This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json) Hash identifier: aK8GZ0ZKBWx0m60RZ7yXMoJUrm7oDqVxSAW4HKfper0= Subject key identifier: A6:0D:2C:A2:6A:BB:04:B1:C3:9D:3C:F7:CA:9D:93:03:AC:3E:4A:80 Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Certificate serial: 019AF42E54B160E7C2F30BDF14BC2C62C067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft Manifest number: 03F5 Signing time: Sat 06 Dec 2025 15:01:08 +0000 Manifest this update: Sat 06 Dec 2025 15:01:08 +0000 Manifest next update: Sun 07 Dec 2025 15:01:08 +0000 Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: yEdlLnLv1Wkyj7PT1CA8FN+L83b15zzOhr5VvCrPcxE=) 2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:54:b1:60:e7:c2:f3:0b:df:14:bc:2c:62:c0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Validity Not Before: Dec 6 15:01:08 2025 GMT Not After : Dec 7 15:01:08 2025 GMT Subject: CN=a60d2ca26abb04b1c39d3cf7ca9d9303ac3e4a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:ca:17:77:6a:a3:a0:c8:df:bf:e7:ea:e8: e4:c8:bf:08:83:e7:67:f1:42:b9:ef:15:fe:43:8f: d8:35:05:c2:91:54:11:0e:b1:36:d0:16:1c:95:2a: c9:bf:fb:09:91:40:aa:9b:86:2b:64:8d:7b:c1:26: dd:41:43:fc:27:43:9d:42:39:cb:c7:b6:19:51:12: 36:ec:3e:46:0a:76:bb:10:42:21:f3:18:2f:14:88: 8f:fd:a9:44:8e:ff:f5:07:13:5e:2a:20:ef:ec:2d: 51:00:b4:00:e4:80:5d:2a:c2:bc:60:7d:ba:b9:66: 5b:c2:6d:56:36:98:2d:ff:42:7c:4e:41:da:b1:9a: 98:84:da:56:8c:27:f4:4a:b4:63:6d:62:e4:5b:f9: 01:a1:8c:2c:23:46:0e:60:97:3b:cd:da:c4:7e:6b: 9f:fc:58:c9:30:cf:fd:89:cc:11:76:0b:10:e3:dc: 31:56:68:7e:64:b6:7a:06:cd:57:71:c2:01:25:44: ee:f8:90:05:5c:0e:17:1b:83:92:87:4e:2b:35:3d: 0c:0e:01:39:e8:74:38:49:33:c2:07:7b:47:b2:0e: 55:f9:14:6c:1a:d0:00:b5:c6:55:c0:71:84:64:8f: f1:56:67:e1:bd:e6:fe:6e:8c:d9:50:57:2b:93:9b: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0D:2C:A2:6A:BB:04:B1:C3:9D:3C:F7:CA:9D:93:03:AC:3E:4A:80 X509v3 Authority Key Identifier: keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ed:73:d0:43:69:6a:b5:cf:42:d8:9a:00:23:19:de:e9:f9: 9b:a3:73:7d:0d:5a:1d:68:8c:d1:13:1e:ad:f6:60:c1:94:66: a8:9c:7b:63:e9:86:69:41:07:e5:0d:95:35:4d:35:e8:7d:e7: 3f:be:7f:0f:c7:b3:9e:53:69:37:77:bd:8e:54:6a:50:0a:62: 6b:2d:01:e6:19:73:38:ee:02:b2:ca:91:3f:c1:d2:2e:db:08: f1:5c:1f:90:75:a3:5c:83:19:3b:0a:60:f6:2f:27:c3:52:d2: 54:96:25:53:9d:e3:80:96:94:d7:7c:43:ec:d6:46:58:17:3a: d3:00:fb:67:4e:9c:8a:64:df:fd:2e:08:40:39:d8:1c:1f:7b: fd:7d:a3:b6:a6:d9:cb:f1:f2:7d:92:f3:d3:22:2d:29:c6:12: ed:33:83:09:a1:b3:42:4f:60:e4:a3:0e:25:6f:50:41:36:03: 10:91:a2:ce:17:58:8f:a3:df:04:31:9e:89:38:11:fb:c4:d4: b5:13:bc:1e:ed:58:cb:3c:c9:15:9f:4e:9c:c3:d6:68:1b:08: 2f:fe:3f:49:67:7e:3e:0c:4f:35:84:67:96:d5:fa:7d:62:30: 4e:ef:62:d1:5b:04:38:c2:85:5d:0b:e5:11:11:58:3e:f4:36: 97:db:3e:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LlSxYOfC8wvfFLwsYsBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjAxYTFlOTllYTVkNGYzOTk0ZDMzMzA5ZDA5NDMxMmRj ODU0MjcwHhcNMjUxMjA2MTUwMTA4WhcNMjUxMjA3MTUwMTA4WjAzMTEwLwYDVQQD EyhhNjBkMmNhMjZhYmIwNGIxYzM5ZDNjZjdjYTlkOTMwM2FjM2U0YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqDKF3dqo6DI37/n6ujkyL8Ig+dn 8UK57xX+Q4/YNQXCkVQRDrE20BYclSrJv/sJkUCqm4YrZI17wSbdQUP8J0OdQjnL x7YZURI27D5GCna7EEIh8xgvFIiP/alEjv/1BxNeKiDv7C1RALQA5IBdKsK8YH26 uWZbwm1WNpgt/0J8TkHasZqYhNpWjCf0SrRjbWLkW/kBoYwsI0YOYJc7zdrEfmuf /FjJMM/9icwRdgsQ49wxVmh+ZLZ6Bs1XccIBJUTu+JAFXA4XG4OSh04rNT0MDgE5 6HQ4STPCB3tHsg5V+RRsGtAAtcZVwHGEZI/xVmfhveb+bozZUFcrk5ut0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYNLKJquwSxw50898qdkwOsPkqAMB8GA1UdIwQY MBaAFFbwGh6Z6l1POZTTMwnQlDEtyFQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgt MTMwZjdmMzhmNTM3LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgtMTMwZjdmMzhmNTM3 LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO1z0ENp arXPQtiaACMZ3un5m6NzfQ1aHWiM0RMerfZgwZRmqJx7Y+mGaUEH5Q2VNU016H3n P75/D8eznlNpN3e9jlRqUApiay0B5hlzOO4CssqRP8HSLtsI8VwfkHWjXIMZOwpg 9i8nw1LSVJYlU53jgJaU13xD7NZGWBc60wD7Z06cimTf/S4IQDnYHB97/X2jtqbZ y/HyfZLz0yItKcYS7TODCaGzQk9g5KMOJW9QQTYDEJGizhdYj6PfBDGeiTgR+8TU tRO8Hu1YyzzJFZ9OnMPWaBsIL/4/SWd+PgxPNYRnltX6fWIwTu9i0VsEOMKFXQvl ERFYPvQ2l9s+OQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:15 2025 by rpki-client