This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft File: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json) Hash identifier: KM7XmLkXnwuqFKt9NS90m2wyfrkdJhAsZ4z+nSYJduA= Subject key identifier: A4:08:2A:CF:B0:AD:98:CC:66:79:6D:F0:D0:CC:29:82:5D:A4:B0:E4 Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E Certificate issuer: /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e Certificate serial: 019B59AD1AD5EFF7D293C4C6D16F065BB526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft Manifest number: 1001 Signing time: Fri 26 Dec 2025 08:01:15 +0000 Manifest this update: Fri 26 Dec 2025 08:01:15 +0000 Manifest next update: Sat 27 Dec 2025 08:01:15 +0000 Files and hashes: 1: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: RQja2zTLLDxcl84C1Az7ie1cDGb24kBuefYewRQgies=) 2: y77QbXKRiye418rSbAFqIemComQ.roa (hash: ssUcd0LDD/xfi2UdCI3WRFi3tuO7iUpDjNv4QY4EqSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:1a:d5:ef:f7:d2:93:c4:c6:d1:6f:06:5b:b5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e Validity Not Before: Dec 26 08:01:15 2025 GMT Not After : Dec 27 08:01:15 2025 GMT Subject: CN=a4082acfb0ad98cc66796df0d0cc29825da4b0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:74:0c:af:c4:93:0d:34:04:19:7c:f4:f8:ba: c3:f2:6f:33:8e:2d:97:d3:e7:ba:71:01:f3:24:9d: 82:12:9c:24:4d:90:0e:70:d7:cb:0e:99:69:5b:b6: 81:03:55:b6:46:7d:46:af:41:f5:0d:08:1e:3f:90: 54:f9:29:6b:a4:fc:f6:82:0c:8f:a0:19:1a:d9:09: d0:ac:4f:d3:af:be:e5:5d:c0:c6:2f:d5:49:96:d8: ad:14:bf:b3:55:7e:00:0f:db:be:d0:c2:0b:53:fa: 3d:77:77:68:09:a6:c1:76:70:c6:c1:3d:07:ac:a9: 6b:fe:ca:00:c2:c1:95:a0:f7:7b:ae:0e:6f:96:a2: 62:99:52:80:9c:1b:31:7a:66:f8:76:81:02:59:9f: 6f:76:6e:ba:2a:a2:3f:2e:b8:44:51:bc:9c:77:2d: 6b:32:60:c6:12:67:a1:6c:c7:b0:19:23:4c:33:48: 51:ac:66:c0:1b:c1:9b:f0:1e:42:32:6b:69:5b:92: 29:91:7c:6e:e7:c5:d8:54:20:fa:fa:bd:13:6b:7f: 55:00:58:ea:11:cc:b0:6e:e7:a9:e0:8a:5a:44:c2: f8:9a:92:9f:71:16:ae:62:b8:38:bd:78:11:0f:8c: 89:e8:1c:21:cb:5e:ba:0e:f3:33:d6:d4:a1:db:f4: b3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:08:2A:CF:B0:AD:98:CC:66:79:6D:F0:D0:CC:29:82:5D:A4:B0:E4 X509v3 Authority Key Identifier: keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:44:d2:0b:91:92:89:bc:77:ec:8f:80:03:e7:40:6a:17:31: 33:5d:69:f7:3e:84:3d:90:33:9b:e1:72:08:59:3a:4b:f5:d8: ec:de:00:cd:a6:ba:39:cc:b5:a4:86:3e:68:a3:9c:61:b8:29: 35:0e:5f:22:4c:d6:1f:37:48:54:99:d9:84:78:fa:f0:2d:23: e9:9f:fc:03:39:2c:aa:f1:cf:c6:17:b1:b6:52:8f:86:f2:20: c8:fe:86:fb:e6:c1:06:14:85:c5:1e:2c:6f:57:14:c1:41:73: 02:14:cc:e0:a2:fc:0c:35:2c:69:7c:a7:00:b0:8c:d3:30:d9: eb:db:79:4f:6d:4f:31:23:0e:de:1b:ba:8c:a5:ea:f3:ef:ed: ae:6c:24:a6:0b:99:df:4f:46:e6:0a:3a:56:fb:c4:02:4d:0d: a6:e2:0d:0c:ce:6a:91:9f:b6:b6:e3:a2:86:21:50:51:22:82: 86:ea:a5:b3:e2:ae:3c:8b:85:8b:1f:f4:f9:f7:28:4f:5a:79: 1e:e7:c2:1f:12:19:d8:e1:80:21:71:25:55:f9:14:af:1e:79: 53:c2:f9:23:bf:d7:94:49:5e:3e:09:7d:5c:16:c9:54:00:f6: f5:e6:b4:e6:61:5a:ed:3b:ac:9f:e7:aa:3f:2b:f4:1e:0a:91: 2f:a1:21:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrRrV7/fSk8TG0W8GW7UmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWUwZDczMGUxYTU2ZDU3ZjgyN2UyZTU0NDZkMDFkOGQy NjE1OGUwHhcNMjUxMjI2MDgwMTE1WhcNMjUxMjI3MDgwMTE1WjAzMTEwLwYDVQQD EyhhNDA4MmFjZmIwYWQ5OGNjNjY3OTZkZjBkMGNjMjk4MjVkYTRiMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nQMr8STDTQEGXz0+LrD8m8zji2X 0+e6cQHzJJ2CEpwkTZAOcNfLDplpW7aBA1W2Rn1Gr0H1DQgeP5BU+SlrpPz2ggyP oBka2QnQrE/Tr77lXcDGL9VJltitFL+zVX4AD9u+0MILU/o9d3doCabBdnDGwT0H rKlr/soAwsGVoPd7rg5vlqJimVKAnBsxemb4doECWZ9vdm66KqI/LrhEUbycdy1r MmDGEmehbMewGSNMM0hRrGbAG8Gb8B5CMmtpW5IpkXxu58XYVCD6+r0Ta39VAFjq Ecywbuep4IpaRML4mpKfcRauYrg4vXgRD4yJ6Bwhy166DvMz1tSh2/SzYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQIKs+wrZjMZnlt8NDMKYJdpLDkMB8GA1UdIwQY MBaAFFVeDXMOGlbVf4J+LlRG0B2NJhWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQt MGExY2E1NDkwYWZkLzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQtMGExY2E1NDkwYWZk LzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUTSC5GS ibx37I+AA+dAahcxM11p9z6EPZAzm+FyCFk6S/XY7N4Azaa6Ocy1pIY+aKOcYbgp NQ5fIkzWHzdIVJnZhHj68C0j6Z/8AzksqvHPxhextlKPhvIgyP6G++bBBhSFxR4s b1cUwUFzAhTM4KL8DDUsaXynALCM0zDZ69t5T21PMSMO3hu6jKXq8+/trmwkpguZ 309G5go6VvvEAk0NpuINDM5qkZ+2tuOihiFQUSKChuqls+KuPIuFix/0+fcoT1p5 HufCHxIZ2OGAIXElVfkUrx55U8L5I7/XlElePgl9XBbJVAD29ea05mFa7Tusn+eq Pyv0HgqRL6EhVw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:00 2025 by rpki-client