This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json) Hash identifier: /fxX3ZB4pTgGzQT06VhxnwlUWKBFyiPD74eD47nSLog= Subject key identifier: 56:3A:BA:CD:01:E9:07:EA:9B:96:E8:83:81:9A:C5:1E:10:BE:09:7A Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0 Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0 Certificate serial: 019AF16455D39A3E444AC4B24230AEE724C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=) 2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: v7lpQfL1teviEhU9svz6pHSX88gcHqorgIpCw7Cb5jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:55:d3:9a:3e:44:4a:c4:b2:42:30:ae:e7:24:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=563abacd01e907ea9b96e883819ac51e10be097a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:27:ba:8a:52:86:e9:0c:94:83:44:9c:39: 82:b2:5b:d1:c3:bc:b8:ff:8b:3c:e6:e4:bb:52:92: e7:d9:45:56:0c:61:8b:1b:b3:07:24:16:bd:f9:aa: 58:db:10:df:be:cc:77:67:92:a1:ff:63:d6:72:b3: 97:dc:07:7d:55:d3:d1:c8:d5:2c:34:9a:98:37:b0: 23:56:59:c7:63:17:59:af:00:7e:7d:62:db:dc:f0: d8:97:e8:e2:68:c7:8f:7f:1a:fb:ad:92:fb:55:d3: 1d:20:89:98:95:37:cc:b4:aa:45:9f:8b:31:48:c7: 30:7b:b6:97:6d:75:57:bf:3c:06:26:56:c7:b3:37: 36:71:c4:c5:09:21:62:98:ca:00:ee:22:b4:6e:d5: 67:b9:8f:0f:ed:1d:63:d4:45:8b:8d:bf:23:02:fd: ed:6a:c2:4c:d4:9b:f4:c8:df:77:c9:02:03:f9:7b: 8c:fa:c5:af:01:e7:8a:da:65:bb:cc:e1:4a:d9:26: 9d:a5:6f:68:b8:95:aa:67:ba:4b:fa:5d:e9:56:e5: 34:f2:90:28:2c:fd:20:0a:be:bb:56:d5:6a:97:b6: c9:27:bc:df:b2:e5:9d:af:3c:43:43:b1:22:c0:89: ec:ef:7e:81:67:15:28:83:52:ca:a2:8c:e7:cc:d2: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3A:BA:CD:01:E9:07:EA:9B:96:E8:83:81:9A:C5:1E:10:BE:09:7A X509v3 Authority Key Identifier: keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:31:2c:51:23:ed:bc:f6:b2:c1:22:c6:fb:c2:c2:35:2d:11: c3:fc:2a:16:60:1e:cf:4c:fe:40:30:9c:64:ca:95:b2:50:ef: dc:25:a2:71:2c:c3:98:4c:b9:ad:5d:64:31:7b:a2:ab:73:f8: b8:8a:fd:d3:5f:b8:85:a3:4b:b1:77:a3:94:97:05:6f:a3:94: 96:aa:3c:cf:58:1f:4b:36:44:72:c9:2a:ab:19:7f:52:0d:6e: 35:b3:f7:7a:f1:ef:70:a0:4a:a3:97:53:cc:02:73:9d:ee:41: f9:e5:75:95:c4:88:2b:e4:c3:07:ce:34:bd:f9:96:42:0a:ab: 04:d9:4c:2e:99:b4:f7:6b:64:d1:a7:aa:49:d7:45:f1:30:dc: 3c:8c:ea:f1:23:24:9b:26:82:1f:8b:98:8a:74:a7:16:c6:c8: 3d:81:c8:6f:da:b3:ec:f1:33:da:b2:47:fd:99:b0:81:00:14: 7c:71:d3:1f:a5:1e:29:f5:c6:07:ca:b4:65:10:c5:8f:81:77: 13:de:4e:86:2e:92:68:7d:86:47:54:a5:05:dc:48:c3:f9:d1: 8b:f3:0d:aa:b7:c2:b2:04:8e:82:01:c7:ad:8b:ba:5b:5d:c6: 58:88:83:3b:59:7f:19:8a:ea:db:e6:42:95:39:20:5d:68:9d: e7:6a:1b:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFXTmj5ESsSyQjCu5yTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MmM5YTFjOWM0ZmY3OTNlODg4YmQ1ODNkY2E5ODE1Y2M0 NTc0YzAwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD Eyg1NjNhYmFjZDAxZTkwN2VhOWI5NmU4ODM4MTlhYzUxZTEwYmUwOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsownuopShukMlINEnDmCslvRw7y4 /4s85uS7UpLn2UVWDGGLG7MHJBa9+apY2xDfvsx3Z5Kh/2PWcrOX3Ad9VdPRyNUs NJqYN7AjVlnHYxdZrwB+fWLb3PDYl+jiaMePfxr7rZL7VdMdIImYlTfMtKpFn4sx SMcwe7aXbXVXvzwGJlbHszc2ccTFCSFimMoA7iK0btVnuY8P7R1j1EWLjb8jAv3t asJM1Jv0yN93yQID+XuM+sWvAeeK2mW7zOFK2SadpW9ouJWqZ7pL+l3pVuU08pAo LP0gCr67VtVql7bJJ7zfsuWdrzxDQ7EiwIns736BZxUog1LKooznzNLxaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY6us0B6Qfqm5bog4GaxR4Qvgl6MB8GA1UdIwQY MBaAFFUsmhycT/eT6Ii9WD3KmBXMRXTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEt Yjc4ZmY4MGE4MDI3LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEtYjc4ZmY4MGE4MDI3 LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzEsUSPt vPaywSLG+8LCNS0Rw/wqFmAez0z+QDCcZMqVslDv3CWicSzDmEy5rV1kMXuiq3P4 uIr901+4haNLsXejlJcFb6OUlqo8z1gfSzZEcskqqxl/Ug1uNbP3evHvcKBKo5dT zAJzne5B+eV1lcSIK+TDB840vfmWQgqrBNlMLpm092tk0aeqSddF8TDcPIzq8SMk myaCH4uYinSnFsbIPYHIb9qz7PEz2rJH/ZmwgQAUfHHTH6UeKfXGB8q0ZRDFj4F3 E95Ohi6SaH2GR1SlBdxIw/nRi/MNqrfCsgSOggHHrYu6W13GWIiDO1l/GYrq2+ZC lTkgXWid52obCw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:53 2025 by rpki-client