This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: VafeCb5ZDv3+J8lMUWSlH3s3v8pwQ2KBlTQWj/bx3No= Subject key identifier: A3:77:AE:80:26:38:6A:6B:E2:07:2B:BB:B8:26:FA:84:0D:5A:9D:32 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B08C797D31603BE183DDCC6A651A28683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 13B7 Signing time: Wed 10 Dec 2025 15:00:56 +0000 Manifest this update: Wed 10 Dec 2025 15:00:56 +0000 Manifest next update: Thu 11 Dec 2025 15:00:56 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: DirpbPXV9PEsSkJGkxNuGe42xHI.roa (hash: VBDmf9F3mz15N8FEL0FBBmeC/+Di4FvRutCT5g1tWEg=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: qSH59J8vA5xXUYtfyBg3Fb2cjYN4FkZ73RwoghnHql8=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:97:d3:16:03:be:18:3d:dc:c6:a6:51:a2:86:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Dec 10 15:00:56 2025 GMT Not After : Dec 11 15:00:56 2025 GMT Subject: CN=a377ae8026386a6be2072bbbb826fa840d5a9d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:98:8c:3d:5b:38:86:f0:0e:69:88:ba:78: 64:ae:dd:b9:d8:14:b2:96:be:69:67:4b:68:27:b1: 4e:0b:4b:ca:e8:2f:c5:da:13:e6:5c:fe:c1:00:e7: 1f:dd:48:8d:d9:3e:d2:75:23:68:41:60:fe:37:c6: 22:64:2a:1f:66:ec:74:d8:46:bb:4f:e4:1b:6c:60: 8d:de:ec:5c:f3:bf:73:66:1d:81:a5:82:b7:89:7d: 35:3c:80:11:03:b9:7a:20:29:88:7b:15:e0:5e:ff: 77:0d:9f:4f:ae:8a:d3:49:80:51:f2:4d:aa:8f:27: f0:a0:bb:35:47:a2:e7:24:09:a1:7c:db:c5:11:b0: cd:2c:e3:7c:a5:d6:f9:09:71:c2:b2:6e:c0:3c:d1: 76:35:58:1c:55:aa:d8:ea:c9:04:44:9d:c4:13:58: 60:83:d4:8d:e1:88:55:57:8b:ee:23:17:b2:f5:87: c8:80:a3:c3:00:ec:08:f7:d3:e8:23:43:fb:1f:2a: 0e:31:78:0f:bb:f4:43:d0:c4:9e:2e:8a:72:29:20: cd:07:0b:16:a5:ed:30:87:eb:37:73:f9:76:68:41: d3:1b:02:40:d7:22:6f:1e:88:f1:4d:99:1a:0a:06: 4b:f8:60:d9:4b:8a:1e:1e:6a:cd:f2:78:b6:f4:bf: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:77:AE:80:26:38:6A:6B:E2:07:2B:BB:B8:26:FA:84:0D:5A:9D:32 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:50:0f:ea:fe:d2:45:8d:c7:5e:3d:73:ca:e6:7f:8b:3f:93: bf:fe:f2:ea:5b:d3:45:e8:bf:87:4b:67:41:60:11:ac:5d:5f: e0:26:c5:1c:5a:b1:cb:b9:96:13:56:ba:8e:25:76:49:ae:c7: 20:09:1c:eb:3d:e8:eb:83:41:8c:ea:aa:74:c6:a5:c8:59:0f: 62:84:50:86:ba:2c:8f:e8:a3:e5:89:bc:6e:00:a2:81:18:0c: 5f:03:55:1c:42:42:de:c1:47:3d:35:17:ef:6e:29:a8:5b:77: ef:1d:a0:12:a0:78:4c:f2:d6:2a:c5:9a:d1:b8:f8:ac:dc:ae: e0:32:11:7a:10:e9:42:cc:7d:51:50:23:42:d3:54:82:99:6e: 28:eb:0e:d2:67:00:70:bc:2b:9b:e8:9c:99:1d:48:99:86:c4: e0:fc:43:84:57:27:08:05:3b:80:09:d4:47:0c:73:48:c4:9e: 02:ec:c6:a7:9d:3a:19:d5:82:9a:7c:8a:84:2e:20:0e:04:19: 05:bd:6b:12:16:81:68:f8:1c:86:b7:b6:b5:c5:6d:b1:f3:63: 9c:1e:39:81:cb:a6:8a:cd:05:03:e0:19:83:66:3c:54:91:75: 10:e4:85:72:8c:e8:96:01:53:03:d6:84:04:3d:54:46:3b:83: 4d:2f:5b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx5fTFgO+GD3cxqZRooaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUxMjEwMTUwMDU2WhcNMjUxMjExMTUwMDU2WjAzMTEwLwYDVQQD EyhhMzc3YWU4MDI2Mzg2YTZiZTIwNzJiYmJiODI2ZmE4NDBkNWE5ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySaYjD1bOIbwDmmIunhkrt252BSy lr5pZ0toJ7FOC0vK6C/F2hPmXP7BAOcf3UiN2T7SdSNoQWD+N8YiZCofZux02Ea7 T+QbbGCN3uxc879zZh2BpYK3iX01PIARA7l6ICmIexXgXv93DZ9ProrTSYBR8k2q jyfwoLs1R6LnJAmhfNvFEbDNLON8pdb5CXHCsm7APNF2NVgcVarY6skERJ3EE1hg g9SN4YhVV4vuIxey9YfIgKPDAOwI99PoI0P7HyoOMXgPu/RD0MSeLopyKSDNBwsW pe0wh+s3c/l2aEHTGwJA1yJvHojxTZkaCgZL+GDZS4oeHmrN8ni29L8TwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN3roAmOGpr4gcru7gm+oQNWp0yMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVAP6v7S RY3HXj1zyuZ/iz+Tv/7y6lvTRei/h0tnQWARrF1f4CbFHFqxy7mWE1a6jiV2Sa7H IAkc6z3o64NBjOqqdMalyFkPYoRQhrosj+ij5Ym8bgCigRgMXwNVHEJC3sFHPTUX 724pqFt37x2gEqB4TPLWKsWa0bj4rNyu4DIRehDpQsx9UVAjQtNUgpluKOsO0mcA cLwrm+icmR1ImYbE4PxDhFcnCAU7gAnURwxzSMSeAuzGp506GdWCmnyKhC4gDgQZ Bb1rEhaBaPgchre2tcVtsfNjnB45gcumis0FA+AZg2Y8VJF1EOSFcozolgFTA9aE BD1URjuDTS9bZw== -----END CERTIFICATE-----Generated at Wed Dec 10 19:58:14 2025 by rpki-client