This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json) Hash identifier: o1fEUGOih2OmWWejWaLnnLM7XcWpWgwdi4uwPoUjaBE= Subject key identifier: 52:A5:F0:B8:34:4E:C7:F4:8F:18:76:BB:84:CE:92:64:1C:26:BA:EE Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910 Certificate serial: 019AF12E237A403F4239161699AD16BFB3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft Manifest number: 1234 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: 6k2hBM4XUhd6DA-vs8SUHNOo6k4.roa (hash: j24u1fw+wKi+GN73WExbNJpjYxAE0mjUB2p9siHDzsY=) 2: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: q4Wh+kJYvC+YzE9Wws+BQUpUk6J7w6610ekN7w7n6Kc=) 3: sxJKQqy--ePZJKy-z6ZXKspnoCU.roa (hash: viGZT8F9x3/CHDhQJKfJwFzfO7LR9KesSjHrb2YKNNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:23:7a:40:3f:42:39:16:16:99:ad:16:bf:b3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=52a5f0b8344ec7f48f1876bb84ce92641c26baee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:82:ff:d4:2d:3f:53:54:cf:2f:5e:7c:be: fc:d8:5a:04:e1:73:1f:23:d5:f0:e4:e9:95:75:21: a5:9e:4d:5a:9d:ba:0f:19:cd:dd:a0:e1:7e:27:68: ef:e1:72:c8:bd:b9:69:a0:fb:78:eb:b2:b1:9f:30: 43:8d:ef:90:e0:95:60:30:9d:f2:fe:55:fc:d2:d2: 90:4f:46:56:ef:29:51:44:66:cd:b6:00:62:f8:4e: 72:28:7a:84:51:63:dc:94:68:cf:6c:1a:02:7d:da: 0b:a3:f2:b7:a7:26:31:ff:91:b9:42:c2:95:4e:b8: d5:da:33:64:9a:ea:d1:59:5a:e0:86:11:c6:d4:ca: 77:08:5d:7b:b2:f7:05:66:39:22:06:cf:b4:8c:02: 5a:39:49:d9:64:79:51:4a:07:b6:5b:f1:8e:2b:b6: 3e:3c:09:6b:89:95:3d:f2:0f:df:23:e5:59:96:db: 7a:70:15:76:dd:31:cc:1c:c3:89:f2:3b:0a:9b:59: dc:d9:ec:af:da:ee:8b:cb:45:44:ba:1e:8b:80:05: 12:54:30:21:e2:57:cc:85:59:74:e8:bf:65:37:05: f0:b0:78:b1:51:35:13:c6:13:81:c3:bc:1b:39:03: 4c:cf:2c:ff:4f:a9:2b:21:77:26:5b:0d:58:58:d3: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:F0:B8:34:4E:C7:F4:8F:18:76:BB:84:CE:92:64:1C:26:BA:EE X509v3 Authority Key Identifier: keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f5:a3:3c:35:70:36:77:f3:24:a2:bf:56:08:42:f8:41:59: 23:e3:55:79:5b:45:28:7a:2e:1b:41:fc:3c:e4:a5:5f:2b:91: b7:84:0d:a1:97:7f:a6:ea:37:32:a6:e9:7c:3b:66:f3:68:11: 9d:da:6d:d4:8b:ce:fc:09:8f:25:32:38:bc:1b:a2:65:b7:7e: b1:1c:bc:34:3f:04:08:37:d1:a2:3e:7a:b5:1b:2b:bf:57:73: 87:93:80:b8:40:bf:db:59:b0:d6:d7:02:03:3b:71:0c:52:5b: f7:c8:32:81:45:6b:14:5e:a0:c3:cd:7d:1e:57:8f:3d:29:de: d3:60:e0:f2:50:ab:9e:af:13:6d:7a:18:67:79:42:39:71:7e: e2:30:f4:ab:a6:24:e3:39:18:1c:ba:a8:39:26:bc:96:8f:0f: 28:bc:bc:bc:ad:f5:f7:05:40:05:f5:2f:36:32:04:fb:0c:6e: 4b:db:98:97:58:36:e9:70:fc:eb:c3:d4:ad:50:91:4f:22:f0: b2:1a:27:99:db:8f:ca:38:ab:f9:a0:02:5c:1a:9b:4b:2c:f9: 59:7a:22:2d:88:21:0f:90:f7:32:0b:69:16:34:5f:c5:3a:05: e4:10:6d:67:fb:6b:17:de:d6:6f:58:37:99:1b:87:af:07:c8: 9e:d2:38:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiN6QD9CORYWma0Wv7PrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1 MzM5MTAwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD Eyg1MmE1ZjBiODM0NGVjN2Y0OGYxODc2YmI4NGNlOTI2NDFjMjZiYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/2C/9QtP1NUzy9efL782FoE4XMf I9Xw5OmVdSGlnk1anboPGc3doOF+J2jv4XLIvblpoPt467KxnzBDje+Q4JVgMJ3y /lX80tKQT0ZW7ylRRGbNtgBi+E5yKHqEUWPclGjPbBoCfdoLo/K3pyYx/5G5QsKV TrjV2jNkmurRWVrghhHG1Mp3CF17svcFZjkiBs+0jAJaOUnZZHlRSge2W/GOK7Y+ PAlriZU98g/fI+VZltt6cBV23THMHMOJ8jsKm1nc2eyv2u6Ly0VEuh6LgAUSVDAh 4lfMhVl06L9lNwXwsHixUTUTxhOBw7wbOQNMzyz/T6krIXcmWw1YWNP6/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKl8Lg0Tsf0jxh2u4TOkmQcJrruMB8GA1UdIwQY MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt MTUzZTkxODJhZjQxLzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/WjPDVw NnfzJKK/VghC+EFZI+NVeVtFKHouG0H8POSlXyuRt4QNoZd/puo3MqbpfDtm82gR ndpt1IvO/AmPJTI4vBuiZbd+sRy8ND8ECDfRoj56tRsrv1dzh5OAuEC/21mw1tcC AztxDFJb98gygUVrFF6gw819HlePPSne02Dg8lCrnq8TbXoYZ3lCOXF+4jD0q6Yk 4zkYHLqoOSa8lo8PKLy8vK319wVABfUvNjIE+wxuS9uYl1g26XD868PUrVCRTyLw shonmduPyjir+aACXBqbSyz5WXoiLYghD5D3MgtpFjRfxToF5BBtZ/trF97Wb1g3 mRuHrwfIntI4Gw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:17:40 2025 by rpki-client