This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json) Hash identifier: gVSIlIH/V5iwy6vTc8v0V4E8+0Po9UFWewnnguhtYmg= Subject key identifier: 57:09:1D:A6:9A:74:89:49:7C:30:25:76:62:95:38:71:83:1D:F4:90 Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9 Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9 Certificate serial: 019B59ACF56B9662544A1BA11F0F7EC0960A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft Manifest number: 142B Signing time: Fri 26 Dec 2025 08:01:05 +0000 Manifest this update: Fri 26 Dec 2025 08:01:05 +0000 Manifest next update: Sat 27 Dec 2025 08:01:05 +0000 Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=) 2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: GUO6cR51urSQiOOiPNxYNZti8iyXvg3RZwnKxhbAoC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:f5:6b:96:62:54:4a:1b:a1:1f:0f:7e:c0:96:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9 Validity Not Before: Dec 26 08:01:05 2025 GMT Not After : Dec 27 08:01:05 2025 GMT Subject: CN=57091da69a7489497c30257662953871831df490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:65:08:5c:cb:ad:a1:99:96:c4:ca:66:e1: fe:c6:bc:a2:37:2d:90:ac:8b:d4:bf:8f:8d:60:7c: 37:6f:c9:d4:42:76:0f:fb:f3:da:eb:8a:97:9b:4c: 63:75:b3:89:26:f6:86:78:9c:5e:02:a6:6f:a5:d2: 58:7a:33:56:f4:8b:d7:b9:c0:d9:90:c0:92:23:51: a0:3f:5c:c3:75:b6:cd:b1:bf:30:89:c5:b8:1d:9e: 28:62:da:a2:84:25:9a:9f:24:cc:f5:54:73:a2:9a: a8:61:e5:7d:e5:aa:7b:fd:b8:d0:c6:32:11:3b:4c: 62:c2:c3:a9:12:21:bf:10:65:b6:1d:7a:bc:1b:32: 67:44:4b:02:2e:2c:a5:e9:88:4d:d5:77:5a:c8:05: c1:67:49:1a:8a:81:1d:fa:54:c2:b2:5e:a0:a8:7e: 6c:13:0e:99:1e:2a:ea:5a:f8:c5:62:83:10:0e:70: 24:39:34:d2:52:2b:90:5d:e4:bc:34:f6:6f:83:2e: 0a:59:69:04:6c:25:2b:78:29:79:ee:13:df:60:f0: 59:07:d4:74:4a:0f:38:29:08:02:ec:ad:45:55:02: a8:9d:5f:dd:cf:d3:ae:0e:5a:f8:f2:dc:f1:3e:65: 3c:c8:54:c0:43:8e:99:51:47:e6:b8:58:9b:00:68: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:1D:A6:9A:74:89:49:7C:30:25:76:62:95:38:71:83:1D:F4:90 X509v3 Authority Key Identifier: keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:68:d1:1d:b6:f9:8e:29:58:48:80:38:7e:b8:4a:99:5b:af: 76:22:0f:ba:8b:19:08:ba:72:aa:3f:1a:3c:4f:98:b5:72:04: 91:3a:c6:4a:22:6e:08:66:b3:20:28:af:eb:75:21:4a:3d:eb: c7:d9:ff:7c:ed:5c:36:ce:c4:24:39:32:1f:f9:0f:ca:27:0b: 78:60:c1:a5:c2:99:65:54:4a:58:49:3f:2c:38:68:e0:59:61: 9f:0e:af:21:56:3a:b5:da:e8:33:92:3a:54:5a:25:1b:d9:d1: 21:6a:c7:4c:b3:a7:97:45:25:6d:fe:68:b0:18:d5:17:0f:6c: b2:48:ce:95:0a:d4:db:95:d3:7b:82:a1:5d:13:41:09:ff:36: ab:0e:7e:b2:d6:58:c4:dd:44:55:cf:e8:5f:d6:8a:58:1d:35: 7f:2d:8b:53:25:b7:96:20:fe:d0:82:86:95:0a:2b:9f:82:28: 16:75:c3:e8:d6:2d:d4:fe:c2:2d:a4:ae:aa:12:c0:b4:20:f6: fe:60:1c:7c:b6:75:81:5f:35:cd:49:df:39:46:fb:3e:eb:19: 39:6d:7b:4b:26:41:f0:c7:cf:49:82:f5:64:b1:91:96:26:00: 3f:e2:3e:90:42:cb:68:7c:4d:df:52:49:6d:83:06:06:8f:89: ff:50:d5:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrPVrlmJUShuhHw9+wJYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTY2MGI0OGM4ZjA0YzlhMzJkY2RlYTFjZmVlZTUxODA0 NDZiZDkwHhcNMjUxMjI2MDgwMTA1WhcNMjUxMjI3MDgwMTA1WjAzMTEwLwYDVQQD Eyg1NzA5MWRhNjlhNzQ4OTQ5N2MzMDI1NzY2Mjk1Mzg3MTgzMWRmNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUZlCFzLraGZlsTKZuH+xryiNy2Q rIvUv4+NYHw3b8nUQnYP+/Pa64qXm0xjdbOJJvaGeJxeAqZvpdJYejNW9IvXucDZ kMCSI1GgP1zDdbbNsb8wicW4HZ4oYtqihCWanyTM9VRzopqoYeV95ap7/bjQxjIR O0xiwsOpEiG/EGW2HXq8GzJnREsCLiyl6YhN1XdayAXBZ0kaioEd+lTCsl6gqH5s Ew6ZHirqWvjFYoMQDnAkOTTSUiuQXeS8NPZvgy4KWWkEbCUreCl57hPfYPBZB9R0 Sg84KQgC7K1FVQKonV/dz9OuDlr48tzxPmU8yFTAQ46ZUUfmuFibAGi6bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcJHaaadIlJfDAldmKVOHGDHfSQMB8GA1UdIwQY MBaAFFTmYLSMjwTJoy3N6hz+7lGARGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDct YTg5YWJlNDVlZGY2LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDctYTg5YWJlNDVlZGY2 LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGjRHbb5 jilYSIA4frhKmVuvdiIPuosZCLpyqj8aPE+YtXIEkTrGSiJuCGazICiv63UhSj3r x9n/fO1cNs7EJDkyH/kPyicLeGDBpcKZZVRKWEk/LDho4Flhnw6vIVY6tdroM5I6 VFolG9nRIWrHTLOnl0Ulbf5osBjVFw9sskjOlQrU25XTe4KhXRNBCf82qw5+stZY xN1EVc/oX9aKWB01fy2LUyW3liD+0IKGlQorn4IoFnXD6NYt1P7CLaSuqhLAtCD2 /mAcfLZ1gV81zUnfOUb7PusZOW17SyZB8MfPSYL1ZLGRliYAP+I+kELLaHxN31JJ bYMGBo+J/1DV2w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:33 2025 by rpki-client