This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft File: VTmIsu6cEEIX3eFjmCF497TpdGc.mft (raw, json) Hash identifier: dNLpqQkroMpkRWvNmFR3Aqyo0VpC5PvOcHZ5IBqWR6M= Subject key identifier: E6:F3:27:9C:EB:7E:BF:D6:DC:30:D2:6F:34:50:15:6C:2E:7E:E6:F8 Authority key identifier: 55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67 Certificate issuer: /CN=553988b2ee9c104217dde163982178f7b4e97467 Certificate serial: 019AF1D20D2B70623CFE8BB2E7294A6C9C17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft Manifest number: AE Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: VTmIsu6cEEIX3eFjmCF497TpdGc.crl (hash: oPMp4afKgTVuGa+1Jr2l0A1QX4k3xsAb0pe0esMYyRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0d:2b:70:62:3c:fe:8b:b2:e7:29:4a:6c:9c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553988b2ee9c104217dde163982178f7b4e97467 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=e6f3279ceb7ebfd6dc30d26f3450156c2e7ee6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:2c:05:6b:bd:38:ab:7a:87:e3:f2:5a:41: 4b:5d:89:59:9b:6b:2f:57:83:61:91:1e:a3:43:6f: bb:89:00:09:77:da:c4:2c:ce:f1:a3:47:f0:bd:59: 0a:6e:11:0e:e8:a6:0a:d3:69:5a:66:f4:8d:cb:77: ae:eb:29:21:4a:f5:0d:80:37:75:62:82:1a:58:e4: 7b:f8:e8:51:5b:5b:75:de:66:09:ca:0a:31:9d:0b: e0:fd:13:db:3e:af:63:50:5a:64:1e:0f:85:21:e1: 80:d4:0b:fa:9b:1d:8b:a9:6a:9a:b7:04:86:5d:a4: 01:ca:7d:c2:31:47:7b:c1:f8:ee:49:2e:ea:ea:1a: 7f:39:bb:1d:a6:21:84:01:69:66:35:83:57:55:52: 56:3a:2f:8d:2f:15:d6:63:69:1b:cb:28:44:43:25: 80:99:8d:bc:8d:e7:fe:14:6f:82:f0:d4:5a:93:18: 15:7b:bf:41:c9:b9:c8:81:a9:01:08:f9:b3:23:6c: 48:bd:b8:46:6c:3d:37:0c:2c:27:ff:f0:36:26:dc: ab:50:dc:0b:14:ae:f1:0f:c2:30:bc:a3:d3:a0:cb: a2:7b:5d:13:50:5f:af:9b:6c:3a:27:b3:5b:d1:8a: 99:17:af:6b:96:8d:b1:86:04:70:e9:57:8d:93:f9: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F3:27:9C:EB:7E:BF:D6:DC:30:D2:6F:34:50:15:6C:2E:7E:E6:F8 X509v3 Authority Key Identifier: keyid:55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c9:4c:84:ab:7b:69:3e:64:3f:ac:f9:aa:5c:55:2e:40:9f: 41:0c:35:64:6f:d3:dd:3e:86:86:87:4e:6f:01:2c:d8:7a:63: 12:9b:4a:e4:92:d0:9f:b5:b2:e2:15:03:6b:5a:cc:24:98:60: 07:64:9f:f3:8c:2c:7f:3b:eb:0f:c9:4e:8d:e8:69:8e:1e:03: ca:ea:a4:70:ec:54:88:e6:35:38:b2:60:23:fe:09:29:66:7a: b2:b5:c1:eb:63:c6:5b:bc:eb:0b:58:e8:9d:11:8a:bb:b5:f2: 43:a6:3e:db:d5:6f:b0:5b:30:ad:51:f5:56:75:3f:10:6a:0d: 9e:cd:b9:e8:fa:e1:11:a3:d1:3f:79:19:b1:59:d2:85:fe:53: c3:6b:19:b9:d2:a0:e7:74:4b:19:f0:aa:40:39:2b:8a:b9:5d: 8d:55:68:16:5d:5e:2c:af:56:3c:bb:8f:24:ef:82:95:4b:5f: cc:cf:32:b5:aa:9f:81:ea:30:5b:0b:71:d8:d2:69:98:fe:d0: 99:a2:3e:96:6d:81:59:19:dc:e3:f0:00:b7:c9:ef:3d:33:74: d8:07:3b:e2:bb:e0:21:33:57:2d:c1:e1:47:0e:97:95:c2:6a: 37:18:3b:f4:62:d5:fe:ca:7d:78:e4:2d:4f:7d:a6:d4:d6:2e: f0:6d:e4:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g0rcGI8/ouy5ylKbJwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Mzk4OGIyZWU5YzEwNDIxN2RkZTE2Mzk4MjE3OGY3YjRl OTc0NjcwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EyhlNmYzMjc5Y2ViN2ViZmQ2ZGMzMGQyNmYzNDUwMTU2YzJlN2VlNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsswsBWu9OKt6h+PyWkFLXYlZm2sv V4NhkR6jQ2+7iQAJd9rELM7xo0fwvVkKbhEO6KYK02laZvSNy3eu6ykhSvUNgDd1 YoIaWOR7+OhRW1t13mYJygoxnQvg/RPbPq9jUFpkHg+FIeGA1Av6mx2LqWqatwSG XaQByn3CMUd7wfjuSS7q6hp/ObsdpiGEAWlmNYNXVVJWOi+NLxXWY2kbyyhEQyWA mY28jef+FG+C8NRakxgVe79BybnIgakBCPmzI2xIvbhGbD03DCwn//A2JtyrUNwL FK7xD8IwvKPToMuie10TUF+vm2w6J7Nb0YqZF69rlo2xhgRw6VeNk/ncMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObzJ5zrfr/W3DDSbzRQFWwufub4MB8GA1UdIwQY MBaAFFU5iLLunBBCF93hY5ghePe06XRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlRtSXN1NmNFRUlYM2VGam1DRjQ5N1RwZEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80NTcyYzUtZjgzZS00ZTRmLWFiZWEt MzAwYjNhZTUxNWU2LzEvVlRtSXN1NmNFRUlYM2VGam1DRjQ5N1RwZEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80NTcyYzUtZjgzZS00ZTRmLWFiZWEtMzAwYjNhZTUxNWU2 LzEvVlRtSXN1NmNFRUlYM2VGam1DRjQ5N1RwZEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8lMhKt7 aT5kP6z5qlxVLkCfQQw1ZG/T3T6GhodObwEs2HpjEptK5JLQn7Wy4hUDa1rMJJhg B2Sf84wsfzvrD8lOjehpjh4DyuqkcOxUiOY1OLJgI/4JKWZ6srXB62PGW7zrC1jo nRGKu7XyQ6Y+29VvsFswrVH1VnU/EGoNns256PrhEaPRP3kZsVnShf5Tw2sZudKg 53RLGfCqQDkrirldjVVoFl1eLK9WPLuPJO+ClUtfzM8ytaqfgeowWwtx2NJpmP7Q maI+lm2BWRnc4/AAt8nvPTN02Ac74rvgITNXLcHhRw6XlcJqNxg79GLV/sp9eOQt T32m1NYu8G3koA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:05 2025 by rpki-client