This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft File: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json) Hash identifier: AOhyOazVQeF2Wa9nQuWyF72Al0ktWOBiFPbYgjyM+VY= Subject key identifier: 61:9D:EE:07:7C:79:F7:8B:4A:08:64:CE:94:D2:1C:18:E5:BA:07:E8 Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d Certificate serial: 019AF42E309620F3E6E22FD4BC286BBC086B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft Manifest number: 059A Signing time: Sat 06 Dec 2025 15:00:59 +0000 Manifest this update: Sat 06 Dec 2025 15:00:59 +0000 Manifest next update: Sun 07 Dec 2025 15:00:59 +0000 Files and hashes: 1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=) 2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: PzOPNvzZS1yphHq8J5veEBMHjfk6vF8BH9Gpp1P8jzk=) 3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:30:96:20:f3:e6:e2:2f:d4:bc:28:6b:bc:08:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d Validity Not Before: Dec 6 15:00:59 2025 GMT Not After : Dec 7 15:00:59 2025 GMT Subject: CN=619dee077c79f78b4a0864ce94d21c18e5ba07e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:32:31:1e:74:ba:aa:5d:0e:43:84:49:c0: 0b:28:34:f0:c6:ef:bc:86:7d:38:64:e8:f4:41:06: ff:56:3d:f4:8a:db:dc:4a:6d:3d:84:01:7a:80:35: 93:53:e3:2b:a2:48:a2:2f:47:9a:4f:67:3e:f5:66: b4:2e:56:fb:a2:1e:0b:d4:2c:1a:f4:68:2e:de:69: 3f:dc:18:6c:f9:c9:62:17:74:7b:75:a1:a4:50:fa: ce:d4:08:cd:f3:c9:ce:fe:65:c9:4b:eb:4f:de:bc: 0c:33:59:f1:b5:ef:94:a6:0c:48:c0:02:77:19:d4: af:ca:9c:b5:7f:ef:0c:66:ec:bb:bf:85:a9:41:08: b2:bc:3b:7a:27:09:f4:20:85:8e:d0:2b:d3:96:25: 42:d8:aa:b7:dd:c7:71:dc:dd:57:61:c7:c4:cc:1b: 5a:e4:0f:04:1c:7b:b9:78:1b:3e:61:38:0d:66:b3: a7:0f:07:98:5e:18:60:13:97:51:1e:f6:bb:ef:b3: 52:20:1f:bf:98:00:fb:34:83:cc:78:e2:d0:4b:ac: ec:b2:02:b8:67:60:e3:02:1b:b2:74:da:48:47:7d: 1a:30:07:cd:58:bd:19:32:00:ee:0b:14:14:6f:27: 25:db:a8:a4:1c:fd:d7:82:b3:88:04:25:c4:c9:bd: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:EE:07:7C:79:F7:8B:4A:08:64:CE:94:D2:1C:18:E5:BA:07:E8 X509v3 Authority Key Identifier: keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b6:0d:63:d4:91:0f:46:b2:2d:08:72:bd:5d:9a:db:4a:04: 60:77:f0:f7:41:70:2f:81:ce:6b:87:c8:1f:5f:f6:e3:54:53: d4:89:b4:5d:14:e5:1c:0f:01:1a:a3:01:62:f2:41:23:e3:bb: c2:1e:06:53:40:0f:c7:da:ed:51:ee:08:c3:be:8d:7e:10:9f: e1:f4:87:5b:5d:f6:b9:c4:88:82:f1:8f:d4:74:d6:9a:ec:fa: 7c:f9:69:36:fe:21:2b:47:3c:10:46:ef:4e:41:78:3e:27:db: db:61:08:57:bc:ff:8d:1b:cd:96:2c:ef:92:9f:26:e5:ee:57: 83:82:92:c6:90:3e:e2:82:3e:fb:59:da:17:12:ac:5c:b9:15: 6e:e1:34:5c:19:d9:22:74:f6:d0:02:b8:4a:a2:4f:31:77:98: f8:af:ba:6a:34:30:46:94:9a:eb:23:2d:7f:50:a0:c5:61:fa: c4:99:16:78:f7:2d:65:2e:01:bf:3b:7e:fc:da:dd:f6:3f:f7: c1:b4:e8:59:cf:e9:93:21:03:18:4f:21:aa:12:89:a8:31:53: 8d:41:07:22:44:7c:85:e8:83:30:f2:42:99:1a:d5:f7:ef:4f: e9:0e:69:6e:d7:68:b7:b8:67:16:7d:68:88:1b:8a:63:60:2c: 3e:dc:1b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjCWIPPm4i/UvChrvAhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Yzk2MjA1OTNjYzRmY2E4NTY3YzI0NDI1Nzg2MWE1MjJm NzM1OWQwHhcNMjUxMjA2MTUwMDU5WhcNMjUxMjA3MTUwMDU5WjAzMTEwLwYDVQQD Eyg2MTlkZWUwNzdjNzlmNzhiNGEwODY0Y2U5NGQyMWMxOGU1YmEwN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB8yMR50uqpdDkOEScALKDTwxu+8 hn04ZOj0QQb/Vj30itvcSm09hAF6gDWTU+MrokiiL0eaT2c+9Wa0Llb7oh4L1Cwa 9Ggu3mk/3Bhs+cliF3R7daGkUPrO1AjN88nO/mXJS+tP3rwMM1nxte+UpgxIwAJ3 GdSvypy1f+8MZuy7v4WpQQiyvDt6Jwn0IIWO0CvTliVC2Kq33cdx3N1XYcfEzBta 5A8EHHu5eBs+YTgNZrOnDweYXhhgE5dRHva777NSIB+/mAD7NIPMeOLQS6zssgK4 Z2DjAhuydNpIR30aMAfNWL0ZMgDuCxQUbycl26ikHP3XgrOIBCXEyb1koQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGd7gd8efeLSghkzpTSHBjlugfoMB8GA1UdIwQY MBaAFFXJYgWTzE/KhWfCRCV4YaUi9zWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMt MzVjMDUwMmEwYmI3LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMtMzVjMDUwMmEwYmI3 LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7YNY9SR D0ayLQhyvV2a20oEYHfw90FwL4HOa4fIH1/241RT1Im0XRTlHA8BGqMBYvJBI+O7 wh4GU0APx9rtUe4Iw76NfhCf4fSHW132ucSIgvGP1HTWmuz6fPlpNv4hK0c8EEbv TkF4Pifb22EIV7z/jRvNlizvkp8m5e5Xg4KSxpA+4oI++1naFxKsXLkVbuE0XBnZ InT20AK4SqJPMXeY+K+6ajQwRpSa6yMtf1CgxWH6xJkWePctZS4Bvzt+/Nrd9j/3 wbToWc/pkyEDGE8hqhKJqDFTjUEHIkR8heiDMPJCmRrV9+9P6Q5pbtdot7hnFn1o iBuKY2AsPtwbFg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:20:15 2025 by rpki-client