This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json) Hash identifier: yeep6vYSfUwtr1qs4EqzYnmdhlE/z/Tu+KfE4HGfKDs= Subject key identifier: 3C:B1:97:57:69:06:44:73:7C:15:AE:B8:1A:5B:C7:9C:E6:C7:64:34 Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6 Certificate serial: 019B2B8A6B2AA17289BD218B9139D4A990E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft Manifest number: 05B3 Signing time: Wed 17 Dec 2025 09:00:50 +0000 Manifest this update: Wed 17 Dec 2025 09:00:50 +0000 Manifest next update: Thu 18 Dec 2025 09:00:50 +0000 Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: 1P7oRSpHNLHuJp1Y3EAkioPkbRbfzjbxEgqXEtAVKDk=) 2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:6b:2a:a1:72:89:bd:21:8b:91:39:d4:a9:90:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6 Validity Not Before: Dec 17 09:00:50 2025 GMT Not After : Dec 18 09:00:50 2025 GMT Subject: CN=3cb19757690644737c15aeb81a5bc79ce6c76434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:3a:a0:29:09:d3:08:3a:c3:82:a7:7c:21: 03:de:a9:30:88:6b:c8:c6:da:23:01:7e:b2:7f:a3: b8:3f:b9:36:7e:31:b8:d5:99:47:1a:b7:6a:b4:6c: 48:dc:ba:71:4f:2e:12:ee:c3:25:70:d6:91:59:13: db:53:ae:16:df:42:3b:98:e6:6d:d8:f4:0d:37:6d: d9:b5:c3:03:4c:32:70:41:f8:ea:05:f4:16:70:17: 80:90:02:ef:69:3b:68:68:f6:2c:84:87:e5:99:f2: 51:f0:64:50:71:bd:26:86:a8:0b:94:3a:49:4f:63: b1:14:df:63:da:ec:4b:b5:28:87:31:15:2d:7d:a6: 1e:63:48:ea:46:ec:7d:98:69:7c:3a:45:33:2d:61: 13:89:05:2a:d7:14:7e:2a:3c:36:84:dc:64:35:ea: c4:5a:74:3b:37:96:fe:57:66:b8:73:33:c7:66:7d: a6:64:60:3e:b9:1c:dd:38:65:31:5f:a2:15:37:e2: cc:b0:59:1e:c2:b8:0e:c8:ad:ab:73:7e:f3:be:34: 98:ab:29:ee:9c:ae:37:99:a0:e1:46:01:7d:a6:fd: 78:0e:27:0b:23:45:0a:87:c6:ac:7e:f8:26:cb:ec: d0:e7:54:41:14:94:77:a5:ae:6c:fd:98:93:c9:a5: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:97:57:69:06:44:73:7C:15:AE:B8:1A:5B:C7:9C:E6:C7:64:34 X509v3 Authority Key Identifier: keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9b:ad:01:69:2f:66:76:0e:98:c8:e9:90:14:66:9e:ae:8d: f6:58:a7:73:7d:96:00:93:c5:3f:4f:93:c4:8d:af:ae:d4:c2: 9a:0d:bb:d8:fc:c9:8b:cf:69:33:0f:28:82:bc:8a:f1:23:75: 5f:98:fa:5a:5b:81:cb:b8:65:e1:42:dd:a0:b5:e1:a5:52:2c: f5:9a:6f:c0:24:ba:f5:13:c7:16:92:5f:61:99:c3:50:7b:10: ed:4c:1d:c6:ae:33:67:17:a5:ce:f4:f3:00:d0:3e:ad:b4:1b: b9:93:d3:1e:ac:a6:b8:b7:1e:f2:a8:f6:ee:d6:ad:55:8f:8d: 2a:d9:15:16:78:0e:b1:34:b7:81:42:45:5f:01:37:ed:66:0f: 5b:be:28:2d:c0:6d:27:d0:ef:be:39:8a:eb:a2:bb:0f:50:4c: 70:ff:4f:d4:a2:79:9c:28:cc:03:50:98:b6:bd:99:73:d1:76: ed:85:94:f3:10:2f:ea:2f:01:c6:32:b1:b5:bb:62:da:5f:52: c2:f2:71:0b:a5:14:84:79:a2:ee:64:7a:7f:a5:b0:61:f3:ff: 26:5a:dc:e9:b1:90:ac:65:6d:3e:ef:af:97:f1:be:d8:e9:0b: c9:b8:47:51:89:4f:47:4b:91:f9:3a:d5:34:1e:22:bd:8f:43: 45:01:ac:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrimsqoXKJvSGLkTnUqZDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Mjk4NjQ4NGVjZDAxNTg1N2ViZjYxZGM0YjM2MTMwMmM3 OTE2YzYwHhcNMjUxMjE3MDkwMDUwWhcNMjUxMjE4MDkwMDUwWjAzMTEwLwYDVQQD EygzY2IxOTc1NzY5MDY0NDczN2MxNWFlYjgxYTViYzc5Y2U2Yzc2NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPY6oCkJ0wg6w4KnfCED3qkwiGvI xtojAX6yf6O4P7k2fjG41ZlHGrdqtGxI3LpxTy4S7sMlcNaRWRPbU64W30I7mOZt 2PQNN23ZtcMDTDJwQfjqBfQWcBeAkALvaTtoaPYshIflmfJR8GRQcb0mhqgLlDpJ T2OxFN9j2uxLtSiHMRUtfaYeY0jqRux9mGl8OkUzLWETiQUq1xR+Kjw2hNxkNerE WnQ7N5b+V2a4czPHZn2mZGA+uRzdOGUxX6IVN+LMsFkewrgOyK2rc37zvjSYqynu nK43maDhRgF9pv14DicLI0UKh8asfvgmy+zQ51RBFJR3pa5s/ZiTyaX6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyxl1dpBkRzfBWuuBpbx5zmx2Q0MB8GA1UdIwQY MBaAFFUphkhOzQFYV+v2HcSzYTAseRbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMt YTE2NDg4NmZmYzIwLzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMtYTE2NDg4NmZmYzIw LzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZutAWkv ZnYOmMjpkBRmnq6N9linc32WAJPFP0+TxI2vrtTCmg272PzJi89pMw8ogryK8SN1 X5j6WluBy7hl4ULdoLXhpVIs9ZpvwCS69RPHFpJfYZnDUHsQ7Uwdxq4zZxelzvTz ANA+rbQbuZPTHqymuLce8qj27tatVY+NKtkVFngOsTS3gUJFXwE37WYPW74oLcBt J9DvvjmK66K7D1BMcP9P1KJ5nCjMA1CYtr2Zc9F27YWU8xAv6i8BxjKxtbti2l9S wvJxC6UUhHmi7mR6f6WwYfP/Jlrc6bGQrGVtPu+vl/G+2OkLybhHUYlPR0uR+TrV NB4ivY9DRQGsXw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:36:14 2025 by rpki-client