This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json) Hash identifier: DM07TDLcdlUGS5tYYdRTDJFFg+zpM4vulRjm8abdyLo= Subject key identifier: E6:3F:D1:4E:85:0A:76:F2:88:2A:DA:D3:DC:05:1F:88:0D:11:E8:2D Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33 Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033 Certificate serial: 019B3CEC8CC2ED6A33B7EC74346176D75EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft Manifest number: 122A Signing time: Sat 20 Dec 2025 18:01:34 +0000 Manifest this update: Sat 20 Dec 2025 18:01:34 +0000 Manifest next update: Sun 21 Dec 2025 18:01:34 +0000 Files and hashes: 1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=) 2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=) 3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: +OeKxMLbmSdqlEvcFTCUorb7MwyqqsqAbUxns2GAmT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:8c:c2:ed:6a:33:b7:ec:74:34:61:76:d7:5e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033 Validity Not Before: Dec 20 18:01:34 2025 GMT Not After : Dec 21 18:01:34 2025 GMT Subject: CN=e63fd14e850a76f2882adad3dc051f880d11e82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:a6:c3:b2:75:c2:16:b9:6d:b9:d3:61:6c: 77:fa:61:de:13:46:7b:2d:ff:73:04:e8:a2:23:a1: 27:e6:75:75:84:cd:42:d1:f2:4c:31:3b:b1:5c:0e: ec:10:7d:70:ac:f1:45:4c:44:84:5f:b9:bd:05:fe: 2a:e6:af:ee:ad:58:6a:96:61:42:da:87:e8:d7:d7: ec:e1:ba:46:2a:0c:d6:98:33:7e:0f:c3:08:01:8f: a6:b0:19:1e:09:82:ef:a2:80:bc:f1:fc:b6:bc:bf: fb:f6:0a:2f:4a:70:be:0b:fe:c1:91:6b:46:17:7a: 44:8a:cd:f3:e5:d1:24:a2:10:53:c5:e5:a0:07:09: 3c:12:01:2b:05:c4:4c:84:d4:87:d0:d5:b3:86:c1: a4:5d:63:9d:10:49:c6:b8:8f:8d:63:74:fe:bb:be: 07:cf:13:bf:57:56:54:39:ae:03:a8:98:60:ec:81: 2a:c2:ac:bf:ce:fd:e6:7e:36:76:c5:30:c1:15:de: bc:1b:40:74:62:85:3e:c9:b9:05:ad:77:7b:01:04: 89:81:73:37:2c:b2:c0:c8:76:33:3f:6e:f6:41:14: f0:40:58:95:6f:a3:dd:4c:44:e2:1d:8a:2c:25:e7: 50:e2:69:c4:b1:bf:fe:4a:b8:08:df:ef:e7:91:59: 34:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:D1:4E:85:0A:76:F2:88:2A:DA:D3:DC:05:1F:88:0D:11:E8:2D X509v3 Authority Key Identifier: keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:49:65:c2:61:6a:7b:ce:ed:d2:65:77:9b:8f:d4:87:52: 5f:eb:2e:15:e5:ed:0c:28:7c:2e:fd:3c:43:6a:ce:cc:4e:58: d5:cc:2c:60:b0:c9:f1:a8:2c:55:81:fd:f4:ec:a3:9e:67:ec: 87:f7:5e:53:ac:ae:22:5e:58:27:0b:01:65:7c:84:e7:25:f3: bd:d6:5c:4c:05:89:11:d3:9c:3a:1a:64:65:75:03:c1:cb:d6: a0:ad:47:ad:cd:9c:75:99:b3:33:2a:96:96:bb:eb:69:b0:83: 51:34:d2:06:8b:46:47:c3:e2:c0:66:84:af:8e:12:c6:5a:81: ec:77:59:f0:6d:54:b3:f2:33:39:c7:cc:1e:dc:72:b3:ee:e4: 69:3b:c4:91:b2:fa:a7:37:b0:96:26:f7:25:24:44:a6:1e:26: 3f:e1:36:31:86:ff:35:e6:c1:86:42:5d:b5:a2:94:c4:c4:d7: 75:32:13:56:e4:58:49:f0:76:fa:9b:7a:77:5e:64:03:72:62: 17:d7:2b:3f:9f:c7:3b:52:c4:1b:71:aa:b4:a4:92:05:91:50: 8b:f9:87:d1:5b:a8:90:fa:d7:2f:0d:70:8c:53:9b:00:5e:1b: 65:71:28:9e:36:49:03:14:b1:28:a4:99:ef:c8:f5:99:77:d5: 5a:23:e6:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87IzC7Wozt+x0NGF2116oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OGY3NTdhNTZkMTc2ODBkNmQ2NjkwYjE5ZDlmMzkwNjE5 ODAwMzMwHhcNMjUxMjIwMTgwMTM0WhcNMjUxMjIxMTgwMTM0WjAzMTEwLwYDVQQD EyhlNjNmZDE0ZTg1MGE3NmYyODgyYWRhZDNkYzA1MWY4ODBkMTFlODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE6mw7J1wha5bbnTYWx3+mHeE0Z7 Lf9zBOiiI6En5nV1hM1C0fJMMTuxXA7sEH1wrPFFTESEX7m9Bf4q5q/urVhqlmFC 2ofo19fs4bpGKgzWmDN+D8MIAY+msBkeCYLvooC88fy2vL/79govSnC+C/7BkWtG F3pEis3z5dEkohBTxeWgBwk8EgErBcRMhNSH0NWzhsGkXWOdEEnGuI+NY3T+u74H zxO/V1ZUOa4DqJhg7IEqwqy/zv3mfjZ2xTDBFd68G0B0YoU+ybkFrXd7AQSJgXM3 LLLAyHYzP272QRTwQFiVb6PdTETiHYosJedQ4mnEsb/+SrgI3+/nkVk0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY/0U6FCnbyiCra09wFH4gNEegtMB8GA1UdIwQY MBaAFFSPdXpW0XaA1tZpCxnZ85BhmAAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUt YjhlNjU2NmEyNzlhLzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUtYjhlNjU2NmEyNzlh LzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtNJZcJh anvO7dJld5uP1IdSX+suFeXtDCh8Lv08Q2rOzE5Y1cwsYLDJ8agsVYH99Oyjnmfs h/deU6yuIl5YJwsBZXyE5yXzvdZcTAWJEdOcOhpkZXUDwcvWoK1Hrc2cdZmzMyqW lrvrabCDUTTSBotGR8PiwGaEr44SxlqB7HdZ8G1Us/IzOcfMHtxys+7kaTvEkbL6 pzewlib3JSREph4mP+E2MYb/NebBhkJdtaKUxMTXdTITVuRYSfB2+pt6d15kA3Ji F9crP5/HO1LEG3GqtKSSBZFQi/mH0VuokPrXLw1wjFObAF4bZXEonjZJAxSxKKSZ 78j1mXfVWiPm7A== -----END CERTIFICATE-----Generated at Sun Dec 21 00:59:06 2025 by rpki-client