This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json) Hash identifier: vvaNYGkJBkmTR1aGhjD9R5/HWHykPljTjHn0spwWZl4= Subject key identifier: FC:D8:5E:55:3C:45:99:48:91:25:73:05:C9:F5:E8:12:A7:B5:18:0B Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Certificate serial: 019B446E7B5EA8999FAE75E015744841FCBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 05:00:49 +0000 Manifest this update: Mon 22 Dec 2025 05:00:49 +0000 Manifest next update: Tue 23 Dec 2025 05:00:49 +0000 Files and hashes: 1: NPMvSU7VVQ4X5ghXddqolgoFaS8.roa (hash: zvFD6huqKjrom3pCrtLJ4t9UWyxCh2M+E0umnAtiNE4=) 2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: YaI2SBDMAYteVt0qWYBmfstluV/eqPCdTRn/sL6pFRo=) 3: XpM0u13UQnx3pztpCByG6UxZ-2I.roa (hash: Mu57J8NWXi6FyZjx7jHPGC71AKi12J1qvmJX7D2YHPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:7b:5e:a8:99:9f:ae:75:e0:15:74:48:41:fc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Validity Not Before: Dec 22 05:00:49 2025 GMT Not After : Dec 23 05:00:49 2025 GMT Subject: CN=fcd85e553c45994891257305c9f5e812a7b5180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:27:05:63:dc:a7:f7:af:35:63:10:27:50: 08:de:ac:70:dc:a4:7a:6c:09:0d:d6:3c:19:4c:95: eb:8f:37:65:af:9c:d0:21:9d:17:8b:bb:06:bf:ae: fc:44:7e:43:97:bc:ee:65:66:34:d6:89:56:50:24: ba:bb:3b:1c:21:ce:f8:71:66:c5:e7:dd:a3:56:0a: 89:76:d5:e0:6d:7c:67:6f:0a:d1:97:5f:01:ae:82: 19:62:fa:bb:c4:c8:2c:a9:ac:8f:d6:ec:78:d3:9c: 4c:f8:93:e1:7e:53:4a:d7:e2:bc:30:10:fd:4f:8f: fe:cd:e0:78:12:38:85:88:3b:f0:1a:22:3e:ca:a0: 20:4f:b1:4d:f0:e1:e0:54:42:ee:08:5f:a0:bd:eb: 46:25:19:03:27:34:2a:db:e2:69:48:58:4c:11:38: e6:2e:cf:8e:8e:b0:3e:b0:e1:c1:4c:3c:b5:66:ba: 7d:a3:43:5a:2d:76:a4:b7:7f:9d:fa:27:06:ed:84: e2:2d:d9:f4:8d:70:2e:b6:3f:7b:fc:2a:c9:f6:e7: 7e:1e:6e:28:8c:8f:af:09:2f:65:9d:7f:22:6a:52: 22:4c:03:c0:8f:bd:19:39:18:15:6b:8b:0e:ee:21: ca:43:9e:73:1f:49:0e:55:62:c9:96:3f:22:13:53: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D8:5E:55:3C:45:99:48:91:25:73:05:C9:F5:E8:12:A7:B5:18:0B X509v3 Authority Key Identifier: keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ff:9b:a0:ed:a2:ff:81:34:c9:3d:2a:ba:58:ff:e1:2c:1a: bb:93:c5:47:ee:cb:36:af:9f:ce:11:75:9b:f9:f8:71:b0:d3: a8:cb:e6:aa:eb:b4:b7:d3:69:a3:9b:c3:d2:5a:c9:9d:65:e5: e8:9c:7b:e0:2c:fb:b3:a9:d1:f7:ad:1b:61:08:89:1b:9c:cc: 9e:1d:86:90:0a:60:27:e2:6f:1e:ad:16:14:54:82:3a:f8:93: 3e:81:2e:a6:bf:49:ee:da:d0:43:da:ad:22:3b:e8:83:19:81: 1f:fd:fa:a6:cf:e3:40:e7:e3:14:74:3a:2d:89:a4:34:6f:9b: 97:6c:b6:4a:ba:48:50:23:78:1e:f6:05:27:55:c6:8f:43:4e: 98:31:f0:6c:f2:eb:75:fd:41:74:b9:3b:69:40:5e:46:97:3d: 23:96:a9:a5:24:67:70:76:53:68:d5:f0:e6:43:d9:55:1d:e5: 92:de:6c:5d:0b:b5:33:a4:0b:e3:ca:40:e5:a6:e2:2b:7a:31: 58:fa:aa:bd:fc:8c:05:14:a0:77:d5:4e:28:3b:fa:d9:c0:46: 84:0f:a9:5d:cf:aa:c1:38:8a:db:ef:14:6e:3b:70:53:7c:f8: 7d:5a:44:38:8e:c5:cd:1e:22:cf:3c:e8:b2:5f:62:d1:52:f5: 51:9e:9e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbnteqJmfrnXgFXRIQfy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy YzA5ZjkwHhcNMjUxMjIyMDUwMDQ5WhcNMjUxMjIzMDUwMDQ5WjAzMTEwLwYDVQQD EyhmY2Q4NWU1NTNjNDU5OTQ4OTEyNTczMDVjOWY1ZTgxMmE3YjUxODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/UnBWPcp/evNWMQJ1AI3qxw3KR6 bAkN1jwZTJXrjzdlr5zQIZ0Xi7sGv678RH5Dl7zuZWY01olWUCS6uzscIc74cWbF 592jVgqJdtXgbXxnbwrRl18BroIZYvq7xMgsqayP1ux405xM+JPhflNK1+K8MBD9 T4/+zeB4EjiFiDvwGiI+yqAgT7FN8OHgVELuCF+gvetGJRkDJzQq2+JpSFhMETjm Ls+OjrA+sOHBTDy1Zrp9o0NaLXakt3+d+icG7YTiLdn0jXAutj97/CrJ9ud+Hm4o jI+vCS9lnX8ialIiTAPAj70ZORgVa4sO7iHKQ55zH0kOVWLJlj8iE1NZewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzYXlU8RZlIkSVzBcn16BKntRgLMB8GA1UdIwQY MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt Y2U4ZGQ2ODk4YjI3LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3 LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf+boO2i /4E0yT0qulj/4Swau5PFR+7LNq+fzhF1m/n4cbDTqMvmquu0t9Npo5vD0lrJnWXl 6Jx74Cz7s6nR960bYQiJG5zMnh2GkApgJ+JvHq0WFFSCOviTPoEupr9J7trQQ9qt IjvogxmBH/36ps/jQOfjFHQ6LYmkNG+bl2y2SrpIUCN4HvYFJ1XGj0NOmDHwbPLr df1BdLk7aUBeRpc9I5appSRncHZTaNXw5kPZVR3lkt5sXQu1M6QL48pA5abiK3ox WPqqvfyMBRSgd9VOKDv62cBGhA+pXc+qwTiK2+8UbjtwU3z4fVpEOI7FzR4izzzo sl9i0VL1UZ6e5g== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:01 2025 by rpki-client