This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json) Hash identifier: 1Uj8w1d5O2LhFzJ+BOMe25H/BZxppAelOclxx++fiDE= Subject key identifier: 41:66:DB:FA:68:5E:EA:92:CA:9E:59:28:BA:8E:E0:53:73:E1:3E:E1 Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3 Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3 Certificate serial: 019B262DC6CFF68B3B4E5BB8BB1C5F2DE853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft Manifest number: 03E5 Signing time: Tue 16 Dec 2025 08:01:32 +0000 Manifest this update: Tue 16 Dec 2025 08:01:32 +0000 Manifest next update: Wed 17 Dec 2025 08:01:32 +0000 Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=) 2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=) 3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: Axl71ue2HCKEbMhcd9/TITv3jmth/EvTBbF/ZLY1+Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:c6:cf:f6:8b:3b:4e:5b:b8:bb:1c:5f:2d:e8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3 Validity Not Before: Dec 16 08:01:32 2025 GMT Not After : Dec 17 08:01:32 2025 GMT Subject: CN=4166dbfa685eea92ca9e5928ba8ee05373e13ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:08:a2:68:36:2e:4a:95:54:28:5e:ce:21: 97:61:70:42:48:b9:4e:d5:6b:a7:e6:bf:fb:90:36: 5d:d2:7f:3b:4f:62:91:82:58:e9:2b:ef:7e:34:2b: 89:e6:fe:9e:3b:d4:75:63:ef:cc:cd:74:d8:e0:71: 1c:36:08:55:ca:44:05:90:35:21:e8:b3:46:c6:74: d5:40:0b:41:78:e1:00:9b:fb:58:00:33:3b:24:90: df:6b:bc:c8:5e:45:fa:dd:9b:7b:54:9e:ee:89:ee: 59:6a:c7:58:08:bd:20:f7:b3:9d:e7:27:40:61:95: e0:a4:cb:b0:ae:21:51:ef:e2:cd:26:b3:1f:72:8e: f6:6e:37:3a:fc:2a:6b:ac:d9:f8:a3:19:38:a6:6e: 86:7a:af:23:96:e6:08:e0:1d:7d:f4:e0:82:62:d8: 6c:f7:86:0e:16:7e:42:68:79:cd:f1:dc:69:d1:1b: f8:06:f7:21:cc:bc:39:cb:32:ba:5c:74:08:4d:1f: e3:88:05:e1:0a:37:e8:f8:40:99:03:18:d1:e8:00: 59:77:73:ac:ba:4c:fc:d0:97:1d:4b:1d:75:9d:09: df:66:bd:d8:59:6f:f2:ae:09:92:b2:26:29:da:91: 4d:4c:e6:3a:34:e0:04:00:29:ee:ec:f7:78:5a:f1: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:66:DB:FA:68:5E:EA:92:CA:9E:59:28:BA:8E:E0:53:73:E1:3E:E1 X509v3 Authority Key Identifier: keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8a:cb:6e:27:0d:1f:63:4a:7d:60:4f:a3:92:a7:87:63:b1: 3f:a7:c3:9b:4e:a7:89:13:56:7b:f4:06:94:ec:f2:de:67:fa: 5c:44:65:6f:6b:f0:34:8a:db:58:84:15:ea:0f:37:00:da:72: cc:e1:1d:51:73:21:42:a8:5a:87:be:ac:95:be:09:86:5e:34: e9:95:0c:10:04:39:51:a9:10:d8:84:0c:25:b0:68:0f:65:6b: 9f:11:27:ce:9c:56:37:ec:d2:77:29:68:c0:77:28:dc:ff:63: 8c:8a:fd:cd:10:d9:3f:e4:7e:d5:3e:18:26:27:47:38:52:2e: 8d:9d:aa:fc:fa:ef:e3:c7:53:69:81:aa:7a:a6:02:45:c9:b8: a9:e4:8b:fa:a4:9e:0e:d8:f4:74:97:27:98:e0:09:3f:f9:85: fe:f6:5b:42:8f:5f:85:0c:ac:23:dc:aa:74:84:f7:a8:f8:72: b3:cd:1f:56:2b:38:aa:bf:e3:a5:3f:99:aa:2a:e7:7b:7e:e0: 2e:9c:c4:ff:1c:10:3b:88:e0:99:0f:65:c4:b0:72:58:6c:bd: 1b:a1:2e:d5:f8:73:34:9f:a6:ce:ae:15:6a:f3:bc:7c:34:77: 4b:26:42:f8:02:91:c4:f7:2b:41:0c:cd:aa:8a:3b:78:49:61: 3f:46:77:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLcbP9os7Tlu4uxxfLehTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj ZDcyZjMwHhcNMjUxMjE2MDgwMTMyWhcNMjUxMjE3MDgwMTMyWjAzMTEwLwYDVQQD Eyg0MTY2ZGJmYTY4NWVlYTkyY2E5ZTU5MjhiYThlZTA1MzczZTEzZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+w8Iomg2LkqVVCheziGXYXBCSLlO 1Wun5r/7kDZd0n87T2KRgljpK+9+NCuJ5v6eO9R1Y+/MzXTY4HEcNghVykQFkDUh 6LNGxnTVQAtBeOEAm/tYADM7JJDfa7zIXkX63Zt7VJ7uie5ZasdYCL0g97Od5ydA YZXgpMuwriFR7+LNJrMfco72bjc6/CprrNn4oxk4pm6Geq8jluYI4B199OCCYths 94YOFn5CaHnN8dxp0Rv4BvchzLw5yzK6XHQITR/jiAXhCjfo+ECZAxjR6ABZd3Os ukz80JcdSx11nQnfZr3YWW/yrgmSsiYp2pFNTOY6NOAEACnu7Pd4WvEdrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFm2/poXuqSyp5ZKLqO4FNz4T7hMB8GA1UdIwQY MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYrLbicN H2NKfWBPo5Knh2OxP6fDm06niRNWe/QGlOzy3mf6XERlb2vwNIrbWIQV6g83ANpy zOEdUXMhQqhah76slb4Jhl406ZUMEAQ5UakQ2IQMJbBoD2VrnxEnzpxWN+zSdylo wHco3P9jjIr9zRDZP+R+1T4YJidHOFIujZ2q/Prv48dTaYGqeqYCRcm4qeSL+qSe Dtj0dJcnmOAJP/mF/vZbQo9fhQysI9yqdIT3qPhys80fVis4qr/jpT+Zqirne37g LpzE/xwQO4jgmQ9lxLByWGy9G6Eu1fhzNJ+mzq4VavO8fDR3SyZC+AKRxPcrQQzN qoo7eElhP0Z3RA== -----END CERTIFICATE-----Generated at Tue Dec 16 16:56:06 2025 by rpki-client