This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json) Hash identifier: qgBp/kLsFweusrC+rRCW+n8UcZnafjwUw+c4hnJgGKw= Subject key identifier: 5B:0E:C5:61:D9:A6:2A:A3:A0:80:CF:B9:1F:1B:67:A7:05:53:CA:17 Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb Certificate serial: 019AF57869F388E58F1F14CEBCC6D71BD261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft Manifest number: 025D Signing time: Sat 06 Dec 2025 21:01:40 +0000 Manifest this update: Sat 06 Dec 2025 21:01:40 +0000 Manifest next update: Sun 07 Dec 2025 21:01:40 +0000 Files and hashes: 1: EslCT3gxkxtf5DQ7QkwYmLYeFlo.roa (hash: Uhm0SZdyDhhQLcGTvxZ7EAQVgtjflrvk9JNzMwkUJ7I=) 2: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: na4csI+jhdCRhv+o4oSahn3mxwM8r+Rpyre/JR+cLEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:69:f3:88:e5:8f:1f:14:ce:bc:c6:d7:1b:d2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb Validity Not Before: Dec 6 21:01:40 2025 GMT Not After : Dec 7 21:01:40 2025 GMT Subject: CN=5b0ec561d9a62aa3a080cfb91f1b67a70553ca17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:36:1d:cb:88:23:d2:90:58:30:e2:e1:b1: c1:c4:a4:26:b5:cf:b0:88:7c:c8:ac:47:cc:99:9a: a8:6d:24:91:28:81:d8:96:55:7d:68:4d:3e:83:d6: 31:a4:b7:53:9d:78:05:a8:c7:91:46:71:ab:b2:55: a5:9b:a3:c4:39:aa:03:63:7e:0b:b7:c9:01:18:00: 76:9a:94:db:ec:09:50:be:85:bc:11:c9:82:85:99: b5:d6:89:56:2f:b2:3f:d5:09:45:00:d6:e2:43:81: 17:4c:47:5b:85:5f:8b:57:89:78:ad:8b:57:06:64: d7:53:50:da:1a:67:2b:51:da:f0:48:2c:b7:e1:67: 55:68:6f:21:03:36:44:12:c7:d5:a6:42:8e:21:a0: fd:ad:45:03:c9:f6:83:21:b8:d4:88:a8:80:60:55: 09:0b:0e:6c:12:b8:a3:e5:74:17:ef:26:20:8b:d5: 04:2f:ff:2e:90:e0:86:17:5d:ee:1c:4d:5e:49:11: 2b:03:68:97:07:bc:be:58:1e:df:19:c5:e7:f4:75: f0:37:13:55:eb:b0:e0:77:07:5f:10:d7:fd:f8:e7: a3:99:db:b7:82:88:9b:a3:8a:73:1f:5f:05:ce:6d: 28:18:1f:7b:d8:91:1e:f0:ee:bd:b2:32:5c:c1:87: 28:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:C5:61:D9:A6:2A:A3:A0:80:CF:B9:1F:1B:67:A7:05:53:CA:17 X509v3 Authority Key Identifier: keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a3:5a:ce:c5:6f:0a:c5:c8:6b:1b:86:ee:07:27:90:48:80: c5:70:39:11:10:05:e8:bc:15:2a:b9:6f:6c:ef:fd:62:a2:c2: c9:f2:1c:41:8a:04:77:d9:16:9a:77:5c:fd:a5:f5:f9:3b:16: f0:9f:2d:44:c1:4a:3a:70:15:7d:e7:72:fa:4e:7a:9e:75:10: e2:e4:dc:44:88:33:a3:83:eb:02:09:7e:06:f1:96:96:c0:0b: e7:9f:2b:9b:65:ce:d4:9a:88:4e:2e:23:da:f6:24:36:a2:b3: 38:89:9a:ba:a1:56:10:1b:ba:0b:02:25:5b:58:b9:c3:6a:6e: c6:4f:bd:f5:d1:d6:a9:4a:9d:b5:8f:74:93:14:d5:31:5b:17: 46:3b:37:7c:52:02:8d:e5:2d:39:ec:be:54:27:7a:a2:9e:e5: af:57:c6:b0:96:eb:38:d8:c4:81:56:1e:8f:9f:6b:0b:d0:ac: 7e:4b:e9:d9:af:98:45:37:1f:6b:0e:38:6e:a6:2e:f1:e3:f5: 28:6e:db:d3:fc:93:fb:64:42:58:59:e3:a0:76:5f:86:16:69: b5:ae:3f:44:94:31:e6:92:87:24:b0:46:8e:49:68:33:71:bf: 3f:e8:1e:a6:63:d9:8d:0c:35:c9:93:ef:27:0b:3f:b9:dd:c9: 47:84:8c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGnziOWPHxTOvMbXG9JhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmRiNjk1ZGRmMzFlMjg5ODQ2NmVmOWVkZmJhNDg4MGQ4 ZTE5ZmIwHhcNMjUxMjA2MjEwMTQwWhcNMjUxMjA3MjEwMTQwWjAzMTEwLwYDVQQD Eyg1YjBlYzU2MWQ5YTYyYWEzYTA4MGNmYjkxZjFiNjdhNzA1NTNjYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k02HcuII9KQWDDi4bHBxKQmtc+w iHzIrEfMmZqobSSRKIHYllV9aE0+g9YxpLdTnXgFqMeRRnGrslWlm6PEOaoDY34L t8kBGAB2mpTb7AlQvoW8EcmChZm11olWL7I/1QlFANbiQ4EXTEdbhV+LV4l4rYtX BmTXU1DaGmcrUdrwSCy34WdVaG8hAzZEEsfVpkKOIaD9rUUDyfaDIbjUiKiAYFUJ Cw5sErij5XQX7yYgi9UEL/8ukOCGF13uHE1eSRErA2iXB7y+WB7fGcXn9HXwNxNV 67DgdwdfENf9+Oejmdu3goibo4pzH18Fzm0oGB972JEe8O69sjJcwYcoHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsOxWHZpiqjoIDPuR8bZ6cFU8oXMB8GA1UdIwQY MBaAFFVttpXd8x4omEZu+e37pIgNjhn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NDE0NjItYWRiNi00YzY2LWI1NDIt MDUyZWFlYWM2NDdlLzEvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81NDE0NjItYWRiNi00YzY2LWI1NDItMDUyZWFlYWM2NDdl LzEvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqNazsVv CsXIaxuG7gcnkEiAxXA5ERAF6LwVKrlvbO/9YqLCyfIcQYoEd9kWmndc/aX1+TsW 8J8tRMFKOnAVfedy+k56nnUQ4uTcRIgzo4PrAgl+BvGWlsAL558rm2XO1JqITi4j 2vYkNqKzOImauqFWEBu6CwIlW1i5w2puxk+99dHWqUqdtY90kxTVMVsXRjs3fFIC jeUtOey+VCd6op7lr1fGsJbrONjEgVYej59rC9Csfkvp2a+YRTcfaw44bqYu8eP1 KG7b0/yT+2RCWFnjoHZfhhZpta4/RJQx5pKHJLBGjkloM3G/P+gepmPZjQw1yZPv Jws/ud3JR4SMPA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:23 2025 by rpki-client