This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json) Hash identifier: C8Vus5eU8sVCPAflA7Kyaas7K3dcnN1c/tpO2ptyfEc= Subject key identifier: 2C:5F:8C:AD:D3:09:6E:4F:3F:41:23:4F:C4:71:C8:4A:47:FB:58:5D Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40 Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340 Certificate serial: 019AF3C0551E9F3ACE5B153C60A1EBA67D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft Manifest number: 0A84 Signing time: Sat 06 Dec 2025 13:00:59 +0000 Manifest this update: Sat 06 Dec 2025 13:00:59 +0000 Manifest next update: Sun 07 Dec 2025 13:00:59 +0000 Files and hashes: 1: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: jiMpypshXPYafLtNMJfjAYQK2Vl7NJJsZyKSxNuYG7w=) 2: vpimmj50rM3b693dSW6yAkLWvvA.roa (hash: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:55:1e:9f:3a:ce:5b:15:3c:60:a1:eb:a6:7d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340 Validity Not Before: Dec 6 13:00:59 2025 GMT Not After : Dec 7 13:00:59 2025 GMT Subject: CN=2c5f8cadd3096e4f3f41234fc471c84a47fb585d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:81:be:af:f8:62:89:c8:15:98:cc:49:3a: 7f:1a:45:b3:e3:76:aa:ac:ed:ca:94:3d:80:0b:3d: f9:4d:a1:b0:d3:9e:63:87:48:74:f5:38:0f:3b:d7: bd:17:fc:42:47:66:63:a1:45:73:d5:ba:0c:27:19: c4:a0:b5:cd:b8:97:66:ce:7b:d4:2f:4b:3e:d3:6a: 3c:55:1e:13:e7:c6:72:f5:39:20:ed:c9:d9:6b:0e: cf:d3:d1:8e:9a:f0:d2:04:04:90:c2:2e:d0:6c:83: ae:4b:a9:b3:fe:10:5f:1e:58:77:c8:50:99:3a:c1: d7:2e:a8:6c:ea:82:f2:4e:e1:82:22:4b:33:51:47: 65:c2:ce:00:52:99:b7:08:75:5c:39:97:02:2f:f8: 55:95:49:c3:be:e7:1c:76:c2:89:69:2e:41:ed:43: ae:41:7a:f5:cb:df:65:ba:61:0a:55:e6:33:db:03: 1e:3b:c7:27:8c:4b:d2:4f:48:39:08:99:78:13:2b: e7:01:28:ed:f1:50:30:71:69:c3:04:57:37:d3:ad: d2:74:05:7a:8d:aa:fc:09:04:b9:b2:3f:4b:e3:87: 79:7a:26:29:e2:01:90:9b:5c:b5:7a:7a:2c:a9:98: b2:07:29:60:38:74:11:9e:bc:f1:e3:4d:ed:a7:82: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:8C:AD:D3:09:6E:4F:3F:41:23:4F:C4:71:C8:4A:47:FB:58:5D X509v3 Authority Key Identifier: keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:11:f4:ea:03:69:70:02:d0:cb:2a:e3:5e:b3:68:b6:24:07: c3:3c:18:d6:51:71:cc:6e:3c:93:97:1a:e2:fd:b9:da:fd:a4: f9:a0:d5:da:dc:02:a4:84:f0:1f:8b:63:c0:6c:c5:17:de:9f: 18:65:af:48:0b:3a:06:7d:d1:0e:de:5c:01:c8:f6:94:23:63: 7c:f5:b5:92:41:56:6c:57:f1:be:6c:12:bf:58:b8:79:e4:1b: 1c:52:a4:dc:10:4b:76:2b:da:f3:25:7b:85:9d:02:ad:9c:a4: 83:42:b7:b3:9d:a3:2a:46:79:d7:ff:31:1d:01:c6:eb:2d:f7: fa:63:5b:8d:cb:6a:07:56:47:2d:96:32:c8:c4:3d:c6:58:87: c9:27:cd:03:18:d0:72:4f:61:b0:8e:9a:12:69:4d:ec:d5:e5: d9:0e:55:d6:e2:6a:95:5c:33:40:e2:8a:65:da:2f:d2:86:dd: a0:0b:2e:a2:ed:26:9e:18:d4:cf:ae:2a:d0:d6:02:ef:d3:9f: 83:6f:63:df:59:96:7d:41:a5:13:42:d2:4f:f6:ec:07:8e:29: 62:d4:1b:19:f7:b4:27:4a:d6:95:fe:89:1e:39:69:ed:1f:ee: a4:ab:eb:af:da:e2:58:0e:d4:fd:9e:01:63:87:01:d2:dc:6f: 2e:a7:a1:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFUenzrOWxU8YKHrpn1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjcyMmE4ODVhYmViOWFhZmZiMzJkYTc2NGVmMDkxYjVi MjAzNDAwHhcNMjUxMjA2MTMwMDU5WhcNMjUxMjA3MTMwMDU5WjAzMTEwLwYDVQQD EygyYzVmOGNhZGQzMDk2ZTRmM2Y0MTIzNGZjNDcxYzg0YTQ3ZmI1ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zeBvq/4YonIFZjMSTp/GkWz43aq rO3KlD2ACz35TaGw055jh0h09TgPO9e9F/xCR2ZjoUVz1boMJxnEoLXNuJdmznvU L0s+02o8VR4T58Zy9Tkg7cnZaw7P09GOmvDSBASQwi7QbIOuS6mz/hBfHlh3yFCZ OsHXLqhs6oLyTuGCIkszUUdlws4AUpm3CHVcOZcCL/hVlUnDvuccdsKJaS5B7UOu QXr1y99lumEKVeYz2wMeO8cnjEvST0g5CJl4EyvnASjt8VAwcWnDBFc3063SdAV6 jar8CQS5sj9L44d5eiYp4gGQm1y1enosqZiyBylgOHQRnrzx403tp4KbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxfjK3TCW5PP0EjT8RxyEpH+1hdMB8GA1UdIwQY MBaAFFb3IqiFq+uar/sy2nZO8JG1sgNAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUt ODE0MGMxMTZmMGM4LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUtODE0MGMxMTZmMGM4 LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxH06gNp cALQyyrjXrNotiQHwzwY1lFxzG48k5ca4v252v2k+aDV2twCpITwH4tjwGzFF96f GGWvSAs6Bn3RDt5cAcj2lCNjfPW1kkFWbFfxvmwSv1i4eeQbHFKk3BBLdiva8yV7 hZ0CrZykg0K3s52jKkZ51/8xHQHG6y33+mNbjctqB1ZHLZYyyMQ9xliHySfNAxjQ ck9hsI6aEmlN7NXl2Q5V1uJqlVwzQOKKZdov0obdoAsuou0mnhjUz64q0NYC79Of g29j31mWfUGlE0LST/bsB44pYtQbGfe0J0rWlf6JHjlp7R/upKvrr9riWA7U/Z4B Y4cB0txvLqeh0A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:06 2025 by rpki-client