This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json) Hash identifier: QdYMBxPt20K1NkzbN1lY7cY1MO4dMmQEPlzw/yfMWCY= Subject key identifier: 6B:03:5D:09:03:83:1A:BA:1B:B1:F5:DF:78:C6:6C:EF:41:71:57:4E Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964 Certificate serial: 019B1CF2E38F726B5C602C7D6C816B99FD62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft Manifest number: 05AD Signing time: Sun 14 Dec 2025 13:00:38 +0000 Manifest this update: Sun 14 Dec 2025 13:00:38 +0000 Manifest next update: Mon 15 Dec 2025 13:00:38 +0000 Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: aw7B24eRX8UELvBrMUPqRAfg14CC9NqVvis6jUfZDr0=) 2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f2:e3:8f:72:6b:5c:60:2c:7d:6c:81:6b:99:fd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964 Validity Not Before: Dec 14 13:00:38 2025 GMT Not After : Dec 15 13:00:38 2025 GMT Subject: CN=6b035d0903831aba1bb1f5df78c66cef4171574e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:04:a1:a5:5f:ff:3e:38:1f:54:5c:92:83: e4:b8:b3:58:1d:62:70:d3:d0:50:68:fa:09:a7:8c: 03:bc:bd:1d:76:1a:12:e1:d7:2c:64:7b:2e:b7:81: ff:cb:19:d5:46:b1:7d:8d:4b:80:1c:38:7a:f4:eb: 4e:25:07:1a:63:0c:f5:9b:29:33:95:3f:7f:a3:d2: c8:24:f5:19:2b:4b:15:63:c9:70:62:ac:4d:74:89: ed:0c:87:97:94:12:71:79:ad:a6:ea:2d:41:7c:ba: 2b:f4:42:fa:40:77:5a:e0:b6:f8:41:c3:4c:3b:b5: e4:2d:84:38:c5:1a:f9:a3:1d:b9:b8:65:b2:b6:61: 28:11:ad:66:dd:48:ab:6d:65:bd:a0:d5:c8:d5:d2: 5b:ab:f1:e9:77:6c:84:8e:da:8c:92:20:b8:2f:0b: 76:a1:4a:8b:19:17:67:84:0f:f8:6b:0b:6a:69:4f: 7d:17:4d:07:5c:47:ef:db:77:82:d2:f4:c5:f6:2e: 56:3b:78:38:11:f2:8a:ef:c8:bc:a8:dc:12:94:55: db:06:4e:6b:16:ca:01:9d:ee:99:4d:4a:0b:bc:d1: 7d:d4:56:74:0b:4f:45:a6:2a:f0:ab:03:aa:a9:d6: 91:6c:16:3d:c2:26:07:a4:c6:c5:5c:c5:76:79:95: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:03:5D:09:03:83:1A:BA:1B:B1:F5:DF:78:C6:6C:EF:41:71:57:4E X509v3 Authority Key Identifier: keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bf:82:db:a3:4d:61:61:e3:7a:d3:77:77:5b:01:52:dc:17: 74:75:a1:7e:f3:b0:9f:13:5d:ee:b6:45:a5:cb:44:7c:23:0c: 9f:a3:9e:66:4f:df:0c:72:5d:e7:6e:7a:25:c9:8e:a7:62:bd: 3d:0e:3f:36:f7:4f:b9:00:c8:c3:c6:2a:0e:7a:90:ed:35:d1: 28:c9:49:27:0d:ea:44:31:af:65:6e:37:42:13:0e:e0:0e:5d: ab:b5:91:64:bc:00:ff:08:c0:77:fc:97:d2:3d:0b:32:92:1a: 68:87:a6:dd:30:54:dd:7d:a0:d1:55:68:25:04:79:06:54:e8: 03:2c:a4:79:46:b3:30:a8:50:98:e4:71:11:f1:3a:af:e9:4b: 5f:e1:15:27:32:3b:22:f3:ed:7a:15:18:5b:af:a0:0c:df:b8: b2:e8:70:f0:d5:42:1d:32:35:bd:15:07:54:b6:0b:a2:20:22: 7e:61:0d:46:42:b6:91:9c:91:b0:77:92:68:89:10:5f:38:60: f0:53:d7:e1:39:fb:dd:41:a2:a1:9c:8f:f1:ab:98:44:5a:d9: fc:d9:2e:38:82:c8:05:7b:df:ad:07:a7:78:19:6b:5e:2b:08: c0:20:e7:ce:88:22:42:80:e4:2b:bd:af:e6:21:b6:b9:e7:0d: 4d:98:ba:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8uOPcmtcYCx9bIFrmf1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm ZjU5NjQwHhcNMjUxMjE0MTMwMDM4WhcNMjUxMjE1MTMwMDM4WjAzMTEwLwYDVQQD Eyg2YjAzNWQwOTAzODMxYWJhMWJiMWY1ZGY3OGM2NmNlZjQxNzE1NzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5YEoaVf/z44H1RckoPkuLNYHWJw 09BQaPoJp4wDvL0ddhoS4dcsZHsut4H/yxnVRrF9jUuAHDh69OtOJQcaYwz1mykz lT9/o9LIJPUZK0sVY8lwYqxNdIntDIeXlBJxea2m6i1BfLor9EL6QHda4Lb4QcNM O7XkLYQ4xRr5ox25uGWytmEoEa1m3UirbWW9oNXI1dJbq/Hpd2yEjtqMkiC4Lwt2 oUqLGRdnhA/4awtqaU99F00HXEfv23eC0vTF9i5WO3g4EfKK78i8qNwSlFXbBk5r FsoBne6ZTUoLvNF91FZ0C09FpirwqwOqqdaRbBY9wiYHpMbFXMV2eZXvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsDXQkDgxq6G7H133jGbO9BcVdOMB8GA1UdIwQY MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt ZTA1MjkwMTZjYmEwLzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7+C26NN YWHjetN3d1sBUtwXdHWhfvOwnxNd7rZFpctEfCMMn6OeZk/fDHJd5256JcmOp2K9 PQ4/NvdPuQDIw8YqDnqQ7TXRKMlJJw3qRDGvZW43QhMO4A5dq7WRZLwA/wjAd/yX 0j0LMpIaaIem3TBU3X2g0VVoJQR5BlToAyykeUazMKhQmORxEfE6r+lLX+EVJzI7 IvPtehUYW6+gDN+4suhw8NVCHTI1vRUHVLYLoiAifmENRkK2kZyRsHeSaIkQXzhg 8FPX4Tn73UGioZyP8auYRFrZ/NkuOILIBXvfrQeneBlrXisIwCDnzogiQoDkK72v 5iG2uecNTZi6tg== -----END CERTIFICATE-----Generated at Sun Dec 14 15:20:09 2025 by rpki-client