This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json) Hash identifier: XqkMBIv/W5Bf9XPmWTI9/07ZR4US4kdnyPN0EwA/WTQ= Subject key identifier: 2A:14:4E:CB:2C:49:97:E2:11:68:76:19:6C:E7:C4:77:95:AE:55:67 Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0 Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0 Certificate serial: 019B3A21D9785587D89556BFA028B9C241B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 05:00:55 +0000 Manifest this update: Sat 20 Dec 2025 05:00:55 +0000 Manifest next update: Sun 21 Dec 2025 05:00:55 +0000 Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=) 2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: E9cGRagwWKtqQig9hBhDFcEZbJ0M0T1zVPP6j20bUnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:d9:78:55:87:d8:95:56:bf:a0:28:b9:c2:41:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0 Validity Not Before: Dec 20 05:00:55 2025 GMT Not After : Dec 21 05:00:55 2025 GMT Subject: CN=2a144ecb2c4997e2116876196ce7c47795ae5567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:fd:bb:b0:66:da:17:7b:f6:36:fd:29:01: ce:76:2d:e7:1f:62:5a:49:dd:ba:c5:df:53:0c:7a: 70:32:8d:bd:28:d7:14:62:e9:ac:8e:f8:f5:bf:d4: 32:83:24:20:64:d6:01:2b:6f:cf:76:b0:27:e1:66: 83:27:8d:ad:a4:29:09:b1:3e:8f:84:cc:3d:a2:65: c8:8e:b1:5a:8c:6e:9c:7f:36:c1:22:09:5f:b2:e6: de:dd:be:79:cd:f8:a7:49:1d:4e:6c:7f:87:b7:52: 65:11:27:68:99:01:f6:70:2b:ff:61:87:f6:74:a9: 40:15:54:2d:b7:d6:92:01:b6:a4:44:0a:04:4b:d5: ce:0a:15:4d:34:98:52:3e:67:35:69:0e:37:5d:90: cf:18:92:89:7d:bd:8b:47:40:22:10:55:f6:9e:12: 23:63:61:78:e5:52:27:93:57:29:bc:ec:0e:8b:bc: e2:05:61:7a:17:43:50:45:fc:ca:cf:79:2f:56:d9: 80:fe:53:05:3f:68:79:e7:5b:bf:da:31:86:e6:c0: f3:b1:1f:c6:03:a3:1c:b5:1c:54:86:49:4c:5b:60: 17:2f:4a:db:44:19:e4:72:a9:56:26:43:ec:13:75: 2c:7e:e9:8a:f0:fe:3d:92:a3:95:04:aa:07:d9:e7: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:14:4E:CB:2C:49:97:E2:11:68:76:19:6C:E7:C4:77:95:AE:55:67 X509v3 Authority Key Identifier: keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5f:4c:aa:fd:d2:80:0d:f8:ec:74:99:2b:59:09:b1:a3:80: 87:0e:50:64:17:22:25:64:53:f2:67:b2:b1:cf:2b:fd:1a:6e: 8c:46:c1:3d:52:7b:09:d6:f4:0b:28:d6:c4:03:42:e9:11:bd: 27:4b:46:cb:74:8d:76:5a:d2:da:e3:cd:3c:dd:25:06:5b:63: b8:f1:ab:5e:58:c1:80:68:f2:fd:18:37:ba:59:39:4a:99:92: b3:99:9c:ca:74:0a:55:f2:f6:7f:f0:72:47:68:f3:d0:ef:ab: 71:dc:b0:62:07:9e:10:d8:74:e8:5f:bf:cb:c9:a2:83:fc:ad: c2:3b:48:be:ac:1d:06:3c:7b:7c:b7:24:c6:68:22:1d:36:5b: 02:fd:00:67:83:76:96:c8:37:23:12:9c:db:da:ea:1f:c9:ca: 5e:89:b0:26:5c:55:d5:27:77:16:44:ac:da:28:8a:6c:64:a6: 20:a4:34:c8:29:30:87:13:d3:79:ed:08:26:da:ec:51:4b:81: 28:a6:3c:c5:95:7e:c8:15:95:df:df:a8:47:f8:aa:ca:24:87: e3:7a:b4:89:f1:44:64:18:87:cd:d7:8d:6c:7d:04:12:49:85: 56:d4:db:d6:5c:34:a5:49:6e:05:ca:a9:87:d7:1a:8e:f5:8d: 15:02:74:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Idl4VYfYlVa/oCi5wkG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjhlMDRiMGUxYTRkNGUzYTI4ZGYxNWViNTg0OTNlNzYz NzdlYjAwHhcNMjUxMjIwMDUwMDU1WhcNMjUxMjIxMDUwMDU1WjAzMTEwLwYDVQQD EygyYTE0NGVjYjJjNDk5N2UyMTE2ODc2MTk2Y2U3YzQ3Nzk1YWU1NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uz9u7Bm2hd79jb9KQHOdi3nH2Ja Sd26xd9TDHpwMo29KNcUYumsjvj1v9QygyQgZNYBK2/PdrAn4WaDJ42tpCkJsT6P hMw9omXIjrFajG6cfzbBIglfsube3b55zfinSR1ObH+Ht1JlESdomQH2cCv/YYf2 dKlAFVQtt9aSAbakRAoES9XOChVNNJhSPmc1aQ43XZDPGJKJfb2LR0AiEFX2nhIj Y2F45VInk1cpvOwOi7ziBWF6F0NQRfzKz3kvVtmA/lMFP2h551u/2jGG5sDzsR/G A6MctRxUhklMW2AXL0rbRBnkcqlWJkPsE3UsfumK8P49kqOVBKoH2ecXnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoUTsssSZfiEWh2GWznxHeVrlVnMB8GA1UdIwQY MBaAFFS44EsOGk1OOijfFetYST52N36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWIt NjM5MTZmN2YxNzRiLzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWItNjM5MTZmN2YxNzRi LzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVF9Mqv3S gA347HSZK1kJsaOAhw5QZBciJWRT8meysc8r/RpujEbBPVJ7Cdb0CyjWxANC6RG9 J0tGy3SNdlrS2uPNPN0lBltjuPGrXljBgGjy/Rg3ulk5SpmSs5mcynQKVfL2f/By R2jz0O+rcdywYgeeENh06F+/y8mig/ytwjtIvqwdBjx7fLckxmgiHTZbAv0AZ4N2 lsg3IxKc29rqH8nKXomwJlxV1Sd3FkSs2iiKbGSmIKQ0yCkwhxPTee0IJtrsUUuB KKY8xZV+yBWV39+oR/iqyiSH43q0ifFEZBiHzdeNbH0EEkmFVtTb1lw0pUluBcqp h9cajvWNFQJ0GA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:30 2025 by rpki-client