This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft File: VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json) Hash identifier: d2ev3OlyVQW4g1NbMi7monps2msjrvcGVuMMvr7nuGY= Subject key identifier: C9:C1:CB:18:8C:51:2D:DF:A8:4E:79:A8:42:B0:7C:0D:72:39:7D:BE Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0 Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0 Certificate serial: 019B24E39E23873136169923479E61E6F3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 02:00:55 +0000 Manifest this update: Tue 16 Dec 2025 02:00:55 +0000 Manifest next update: Wed 17 Dec 2025 02:00:55 +0000 Files and hashes: 1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=) 2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: aqLzQP5MO0ML8SdJvaCvJzkAzyL/QveGrf6YX01xOQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:9e:23:87:31:36:16:99:23:47:9e:61:e6:f3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0 Validity Not Before: Dec 16 02:00:55 2025 GMT Not After : Dec 17 02:00:55 2025 GMT Subject: CN=c9c1cb188c512ddfa84e79a842b07c0d72397dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:25:a5:1a:6c:ba:e9:d4:20:9a:87:9f:2d: 9b:df:7d:cb:91:25:8e:d0:39:66:59:bf:3d:82:8e: 19:c6:95:c6:50:b5:3c:3f:ac:7b:e7:af:84:4c:03: a2:e6:3f:1f:c4:7e:bc:d7:fe:7d:5b:95:4d:59:c4: 0a:c3:4f:98:d0:0d:37:a7:90:ef:b2:c4:4e:06:26: 81:8c:cd:84:99:4f:ec:9d:38:d0:5e:f4:94:ad:83: 01:78:3a:ba:40:d5:3a:6f:ef:d2:6c:ad:71:f4:8a: e3:a9:bf:e0:e8:a9:3a:75:06:01:35:5b:95:4e:ed: 65:a5:b0:71:11:87:f6:a2:88:34:18:76:87:09:78: 51:a0:f1:5d:15:26:b9:06:92:10:7f:ac:44:20:5c: 15:7c:bd:c6:e3:f5:74:57:04:c2:1c:36:9b:4b:0b: 83:27:98:95:21:07:49:c7:18:e4:e4:35:40:87:e4: 42:c2:52:6c:44:05:32:96:11:1a:ed:38:42:9c:eb: 8c:3e:ad:00:02:a7:23:52:b3:94:95:51:09:c7:d7: 8f:2a:02:ac:80:30:a4:1d:ec:b0:19:96:78:3a:b0: e9:0f:02:c9:f6:ab:c5:b8:5e:d4:2a:6c:aa:93:98: 89:f9:2c:5e:38:10:24:03:1c:89:d3:a8:47:c9:5f: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:CB:18:8C:51:2D:DF:A8:4E:79:A8:42:B0:7C:0D:72:39:7D:BE X509v3 Authority Key Identifier: keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:af:aa:a8:83:1a:84:2b:6d:1d:7e:fa:2d:c1:02:50:82:2c: 05:15:67:aa:dd:a4:5f:67:da:ec:9d:7f:06:a8:dc:f9:c2:14: dd:ec:05:28:d9:5b:ec:7d:f8:32:4c:ea:38:3d:d4:3e:d8:b1: 12:ef:a5:d8:eb:85:85:16:39:e1:ee:2b:67:16:44:42:52:5d: ea:70:53:36:18:72:1b:0a:16:ed:da:ba:26:3e:79:31:d3:2d: 01:b8:ab:1a:34:54:f1:4b:c8:ed:ec:3b:e1:71:b0:ab:49:e7: d3:8d:7f:31:cc:94:8a:bd:c8:a7:55:8d:dc:3e:e9:5a:a1:8e: 9e:3a:7f:56:0b:90:cd:84:34:d1:e1:d3:e3:6e:48:4f:ad:8b: ee:f6:1c:61:e7:8b:35:ce:d3:58:ef:7d:64:25:1b:91:08:9e: 3a:cf:cb:55:45:14:74:66:77:70:aa:68:85:c9:60:d9:7c:09: 5d:97:e5:60:74:94:9d:92:e1:8d:48:e4:19:60:5c:5e:71:2b: f4:45:94:a1:71:cb:22:df:e1:ed:75:67:c1:41:6e:03:97:19: 0a:2b:5c:07:8f:1c:ac:6b:e8:2c:b8:46:52:08:ff:f3:57:81: 0d:60:cb:4c:f5:3e:e8:f0:9d:05:0e:e4:f0:8b:c3:0e:b1:d9: a9:83:36:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk454jhzE2FpkjR55h5vPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjhlMDRiMGUxYTRkNGUzYTI4ZGYxNWViNTg0OTNlNzYz NzdlYjAwHhcNMjUxMjE2MDIwMDU1WhcNMjUxMjE3MDIwMDU1WjAzMTEwLwYDVQQD EyhjOWMxY2IxODhjNTEyZGRmYTg0ZTc5YTg0MmIwN2MwZDcyMzk3ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK4lpRpsuunUIJqHny2b333LkSWO 0DlmWb89go4ZxpXGULU8P6x756+ETAOi5j8fxH681/59W5VNWcQKw0+Y0A03p5Dv ssROBiaBjM2EmU/snTjQXvSUrYMBeDq6QNU6b+/SbK1x9Irjqb/g6Kk6dQYBNVuV Tu1lpbBxEYf2oog0GHaHCXhRoPFdFSa5BpIQf6xEIFwVfL3G4/V0VwTCHDabSwuD J5iVIQdJxxjk5DVAh+RCwlJsRAUylhEa7ThCnOuMPq0AAqcjUrOUlVEJx9ePKgKs gDCkHeywGZZ4OrDpDwLJ9qvFuF7UKmyqk5iJ+SxeOBAkAxyJ06hHyV+VdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnByxiMUS3fqE55qEKwfA1yOX2+MB8GA1UdIwQY MBaAFFS44EsOGk1OOijfFetYST52N36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWIt NjM5MTZmN2YxNzRiLzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iNzJiOTctZjlhNS00NDg2LWFhYWItNjM5MTZmN2YxNzRi LzEvVkxqZ1N3NGFUVTQ2S044VjYxaEpQblkzZnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfq+qqIMa hCttHX76LcECUIIsBRVnqt2kX2fa7J1/Bqjc+cIU3ewFKNlb7H34MkzqOD3UPtix Eu+l2OuFhRY54e4rZxZEQlJd6nBTNhhyGwoW7dq6Jj55MdMtAbirGjRU8UvI7ew7 4XGwq0nn041/McyUir3Ip1WN3D7pWqGOnjp/VguQzYQ00eHT425IT62L7vYcYeeL Nc7TWO99ZCUbkQieOs/LVUUUdGZ3cKpohclg2XwJXZflYHSUnZLhjUjkGWBcXnEr 9EWUoXHLIt/h7XVnwUFuA5cZCitcB48crGvoLLhGUgj/81eBDWDLTPU+6PCdBQ7k 8IvDDrHZqYM2uQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:14:44 2025 by rpki-client