This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft File: VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json) Hash identifier: +lCprCBkvbawHfDjbrT18ANp3zhHlXfBezWigwAiO4U= Subject key identifier: 4C:F4:A5:DE:3D:87:E6:F3:2A:3F:07:F8:43:00:C5:F4:1F:3D:18:72 Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 Certificate issuer: /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Certificate serial: 019AF209406CF378CF82833F6CF08DD9EC25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft Manifest number: 025F Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (hash: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=) 2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: rqiMthqWWePjc+cua2gqX6SrU1agZajUYtM4PWdELYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:40:6c:f3:78:cf:82:83:3f:6c:f0:8d:d9:ec:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=4cf4a5de3d87e6f32a3f07f84300c5f41f3d1872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:18:cf:22:bc:b7:f3:f3:bf:ba:38:ef:d3: 9d:1b:d8:a1:26:6d:90:e8:6f:51:e6:a7:92:e5:2e: 37:ca:35:2c:f9:72:0f:7c:4a:c2:c7:20:ac:0f:5b: 62:55:7b:c5:80:f0:0f:80:05:ee:cc:b4:df:cc:62: 5a:3c:86:b5:78:15:48:44:1c:29:a7:96:84:f4:8f: d4:e6:3e:00:f4:4e:4d:de:fb:3b:bf:c9:1f:47:85: e3:30:3c:04:87:46:82:60:d0:f3:ac:c3:eb:a3:1e: 88:bb:d0:9b:de:6b:8b:dd:fb:45:39:b7:4b:6b:e1: 28:37:5d:78:6c:12:3b:68:27:3a:1f:82:ad:f2:e8: 81:60:7f:78:c2:fd:99:aa:50:56:97:9e:2f:7b:e3: 13:fe:eb:f2:35:b7:16:1e:78:71:cc:54:33:60:ee: 1c:f8:5c:1b:31:7f:22:39:0b:2b:de:a7:75:6e:96: 94:af:f5:99:3b:3c:b5:6d:29:d5:98:25:9f:cc:61: 33:0c:8c:fc:a9:f6:14:81:b6:26:0e:5d:cc:6f:b9: 0d:a1:97:0e:48:f9:8b:08:80:85:bd:b2:e5:15:d5: e0:4c:5b:78:71:9b:27:72:3c:21:dc:10:c1:8b:82: 2c:b1:66:5a:85:f1:46:74:15:85:50:1a:b1:c4:c2: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F4:A5:DE:3D:87:E6:F3:2A:3F:07:F8:43:00:C5:F4:1F:3D:18:72 X509v3 Authority Key Identifier: keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:89:49:eb:0d:34:5d:08:8d:b5:4d:21:71:58:f9:26:8f:1b: a0:5f:66:c8:2a:29:a8:60:71:fe:3e:6b:50:f4:b2:18:4b:ae: d0:e7:f9:b3:28:42:6e:3d:e6:51:b1:bf:41:c4:f0:78:6a:1d: 51:88:19:8b:01:75:8c:2c:6e:15:61:4f:73:d3:5c:93:1c:bf: 6d:54:11:0e:c3:39:d7:76:e5:a1:20:0e:0d:75:71:ac:ab:6c: 4b:05:ad:1f:04:87:b6:ab:be:72:d6:4d:02:ee:97:8b:9b:17: c4:7b:2a:16:8c:fa:57:a3:77:c9:f7:fc:cd:d4:06:13:0c:3e: 60:4e:0d:a2:ee:d2:4e:3a:4f:28:e1:c3:e9:30:0f:fa:2b:6a: 67:a7:c3:fa:15:64:e9:96:f9:72:bb:dc:b1:eb:13:73:28:7f: 7e:26:31:7a:51:01:f7:97:3a:3f:c1:db:71:3f:f8:9e:26:70: 7e:e2:83:b5:b4:93:03:e0:7e:e3:02:61:44:41:76:09:45:ea: db:27:13:41:2c:58:7d:2a:77:35:24:7e:88:a4:c8:1a:9d:bf: f6:72:41:c3:e2:c9:28:6e:e2:33:2c:96:cc:90:0a:bb:94:3e: 32:70:fc:d0:5c:19:1f:25:75:9e:8e:20:dc:96:a4:9e:33:56: 57:a4:37:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUBs83jPgoM/bPCN2ewlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWJmM2QxZDQ1ODgyNTg3ZjNiZmJhMjc0YjJmOGI5YTQ1 YmM4OTkwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD Eyg0Y2Y0YTVkZTNkODdlNmYzMmEzZjA3Zjg0MzAwYzVmNDFmM2QxODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyysYzyK8t/Pzv7o479OdG9ihJm2Q 6G9R5qeS5S43yjUs+XIPfErCxyCsD1tiVXvFgPAPgAXuzLTfzGJaPIa1eBVIRBwp p5aE9I/U5j4A9E5N3vs7v8kfR4XjMDwEh0aCYNDzrMProx6Iu9Cb3muL3ftFObdL a+EoN114bBI7aCc6H4Kt8uiBYH94wv2ZqlBWl54ve+MT/uvyNbcWHnhxzFQzYO4c +FwbMX8iOQsr3qd1bpaUr/WZOzy1bSnVmCWfzGEzDIz8qfYUgbYmDl3Mb7kNoZcO SPmLCICFvbLlFdXgTFt4cZsncjwh3BDBi4IssWZahfFGdBWFUBqxxMKj7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz0pd49h+bzKj8H+EMAxfQfPRhyMB8GA1UdIwQY MBaAFFVb89HUWIJYfzv7onSy+LmkW8iZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEt ZTIwYmI2MGEyNzkzLzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEtZTIwYmI2MGEyNzkz LzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYlJ6w00 XQiNtU0hcVj5Jo8boF9myCopqGBx/j5rUPSyGEuu0Of5syhCbj3mUbG/QcTweGod UYgZiwF1jCxuFWFPc9Nckxy/bVQRDsM513bloSAODXVxrKtsSwWtHwSHtqu+ctZN Au6Xi5sXxHsqFoz6V6N3yff8zdQGEww+YE4Nou7STjpPKOHD6TAP+itqZ6fD+hVk 6Zb5crvcsesTcyh/fiYxelEB95c6P8HbcT/4niZwfuKDtbSTA+B+4wJhREF2CUXq 2ycTQSxYfSp3NSR+iKTIGp2/9nJBw+LJKG7iMyyWzJAKu5Q+MnD80FwZHyV1no4g 3JaknjNWV6Q37Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:47 2025 by rpki-client