This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json) Hash identifier: DCrUamagW398d75ZdlrjWky5TBE1Wu20oZsISg/5tSk= Subject key identifier: CD:A8:13:BC:0B:17:52:28:4D:1F:31:9E:21:95:60:CA:06:D4:2B:CB Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Certificate serial: 019B0AEC9CED61D5CE9A7B33A30A7B88850A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft Manifest number: 0988 Signing time: Thu 11 Dec 2025 01:00:37 +0000 Manifest this update: Thu 11 Dec 2025 01:00:37 +0000 Manifest next update: Fri 12 Dec 2025 01:00:37 +0000 Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=) 2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=) 3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=) 4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: g4f9fuxF9mUdrN7OJji+O39V5wwKLsGF7P6NkRXNtHA=) 5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=) 6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=) 7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=) 8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:ec:9c:ed:61:d5:ce:9a:7b:33:a3:0a:7b:88:85:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Validity Not Before: Dec 11 01:00:37 2025 GMT Not After : Dec 12 01:00:37 2025 GMT Subject: CN=cda813bc0b1752284d1f319e219560ca06d42bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:f8:6c:54:d8:58:f1:e9:12:9b:d1:b4:64: aa:fa:d9:eb:b6:56:9a:92:e3:12:97:61:63:06:82: 42:77:3b:b9:af:9d:ae:87:81:c1:e7:60:b7:10:33: 1a:d1:e8:cd:20:c2:0f:33:09:9f:e8:9c:66:6d:d0: eb:16:18:6b:bf:4f:3a:5e:90:31:de:29:76:eb:21: 1a:71:d0:e4:60:43:66:fc:7b:4f:94:48:ea:bf:e4: 56:80:cc:06:b0:f2:3f:f1:15:ac:57:df:59:64:d7: 71:fd:9b:c7:d4:a7:37:1a:7e:1c:2f:6a:59:c7:4c: 3a:b4:79:37:27:57:ad:c0:91:20:07:38:d5:72:3b: 3c:1f:47:51:d0:9e:01:88:bc:a6:0f:0f:69:ab:20: 4d:1a:09:69:23:5b:c5:4c:e8:33:0d:d9:05:6f:51: ff:b5:7b:e1:bb:67:fa:bb:fc:1b:d2:69:7d:47:68: ad:96:02:bd:71:e2:27:56:8e:34:05:78:09:b5:86: 88:f2:5a:82:3b:d0:17:87:54:06:c2:37:57:8d:1c: ee:fe:4c:5e:16:59:a0:79:2b:cd:aa:39:18:ff:0d: 88:92:da:9f:a1:94:2e:9f:cf:3e:4f:91:1c:89:77: 26:47:bf:03:09:9f:da:3f:a8:c9:2d:40:16:ba:f5: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:13:BC:0B:17:52:28:4D:1F:31:9E:21:95:60:CA:06:D4:2B:CB X509v3 Authority Key Identifier: keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c9:66:d0:4e:c9:86:84:7a:38:af:7b:0a:5b:d4:32:61:2e: 54:5a:b7:58:45:99:6e:eb:6e:4b:bd:ad:23:a7:f8:10:74:f1: e5:9d:e8:93:7d:36:eb:ae:58:ca:f8:ea:59:2f:a8:59:ea:d6: 2e:5f:e4:eb:79:10:38:03:c1:f1:12:5a:ab:60:08:67:b6:43: a5:77:09:00:1a:92:e1:82:e7:2f:54:49:8b:9e:c5:90:f3:07: 17:04:4f:ca:da:45:ff:95:51:84:a1:6f:2a:14:e4:61:74:cb: 15:2e:73:26:04:22:a3:2f:ee:08:e5:14:44:9c:55:52:31:54: d0:7f:95:63:9b:76:2e:09:36:71:6d:bd:75:fa:da:1c:5e:5c: 08:7d:83:c3:be:0b:54:e3:42:b1:7f:33:31:68:c3:22:8e:c9: 63:97:27:0b:0e:28:96:6b:1d:58:9c:68:d9:e6:f2:ca:a4:78: 7b:8a:32:7b:bc:17:3c:7a:b1:13:32:7c:3a:80:d5:aa:1d:77: d5:89:11:8b:6a:8a:b5:6d:3b:40:db:7d:bf:1c:13:1b:f4:f0: d2:30:89:32:95:32:e7:83:d7:25:6f:88:b3:d5:13:ac:b3:e1: be:2b:3e:2b:e7:9e:77:62:43:15:35:a6:fd:73:2a:3f:9f:45: 02:24:a5:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsK7JztYdXOmnszowp7iIUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl ZTdlZjcwHhcNMjUxMjExMDEwMDM3WhcNMjUxMjEyMDEwMDM3WjAzMTEwLwYDVQQD EyhjZGE4MTNiYzBiMTc1MjI4NGQxZjMxOWUyMTk1NjBjYTA2ZDQyYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIb4bFTYWPHpEpvRtGSq+tnrtlaa kuMSl2FjBoJCdzu5r52uh4HB52C3EDMa0ejNIMIPMwmf6JxmbdDrFhhrv086XpAx 3il26yEacdDkYENm/HtPlEjqv+RWgMwGsPI/8RWsV99ZZNdx/ZvH1Kc3Gn4cL2pZ x0w6tHk3J1etwJEgBzjVcjs8H0dR0J4BiLymDw9pqyBNGglpI1vFTOgzDdkFb1H/ tXvhu2f6u/wb0ml9R2itlgK9ceInVo40BXgJtYaI8lqCO9AXh1QGwjdXjRzu/kxe FlmgeSvNqjkY/w2IktqfoZQun88+T5EciXcmR78DCZ/aP6jJLUAWuvU2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2oE7wLF1IoTR8xniGVYMoG1CvLMB8GA1UdIwQY MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3 LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8lm0E7J hoR6OK97ClvUMmEuVFq3WEWZbutuS72tI6f4EHTx5Z3ok302665YyvjqWS+oWerW Ll/k63kQOAPB8RJaq2AIZ7ZDpXcJABqS4YLnL1RJi57FkPMHFwRPytpF/5VRhKFv KhTkYXTLFS5zJgQioy/uCOUURJxVUjFU0H+VY5t2Lgk2cW29dfraHF5cCH2Dw74L VONCsX8zMWjDIo7JY5cnCw4olmsdWJxo2ebyyqR4e4oye7wXPHqxEzJ8OoDVqh13 1YkRi2qKtW07QNt9vxwTG/Tw0jCJMpUy54PXJW+Is9UTrLPhvis+K+eed2JDFTWm /XMqP59FAiSlgw== -----END CERTIFICATE-----Generated at Thu Dec 11 05:18:35 2025 by rpki-client