This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json) Hash identifier: HhMkSu6HWpLLpZzEBJvNOj5m9KDVXKdZCGof5mC8zk8= Subject key identifier: 59:2E:D4:DF:FA:11:32:6A:77:64:04:DC:C4:8E:B6:74:F0:F1:C8:81 Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79 Certificate serial: 019AF389693440BB3945B7571D9E483E64C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft Manifest number: 1238 Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=) 2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: P0qpZnZVenRghbROdM/AZffcfeSn667htIojAtF7ynI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:69:34:40:bb:39:45:b7:57:1d:9e:48:3e:64:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79 Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=592ed4dffa11326a776404dcc48eb674f0f1c881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:86:29:8a:d4:b3:c4:f8:f0:d6:96:f7:be: db:52:5a:b8:37:ce:ea:28:4f:ec:5e:8d:3d:0a:48: 72:c5:85:ab:33:ba:44:1c:e1:e9:25:4c:d5:19:04: d5:b1:40:a7:57:c8:f1:08:e9:d8:34:21:54:38:f6: f1:23:ca:97:d8:89:63:3d:a1:8a:a7:1d:3c:ba:27: da:14:15:ef:63:16:08:d3:08:67:1a:f9:ea:c4:08: 55:d5:cf:00:e7:9f:1a:1c:4e:b5:bd:a7:96:96:4f: cb:06:f6:dc:64:ab:c6:92:36:7a:c0:6c:c1:b0:f9: eb:98:c3:5f:ce:59:b4:5f:2d:93:3f:51:10:d2:e3: d2:da:db:2c:83:2d:2d:80:97:b0:2d:07:3f:33:23: 02:b1:c0:b6:e3:ac:34:f1:65:52:4e:b6:90:6a:fd: 10:86:c6:dc:68:82:ff:fa:90:14:d2:18:28:41:d4: d1:9b:77:85:3d:f8:a1:e1:64:e5:0e:83:5b:2c:f4: df:f7:64:5e:c0:a1:d5:a3:09:f0:ae:59:82:fc:72: ef:3f:02:bf:4f:c8:5f:24:78:32:9c:44:b7:3b:e4: 48:50:d1:0b:e5:be:f0:72:b8:07:11:82:d6:85:96: 42:9a:91:81:36:0b:a1:55:65:1a:17:87:77:c9:02: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2E:D4:DF:FA:11:32:6A:77:64:04:DC:C4:8E:B6:74:F0:F1:C8:81 X509v3 Authority Key Identifier: keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:86:ba:c8:c8:fc:ae:a8:bd:85:44:00:78:d4:08:62:62:48: c8:e9:78:41:7c:da:7a:e9:52:f9:74:ee:84:9c:ce:fc:30:ff: 90:ac:43:b2:d4:53:27:7e:d6:c4:ea:c1:87:6b:de:85:89:f6: 94:71:2d:63:b6:95:23:59:e8:58:62:56:00:84:7a:90:49:ad: 94:fa:40:6b:95:cc:d1:1d:dc:cc:19:ea:30:fe:a6:42:22:ed: cd:61:3e:82:f8:35:fa:6f:a4:5a:4e:18:4e:46:d1:f8:8a:62: f2:0c:62:19:fe:85:7c:6c:53:e2:ef:94:ce:88:a4:51:8c:5d: 5d:8c:5f:ad:fc:36:f0:f4:f8:bf:c5:6a:97:0c:45:3f:19:03: 8f:b0:4b:34:27:3c:98:15:b4:46:bf:67:99:bc:b3:e7:ca:ac: 7b:4f:a7:17:90:d1:51:09:9d:52:aa:c5:fb:9c:96:74:43:28: 8b:b8:95:40:3c:a5:ff:bd:7e:a0:91:21:56:69:b7:7a:d6:f4: 8e:61:7a:3d:e0:9a:b1:e9:e9:c4:5f:ff:24:8a:13:1f:5f:fd: bd:0f:9f:0a:53:98:02:de:c9:ac:d9:8f:ff:05:f2:17:8d:01: d7:4e:a3:da:a1:54:17:ea:8c:8f:3f:20:ae:02:de:47:ee:05: 61:de:e2:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWk0QLs5RbdXHZ5IPmTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjU3NzVhNzA2YWMwMGM4MmZhMjkzMzllMjJlNDMxMDgw OTllNzkwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD Eyg1OTJlZDRkZmZhMTEzMjZhNzc2NDA0ZGNjNDhlYjY3NGYwZjFjODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xGGKYrUs8T48NaW977bUlq4N87q KE/sXo09CkhyxYWrM7pEHOHpJUzVGQTVsUCnV8jxCOnYNCFUOPbxI8qX2IljPaGK px08uifaFBXvYxYI0whnGvnqxAhV1c8A558aHE61vaeWlk/LBvbcZKvGkjZ6wGzB sPnrmMNfzlm0Xy2TP1EQ0uPS2tssgy0tgJewLQc/MyMCscC246w08WVSTraQav0Q hsbcaIL/+pAU0hgoQdTRm3eFPfih4WTlDoNbLPTf92RewKHVownwrlmC/HLvPwK/ T8hfJHgynES3O+RIUNEL5b7wcrgHEYLWhZZCmpGBNguhVWUaF4d3yQLALQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFku1N/6ETJqd2QE3MSOtnTw8ciBMB8GA1UdIwQY MBaAFFUld1pwasAMgvopM54i5DEICZ55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjkt Nzk1NGVkMzhjOGJhLzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjktNzk1NGVkMzhjOGJh LzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4a6yMj8 rqi9hUQAeNQIYmJIyOl4QXzaeulS+XTuhJzO/DD/kKxDstRTJ37WxOrBh2vehYn2 lHEtY7aVI1noWGJWAIR6kEmtlPpAa5XM0R3czBnqMP6mQiLtzWE+gvg1+m+kWk4Y TkbR+Ipi8gxiGf6FfGxT4u+UzoikUYxdXYxfrfw28PT4v8VqlwxFPxkDj7BLNCc8 mBW0Rr9nmbyz58qse0+nF5DRUQmdUqrF+5yWdEMoi7iVQDyl/71+oJEhVmm3etb0 jmF6PeCasenpxF//JIoTH1/9vQ+fClOYAt7JrNmP/wXyF40B106j2qFUF+qMjz8g rgLeR+4FYd7iDA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:15 2025 by rpki-client