This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft File: VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json) Hash identifier: y0r29XJIhMqIdcWoVT0WE63LpBMXMHmCQLbiM9oi0FI= Subject key identifier: E3:CD:2C:A8:37:EB:0C:B3:D3:E6:3E:75:46:8A:BC:B1:CD:CF:3F:8E Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56 Certificate issuer: /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356 Certificate serial: 019AF5AE870DE8E6AB9115594CF9FC0E0FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:00:47 +0000 Manifest this update: Sat 06 Dec 2025 22:00:47 +0000 Manifest next update: Sun 07 Dec 2025 22:00:47 +0000 Files and hashes: 1: O_3sjFQLU8LSk5AiF4s2qKZfXBc.roa (hash: ejuYtetnOewL1sJBmaMYLDQ65Hla2peOL6OXuWr4CIE=) 2: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: PjnR0El/qoKaNdX1nuF8R2LNmn33M8cmAV8/cQdRSMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:87:0d:e8:e6:ab:91:15:59:4c:f9:fc:0e:0f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356 Validity Not Before: Dec 6 22:00:47 2025 GMT Not After : Dec 7 22:00:47 2025 GMT Subject: CN=e3cd2ca837eb0cb3d3e63e75468abcb1cdcf3f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:a0:ea:ef:ae:5b:52:6e:d7:0d:dd:12:ee: 43:89:11:ce:2a:1d:dc:ca:33:23:50:ce:98:a0:76: 3e:f5:33:28:fa:d0:ec:33:02:d6:a6:4f:cb:12:4f: 8f:15:bc:39:e2:ce:9a:20:74:b4:b9:57:0f:a2:9c: d7:eb:39:1b:50:39:24:47:f6:f3:de:96:0c:a2:33: 9c:65:44:f5:06:87:9b:8b:36:51:57:c7:53:f7:08: b9:9d:5e:6b:9b:20:d0:65:93:e2:1b:cf:0b:11:b6: 92:a6:ec:cf:cd:d9:e1:b8:93:8c:c0:4b:28:55:0f: 2b:b5:71:84:d7:45:56:a5:08:af:f3:ad:12:65:c1: d1:39:6f:54:8a:05:ce:6b:76:1e:1b:38:94:f0:c5: 01:e2:52:68:88:2a:42:6b:dc:13:f7:0f:5d:96:8a: cd:b9:6c:98:d7:3b:15:ea:d1:64:97:10:f0:41:ae: f9:54:c4:d9:b0:27:21:2e:93:31:b6:c6:7b:e1:cd: 66:70:cb:d4:ff:b9:da:86:90:3a:0b:cb:f2:7f:fa: 00:e7:ef:b6:da:ce:10:32:fa:fa:05:c0:27:0a:43: 6b:91:44:66:5f:67:1c:dd:26:5b:9b:a6:ea:fd:c8: 3b:3d:ce:47:df:85:ad:01:77:5a:d4:00:43:83:b4: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CD:2C:A8:37:EB:0C:B3:D3:E6:3E:75:46:8A:BC:B1:CD:CF:3F:8E X509v3 Authority Key Identifier: keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f6:47:fb:51:56:48:4c:ca:75:e1:a9:99:38:8c:d9:2a:28: 7d:29:94:a9:8c:32:ce:a6:3e:85:9c:82:0c:9f:25:10:22:7f: 5a:a7:3d:7c:3e:3c:35:44:74:71:e0:c7:7c:1e:a5:8f:68:51: 12:a1:54:16:15:8c:ee:73:7e:bb:94:b2:70:a9:a0:94:2b:ed: 05:40:16:51:df:8c:ab:d2:67:27:c3:3c:79:5c:5e:ef:e5:b2: 8b:e6:d6:65:a1:34:22:57:bb:1b:8d:ff:a2:db:b0:cf:48:93: 3f:ec:f1:02:66:45:a1:55:6d:06:95:e4:78:f7:b1:ea:c8:f7: 62:9f:69:53:1f:44:4a:57:15:8a:1e:17:8b:f2:48:4b:b7:4c: ba:a2:8c:91:8f:7b:50:e0:47:56:be:f2:8c:ba:8b:15:f2:bb: b4:4e:c7:3c:02:c8:37:95:30:bf:65:01:63:fc:5b:e3:3b:29: 8d:6e:7a:54:76:df:01:60:08:14:83:e7:d3:a0:82:b7:72:64: 85:58:77:9f:aa:5c:6b:d5:78:a0:25:8b:b5:3c:e0:7f:7e:c6: ee:57:b3:31:c8:b8:83:13:db:89:1d:8d:24:35:95:b8:3b:62: 70:bd:65:7e:6f:c8:2b:b8:bd:8b:db:97:61:ae:3b:52:62:b2: 1b:72:62:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rocN6OarkRVZTPn8Dg+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MzRlOWJiMGVlNGQzMGMzMWU3NmFmYTY5MWFkYzkyNzli M2YzNTYwHhcNMjUxMjA2MjIwMDQ3WhcNMjUxMjA3MjIwMDQ3WjAzMTEwLwYDVQQD EyhlM2NkMmNhODM3ZWIwY2IzZDNlNjNlNzU0NjhhYmNiMWNkY2YzZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAeg6u+uW1Ju1w3dEu5DiRHOKh3c yjMjUM6YoHY+9TMo+tDsMwLWpk/LEk+PFbw54s6aIHS0uVcPopzX6zkbUDkkR/bz 3pYMojOcZUT1BoebizZRV8dT9wi5nV5rmyDQZZPiG88LEbaSpuzPzdnhuJOMwEso VQ8rtXGE10VWpQiv860SZcHROW9UigXOa3YeGziU8MUB4lJoiCpCa9wT9w9dlorN uWyY1zsV6tFklxDwQa75VMTZsCchLpMxtsZ74c1mcMvU/7nahpA6C8vyf/oA5++2 2s4QMvr6BcAnCkNrkURmX2cc3SZbm6bq/cg7Pc5H34WtAXda1ABDg7QCoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPNLKg36wyz0+Y+dUaKvLHNzz+OMB8GA1UdIwQY MBaAFFU06bsO5NMMMedq+mka3JJ5s/NWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYt NjRmMjMxZGQ0MDQyLzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYtNjRmMjMxZGQ0MDQy LzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvZH+1FW SEzKdeGpmTiM2SoofSmUqYwyzqY+hZyCDJ8lECJ/Wqc9fD48NUR0ceDHfB6lj2hR EqFUFhWM7nN+u5SycKmglCvtBUAWUd+Mq9JnJ8M8eVxe7+Wyi+bWZaE0Ile7G43/ otuwz0iTP+zxAmZFoVVtBpXkePex6sj3Yp9pUx9ESlcVih4Xi/JIS7dMuqKMkY97 UOBHVr7yjLqLFfK7tE7HPALIN5Uwv2UBY/xb4zspjW56VHbfAWAIFIPn06CCt3Jk hVh3n6pca9V4oCWLtTzgf37G7lezMci4gxPbiR2NJDWVuDticL1lfm/IK7i9i9uX Ya47UmKyG3JiqA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:22 2025 by rpki-client