This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json) Hash identifier: KIy6nfACtMKNKNZ0kT/Z4BHs8/cUAckXNZtyStWry1Y= Subject key identifier: DB:4A:B6:E5:82:87:D2:84:3F:33:9F:CE:F9:84:52:8D:DA:86:90:32 Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8 Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8 Certificate serial: 019AF1640F13A19D928F656B801308DF4F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:00:57 +0000 Manifest this update: Sat 06 Dec 2025 02:00:57 +0000 Manifest next update: Sun 07 Dec 2025 02:00:57 +0000 Files and hashes: 1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=) 2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: 8qAiUYERKtbNO8ORxaHLQ2D+bzQxPV2/rY+/W4C0C68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0f:13:a1:9d:92:8f:65:6b:80:13:08:df:4f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8 Validity Not Before: Dec 6 02:00:57 2025 GMT Not After : Dec 7 02:00:57 2025 GMT Subject: CN=db4ab6e58287d2843f339fcef984528dda869032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:c5:94:f0:ae:08:02:4e:7c:a8:4b:d4:04: 86:4c:71:d4:2d:7d:72:1c:66:8c:60:02:34:28:cd: 41:5a:28:ee:41:d4:84:d0:2d:4e:76:f7:6d:41:a7: ac:b4:ce:3a:fa:1a:73:a5:89:39:ea:e1:f8:9e:b6: 22:00:c9:ea:5b:72:be:4a:cd:47:2e:91:79:b2:80: 99:3c:97:08:e7:c4:20:8c:22:b3:cc:89:8a:a1:d0: da:1f:53:7b:5e:90:3d:14:f7:2b:19:94:6a:d5:6e: 49:5a:d8:4d:3e:61:2b:82:0b:55:a1:d2:90:6c:8d: 86:a7:be:55:ae:00:a9:60:7f:67:ca:e9:85:8c:14: 53:50:a8:1d:96:38:a6:ec:ab:b1:6c:93:84:f0:f4: cf:b2:9b:68:cf:e4:35:c5:47:26:54:74:e8:ad:b4: 4a:40:00:bb:f5:12:af:89:36:99:90:41:de:a3:f6: 20:81:6d:de:f9:7b:24:7f:af:06:99:b1:97:3f:e0: ab:c7:b9:75:8d:0a:47:15:48:13:ad:68:43:85:cb: b7:37:24:f6:cd:0a:25:17:c1:d4:9c:7e:17:01:dc: 48:37:f7:7d:d3:75:1e:25:4e:c3:fa:f0:cb:2d:46: 67:23:ba:1f:40:76:c4:34:59:6e:bc:00:aa:30:1f: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4A:B6:E5:82:87:D2:84:3F:33:9F:CE:F9:84:52:8D:DA:86:90:32 X509v3 Authority Key Identifier: keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:6e:67:a3:60:1f:99:03:27:fc:1e:05:47:59:6c:f3:00:2d: 4f:f9:9d:38:11:34:03:b8:9b:d3:a0:fe:0f:60:aa:e7:03:81: 06:c6:6f:c6:e8:7e:07:31:c9:35:cc:36:c8:62:50:3b:76:b7: 32:c9:e7:c7:0a:b4:06:45:ec:17:e9:ec:c9:53:00:fa:9f:14: 86:f9:26:72:00:07:e9:1c:61:75:3d:15:53:ff:58:73:93:0f: f3:b3:61:f7:cd:cd:58:4f:a3:5f:3f:9a:ad:ed:6f:84:19:3f: 89:71:31:f7:a3:fb:09:69:88:0e:60:f1:a1:67:4e:67:96:11: fa:04:fc:60:d7:e8:07:b5:e8:b2:4c:e1:f4:8d:c6:3e:59:27: 8b:1d:04:0a:20:6a:c5:3e:87:61:d6:4a:73:3b:b9:37:f2:28: 44:2a:30:ea:5f:c9:16:13:9d:7f:6f:6a:84:b1:26:44:f9:ca: e2:d1:09:32:91:d0:68:79:27:e2:e6:fe:45:6f:54:a9:d4:7b: ec:99:1a:71:a6:1e:54:ff:76:51:38:1b:2c:94:1f:0b:b2:96: 83:a1:50:0e:ff:ab:1e:c2:1f:a6:53:ff:54:f6:66:00:ee:7e: fa:56:06:db:fe:7b:28:36:40:62:8b:5b:ec:00:c2:76:67:f4: 63:aa:d4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZA8ToZ2Sj2VrgBMI308TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YTAyMmRlYjA5MjhmNWQxYTBhNWZiMDBlOTZjYWQ0Yzdk OTExZDgwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD EyhkYjRhYjZlNTgyODdkMjg0M2YzMzlmY2VmOTg0NTI4ZGRhODY5MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMrFlPCuCAJOfKhL1ASGTHHULX1y HGaMYAI0KM1BWijuQdSE0C1OdvdtQaestM46+hpzpYk56uH4nrYiAMnqW3K+Ss1H LpF5soCZPJcI58QgjCKzzImKodDaH1N7XpA9FPcrGZRq1W5JWthNPmErggtVodKQ bI2Gp75VrgCpYH9nyumFjBRTUKgdljim7KuxbJOE8PTPsptoz+Q1xUcmVHTorbRK QAC79RKviTaZkEHeo/YggW3e+Xskf68GmbGXP+Crx7l1jQpHFUgTrWhDhcu3NyT2 zQolF8HUnH4XAdxIN/d903UeJU7D+vDLLUZnI7ofQHbENFluvACqMB8gfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtKtuWCh9KEPzOfzvmEUo3ahpAyMB8GA1UdIwQY MBaAFFagIt6wko9dGgpfsA6WytTH2RHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFBaTNyQ1NqMTBhQ2wtd0RwYksxTWZaRWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmIyMDctZjQ3MS00YjY3LThjYjct ZTE1YTZjM2U0ZWE2LzEvVnFBaTNyQ1NqMTBhQ2wtd0RwYksxTWZaRWRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmIyMDctZjQ3MS00YjY3LThjYjctZTE1YTZjM2U0ZWE2 LzEvVnFBaTNyQ1NqMTBhQ2wtd0RwYksxTWZaRWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt25no2Af mQMn/B4FR1ls8wAtT/mdOBE0A7ib06D+D2Cq5wOBBsZvxuh+BzHJNcw2yGJQO3a3 Msnnxwq0BkXsF+nsyVMA+p8UhvkmcgAH6RxhdT0VU/9Yc5MP87Nh983NWE+jXz+a re1vhBk/iXEx96P7CWmIDmDxoWdOZ5YR+gT8YNfoB7Xoskzh9I3GPlknix0ECiBq xT6HYdZKczu5N/IoRCow6l/JFhOdf29qhLEmRPnK4tEJMpHQaHkn4ub+RW9UqdR7 7JkacaYeVP92UTgbLJQfC7KWg6FQDv+rHsIfplP/VPZmAO5++lYG2/57KDZAYotb 7ADCdmf0Y6rUkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:42 2025 by rpki-client