This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json) Hash identifier: rfhVYenxGsCBOmYSXm0KSM13rnOX06C2bL5iU23Ww2g= Subject key identifier: 34:47:0D:31:9C:B3:64:18:87:3B:1E:7C:88:76:D4:57:24:F5:EC:19 Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 019B5975CC012629A9577A0EC046CE691AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft Manifest number: 0EA0 Signing time: Fri 26 Dec 2025 07:00:50 +0000 Manifest this update: Fri 26 Dec 2025 07:00:50 +0000 Manifest next update: Sat 27 Dec 2025 07:00:50 +0000 Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=) 2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=) 3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=) 4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: ZNRk4cJaURyQgy8GubSXY7vDtmKpIKjowwjlkXUnfQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:cc:01:26:29:a9:57:7a:0e:c0:46:ce:69:1a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Dec 26 07:00:50 2025 GMT Not After : Dec 27 07:00:50 2025 GMT Subject: CN=34470d319cb36418873b1e7c8876d45724f5ec19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:f9:af:e6:55:3d:cd:b3:c7:e6:ca:01:1e: a9:b3:83:3e:b0:21:d5:26:0b:95:51:2c:95:08:f8: b9:93:d7:7b:5f:cd:45:4b:49:69:fd:70:cf:f5:a9: b5:4b:b6:a5:b6:19:e5:68:c8:3d:62:d3:fa:be:22: db:ed:17:f1:88:8d:02:b7:9d:29:ae:1e:ab:87:ea: c7:e6:7c:62:46:8b:7c:bd:b9:a4:4c:b1:d0:e7:f1: d3:49:7a:a6:6e:18:c1:c3:d0:eb:8c:bc:d5:09:fc: 44:bc:a0:73:1a:f5:74:ff:bb:37:60:4c:7e:0c:8b: e5:9c:e6:8c:33:cb:dc:e3:f4:58:db:fe:ed:73:19: 0a:2a:11:f5:8e:6c:0b:1b:7f:07:c9:40:8c:52:a7: 05:d6:f1:d9:40:3c:cd:f5:25:d9:13:ff:1f:01:55: 77:f2:09:04:c5:c8:3e:ab:a2:9c:c8:4d:35:f1:20: 9f:5b:13:81:8a:2d:bc:f5:d1:f7:6c:fb:1f:35:88: e9:34:51:86:4a:d1:b7:3f:ac:d3:60:31:c3:6e:e0: 2a:75:48:47:e5:e2:11:e4:34:ad:af:1b:66:5a:95: b3:ac:49:43:fa:0e:54:64:45:aa:a0:2e:8e:9e:e9: fb:f4:80:22:1a:a3:95:49:56:96:f6:d6:1f:51:57: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:47:0D:31:9C:B3:64:18:87:3B:1E:7C:88:76:D4:57:24:F5:EC:19 X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:91:21:7f:0f:92:dc:40:d9:68:f7:90:9a:95:f2:95:20:96: 01:ff:51:fe:96:82:a8:7c:61:1f:d8:7d:80:78:1b:08:22:48: 87:87:e6:40:9d:f4:ac:62:72:6b:5d:ea:15:af:9c:bd:d9:a4: 6d:6e:fb:4d:eb:98:06:bf:d0:38:bd:6f:e0:0a:b4:3e:02:e1: 01:96:23:7b:6b:54:4a:ff:5c:89:77:8e:2d:87:d1:38:7c:5f: 0b:15:e8:42:1c:83:01:02:37:55:7f:0d:10:ee:46:9b:ca:b9: b4:c5:6c:c8:7a:2f:8a:ea:d0:46:85:8d:43:21:24:ea:a8:dc: f8:de:90:d8:e6:e2:ef:f1:90:79:75:04:7f:85:2d:e2:84:f4: 60:c1:07:13:87:83:48:a2:5a:66:36:da:3d:29:5c:04:0d:ac: e8:b6:1a:a1:28:aa:57:b1:de:ab:3b:e0:cc:eb:12:1c:55:89: 33:b5:14:96:4c:7b:58:bf:9d:7b:0e:9e:13:7d:e8:92:fa:f8: 23:b2:99:4b:d3:8e:e3:c5:cb:f1:a2:b9:e6:71:24:2f:66:d5: 96:2b:b1:50:e8:42:0d:da:e7:6d:49:c6:b8:d0:c2:d4:4e:e1: d7:f9:3a:ae:75:c2:e2:56:01:ca:1f:fa:97:86:5c:63:96:b9: dd:c4:c3:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcwBJimpV3oOwEbOaRrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjUxMjI2MDcwMDUwWhcNMjUxMjI3MDcwMDUwWjAzMTEwLwYDVQQD EygzNDQ3MGQzMTljYjM2NDE4ODczYjFlN2M4ODc2ZDQ1NzI0ZjVlYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLD5r+ZVPc2zx+bKAR6ps4M+sCHV JguVUSyVCPi5k9d7X81FS0lp/XDP9am1S7althnlaMg9YtP6viLb7RfxiI0Ct50p rh6rh+rH5nxiRot8vbmkTLHQ5/HTSXqmbhjBw9DrjLzVCfxEvKBzGvV0/7s3YEx+ DIvlnOaMM8vc4/RY2/7tcxkKKhH1jmwLG38HyUCMUqcF1vHZQDzN9SXZE/8fAVV3 8gkExcg+q6KcyE018SCfWxOBii289dH3bPsfNYjpNFGGStG3P6zTYDHDbuAqdUhH 5eIR5DStrxtmWpWzrElD+g5UZEWqoC6Onun79IAiGqOVSVaW9tYfUVdE3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRHDTGcs2QYhzsefIh21Fck9ewZMB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5Ehfw+S 3EDZaPeQmpXylSCWAf9R/paCqHxhH9h9gHgbCCJIh4fmQJ30rGJya13qFa+cvdmk bW77TeuYBr/QOL1v4Aq0PgLhAZYje2tUSv9ciXeOLYfROHxfCxXoQhyDAQI3VX8N EO5Gm8q5tMVsyHoviurQRoWNQyEk6qjc+N6Q2Obi7/GQeXUEf4Ut4oT0YMEHE4eD SKJaZjbaPSlcBA2s6LYaoSiqV7HeqzvgzOsSHFWJM7UUlkx7WL+dew6eE33okvr4 I7KZS9OO48XL8aK55nEkL2bVliuxUOhCDdrnbUnGuNDC1E7h1/k6rnXC4lYByh/6 l4ZcY5a53cTD5w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:25 2025 by rpki-client