This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json) Hash identifier: Q62de7KGJ6ZaGh8SZqzq/BIZQytTUbqexFcQshbEfZE= Subject key identifier: A1:30:77:82:33:94:83:E6:46:67:E6:37:A7:76:00:50:97:F9:BC:F8 Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B1125B197AFF8DB8F857C58F653B71425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft Manifest number: 0C81 Signing time: Fri 12 Dec 2025 06:00:41 +0000 Manifest this update: Fri 12 Dec 2025 06:00:41 +0000 Manifest next update: Sat 13 Dec 2025 06:00:41 +0000 Files and hashes: 1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=) 2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=) 3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: 17XKiDnrqmJO5THPxFl2aclsvtOhV8aL9uo54Fceets=) 4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=) 5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=) 6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=) 7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:b1:97:af:f8:db:8f:85:7c:58:f6:53:b7:14:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Dec 12 06:00:41 2025 GMT Not After : Dec 13 06:00:41 2025 GMT Subject: CN=a1307782339483e64667e637a776005097f9bcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:ae:dc:6d:af:16:20:ef:fb:50:29:12:bd: ad:55:26:76:46:e8:2a:a4:e4:cc:25:3f:c6:03:75: 36:49:a4:f2:1f:61:fb:61:24:64:21:50:ea:60:da: c0:b4:c1:43:17:78:b9:b8:c7:b0:f2:84:9e:8b:5a: 36:40:17:23:8d:94:f7:32:78:7a:42:79:fe:93:03: 39:48:66:dd:de:7a:fb:87:58:22:2c:11:b4:fc:dc: 1e:4f:73:9f:3e:08:c3:a4:ed:87:8c:69:1e:97:19: 61:a4:35:3b:2c:5f:b9:81:2d:cb:13:fc:b1:46:d5: 82:c3:c1:cd:24:49:29:8e:9f:05:cc:b2:4c:1b:ef: 37:da:bd:6a:d6:90:31:65:d1:ef:48:9d:dd:2b:d1: 1a:03:40:85:74:94:3c:76:7c:fe:a5:6f:06:64:cc: 08:36:93:90:12:95:82:7a:31:5e:1d:4a:2d:64:af: 3f:86:b3:67:ae:a1:f3:0e:b9:5a:0b:37:89:51:1a: c0:7a:fd:ea:c0:06:6b:1a:a3:b5:ef:50:15:a6:02: 77:21:f2:28:9e:eb:47:8e:26:0b:79:dc:a6:6f:72: 78:14:38:7e:aa:8b:b3:d9:ea:8c:6c:b6:d8:8a:dd: 98:22:ef:da:19:9f:76:2a:7b:db:ff:3c:73:5c:47: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:30:77:82:33:94:83:E6:46:67:E6:37:A7:76:00:50:97:F9:BC:F8 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:57:39:32:c9:68:37:c3:eb:1a:c3:f1:a6:79:04:27:67:05: 44:a2:51:99:84:36:1a:16:5e:6b:e8:5a:2b:fd:10:e1:29:62: ac:ca:ad:08:a4:e9:a8:6a:ee:73:61:5a:16:bd:e3:67:3e:3b: 6e:aa:7f:86:91:32:18:30:60:c3:87:16:23:5d:b5:79:a7:a7: 56:38:ee:15:9d:8a:4b:26:3b:bf:a2:97:94:94:82:dd:12:5d: a9:39:8f:c5:3f:a8:4d:78:42:ed:51:e6:a8:69:9e:0a:cb:6e: 9d:df:3f:ed:74:04:f4:f9:8d:0a:61:85:c1:9f:28:8d:6d:b5: f3:4a:38:24:45:e5:cd:58:65:6d:de:6d:46:e8:81:87:6c:5c: f6:d0:d5:43:50:2f:f2:5e:ff:d8:79:39:88:99:c6:77:b7:c5: b2:18:6b:0b:d1:a4:3f:65:e4:7f:ab:4d:dc:ec:35:a5:cd:8d: 50:ed:94:b0:9a:95:16:cb:47:5e:9a:58:cc:30:41:55:c8:54: 0c:65:9f:f6:3c:b0:d7:62:84:2d:59:33:06:44:dc:b3:fb:20: e3:9d:15:34:4f:c5:56:5b:6a:db:c6:db:57:56:be:4c:1f:36: 6b:2e:a6:ba:51:86:e5:2f:67:e5:66:27:56:d2:16:3a:13:fe: a5:ae:20:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJbGXr/jbj4V8WPZTtxQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjUxMjEyMDYwMDQxWhcNMjUxMjEzMDYwMDQxWjAzMTEwLwYDVQQD EyhhMTMwNzc4MjMzOTQ4M2U2NDY2N2U2MzdhNzc2MDA1MDk3ZjliY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNCu3G2vFiDv+1ApEr2tVSZ2Rugq pOTMJT/GA3U2SaTyH2H7YSRkIVDqYNrAtMFDF3i5uMew8oSei1o2QBcjjZT3Mnh6 Qnn+kwM5SGbd3nr7h1giLBG0/NweT3OfPgjDpO2HjGkelxlhpDU7LF+5gS3LE/yx RtWCw8HNJEkpjp8FzLJMG+832r1q1pAxZdHvSJ3dK9EaA0CFdJQ8dnz+pW8GZMwI NpOQEpWCejFeHUotZK8/hrNnrqHzDrlaCzeJURrAev3qwAZrGqO171AVpgJ3IfIo nutHjiYLedymb3J4FDh+qouz2eqMbLbYit2YIu/aGZ92Knvb/zxzXEe6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEwd4IzlIPmRmfmN6d2AFCX+bz4MB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1c5Mslo N8PrGsPxpnkEJ2cFRKJRmYQ2GhZea+haK/0Q4SlirMqtCKTpqGruc2FaFr3jZz47 bqp/hpEyGDBgw4cWI121eaenVjjuFZ2KSyY7v6KXlJSC3RJdqTmPxT+oTXhC7VHm qGmeCstund8/7XQE9PmNCmGFwZ8ojW2180o4JEXlzVhlbd5tRuiBh2xc9tDVQ1Av 8l7/2Hk5iJnGd7fFshhrC9GkP2Xkf6tN3Ow1pc2NUO2UsJqVFstHXppYzDBBVchU DGWf9jyw12KELVkzBkTcs/sg450VNE/FVltq28bbV1a+TB82ay6mulGG5S9n5WYn VtIWOhP+pa4gtg== -----END CERTIFICATE-----Generated at Fri Dec 12 13:00:54 2025 by rpki-client