This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json) Hash identifier: E/i8tJ8ZIoJWP35706X23LGiVl4zsplYIhmxaYk0f9w= Subject key identifier: 1F:63:94:64:6E:F9:E8:39:5C:1B:24:1B:0C:99:0C:4E:98:53:81:E3 Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e Certificate serial: 019AF3C07D44E1505F0D73EBEC036BF53FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft Manifest number: 155B Signing time: Sat 06 Dec 2025 13:01:09 +0000 Manifest this update: Sat 06 Dec 2025 13:01:09 +0000 Manifest next update: Sun 07 Dec 2025 13:01:09 +0000 Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: t2Aa1EEnI1nEVrSMAQqmjESZ4h/jiG7xql+NSOgq7G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:7d:44:e1:50:5f:0d:73:eb:ec:03:6b:f5:3f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e Validity Not Before: Dec 6 13:01:09 2025 GMT Not After : Dec 7 13:01:09 2025 GMT Subject: CN=1f6394646ef9e8395c1b241b0c990c4e985381e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:9b:f6:a0:fa:23:7a:c2:08:90:9b:3f:93: dc:e2:f7:6d:4e:62:90:d1:dc:ed:88:ed:bc:2e:24: ef:36:0f:a6:69:f2:c8:14:e4:bf:03:89:83:12:28: e4:d4:30:64:30:32:79:ae:c7:dc:ea:b9:9f:e1:0d: 18:50:f8:12:d7:31:a6:86:bf:4b:23:44:42:ab:98: df:c0:9c:96:3d:25:37:b9:43:03:b7:a7:95:f1:4a: 5f:70:d9:1f:06:34:75:16:21:eb:b9:d1:0c:8c:a5: a8:49:06:2c:53:44:3e:3d:a4:f7:4a:81:fd:ec:a4: 2f:3d:32:6f:1e:ba:dd:f4:8f:8b:3f:a0:e8:1a:a0: fb:11:8a:ae:c2:ec:a6:5a:93:88:8c:e0:30:10:8f: a8:5c:15:9e:35:dc:f2:33:4f:0c:db:7c:d5:99:66: 78:75:d9:88:4b:92:e5:0c:f8:fb:c5:09:cc:5a:ce: 9d:d0:7c:84:fb:89:ca:84:c9:2e:ce:7c:2f:e3:b3: a3:6e:40:80:1b:26:c3:3b:f2:2b:00:3d:af:a0:4b: 17:f0:21:44:5e:00:55:7e:de:8d:7f:50:5d:b8:b6: 2c:a6:7b:62:0a:bd:8e:29:06:f0:fb:57:04:01:35: 90:1d:65:63:3e:6a:6f:2b:6d:2a:19:e0:63:7e:aa: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:63:94:64:6E:F9:E8:39:5C:1B:24:1B:0C:99:0C:4E:98:53:81:E3 X509v3 Authority Key Identifier: keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9b:a6:f4:e4:1e:ce:bb:45:ec:87:d5:38:f8:7a:9c:50:e6: 1a:04:3e:94:59:10:7b:6a:2e:71:07:15:85:27:07:3d:9c:d2: 67:a6:1f:2c:b5:95:4b:1f:08:19:40:0c:98:83:c1:c5:53:22: d1:9d:61:c2:0a:ff:46:6c:68:8d:37:22:75:41:ef:93:a3:61: 80:e2:48:54:08:f5:c0:22:0b:83:5d:fc:98:68:a7:76:8a:cb: df:09:36:5e:3f:84:a2:d7:e4:89:fb:c4:c5:c0:18:4c:13:48: f0:3d:1c:e7:7b:2e:fa:9f:61:ed:fb:ea:f1:b4:48:07:17:9b: c1:26:1b:34:fe:2b:47:0a:cf:59:5f:bc:5d:02:85:d5:94:89: 98:38:d8:cc:16:75:e7:ef:f9:cc:40:14:b8:b6:f5:d2:b4:45: 2f:e1:f8:22:43:1a:9b:cc:0a:51:19:52:da:50:36:f8:74:ad: 5d:b0:0e:e9:bd:86:88:b9:e2:37:b7:ce:c3:8c:09:48:ee:1f: 06:3c:be:81:58:48:79:15:85:b4:89:b7:4f:c5:da:5a:22:0a: 31:e5:3d:72:77:c1:84:1e:a5:0d:3f:64:94:ab:ca:9a:4e:2e: ad:14:6f:af:85:09:e4:38:05:3f:f9:94:3c:ee:7e:c0:7e:19: 5b:3e:0d:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwH1E4VBfDXPr7ANr9T/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx ZDdkOGUwHhcNMjUxMjA2MTMwMTA5WhcNMjUxMjA3MTMwMTA5WjAzMTEwLwYDVQQD EygxZjYzOTQ2NDZlZjllODM5NWMxYjI0MWIwYzk5MGM0ZTk4NTM4MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEmb9qD6I3rCCJCbP5Pc4vdtTmKQ 0dztiO28LiTvNg+mafLIFOS/A4mDEijk1DBkMDJ5rsfc6rmf4Q0YUPgS1zGmhr9L I0RCq5jfwJyWPSU3uUMDt6eV8UpfcNkfBjR1FiHrudEMjKWoSQYsU0Q+PaT3SoH9 7KQvPTJvHrrd9I+LP6DoGqD7EYquwuymWpOIjOAwEI+oXBWeNdzyM08M23zVmWZ4 ddmIS5LlDPj7xQnMWs6d0HyE+4nKhMkuznwv47OjbkCAGybDO/IrAD2voEsX8CFE XgBVft6Nf1BduLYspntiCr2OKQbw+1cEATWQHWVjPmpvK20qGeBjfqqS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9jlGRu+eg5XBskGwyZDE6YU4HjMB8GA1UdIwQY MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZum9OQe zrtF7IfVOPh6nFDmGgQ+lFkQe2oucQcVhScHPZzSZ6YfLLWVSx8IGUAMmIPBxVMi 0Z1hwgr/RmxojTcidUHvk6NhgOJIVAj1wCILg138mGindorL3wk2Xj+EotfkifvE xcAYTBNI8D0c53su+p9h7fvq8bRIBxebwSYbNP4rRwrPWV+8XQKF1ZSJmDjYzBZ1 5+/5zEAUuLb10rRFL+H4IkMam8wKURlS2lA2+HStXbAO6b2GiLniN7fOw4wJSO4f Bjy+gVhIeRWFtIm3T8XaWiIKMeU9cnfBhB6lDT9klKvKmk4urRRvr4UJ5DgFP/mU PO5+wH4ZWz4NNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:35 2025 by rpki-client