This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json) Hash identifier: O2WONlkqQYWvruKJbBV/eP38w7ExtBze/2GngJbZBbc= Subject key identifier: 52:BA:D2:8F:9C:76:E0:7A:36:C7:BF:7E:CE:44:DF:9D:D7:92:26:95 Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89 Certificate serial: 019B0E5C16F33F060CBEE685D58A05F9E9A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 17:01:14 +0000 Manifest this update: Thu 11 Dec 2025 17:01:14 +0000 Manifest next update: Fri 12 Dec 2025 17:01:14 +0000 Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: 8od684Vf1GyQ0MvlN8GvgjI4FcMqfuQhwmv62QsSQzU=) 2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:16:f3:3f:06:0c:be:e6:85:d5:8a:05:f9:e9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c54067385a765b1d5617c43331956fb208e89 Validity Not Before: Dec 11 17:01:14 2025 GMT Not After : Dec 12 17:01:14 2025 GMT Subject: CN=52bad28f9c76e07a36c7bf7ece44df9dd7922695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:aa:b3:e5:27:d8:54:4d:62:20:93:76:d6: 70:bf:87:53:64:35:32:c8:ab:b7:a3:47:ec:d3:54: 11:dc:71:fc:61:3b:ae:6b:f9:61:7a:4a:51:be:ca: d7:ea:32:4d:ae:46:89:0b:98:0b:a6:8e:6a:d6:1e: 43:01:a1:a9:e1:56:20:d2:d9:38:0b:e8:a2:fb:d1: 8d:3b:06:68:fe:ae:0e:1e:06:41:30:d8:82:9e:17: c8:81:c0:08:26:4b:a3:97:57:d8:e9:82:d2:a0:b2: c7:d8:23:f7:74:f3:b2:a1:10:89:f7:65:be:c6:98: cf:34:df:32:ff:cf:4e:da:3c:e1:78:0f:56:c3:64: e3:28:f3:68:23:65:2e:ad:1c:06:07:58:e5:52:45: 4a:25:06:d3:4e:f4:08:1e:6f:b4:7e:4f:1f:8d:95: 48:c6:41:ca:d4:5f:68:b0:52:dc:0a:de:83:77:96: 4e:23:64:71:c2:77:cb:8e:e8:9d:6b:63:70:b7:6d: 50:5e:fa:1f:63:7c:7b:cc:03:77:85:31:20:8f:57: 28:06:2c:41:85:94:ae:94:df:a4:46:01:cc:f8:b3: 95:59:d7:1a:4a:22:70:57:41:1a:77:ad:4c:ea:2f: ae:44:69:a6:fa:5f:af:96:28:e1:9a:11:0c:cb:6c: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BA:D2:8F:9C:76:E0:7A:36:C7:BF:7E:CE:44:DF:9D:D7:92:26:95 X509v3 Authority Key Identifier: keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:60:06:7d:56:9d:d3:89:6d:8f:be:82:d0:4f:77:80:49:fc: 5f:0f:c6:58:47:8f:3f:0b:48:9d:4a:62:dc:fd:b6:6b:7f:37: 0b:6f:f5:69:44:2b:a7:bf:c8:7f:63:71:05:cd:c6:2a:9b:ee: 81:d6:cc:09:32:4f:09:18:e8:1e:5d:ee:73:eb:82:9c:37:9c: 42:05:f6:08:d6:94:5e:7d:5b:a1:0b:aa:f5:28:33:4c:e7:57: 0d:69:0f:2e:75:b9:e9:8b:9a:5d:f0:30:50:ad:3a:3c:8a:35: 5b:12:04:48:ba:f8:5e:c9:8d:a9:d8:37:21:ff:7a:d1:ee:c1: 76:8d:44:b2:f4:f7:a1:a7:50:34:4e:21:74:83:88:15:7c:65: 1e:f2:3e:bf:d3:bf:6a:77:37:b0:23:f5:3e:ce:82:d2:e3:1a: 30:23:19:fd:fc:73:4d:30:f4:33:1a:b4:dc:86:45:6b:38:17: 45:a7:1c:c5:99:c6:7e:41:aa:0a:ff:f7:8d:ef:84:62:cd:79: 0c:6e:f5:7a:47:d1:12:b3:88:b5:df:8f:96:2c:ed:51:9d:aa: 1f:99:22:cc:59:17:d1:96:e1:fe:72:97:fa:ff:47:0f:0b:81: c3:0d:33:4b:3c:09:ea:e2:db:e5:f2:69:6e:30:ac:66:94:ab: c5:e6:21:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXBbzPwYMvuaF1YoF+emhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy MDhlODkwHhcNMjUxMjExMTcwMTE0WhcNMjUxMjEyMTcwMTE0WjAzMTEwLwYDVQQD Eyg1MmJhZDI4ZjljNzZlMDdhMzZjN2JmN2VjZTQ0ZGY5ZGQ3OTIyNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyuqs+Un2FRNYiCTdtZwv4dTZDUy yKu3o0fs01QR3HH8YTuua/lhekpRvsrX6jJNrkaJC5gLpo5q1h5DAaGp4VYg0tk4 C+ii+9GNOwZo/q4OHgZBMNiCnhfIgcAIJkujl1fY6YLSoLLH2CP3dPOyoRCJ92W+ xpjPNN8y/89O2jzheA9Ww2TjKPNoI2UurRwGB1jlUkVKJQbTTvQIHm+0fk8fjZVI xkHK1F9osFLcCt6Dd5ZOI2RxwnfLjuida2Nwt21QXvofY3x7zAN3hTEgj1coBixB hZSulN+kRgHM+LOVWdcaSiJwV0Ead61M6i+uRGmm+l+vlijhmhEMy2y/rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK60o+cduB6Nse/fs5E353XkiaVMB8GA1UdIwQY MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct YTQxYTQ4MzRlY2FhLzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmAGfVad 04ltj76C0E93gEn8Xw/GWEePPwtInUpi3P22a383C2/1aUQrp7/If2NxBc3GKpvu gdbMCTJPCRjoHl3uc+uCnDecQgX2CNaUXn1boQuq9SgzTOdXDWkPLnW56YuaXfAw UK06PIo1WxIESLr4XsmNqdg3If960e7Bdo1EsvT3oadQNE4hdIOIFXxlHvI+v9O/ anc3sCP1Ps6C0uMaMCMZ/fxzTTD0Mxq03IZFazgXRaccxZnGfkGqCv/3je+EYs15 DG71ekfRErOItd+PliztUZ2qH5kizFkX0Zbh/nKX+v9HDwuBww0zSzwJ6uLb5fJp bjCsZpSrxeYhrg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:54 2025 by rpki-client