This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft File: VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json) Hash identifier: t8beqRmfv/DXJSVB26NuJJC5PkTqxufXPt+CB809bxY= Subject key identifier: 45:AA:38:BC:B5:F6:30:13:F4:A9:6D:4E:49:33:5C:5F:65:EB:A2:85 Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Certificate serial: 019B4926E0BD357E96BDFB1CF96B3FE6BE09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft Manifest number: 126D Signing time: Tue 23 Dec 2025 03:00:43 +0000 Manifest this update: Tue 23 Dec 2025 03:00:43 +0000 Manifest next update: Wed 24 Dec 2025 03:00:43 +0000 Files and hashes: 1: EDy93mAhA2FhoPZrv_qXDnBaEPY.roa (hash: gcQKa9NBtqbmaNQOkXvvz+TImpW4xhVs+8xtbTy1SZU=) 2: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: BgT81h7wsJFGM9GD/K/i2FLmrwar1I4uvmvRALJ8aRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:e0:bd:35:7e:96:bd:fb:1c:f9:6b:3f:e6:be:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Validity Not Before: Dec 23 03:00:43 2025 GMT Not After : Dec 24 03:00:43 2025 GMT Subject: CN=45aa38bcb5f63013f4a96d4e49335c5f65eba285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:70:e3:b0:88:a7:5a:8b:45:48:86:8b:e9: 3c:5d:17:1f:97:e4:e3:96:5e:73:9b:e7:2e:4a:0d: 61:d5:5e:fe:b9:d4:f1:0a:69:b2:ff:50:0b:ac:21: 9a:7a:72:e4:36:93:8a:fb:5f:00:80:5e:e6:7a:2a: 7a:4b:9a:89:2c:f4:1f:a3:3c:ec:79:22:b1:a4:87: f1:55:31:e6:e3:25:27:87:3b:19:86:bc:cc:f9:d5: 7a:be:52:46:f8:f9:3b:1c:98:4e:24:04:56:41:0d: 07:40:c6:0e:5b:a9:14:f1:70:04:00:16:6e:7a:40: 83:3b:90:6b:68:c1:cb:5b:69:ba:cd:2c:b5:54:ac: 3c:34:83:e8:ce:72:cc:9b:98:30:1e:d1:e9:a0:22: 3a:bc:78:27:76:42:34:4a:ba:18:5b:26:d9:ea:3f: a9:de:d4:e1:9a:51:ce:a6:9a:42:88:14:dd:d5:6d: 3c:48:9e:76:cf:d5:ef:a7:d8:42:e7:bc:a6:a1:25: 10:6d:b5:6f:c2:7b:e6:3f:ab:48:74:b6:bf:1b:bb: e3:40:45:97:33:c5:f2:6a:e5:69:48:01:c3:a4:ba: fb:d3:43:76:f0:68:5e:c5:2f:0e:7f:ec:2b:57:5d: 0a:65:aa:5c:69:dd:dd:dd:e9:bc:6d:8b:9f:2a:e7: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:38:BC:B5:F6:30:13:F4:A9:6D:4E:49:33:5C:5F:65:EB:A2:85 X509v3 Authority Key Identifier: keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a1:27:97:65:b9:78:09:5c:04:93:49:73:a0:9a:81:32:71: 6d:a3:c0:66:ef:e3:81:85:d3:db:7c:f5:02:0d:e4:dc:ea:58: 52:c7:da:b7:34:af:10:f0:82:4b:14:3e:e5:28:84:76:4d:72: fc:52:b4:42:1a:76:c2:86:d7:c6:0a:04:5a:72:22:8c:59:20: 44:27:93:21:69:a3:09:92:e4:9a:b7:82:0d:2a:83:1b:de:3d: fa:c6:39:3e:82:60:2e:87:10:f3:3a:b0:d2:40:84:f1:63:4a: 0f:e0:c8:a0:94:bd:14:47:53:2a:65:d4:0b:aa:5e:c2:53:99: e5:4f:dc:4b:18:bc:f2:65:a9:4e:30:3e:56:d4:f3:7f:c3:b2: 41:d1:c2:60:4e:f6:4c:90:a9:b2:3b:bf:d0:35:b1:52:01:1a: 98:0a:07:6c:0c:fe:72:b1:55:be:2e:2e:a1:e9:f1:51:c2:1b: b0:6d:b2:03:3e:7e:ba:16:00:07:c5:3c:b1:2d:7e:be:a9:1c: 65:8e:4a:e9:0f:15:6d:7d:e6:4b:96:bc:4c:05:9b:97:61:0c: 3e:88:a6:15:85:47:f2:73:2c:31:6f:61:8b:93:a9:41:5f:99: ab:08:3a:03:b3:44:42:58:15:e8:78:dd:a2:b6:0d:52:46:d7: ee:16:df:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJuC9NX6Wvfsc+Ws/5r4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3 ZjBmZTYwHhcNMjUxMjIzMDMwMDQzWhcNMjUxMjI0MDMwMDQzWjAzMTEwLwYDVQQD Eyg0NWFhMzhiY2I1ZjYzMDEzZjRhOTZkNGU0OTMzNWM1ZjY1ZWJhMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+5w47CIp1qLRUiGi+k8XRcfl+Tj ll5zm+cuSg1h1V7+udTxCmmy/1ALrCGaenLkNpOK+18AgF7meip6S5qJLPQfozzs eSKxpIfxVTHm4yUnhzsZhrzM+dV6vlJG+Pk7HJhOJARWQQ0HQMYOW6kU8XAEABZu ekCDO5BraMHLW2m6zSy1VKw8NIPoznLMm5gwHtHpoCI6vHgndkI0SroYWybZ6j+p 3tThmlHOpppCiBTd1W08SJ52z9Xvp9hC57ymoSUQbbVvwnvmP6tIdLa/G7vjQEWX M8XyauVpSAHDpLr700N28GhexS8Of+wrV10KZapcad3d3em8bYufKue4RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWqOLy19jAT9KltTkkzXF9l66KFMB8GA1UdIwQY MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4 LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6Enl2W5 eAlcBJNJc6CagTJxbaPAZu/jgYXT23z1Ag3k3OpYUsfatzSvEPCCSxQ+5SiEdk1y /FK0Qhp2wobXxgoEWnIijFkgRCeTIWmjCZLkmreCDSqDG949+sY5PoJgLocQ8zqw 0kCE8WNKD+DIoJS9FEdTKmXUC6pewlOZ5U/cSxi88mWpTjA+VtTzf8OyQdHCYE72 TJCpsju/0DWxUgEamAoHbAz+crFVvi4uoenxUcIbsG2yAz5+uhYAB8U8sS1+vqkc ZY5K6Q8VbX3mS5a8TAWbl2EMPoimFYVH8nMsMW9hi5OpQV+Zqwg6A7NEQlgV6Hjd orYNUkbX7hbfJw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:45:35 2025 by rpki-client