This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft File: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json) Hash identifier: kXj1Trf1nVto3qSB5ow8cTswDj7za0HOPoERkkSK7A8= Subject key identifier: E5:EC:9F:E9:75:2C:B4:1C:83:7A:B9:89:1B:B7:74:31:90:43:2B:84 Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B Certificate issuer: /CN=555988478690ad8d81149aa5c4cae75af5385f1b Certificate serial: 019AF389C0C70BCAEC3E6D17C4924437C6FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft Manifest number: 095E Signing time: Sat 06 Dec 2025 12:01:22 +0000 Manifest this update: Sat 06 Dec 2025 12:01:22 +0000 Manifest next update: Sun 07 Dec 2025 12:01:22 +0000 Files and hashes: 1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: TwH4oBP0doru2nSRxjH7PKfjby2gn7To6jXeRIVb5mg=) 2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c0:c7:0b:ca:ec:3e:6d:17:c4:92:44:37:c6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b Validity Not Before: Dec 6 12:01:22 2025 GMT Not After : Dec 7 12:01:22 2025 GMT Subject: CN=e5ec9fe9752cb41c837ab9891bb7743190432b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:f5:d7:fc:39:00:47:9c:d5:27:31:79:f8: 47:be:e8:a9:3f:1e:4f:e1:03:39:6f:74:8f:ef:92: 45:6e:44:93:cf:bc:9c:46:94:31:31:20:e7:37:28: e0:d2:c9:04:3c:b8:cc:d4:c9:39:ea:d6:11:0b:44: fb:72:0f:f3:a8:6f:35:bb:07:d4:52:5c:13:0a:57: 98:52:40:2c:a3:eb:ac:5d:2d:da:31:4c:50:27:73: 50:49:29:9e:99:bf:63:c4:4c:be:05:2f:3b:da:ea: 4e:ce:91:4c:6a:7f:21:49:42:c5:b3:e4:34:a9:31: 69:8a:84:c1:d2:d0:7c:52:7e:35:fc:4a:32:c3:0b: e3:7d:e7:19:0a:d1:b4:93:ca:4c:54:73:97:41:51: 07:6c:3b:00:3e:21:96:4c:f1:6c:53:8c:4c:90:b6: 38:8e:33:8b:4f:2f:53:bb:1d:2b:74:75:37:5f:f7: 19:11:d1:60:5b:83:5e:40:38:3e:cb:0e:8b:cb:54: 27:5e:d4:8c:28:61:f8:b8:24:cc:43:08:23:26:a3: db:b0:d0:92:5c:22:80:4e:ae:30:a2:23:80:06:19: fe:bf:39:07:43:67:58:d1:81:e1:f2:f9:30:14:cf: 52:b3:ce:49:af:90:0a:3b:e9:25:24:1a:a6:ca:0e: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EC:9F:E9:75:2C:B4:1C:83:7A:B9:89:1B:B7:74:31:90:43:2B:84 X509v3 Authority Key Identifier: keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c8:64:32:8d:65:a1:db:4c:79:3a:20:eb:d1:bd:4b:ac:7f: 60:18:38:83:39:e4:ba:a3:7d:d5:a4:11:1b:63:9d:c1:e9:cc: 1c:8e:2f:ba:d2:bc:c2:1b:a8:5b:bc:0b:e9:2b:a5:df:cf:b9: 0f:42:e9:cc:68:ae:e9:eb:dc:fa:d7:bf:f4:86:30:b3:93:34: c5:42:5e:99:f5:a6:a3:cd:fb:e0:95:d4:fe:64:43:31:5d:fd: ab:d4:a1:6a:9f:09:b6:91:bc:b8:e5:e0:81:1d:0a:a7:09:43: 26:08:a4:24:9c:30:db:03:eb:b5:54:be:89:ba:89:a1:f8:67: 78:76:ae:e4:d2:73:bf:19:21:74:70:a7:89:f6:88:dd:b7:8c: 3f:a6:71:eb:78:04:9c:97:18:b1:64:10:35:77:23:cb:f7:cc: 1b:5c:67:3d:61:63:54:b8:be:ac:94:43:46:ef:17:e3:f9:4d: 91:af:03:92:69:fd:f4:d7:c6:f2:17:41:84:57:c6:4c:60:ab: d5:d1:5a:86:ef:8c:b7:42:99:d7:91:81:4c:a8:e3:ea:47:77: f2:09:76:9e:5d:7d:45:f6:f0:8d:4c:c3:e6:31:84:6d:45:82: c9:58:d8:0a:e3:12:11:ac:57:1a:2a:74:4a:45:62:04:37:f8: 54:9d:d5:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicDHC8rsPm0XxJJEN8b8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NTk4ODQ3ODY5MGFkOGQ4MTE0OWFhNWM0Y2FlNzVhZjUz ODVmMWIwHhcNMjUxMjA2MTIwMTIyWhcNMjUxMjA3MTIwMTIyWjAzMTEwLwYDVQQD EyhlNWVjOWZlOTc1MmNiNDFjODM3YWI5ODkxYmI3NzQzMTkwNDMyYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXr11/w5AEec1ScxefhHvuipPx5P 4QM5b3SP75JFbkSTz7ycRpQxMSDnNyjg0skEPLjM1Mk56tYRC0T7cg/zqG81uwfU UlwTCleYUkAso+usXS3aMUxQJ3NQSSmemb9jxEy+BS872upOzpFMan8hSULFs+Q0 qTFpioTB0tB8Un41/EoywwvjfecZCtG0k8pMVHOXQVEHbDsAPiGWTPFsU4xMkLY4 jjOLTy9Tux0rdHU3X/cZEdFgW4NeQDg+yw6Ly1QnXtSMKGH4uCTMQwgjJqPbsNCS XCKATq4woiOABhn+vzkHQ2dY0YHh8vkwFM9Ss85Jr5AKO+klJBqmyg4UNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXsn+l1LLQcg3q5iRu3dDGQQyuEMB8GA1UdIwQY MBaAFFVZiEeGkK2NgRSapcTK51r1OF8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt OGQxZGE5ZjM4YTBiLzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi LzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8hkMo1l odtMeTog69G9S6x/YBg4gznkuqN91aQRG2OdwenMHI4vutK8whuoW7wL6Sul38+5 D0LpzGiu6evc+te/9IYws5M0xUJemfWmo8374JXU/mRDMV39q9Shap8JtpG8uOXg gR0KpwlDJgikJJww2wPrtVS+ibqJofhneHau5NJzvxkhdHCnifaI3beMP6Zx63gE nJcYsWQQNXcjy/fMG1xnPWFjVLi+rJRDRu8X4/lNka8Dkmn99NfG8hdBhFfGTGCr 1dFahu+Mt0KZ15GBTKjj6kd38gl2nl19RfbwjUzD5jGEbUWCyVjYCuMSEaxXGip0 SkViBDf4VJ3VcA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:22 2025 by rpki-client