This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft File: VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json) Hash identifier: F+Ug7NlJOVtrjKYZJz8uAEKZ+UDehAAvrhIwd3R9llE= Subject key identifier: BB:88:C0:73:04:22:EA:A1:EE:5D:A7:E3:E4:1C:F1:AE:20:2B:2C:6E Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0 Certificate issuer: /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0 Certificate serial: 019B36E9AC06BCB62FD642590B7B13AF11C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 14:00:42 +0000 Manifest this update: Fri 19 Dec 2025 14:00:42 +0000 Manifest next update: Sat 20 Dec 2025 14:00:42 +0000 Files and hashes: 1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=) 2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: GCb+k/19sVpZiD7xWxwOFJPTmGavUKRzi+n8hll8Nv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:ac:06:bc:b6:2f:d6:42:59:0b:7b:13:af:11:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0 Validity Not Before: Dec 19 14:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=bb88c0730422eaa1ee5da7e3e41cf1ae202b2c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:92:d3:9c:6c:eb:29:4e:ec:df:05:a4:94: b3:13:59:81:1b:8e:20:46:30:25:c6:20:16:c0:7c: b0:2a:c9:18:75:56:af:e1:a0:e7:72:01:84:8c:ec: 6f:b0:bd:56:58:09:4c:e1:79:54:eb:12:8d:07:f7: 7e:3a:2f:06:9d:62:bb:3f:51:dd:ad:55:33:32:78: 99:3b:0f:d4:3c:b6:76:e2:3e:7f:9a:ec:df:ed:8d: 37:28:1b:48:0a:e3:7d:21:0f:12:7a:b7:8b:d8:a5: 2f:03:7c:9e:ee:9c:36:ff:56:3a:11:9f:5d:11:50: 6d:46:c4:71:05:6b:77:82:86:17:6d:44:57:fc:54: 37:05:a2:02:e4:6e:85:ed:be:aa:41:ed:c4:39:49: 7c:96:f9:06:ca:32:ce:08:59:c5:14:39:48:5f:26: b9:a9:96:b5:c6:25:06:d0:95:29:67:fe:2c:e6:11: a7:1b:3d:47:9d:38:9a:9f:01:18:eb:83:b6:f9:a6: ca:43:27:09:0b:7a:89:40:8a:5b:24:e0:b4:21:ed: f0:f4:81:1d:36:af:de:a5:e8:19:36:1c:98:52:38: 57:47:47:5f:fc:f1:cb:3f:d3:63:03:44:0e:48:00: 2d:2f:4b:92:87:c2:0b:12:5b:09:55:06:29:93:f2: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:C0:73:04:22:EA:A1:EE:5D:A7:E3:E4:1C:F1:AE:20:2B:2C:6E X509v3 Authority Key Identifier: keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6f:5c:f7:5a:fb:f0:e9:2e:a1:56:ec:93:ca:24:5b:3f:23: 38:b4:c7:3f:62:2f:78:14:02:6f:36:be:44:0d:23:d5:48:e7: f5:4c:26:d2:d1:8a:8f:98:68:65:ab:f6:d3:6e:5f:2f:de:bf: 66:04:75:e0:58:13:84:25:c5:e8:21:04:ce:7c:0c:24:a6:7a: 27:7d:8c:b7:c4:10:07:1a:35:72:c9:84:90:06:9f:6e:eb:99: 01:1f:e2:a6:2f:a1:7f:4e:61:c8:d3:58:37:98:50:04:30:28: 3d:79:7c:97:2e:d9:57:21:dc:2a:9c:2e:38:04:21:5f:b3:0f: 31:0b:a8:20:3a:14:1e:cf:8c:38:96:7d:70:75:ce:ba:9d:0f: d5:8a:64:e1:b5:f6:0d:34:08:54:6d:60:1f:13:e3:2a:44:87: ef:b0:01:bb:3e:46:22:31:2e:a2:e1:83:08:fa:55:ee:65:61: a1:b7:ec:65:4f:2d:d3:73:63:7a:03:08:db:1b:7d:0f:da:dc: f5:0d:3b:f2:3f:95:c5:da:14:75:5a:44:44:bc:0e:0e:50:b4: a0:9d:f4:cb:fb:16:81:f4:51:ab:36:36:97:3e:4e:27:4f:05: cb:b8:72:95:65:bf:67:1a:a4:e1:21:30:65:c7:26:3f:a9:28: 1b:01:40:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26awGvLYv1kJZC3sTrxHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MmM5YTFjOWM0ZmY3OTNlODg4YmQ1ODNkY2E5ODE1Y2M0 NTc0YzAwHhcNMjUxMjE5MTQwMDQyWhcNMjUxMjIwMTQwMDQyWjAzMTEwLwYDVQQD EyhiYjg4YzA3MzA0MjJlYWExZWU1ZGE3ZTNlNDFjZjFhZTIwMmIyYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLqS05xs6ylO7N8FpJSzE1mBG44g RjAlxiAWwHywKskYdVav4aDncgGEjOxvsL1WWAlM4XlU6xKNB/d+Oi8GnWK7P1Hd rVUzMniZOw/UPLZ24j5/muzf7Y03KBtICuN9IQ8SereL2KUvA3ye7pw2/1Y6EZ9d EVBtRsRxBWt3goYXbURX/FQ3BaIC5G6F7b6qQe3EOUl8lvkGyjLOCFnFFDlIXya5 qZa1xiUG0JUpZ/4s5hGnGz1HnTianwEY64O2+abKQycJC3qJQIpbJOC0Ie3w9IEd Nq/epegZNhyYUjhXR0df/PHLP9NjA0QOSAAtL0uSh8ILElsJVQYpk/KUZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuIwHMEIuqh7l2n4+Qc8a4gKyxuMB8GA1UdIwQY MBaAFFUsmhycT/eT6Ii9WD3KmBXMRXTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEt Yjc4ZmY4MGE4MDI3LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEtYjc4ZmY4MGE4MDI3 LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG9c91r7 8OkuoVbsk8okWz8jOLTHP2IveBQCbza+RA0j1Ujn9Uwm0tGKj5hoZav2025fL96/ ZgR14FgThCXF6CEEznwMJKZ6J32Mt8QQBxo1csmEkAafbuuZAR/ipi+hf05hyNNY N5hQBDAoPXl8ly7ZVyHcKpwuOAQhX7MPMQuoIDoUHs+MOJZ9cHXOup0P1Ypk4bX2 DTQIVG1gHxPjKkSH77ABuz5GIjEuouGDCPpV7mVhobfsZU8t03NjegMI2xt9D9rc 9Q078j+VxdoUdVpERLwODlC0oJ30y/sWgfRRqzY2lz5OJ08Fy7hylWW/Zxqk4SEw ZccmP6koGwFAVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:54:44 2025 by rpki-client