This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft File: VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json) Hash identifier: DbVILQw+i37tPfHKWJd9h6DKvCWoN7ZHYvQCK61WcNE= Subject key identifier: DC:A8:FF:B9:0E:F2:7D:B4:13:10:EA:B4:03:4A:A4:BE:F8:A4:1D:8F Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08 Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908 Certificate serial: 019AF3894B41C8793E97808E05F65132967D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft Manifest number: 0728 Signing time: Sat 06 Dec 2025 12:00:52 +0000 Manifest this update: Sat 06 Dec 2025 12:00:52 +0000 Manifest next update: Sun 07 Dec 2025 12:00:52 +0000 Files and hashes: 1: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (hash: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=) 2: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: Ap2YKh9NjnGrTYwFlVN+xcmJeAbmBeRFseNWzs1lVGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4b:41:c8:79:3e:97:80:8e:05:f6:51:32:96:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908 Validity Not Before: Dec 6 12:00:52 2025 GMT Not After : Dec 7 12:00:52 2025 GMT Subject: CN=dca8ffb90ef27db41310eab4034aa4bef8a41d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:f9:64:ac:17:86:39:b9:27:48:cb:19:be: 9f:45:40:80:6c:f9:b5:fc:42:cb:3c:9e:29:da:33: 44:a7:12:36:b2:a1:1f:91:08:33:18:38:38:71:df: 43:3f:36:18:23:23:e4:59:ab:c5:22:da:0b:52:a8: 41:1e:0f:f8:f8:a8:4b:22:65:c5:63:53:a9:e7:75: 99:ee:1f:29:59:a9:10:17:41:34:cf:ba:93:bd:b9: b7:7d:dd:ba:6e:f0:23:42:8b:fa:af:cd:df:18:4f: 16:26:68:1e:53:fc:41:2c:4b:c0:cb:f0:71:a9:5d: 40:4f:0e:ae:4c:9c:5c:86:2b:c5:0d:57:ee:3d:0b: 80:ad:fc:77:4a:df:65:92:20:da:81:50:62:3d:3e: 61:44:aa:58:46:96:fe:4b:59:39:53:e8:dc:ca:65: ca:87:e6:f5:0f:ea:e4:71:cc:32:1d:54:ef:0d:b7: 1d:b8:65:d8:06:60:95:3b:b1:e1:69:6f:9c:65:98: b0:36:81:82:f7:0a:7a:e9:7c:c3:77:ee:8e:77:f0: 90:52:b9:d1:7e:3a:fd:68:b3:6f:f2:ff:f2:c1:48: 6b:25:fb:e0:8a:0f:47:f3:ce:97:7e:88:7c:55:33: 19:f2:1e:7f:09:fe:fa:ff:a2:24:b6:24:71:94:6b: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A8:FF:B9:0E:F2:7D:B4:13:10:EA:B4:03:4A:A4:BE:F8:A4:1D:8F X509v3 Authority Key Identifier: keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:69:07:88:ce:9d:d8:c9:5e:b4:5e:8a:35:f3:73:46:84:4e: c5:3f:58:7d:5b:4d:6b:2c:4c:c0:1a:fe:52:9f:48:c9:64:32: 46:2b:42:16:92:27:57:75:b5:98:1d:13:3c:13:11:ec:59:1d: c3:aa:8f:61:87:c4:71:10:f3:9a:ab:83:49:b3:68:9f:8d:43: da:8c:c5:ee:af:23:39:a3:d7:68:d9:8d:6a:34:ac:b1:0b:37: 3e:ba:b4:57:34:75:31:34:90:d6:43:1d:a9:6c:f1:cd:cc:78: e6:ad:6a:48:8d:c5:c7:c7:2b:8a:16:8c:23:10:e3:3f:76:5b: 5e:e4:a7:21:81:30:2e:82:3f:27:10:61:f1:78:71:32:22:97: ab:4c:33:fd:79:15:dc:67:93:c3:da:30:9f:5a:8b:e9:35:92: 37:12:9e:64:1e:8b:21:5f:d2:ca:60:00:54:6e:22:c4:21:ec: 97:11:fd:a1:8d:46:ed:df:17:8f:34:b8:df:3c:33:9f:31:32: 3d:23:31:e4:9d:2d:bc:0e:3f:26:c0:85:18:f2:83:30:92:95: 50:74:96:42:0f:fe:27:72:65:60:ff:8a:54:28:9e:f5:20:2d: 72:b7:38:af:fa:85:9c:b3:3d:e7:92:ec:24:9e:d8:41:5f:34: 33:23:8a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUtByHk+l4COBfZRMpZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzQyZjJjNzdhMTgyMjhjOWZhOWFiMzc5ODQyNjYwZDA3 OTI5MDgwHhcNMjUxMjA2MTIwMDUyWhcNMjUxMjA3MTIwMDUyWjAzMTEwLwYDVQQD EyhkY2E4ZmZiOTBlZjI3ZGI0MTMxMGVhYjQwMzRhYTRiZWY4YTQxZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1D5ZKwXhjm5J0jLGb6fRUCAbPm1 /ELLPJ4p2jNEpxI2sqEfkQgzGDg4cd9DPzYYIyPkWavFItoLUqhBHg/4+KhLImXF Y1Op53WZ7h8pWakQF0E0z7qTvbm3fd26bvAjQov6r83fGE8WJmgeU/xBLEvAy/Bx qV1ATw6uTJxchivFDVfuPQuArfx3St9lkiDagVBiPT5hRKpYRpb+S1k5U+jcymXK h+b1D+rkccwyHVTvDbcduGXYBmCVO7HhaW+cZZiwNoGC9wp66XzDd+6Od/CQUrnR fjr9aLNv8v/ywUhrJfvgig9H886Xfoh8VTMZ8h5/Cf76/6IktiRxlGtWmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyo/7kO8n20ExDqtANKpL74pB2PMB8GA1UdIwQY MBaAFFXELyx3oYIoyfqas3mEJmDQeSkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUt MDA3Y2Y2NmM2ZjM5LzEvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUtMDA3Y2Y2NmM2ZjM5 LzEvVmNRdkxIZWhnaWpKLXBxemVZUW1ZTkI1S1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2kHiM6d 2MletF6KNfNzRoROxT9YfVtNayxMwBr+Up9IyWQyRitCFpInV3W1mB0TPBMR7Fkd w6qPYYfEcRDzmquDSbNon41D2ozF7q8jOaPXaNmNajSssQs3Prq0VzR1MTSQ1kMd qWzxzcx45q1qSI3Fx8crihaMIxDjP3ZbXuSnIYEwLoI/JxBh8XhxMiKXq0wz/XkV 3GeTw9own1qL6TWSNxKeZB6LIV/SymAAVG4ixCHslxH9oY1G7d8XjzS43zwznzEy PSMx5J0tvA4/JsCFGPKDMJKVUHSWQg/+J3JlYP+KVCie9SAtcrc4r/qFnLM955Ls JJ7YQV80MyOK2A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:50:51 2025 by rpki-client