This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json) Hash identifier: t/uECj4iNII4ZxE9G6BxvMaGctqDBp3nHi/E0/F33Jw= Subject key identifier: 18:4E:B5:BE:25:9C:44:C6:4D:7C:26:F3:E6:5C:9E:B5:1F:62:6A:51 Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb Certificate serial: 019AF61C6230429CCEDC1BE71A89BA034378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft Manifest number: 069F Signing time: Sun 07 Dec 2025 00:00:46 +0000 Manifest this update: Sun 07 Dec 2025 00:00:46 +0000 Manifest next update: Mon 08 Dec 2025 00:00:46 +0000 Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=) 2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: jG9H9+C+54Uu6YG2dOQyzA7NHwc3QBrl8y4HEZIE7TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:62:30:42:9c:ce:dc:1b:e7:1a:89:ba:03:43:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb Validity Not Before: Dec 7 00:00:46 2025 GMT Not After : Dec 8 00:00:46 2025 GMT Subject: CN=184eb5be259c44c64d7c26f3e65c9eb51f626a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:7d:70:9e:b1:d6:53:2c:29:81:a3:3f:df: 7e:54:bb:12:e1:ae:58:73:1d:1e:8d:d2:dd:6e:74: d2:52:03:93:62:a1:e1:70:a9:1c:73:50:89:aa:da: 62:9b:ae:2d:94:5d:2d:85:11:db:f6:51:aa:ee:a7: cb:87:2a:bd:c0:f3:90:c5:14:b0:67:76:4a:56:95: 5b:73:73:4d:ae:61:93:20:c4:05:13:34:1c:7c:eb: 07:56:54:86:6a:b4:26:a6:5a:1d:99:ab:f7:f2:a4: a2:86:07:85:c3:f5:f2:fa:e8:3c:27:2d:f8:5a:60: 8e:cf:d1:71:1d:e5:c3:62:c3:5e:7f:df:08:57:bb: db:a1:cf:e8:eb:50:57:35:fc:0a:e2:72:3e:7e:88: ef:de:af:29:23:73:fd:54:cc:2e:7c:14:00:22:6e: 48:bc:40:32:bb:79:42:38:aa:92:59:a6:9a:5c:14: f9:72:1f:da:61:8c:51:51:a9:d8:b1:46:94:bd:f1: b4:15:f7:97:81:09:ea:3e:4a:53:0c:2c:56:d5:36: ec:60:5e:93:2b:66:27:c6:29:d6:ce:66:5a:90:5f: 46:97:b7:96:f7:bc:48:fa:59:9b:cd:90:1c:fa:82: e9:47:ae:1c:8f:af:03:0d:a0:9a:75:b0:08:77:52: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:B5:BE:25:9C:44:C6:4D:7C:26:F3:E6:5C:9E:B5:1F:62:6A:51 X509v3 Authority Key Identifier: keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:48:98:db:9e:10:47:58:f6:2e:30:9b:34:f8:9b:86:57:df: d0:f3:54:17:da:e2:d0:10:3b:86:7a:da:8d:f8:6f:69:a9:9f: 21:fa:7e:89:71:4c:c7:c5:24:ce:9f:7f:c9:dc:19:02:36:53: 5e:60:da:d6:8f:da:2c:d6:ce:a3:21:a1:42:af:f7:8e:45:49: 2c:fe:e9:4c:c2:08:6b:2c:a8:28:77:c5:31:10:01:29:af:21: e5:8f:f5:c2:87:b1:48:8f:22:20:c7:c7:05:9f:02:a9:97:59: a8:36:42:71:bc:94:1e:d9:02:0d:7a:17:fb:18:39:69:f2:3c: ce:0b:62:e0:cc:1d:80:e8:aa:d0:3e:d5:c2:91:f0:7a:73:43: 1c:c5:20:c7:d3:76:7a:75:7c:29:56:47:2c:b0:9e:c3:a5:cb: 41:fc:ba:1e:08:5a:ca:b2:28:e8:bf:03:fb:71:76:69:1f:e1: c5:8e:93:a8:9a:ad:e1:e6:f6:c4:94:37:ae:9a:7a:b7:69:c9: 2a:96:a9:d8:08:2e:20:fa:96:63:1a:25:be:1f:4f:c6:1a:a5: d9:18:a1:db:b1:ca:78:56:f4:b6:16:ba:1a:81:ae:8d:d6:50: a4:d9:cd:74:e0:7e:0f:d0:92:67:5b:2b:11:c4:17:0c:5b:3d: 60:b7:e4:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGIwQpzO3BvnGom6A0N4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlY2I1NTI2ZTg0MWU3NzBjYjU1NjRmMzA0Y2M2Njk2ZWFi MWU0YmIwHhcNMjUxMjA3MDAwMDQ2WhcNMjUxMjA4MDAwMDQ2WjAzMTEwLwYDVQQD EygxODRlYjViZTI1OWM0NGM2NGQ3YzI2ZjNlNjVjOWViNTFmNjI2YTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKp9cJ6x1lMsKYGjP99+VLsS4a5Y cx0ejdLdbnTSUgOTYqHhcKkcc1CJqtpim64tlF0thRHb9lGq7qfLhyq9wPOQxRSw Z3ZKVpVbc3NNrmGTIMQFEzQcfOsHVlSGarQmplodmav38qSihgeFw/Xy+ug8Jy34 WmCOz9FxHeXDYsNef98IV7vboc/o61BXNfwK4nI+fojv3q8pI3P9VMwufBQAIm5I vEAyu3lCOKqSWaaaXBT5ch/aYYxRUanYsUaUvfG0FfeXgQnqPkpTDCxW1TbsYF6T K2YnxinWzmZakF9Gl7eW97xI+lmbzZAc+oLpR64cj68DDaCadbAId1J87wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhOtb4lnETGTXwm8+ZcnrUfYmpRMB8GA1UdIwQY MBaAFL7LVSboQedwy1Vk8wTMZpbqseS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2Qt YTIxMjdjMmFhMWIzLzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi85ZDY5OGQtZDI3Ny00OTdmLTgzM2QtYTIxMjdjMmFhMWIz LzEvdnN0Vkp1aEI1M0RMVldUekJNeG1sdXF4NUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0iY254Q R1j2LjCbNPibhlff0PNUF9ri0BA7hnrajfhvaamfIfp+iXFMx8Ukzp9/ydwZAjZT XmDa1o/aLNbOoyGhQq/3jkVJLP7pTMIIayyoKHfFMRABKa8h5Y/1woexSI8iIMfH BZ8CqZdZqDZCcbyUHtkCDXoX+xg5afI8zgti4MwdgOiq0D7VwpHwenNDHMUgx9N2 enV8KVZHLLCew6XLQfy6HghayrIo6L8D+3F2aR/hxY6TqJqt4eb2xJQ3rpp6t2nJ Kpap2AguIPqWYxolvh9Pxhql2Rih27HKeFb0tha6GoGujdZQpNnNdOB+D9CSZ1sr EcQXDFs9YLfkdw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:52:24 2025 by rpki-client