This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft File: VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft (raw, json) Hash identifier: FctuNeCHcVViYlnhtf5C1OPFeGRu9kJRFoCy+Z+/DCY= Subject key identifier: 88:4E:E1:14:96:8E:E7:05:7F:A0:4E:B8:19:12:2F:C7:46:CB:2F:F7 Authority key identifier: 55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1 Certificate issuer: /CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1 Certificate serial: 019AF163D89F40DC9DCAC01E6B015C8F9434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft Manifest number: 1247 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl (hash: hrNx5+MhBW1JnjNxH7u3yai2th0OVfQHKU50UdZyRRw=) 2: y1unGvVewluXyGeDL5LFoMVtcdw.roa (hash: /h17T8UK70DqWL88fo4si+DcDqq+rRewkenDmJ5Ct8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d8:9f:40:dc:9d:ca:c0:1e:6b:01:5c:8f:94:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1 Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=884ee114968ee7057fa04eb819122fc746cb2ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:fc:e1:95:8c:ee:29:c2:71:ea:29:77:13: 42:47:57:d0:af:3f:42:e3:7f:db:a5:a6:c7:cc:8f: f6:38:9d:ee:38:68:b5:91:0e:a6:4d:ec:32:72:cd: 9c:19:64:1d:6a:a4:a9:9b:25:68:4d:4c:91:b7:ab: 0b:3a:2c:0f:7b:05:94:e6:91:71:cd:e2:48:2d:37: 8a:cf:db:99:ce:53:39:f0:58:04:95:f0:86:ec:5f: 3e:3d:b8:d1:8e:e1:73:28:54:38:f7:02:e0:9a:94: b7:84:c8:84:27:b9:93:5f:b9:33:87:9b:49:4c:ab: ab:15:78:0b:9b:8e:a4:9a:92:a0:b6:3c:8d:6f:43: b5:29:ed:a8:69:b7:c6:eb:6b:39:41:6a:20:b6:9c: 2e:c1:22:d6:bc:0b:2b:10:2c:89:51:6a:f5:59:88: 82:c4:e3:12:97:4d:f8:0d:3d:1a:e1:fc:fe:c2:93: c4:ef:40:59:e5:d8:ca:5e:af:69:4f:7a:5a:4c:68: 44:0c:67:a8:07:89:b5:3e:47:af:81:73:8d:fe:cb: fe:0c:7d:e4:c3:f1:d5:cb:91:2f:9e:ed:ce:24:63: 56:be:41:92:2c:5e:22:c8:f2:10:2f:6d:d4:44:2a: b2:bd:9a:6b:14:36:f2:78:c1:15:ca:72:bb:a6:a1: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:E1:14:96:8E:E7:05:7F:A0:4E:B8:19:12:2F:C7:46:CB:2F:F7 X509v3 Authority Key Identifier: keyid:55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9b:58:6d:09:64:f2:21:f4:4d:10:2a:75:76:3f:51:a5:89: bb:82:65:a1:f7:35:f1:08:1d:1c:10:a2:f7:ab:09:54:9f:1a: 8f:38:e0:71:f2:75:33:49:c0:3d:80:04:cc:25:d2:3e:d0:25: ab:ff:a5:29:02:d0:b3:7c:f9:51:e2:8f:9b:01:8d:8a:af:64: b1:76:ce:ad:24:da:04:0b:92:02:4f:de:45:c9:54:c6:0c:f3: 02:dd:e8:30:da:4a:ff:85:d3:4f:37:70:da:66:db:8f:91:cc: a7:92:6c:31:92:aa:a8:d5:cd:07:cd:4b:e6:c9:d2:4b:47:6a: 1a:ca:ab:1d:1d:d7:8d:74:4b:97:d0:01:9d:3e:25:a2:56:1f: a7:8f:1b:17:d5:52:0d:8d:37:bf:8f:ce:62:06:4f:f8:33:11: 5e:a6:48:8e:31:3f:44:d0:56:15:02:8c:4a:b2:8d:a0:25:03: 3d:e5:8b:a4:97:e2:43:62:7d:fd:b9:98:24:c4:a0:b8:e3:bd: 89:53:c2:e3:7f:ea:6d:c7:82:73:a2:28:1e:69:30:31:89:20: a6:1f:c4:7f:d7:44:4e:d2:82:62:aa:ca:d1:6c:42:3c:0d:27: 35:d3:ea:5c:73:83:d7:95:51:1d:dd:11:09:6c:0d:e2:03:0c: 9c:b6:4a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9ifQNydysAeawFcj5Q0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2Y0YzQ2MzFhMzM4NWM1ZTM5NWVlMWQ5ZGFhMDc2YjBi Y2NmZjEwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD Eyg4ODRlZTExNDk2OGVlNzA1N2ZhMDRlYjgxOTEyMmZjNzQ2Y2IyZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqT84ZWM7inCceopdxNCR1fQrz9C 43/bpabHzI/2OJ3uOGi1kQ6mTewycs2cGWQdaqSpmyVoTUyRt6sLOiwPewWU5pFx zeJILTeKz9uZzlM58FgElfCG7F8+PbjRjuFzKFQ49wLgmpS3hMiEJ7mTX7kzh5tJ TKurFXgLm46kmpKgtjyNb0O1Ke2oabfG62s5QWogtpwuwSLWvAsrECyJUWr1WYiC xOMSl034DT0a4fz+wpPE70BZ5djKXq9pT3paTGhEDGeoB4m1PkevgXON/sv+DH3k w/HVy5Evnu3OJGNWvkGSLF4iyPIQL23URCqyvZprFDbyeMEVynK7pqG/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhO4RSWjucFf6BOuBkSL8dGyy/3MB8GA1UdIwQY MBaAFFU/TEYxozhcXjle4dnaoHawvM/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YThkMDgtZTRiYi00OTJmLTk4NjMt NDU0Zjk5Yzc0ZjExLzEvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy85YThkMDgtZTRiYi00OTJmLTk4NjMtNDU0Zjk5Yzc0ZjEx LzEvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZtYbQlk 8iH0TRAqdXY/UaWJu4Jlofc18QgdHBCi96sJVJ8ajzjgcfJ1M0nAPYAEzCXSPtAl q/+lKQLQs3z5UeKPmwGNiq9ksXbOrSTaBAuSAk/eRclUxgzzAt3oMNpK/4XTTzdw 2mbbj5HMp5JsMZKqqNXNB81L5snSS0dqGsqrHR3XjXRLl9ABnT4lolYfp48bF9VS DY03v4/OYgZP+DMRXqZIjjE/RNBWFQKMSrKNoCUDPeWLpJfiQ2J9/bmYJMSguOO9 iVPC43/qbceCc6IoHmkwMYkgph/Ef9dETtKCYqrK0WxCPA0nNdPqXHOD15VRHd0R CWwN4gMMnLZK7g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:42 2025 by rpki-client