This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft File: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json) Hash identifier: 6GGYe2zb/g4zaOPREZBFcy+qmRpNJzg1PG3ZaNj/dvU= Subject key identifier: AF:69:7F:A0:16:4A:EB:49:6F:8E:CD:B8:F1:7C:E5:23:61:8E:4E:B5 Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Certificate serial: 019AF38A165B66ECC1F293A973CCEC568D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft Manifest number: 0684 Signing time: Sat 06 Dec 2025 12:01:44 +0000 Manifest this update: Sat 06 Dec 2025 12:01:44 +0000 Manifest next update: Sun 07 Dec 2025 12:01:44 +0000 Files and hashes: 1: 2ce8BrFiQRs3VJ_Zautm0oa7EbU.roa (hash: fxQEApFN+/13TxFUm2ypGOLA2qi1xg5Iu/RGfT9GZ/0=) 2: 3YupD0E1MQgwS1xrKNs025XGrvU.roa (hash: 21HOFTvc6Ct7i0rTAQHqk7NP6aZsXA22C7NraCUFkZ8=) 3: 5aiNMpTbEsFotHPhSom_BLzlcx4.roa (hash: UmVtbJKGVJKhOV0/7a2vDBmEaTfGr1/DLMtgALmVgoc=) 4: A3WhCggzu4rYOo1yOfgZK9-xHYQ.roa (hash: 6lM2sKn0Kt/HS6iHxtxrLQeD9LqB5QoOTReZqqvo3Jc=) 5: Q9vzkSdQF14ioB3GAw9P4jbjWRM.roa (hash: 07c/KOp4+Vb2VyrM0tZBqnClLw7pWpgvcj2JSiSJlc4=) 6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: 4IqLj+6zrURFymdV4Rvhh7IzqoR1agNhWiVKBn9yid8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:16:5b:66:ec:c1:f2:93:a9:73:cc:ec:56:8d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Validity Not Before: Dec 6 12:01:44 2025 GMT Not After : Dec 7 12:01:44 2025 GMT Subject: CN=af697fa0164aeb496f8ecdb8f17ce523618e4eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:eb:ad:96:d9:c1:88:59:7c:82:2f:6b:18:77: 47:76:33:4d:81:fb:ec:b4:bc:bb:9e:3b:15:0c:48: ca:25:94:dc:68:4c:b5:15:d4:a6:6f:80:b5:17:c4: d4:c0:cc:ea:b6:bd:1c:16:ec:49:d7:bb:c2:b8:41: e7:7e:91:8b:80:12:9a:b1:43:0e:b2:14:be:11:57: ad:a0:d1:89:6f:4d:67:fb:b0:43:c9:f3:74:ba:1e: 05:1c:c5:ef:a2:c4:ab:0b:7f:13:bc:09:89:f4:a9: ee:14:a5:62:f6:e1:3a:2e:d9:62:ec:72:00:32:af: e9:bd:c1:73:a4:f2:f9:97:dc:58:1f:dd:6b:ca:fb: 8f:b1:81:75:b6:41:b8:95:36:1f:81:40:8e:ba:01: 29:a5:e3:8a:ce:9d:f7:e6:8f:56:60:a6:e1:7f:a4: b2:60:ea:03:4d:ba:0f:50:04:7e:6f:f9:6a:29:de: 2a:88:25:70:7d:bd:d9:e4:ac:d9:9e:d6:c7:0e:02: ed:c8:8f:80:af:b5:71:ab:36:d3:52:c0:e3:40:91: c0:4e:83:40:8a:8a:af:eb:bc:65:9c:d7:19:e8:c2: 28:59:9b:36:7a:86:56:41:a5:03:85:06:44:1e:72: 64:ac:47:54:6b:95:43:2b:93:10:ca:63:88:6a:e4: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:69:7F:A0:16:4A:EB:49:6F:8E:CD:B8:F1:7C:E5:23:61:8E:4E:B5 X509v3 Authority Key Identifier: keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a9:06:16:05:72:22:12:aa:6b:08:49:05:a0:51:d7:fb:80: 7a:b7:dd:e3:34:91:7b:f5:b8:8a:ef:2e:3b:d2:1c:6e:05:53: 91:b9:e2:10:dd:54:a5:43:a4:08:19:bb:e2:10:3f:e9:14:ce: 71:c1:29:49:07:df:59:78:20:90:6c:b1:5d:15:40:54:4e:bc: 8a:e5:57:08:e1:a8:9f:65:0e:e9:66:3d:fb:3d:15:28:f1:5b: 63:a4:2a:17:6d:6b:f9:60:81:46:0a:5d:17:05:ed:b1:8a:fa: 7d:06:c7:77:b7:31:eb:6d:c9:b3:e0:40:e3:14:45:61:35:34: 3a:4e:0a:8f:51:24:68:af:bc:b5:ba:a0:36:23:cb:fb:7a:2c: 51:97:11:09:91:3c:20:50:fe:af:e2:56:bf:0f:2e:1d:5f:10: f6:66:fe:f8:47:5e:d4:65:e8:00:a1:8e:63:f4:e2:bb:78:d6: 32:e3:09:67:b9:82:06:68:1e:43:9a:5f:59:c5:63:20:ba:fe: b7:f6:09:de:4f:42:cf:35:30:10:60:b2:01:76:35:3a:eb:9b: 63:6a:9b:eb:1d:6d:54:c7:3a:fa:74:35:4d:f0:7e:db:3b:58: 01:9c:35:09:8a:fc:24:b9:6a:f4:63:e1:42:e4:b5:70:77:eb: ab:5d:de:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihZbZuzB8pOpc8zsVo1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm YmUwOTkwHhcNMjUxMjA2MTIwMTQ0WhcNMjUxMjA3MTIwMTQ0WjAzMTEwLwYDVQQD EyhhZjY5N2ZhMDE2NGFlYjQ5NmY4ZWNkYjhmMTdjZTUyMzYxOGU0ZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eutltnBiFl8gi9rGHdHdjNNgfvs tLy7njsVDEjKJZTcaEy1FdSmb4C1F8TUwMzqtr0cFuxJ17vCuEHnfpGLgBKasUMO shS+EVetoNGJb01n+7BDyfN0uh4FHMXvosSrC38TvAmJ9KnuFKVi9uE6Ltli7HIA Mq/pvcFzpPL5l9xYH91ryvuPsYF1tkG4lTYfgUCOugEppeOKzp335o9WYKbhf6Sy YOoDTboPUAR+b/lqKd4qiCVwfb3Z5KzZntbHDgLtyI+Ar7VxqzbTUsDjQJHAToNA ioqv67xlnNcZ6MIoWZs2eoZWQaUDhQZEHnJkrEdUa5VDK5MQymOIauQlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9pf6AWSutJb47NuPF85SNhjk61MB8GA1UdIwQY MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt M2FhMjIyN2JhZGZlLzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqkGFgVy IhKqawhJBaBR1/uAerfd4zSRe/W4iu8uO9IcbgVTkbniEN1UpUOkCBm74hA/6RTO ccEpSQffWXggkGyxXRVAVE68iuVXCOGon2UO6WY9+z0VKPFbY6QqF21r+WCBRgpd FwXtsYr6fQbHd7cx623Js+BA4xRFYTU0Ok4Kj1EkaK+8tbqgNiPL+3osUZcRCZE8 IFD+r+JWvw8uHV8Q9mb++Ede1GXoAKGOY/Tiu3jWMuMJZ7mCBmgeQ5pfWcVjILr+ t/YJ3k9CzzUwEGCyAXY1OuubY2qb6x1tVMc6+nQ1TfB+2ztYAZw1CYr8JLlq9GPh QuS1cHfrq13eJw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:25 2025 by rpki-client