This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json) Hash identifier: b9tWFAlyJf6ivQvVnPTdQlB7Loqbz9tMQWBQiNWUD+8= Subject key identifier: 4A:1C:3D:58:37:C0:38:77:74:CD:72:B4:80:4E:56:82:9A:84:8F:60 Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6 Certificate serial: 019AF19B005115B0CDAA56880FDCDACBA939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft Manifest number: 0595 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: bVIQzs7C2yIJ8tRTvCv6D7CjdONkStqURjKrthVJ3es=) 2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:00:51:15:b0:cd:aa:56:88:0f:dc:da:cb:a9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=4a1c3d5837c0387774cd72b4804e56829a848f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:a9:e6:5a:3f:92:82:4a:28:c0:86:26:42: a1:7a:97:59:18:db:23:04:a1:3e:d8:0c:98:06:e6: 29:d6:b5:68:8c:ca:8b:0d:38:1e:48:12:4c:f0:6f: 46:7f:9b:33:89:62:c5:0b:dc:d6:17:93:d8:6d:d4: d0:70:69:09:26:18:f2:e4:b4:83:fa:24:c7:44:9a: 93:2f:3f:d0:4d:c9:84:9f:ae:70:3a:bf:5f:9c:97: ea:4e:56:fe:33:56:57:a2:f4:5f:e8:08:e5:73:6e: ba:35:b1:c7:d5:a6:fb:0a:f2:ba:d2:fd:e8:da:d0: 26:2e:cb:a9:43:35:b1:c1:17:a1:00:d1:ee:3e:38: 27:ba:4c:78:e5:58:c7:7e:75:ac:59:5c:a1:b2:98: 00:eb:12:e7:5c:a1:11:0e:1b:20:67:d5:ce:a3:6f: a1:a6:ea:11:aa:52:96:12:89:5c:d3:ab:41:85:ef: f6:63:1c:bc:7f:7e:ac:3a:cd:be:1f:ac:35:97:ba: 87:fb:e7:1b:07:2b:6a:46:49:6d:2c:bf:aa:ea:e6: 43:e7:90:30:ba:1a:93:4f:c6:92:43:54:f6:d2:5b: 57:f0:79:e7:0c:ae:06:a4:9f:42:7e:1e:7c:67:d5: 9d:96:60:93:47:d0:46:91:41:fc:dc:53:fc:a2:66: 4e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1C:3D:58:37:C0:38:77:74:CD:72:B4:80:4E:56:82:9A:84:8F:60 X509v3 Authority Key Identifier: keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2a:7c:17:64:61:2a:b2:56:d0:27:9e:22:b9:36:76:b8:dc: ed:76:9c:26:a6:de:3a:74:a5:af:eb:2e:64:52:9f:9d:e5:12: 5e:f3:a5:d7:28:43:dc:c9:97:06:32:53:2c:18:9c:c1:43:72: 27:80:0e:3e:b4:4b:f3:3d:e7:3d:6e:08:55:fe:f0:21:ad:fc: b7:18:9f:df:4f:14:91:61:e1:9b:13:ae:78:0c:bd:41:9a:34: 17:b9:12:f5:99:16:ce:a8:9e:92:47:95:33:32:c0:a3:04:12: ae:06:12:68:c8:0d:e9:58:ea:62:e6:95:48:e8:37:fc:b1:df: bb:71:d3:2e:36:4c:09:05:f4:f2:4c:b2:ac:a5:3e:ef:5b:fe: 71:e1:6c:25:45:4f:64:2f:f5:b0:06:a0:d0:08:a6:ed:a5:35: 71:2b:2a:ea:f5:28:3c:48:05:e1:e1:c5:42:69:92:b7:fb:51: 50:41:e8:ee:80:c6:5d:fe:93:33:8a:7a:25:ea:bb:fd:95:2d: 7b:cc:ee:66:3d:95:51:da:17:b2:2c:f1:34:df:c3:5b:f2:63: 4e:39:9d:66:cb:7f:e9:96:fc:94:3d:d4:a5:80:31:61:f9:57: d5:3d:f5:6d:c9:e7:f5:75:52:7d:0f:a2:81:83:2c:fe:75:80: 9e:29:f5:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwBRFbDNqlaID9zay6k5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Mjk4NjQ4NGVjZDAxNTg1N2ViZjYxZGM0YjM2MTMwMmM3 OTE2YzYwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD Eyg0YTFjM2Q1ODM3YzAzODc3NzRjZDcyYjQ4MDRlNTY4MjlhODQ4ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk86p5lo/koJKKMCGJkKhepdZGNsj BKE+2AyYBuYp1rVojMqLDTgeSBJM8G9Gf5sziWLFC9zWF5PYbdTQcGkJJhjy5LSD +iTHRJqTLz/QTcmEn65wOr9fnJfqTlb+M1ZXovRf6Ajlc266NbHH1ab7CvK60v3o 2tAmLsupQzWxwRehANHuPjgnukx45VjHfnWsWVyhspgA6xLnXKERDhsgZ9XOo2+h puoRqlKWEolc06tBhe/2Yxy8f36sOs2+H6w1l7qH++cbBytqRkltLL+q6uZD55Aw uhqTT8aSQ1T20ltX8HnnDK4GpJ9Cfh58Z9WdlmCTR9BGkUH83FP8omZODwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEocPVg3wDh3dM1ytIBOVoKahI9gMB8GA1UdIwQY MBaAFFUphkhOzQFYV+v2HcSzYTAseRbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMt YTE2NDg4NmZmYzIwLzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMtYTE2NDg4NmZmYzIw LzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSp8F2Rh KrJW0CeeIrk2drjc7XacJqbeOnSlr+suZFKfneUSXvOl1yhD3MmXBjJTLBicwUNy J4AOPrRL8z3nPW4IVf7wIa38txif308UkWHhmxOueAy9QZo0F7kS9ZkWzqiekkeV MzLAowQSrgYSaMgN6VjqYuaVSOg3/LHfu3HTLjZMCQX08kyyrKU+71v+ceFsJUVP ZC/1sAag0Aim7aU1cSsq6vUoPEgF4eHFQmmSt/tRUEHo7oDGXf6TM4p6Jeq7/ZUt e8zuZj2VUdoXsizxNN/DW/JjTjmdZst/6Zb8lD3UpYAxYflX1T31bcnn9XVSfQ+i gYMs/nWAnin1aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:44 2025 by rpki-client