This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json) Hash identifier: 2zdfze8jM5OTm+w51KnKYTwfLhquBze6tRJHxb28f/g= Subject key identifier: 5A:3C:B6:A4:C2:7F:A7:DF:03:5E:23:D3:14:F7:E2:E5:89:4E:95:38 Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3 Certificate serial: 019B2C66C3AC91681F553EC403F7FF768A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 13:01:30 +0000 Manifest this update: Wed 17 Dec 2025 13:01:30 +0000 Manifest next update: Thu 18 Dec 2025 13:01:30 +0000 Files and hashes: 1: 9dTJ-nYACxpnRY5rhOVsQaAIp6o.roa (hash: IImECG5Z8yt26nxcW9N1eIdxFCugxBSzO203A94ADp0=) 2: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: n+vOHcjcJbq1/HetwcWWqYXcLZIYiyEPr5drJZcsJCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:c3:ac:91:68:1f:55:3e:c4:03:f7:ff:76:8a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3 Validity Not Before: Dec 17 13:01:30 2025 GMT Not After : Dec 18 13:01:30 2025 GMT Subject: CN=5a3cb6a4c27fa7df035e23d314f7e2e5894e9538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:c2:a9:b1:86:2a:d0:3f:f2:76:48:64:19: 2b:c9:10:76:53:da:6d:1b:18:32:f4:76:c4:e2:fd: a7:3c:64:1b:25:17:47:ac:76:d4:55:d1:c8:b3:e8: 0e:d7:96:21:c3:2c:1a:f4:d7:6e:56:90:1b:80:45: 99:36:84:c5:78:ba:57:9f:f8:0f:69:62:dd:78:13: f5:e4:ed:f8:0b:0d:cc:20:29:63:41:7b:01:f4:8b: dd:0d:5d:98:c7:ae:8e:3c:65:6e:78:2e:41:59:63: 3c:50:aa:96:0b:bb:ef:57:3f:ea:a5:0c:1f:f1:4f: 05:79:d7:35:75:5a:53:8d:7c:ae:bb:45:3f:92:04: 46:06:62:95:b0:e9:49:c5:5b:af:6b:8c:50:af:7d: 91:ee:a4:f3:d2:ac:48:2b:27:d2:30:12:c2:c6:1e: 31:ba:70:5f:bd:63:8a:07:28:b1:8f:58:d8:11:60: 47:7b:4e:23:16:87:be:8b:e5:24:e1:9e:9a:2b:77: 92:2a:ac:e5:94:31:0e:ec:b0:60:59:ab:4c:e5:27: 9a:9a:22:b7:d4:1e:8f:5c:9f:55:31:ba:bb:12:f9: 88:2a:e7:6d:3e:f9:c8:44:b7:df:93:f0:1f:7c:cc: 28:3f:5b:5f:69:57:a4:a7:01:52:93:5d:62:d6:1c: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:B6:A4:C2:7F:A7:DF:03:5E:23:D3:14:F7:E2:E5:89:4E:95:38 X509v3 Authority Key Identifier: keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:85:1d:db:42:6a:fc:e5:20:63:4f:25:07:78:7b:ee:54:61: 80:9c:0b:10:aa:af:d6:42:88:0a:04:00:57:85:c0:f6:2d:b8: 8d:14:02:e0:a1:2d:9c:bd:0a:31:3a:0e:56:28:38:f2:0e:ff: 9a:bf:92:57:40:85:9b:4d:4c:f5:16:c5:88:be:e3:25:e5:68: 11:56:22:95:6c:27:86:30:c3:9f:e8:29:8e:11:04:20:f7:97: 0d:c5:c7:79:fc:46:ea:55:a2:01:dc:be:ca:cb:45:5e:29:a3: 2d:c2:10:c9:db:3e:b9:df:e4:1f:70:67:9c:eb:e6:a0:2b:a3: 4d:0c:25:16:0d:31:c2:a2:6e:74:0d:07:6c:3d:da:d7:96:4d: 8f:3e:b2:9b:de:d9:67:e0:0b:95:f5:c9:9b:e7:46:4c:75:23: 23:f0:c6:72:e1:5d:b5:ed:f8:89:23:8a:28:50:b0:d6:54:07: 6a:3d:b4:a1:15:5e:38:f6:d4:ef:16:79:32:48:60:87:b5:36: 0f:1d:a9:72:d5:3b:61:e1:c8:05:dd:aa:54:aa:e5:e5:b1:26: 2d:cb:6c:4d:85:39:0f:59:d0:3b:5c:f9:f2:81:98:65:58:05: b7:90:2f:4b:dc:99:e0:d4:77:65:b9:c1:c1:74:f8:6e:6e:65: c1:6f:51:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZsOskWgfVT7EA/f/dopdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NTk4NDA4ZDIzY2VmNTI1NjBmN2VhYWQ0ZTFkYjBjODYy MDYyYzMwHhcNMjUxMjE3MTMwMTMwWhcNMjUxMjE4MTMwMTMwWjAzMTEwLwYDVQQD Eyg1YTNjYjZhNGMyN2ZhN2RmMDM1ZTIzZDMxNGY3ZTJlNTg5NGU5NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEXCqbGGKtA/8nZIZBkryRB2U9pt Gxgy9HbE4v2nPGQbJRdHrHbUVdHIs+gO15Yhwywa9NduVpAbgEWZNoTFeLpXn/gP aWLdeBP15O34Cw3MICljQXsB9IvdDV2Yx66OPGVueC5BWWM8UKqWC7vvVz/qpQwf 8U8Fedc1dVpTjXyuu0U/kgRGBmKVsOlJxVuva4xQr32R7qTz0qxIKyfSMBLCxh4x unBfvWOKByixj1jYEWBHe04jFoe+i+Uk4Z6aK3eSKqzllDEO7LBgWatM5SeamiK3 1B6PXJ9VMbq7EvmIKudtPvnIRLffk/AffMwoP1tfaVekpwFSk11i1hzXSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo8tqTCf6ffA14j0xT34uWJTpU4MB8GA1UdIwQY MBaAFFRZhAjSPO9SVg9+qtTh2wyGIGLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEt ZTkwOTNmZWUzZmQzLzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mOWQxNTItY2EwMC00NmM0LTkzNmEtZTkwOTNmZWUzZmQz LzEvVkZtRUNOSTg3MUpXRDM2cTFPSGJESVlnWXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYUd20Jq /OUgY08lB3h77lRhgJwLEKqv1kKICgQAV4XA9i24jRQC4KEtnL0KMToOVig48g7/ mr+SV0CFm01M9RbFiL7jJeVoEVYilWwnhjDDn+gpjhEEIPeXDcXHefxG6lWiAdy+ ystFXimjLcIQyds+ud/kH3BnnOvmoCujTQwlFg0xwqJudA0HbD3a15ZNjz6ym97Z Z+ALlfXJm+dGTHUjI/DGcuFdte34iSOKKFCw1lQHaj20oRVeOPbU7xZ5Mkhgh7U2 Dx2pctU7YeHIBd2qVKrl5bEmLctsTYU5D1nQO1z58oGYZVgFt5AvS9yZ4NR3ZbnB wXT4bm5lwW9RwQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:29 2025 by rpki-client