u991pqFQZQEEAFj+bhml0+VAx72uqFOmkIfXGOapp9 X2Hf75UgSZVnVHCJ77gjaxHCorgYKSExBp0L8CmrzDxLdta9rQ4k7PPEyJm1QD7H aIQPzOGlJvRgPLNF6XmfOJu5CgtTNfOP0EYCQw94nlRWrSGdbKRd/MlVTFhl20uO Q1fYc1QSUZGLtgZG75CGlG1SlZ6FkXFfW+E2Ame4dIggdPCKSWGjKHyUAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsK416HigPPHJa7VJ+0IR8bIcr+MB8GA1UdIwQY MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFFRp3Gh hhVA3Ay3J6OEQ0F0vN8Sj2yWP5ZLL6sJXftoHs2ZCitp322hsPAq6yL9KzR40DNs ZFt2QzHXZ4+CWDEEmMiRreHRdo8Jr+34XD6qZYEdf/RB3WJTMC5ZRfDp+wpuvwjK vnXfYO89UD6q6JsEDUrNRhI+m31CF2vH+tD8btY+l4VE2+H9GSpE6gmQWKO3EeMd sFKlUI9ekdJCNfuqn8ohiKM/u3D0k9NKNFdj4O/ezjG5pcDx+KnvdV7Z683k8+iS Uip1is9Na1bDP1bdoEWbNBGnGttQ/EFxJuslu6gCIeNOLHyIsJQhfDolNXSS71Ci gzMUn3L3D+NJLA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:36:24 2025 by rpki-client