This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json) Hash identifier: YkoWxf9uCbxO4J22BhW05IeTOVRQ8qrJvTukMvBEqb0= Subject key identifier: E9:BC:26:BA:21:4D:B4:BE:BC:4E:C0:05:26:8A:BB:78:3C:B6:9C:FD Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6 Certificate serial: 019B1E05FEF9D144A475969AEC0B5862FCB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft Manifest number: 05AC Signing time: Sun 14 Dec 2025 18:01:07 +0000 Manifest this update: Sun 14 Dec 2025 18:01:07 +0000 Manifest next update: Mon 15 Dec 2025 18:01:07 +0000 Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: 9NlfH6hJB4hl5Qokquln7K9Pk8Ou8v5RSjWroTX+dXw=) 2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:fe:f9:d1:44:a4:75:96:9a:ec:0b:58:62:fc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6 Validity Not Before: Dec 14 18:01:07 2025 GMT Not After : Dec 15 18:01:07 2025 GMT Subject: CN=e9bc26ba214db4bebc4ec005268abb783cb69cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:41:26:52:be:b8:62:ba:f4:1b:90:82:b7: 40:9d:c2:0e:e3:df:00:26:54:60:a1:ac:a7:34:0d: f6:c3:c8:64:61:2f:3b:e5:54:83:6a:91:98:09:be: 38:95:c6:4b:68:e1:51:9d:d1:b6:9e:60:87:75:59: f1:77:f7:f9:68:47:47:2a:41:29:b2:af:93:b0:4e: c9:80:c9:cf:83:01:e6:05:bd:66:12:13:17:96:89: a4:9a:09:69:02:6b:15:2d:3f:d0:6c:a5:94:d7:aa: 98:3a:d8:cd:32:5b:22:24:61:cc:32:a7:be:f4:08: 0e:e1:6e:bc:a4:66:c3:28:f1:2d:81:1e:cc:a3:44: ef:ca:d4:8f:7d:ad:18:2d:75:aa:74:ed:71:52:96: 14:38:be:5e:7b:93:f1:a2:8f:0f:61:a9:0b:81:b0: e3:ca:6d:70:71:43:4b:83:44:be:c6:2d:cd:16:ae: a2:e8:0a:65:0d:be:74:77:e7:b6:90:aa:c7:b2:13: 0a:96:2e:44:44:60:92:00:15:47:84:49:bd:45:0c: 07:a5:e4:b7:af:d2:2d:7c:b7:39:c9:14:0a:b1:e2: e4:9b:32:54:77:6d:8c:78:09:f9:58:bc:94:75:3c: 5b:ba:f9:8e:21:31:80:20:1e:89:9f:78:71:15:f0: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BC:26:BA:21:4D:B4:BE:BC:4E:C0:05:26:8A:BB:78:3C:B6:9C:FD X509v3 Authority Key Identifier: keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:34:76:7a:46:8b:78:a3:7a:19:49:94:ef:37:9f:76:f5:0f: 72:56:d7:16:4f:69:f9:b7:c8:b7:69:5e:e3:25:f3:18:9f:f7: 9a:72:8f:ec:30:7e:85:22:d7:05:30:36:94:70:d3:f6:62:19: 84:c5:b4:9b:b0:48:ca:4b:db:8b:5e:f5:d4:12:99:61:29:1c: 38:60:1f:a3:de:a4:40:cb:94:70:36:93:17:d1:97:1c:d1:e8: 36:bb:80:3d:18:4b:d2:c6:09:f9:e9:6d:c8:4e:05:23:11:6f: 16:8e:5b:fd:7f:35:a2:38:5f:13:fa:9a:12:7c:b8:7c:91:ab: 20:28:3c:0e:d9:95:66:e9:97:e8:3c:40:49:f2:f8:fa:51:5b: 98:6f:0f:ed:0b:1e:2b:37:fd:5d:ca:2c:e9:4a:e1:e1:56:21: 12:54:ef:00:7d:a3:b0:56:6f:38:cc:c4:8e:02:62:7c:d8:2c: 68:97:c6:d1:6a:ba:18:e4:fa:e3:0e:69:20:d8:81:cb:3e:2f: 2e:9f:0d:19:1b:22:85:f6:3d:0e:ce:df:6a:76:8f:e2:41:ef: 6d:59:cc:e3:c7:ff:38:2a:9f:72:b5:62:78:4a:20:5d:42:ee: ce:a9:03:02:0b:dd:8a:e9:7d:d9:f9:1a:8d:0b:5d:39:44:f1: ca:b1:31:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBf750USkdZaa7AtYYvy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Mjk4NjQ4NGVjZDAxNTg1N2ViZjYxZGM0YjM2MTMwMmM3 OTE2YzYwHhcNMjUxMjE0MTgwMTA3WhcNMjUxMjE1MTgwMTA3WjAzMTEwLwYDVQQD EyhlOWJjMjZiYTIxNGRiNGJlYmM0ZWMwMDUyNjhhYmI3ODNjYjY5Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQBBJlK+uGK69BuQgrdAncIO498A JlRgoaynNA32w8hkYS875VSDapGYCb44lcZLaOFRndG2nmCHdVnxd/f5aEdHKkEp sq+TsE7JgMnPgwHmBb1mEhMXlomkmglpAmsVLT/QbKWU16qYOtjNMlsiJGHMMqe+ 9AgO4W68pGbDKPEtgR7Mo0TvytSPfa0YLXWqdO1xUpYUOL5ee5Pxoo8PYakLgbDj ym1wcUNLg0S+xi3NFq6i6AplDb50d+e2kKrHshMKli5ERGCSABVHhEm9RQwHpeS3 r9ItfLc5yRQKseLkmzJUd22MeAn5WLyUdTxbuvmOITGAIB6Jn3hxFfC5nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOm8JrohTbS+vE7ABSaKu3g8tpz9MB8GA1UdIwQY MBaAFFUphkhOzQFYV+v2HcSzYTAseRbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMt YTE2NDg4NmZmYzIwLzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMtYTE2NDg4NmZmYzIw LzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDR2ekaL eKN6GUmU7zefdvUPclbXFk9p+bfIt2le4yXzGJ/3mnKP7DB+hSLXBTA2lHDT9mIZ hMW0m7BIykvbi1711BKZYSkcOGAfo96kQMuUcDaTF9GXHNHoNruAPRhL0sYJ+elt yE4FIxFvFo5b/X81ojhfE/qaEny4fJGrICg8DtmVZumX6DxASfL4+lFbmG8P7Qse Kzf9Xcos6Urh4VYhElTvAH2jsFZvOMzEjgJifNgsaJfG0Wq6GOT64w5pINiByz4v Lp8NGRsihfY9Ds7fanaP4kHvbVnM48f/OCqfcrVieEogXULuzqkDAgvdiul92fka jQtdOUTxyrExWw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:03 2025 by rpki-client