This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft File: VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json) Hash identifier: LZLqWsMp+IXQUUarNMicjyfCGQHDfLpzJLNDWLwbMlc= Subject key identifier: 4F:59:B7:E7:7A:50:F9:ED:E4:7D:F7:21:B0:45:48:21:F0:BE:9C:9E Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43 Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43 Certificate serial: 019B5A1AE2666867541790967986782F86A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft Manifest number: 0A78 Signing time: Fri 26 Dec 2025 10:01:09 +0000 Manifest this update: Fri 26 Dec 2025 10:01:09 +0000 Manifest next update: Sat 27 Dec 2025 10:01:09 +0000 Files and hashes: 1: Lh0KUJ3V35wYz2i99gYTrV6dktc.roa (hash: Svr4T1ZPQxakxnAH0s4zkcIB6ko9R8TkXB+xdSHMUeE=) 2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: CkLKxT+vwMc2swB7Bs4PdprJ7bsZk7Ij3+vWFRkMJNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:e2:66:68:67:54:17:90:96:79:86:78:2f:86:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43 Validity Not Before: Dec 26 10:01:09 2025 GMT Not After : Dec 27 10:01:09 2025 GMT Subject: CN=4f59b7e77a50f9ede47df721b0454821f0be9c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:64:78:7c:d8:75:57:66:6f:7d:82:2a:97: fc:99:ce:93:2d:09:24:ff:b2:48:c0:70:4d:9b:89: 68:9c:e7:43:08:37:86:e6:45:a9:da:77:c4:4a:4e: b9:ed:3c:16:67:a1:6b:8f:d0:64:3c:66:30:95:70: 39:d4:0e:65:88:1f:ea:d2:55:5c:d3:a3:c8:21:a7: 3f:0b:d3:d7:cd:ae:79:52:ed:27:35:64:4b:c0:71: e2:d7:f9:38:43:da:a2:9b:4b:b5:6d:a7:88:b7:08: b2:3e:51:29:3a:5c:e2:0b:05:5a:7d:5e:0e:92:dd: 70:ab:87:d0:78:65:78:ff:f4:28:d2:d0:8e:c1:e5: 7a:97:a8:cd:01:9d:de:a3:b6:d9:84:ba:a9:58:80: 10:97:72:9d:85:db:6c:67:05:4f:83:6d:05:2a:f7: 1f:8b:20:9c:1e:4d:57:30:ee:03:66:ca:3d:4d:2d: c0:59:b2:6b:43:ab:c8:a8:94:08:0e:7e:b0:ed:00: ba:67:72:da:91:ba:f6:de:1b:e6:b4:74:34:e7:56: fd:eb:90:5b:68:16:f8:0d:bb:fc:c4:4f:88:2a:b4: 33:05:a3:34:be:02:cf:62:0d:4a:3c:49:d6:60:73: ea:64:cb:30:90:7a:71:de:18:0a:21:ee:a9:0d:58: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:B7:E7:7A:50:F9:ED:E4:7D:F7:21:B0:45:48:21:F0:BE:9C:9E X509v3 Authority Key Identifier: keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c5:7f:9d:d2:99:96:24:04:97:4a:a3:e6:54:25:46:2e:6b: 24:d1:11:63:db:cb:1a:f3:e9:af:c5:f1:64:2a:be:a5:04:25: 70:1a:0e:2d:63:1e:66:7e:06:ba:d6:07:0c:c9:db:f5:9c:7e: 5b:fb:fb:18:6b:ef:f2:48:4f:fc:b3:6c:b1:d6:2a:e6:3e:d7: 35:f0:e7:1a:de:35:94:ba:01:34:d5:eb:bf:cc:98:f2:38:82: de:a6:70:09:7b:98:2c:af:ac:0d:b1:d8:4d:cd:d0:cd:d7:18: 91:5d:73:a6:17:4e:b5:db:1e:b4:37:10:8b:ee:e6:cb:31:c3: 95:e0:c2:c0:75:ed:0e:ea:02:c8:4c:9f:1f:2a:89:13:c8:a7: 0c:4d:df:99:db:1d:0b:a2:99:00:1c:0e:90:41:65:ff:de:5f: 5f:f0:01:03:4a:bc:8b:5b:33:00:c2:d0:e2:f8:b1:79:37:f8: 69:3b:ea:6c:58:54:5d:a5:74:80:e6:df:7b:4f:6f:b9:19:d2: 8b:8a:c1:10:80:e2:ad:69:65:d4:b5:d1:7a:0e:7a:23:d6:34: d8:61:da:bf:31:b7:98:30:91:ef:dd:2c:11:c1:fa:80:4d:14: e9:0b:0e:ed:1a:c3:52:68:42:18:9e:f0:5a:9a:2c:5f:67:c3: 3a:22:55:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGuJmaGdUF5CWeYZ4L4aoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NjEwYTU5ZGRmZmJkMjRlZTRiMjk5ZTliMjRiMWJmMDM2 ZjhlNDMwHhcNMjUxMjI2MTAwMTA5WhcNMjUxMjI3MTAwMTA5WjAzMTEwLwYDVQQD Eyg0ZjU5YjdlNzdhNTBmOWVkZTQ3ZGY3MjFiMDQ1NDgyMWYwYmU5YzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDVkeHzYdVdmb32CKpf8mc6TLQkk /7JIwHBNm4lonOdDCDeG5kWp2nfESk657TwWZ6Frj9BkPGYwlXA51A5liB/q0lVc 06PIIac/C9PXza55Uu0nNWRLwHHi1/k4Q9qim0u1baeItwiyPlEpOlziCwVafV4O kt1wq4fQeGV4//Qo0tCOweV6l6jNAZ3eo7bZhLqpWIAQl3KdhdtsZwVPg20FKvcf iyCcHk1XMO4DZso9TS3AWbJrQ6vIqJQIDn6w7QC6Z3Lakbr23hvmtHQ051b965Bb aBb4Dbv8xE+IKrQzBaM0vgLPYg1KPEnWYHPqZMswkHpx3hgKIe6pDVgZ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9Zt+d6UPnt5H33IbBFSCHwvpyeMB8GA1UdIwQY MBaAFFVhClnd/70k7kspnpsksb8Db45DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUt OWZiNDE1YjA5YjVlLzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUtOWZiNDE1YjA5YjVl LzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8V/ndKZ liQEl0qj5lQlRi5rJNERY9vLGvPpr8XxZCq+pQQlcBoOLWMeZn4GutYHDMnb9Zx+ W/v7GGvv8khP/LNssdYq5j7XNfDnGt41lLoBNNXrv8yY8jiC3qZwCXuYLK+sDbHY Tc3QzdcYkV1zphdOtdsetDcQi+7myzHDleDCwHXtDuoCyEyfHyqJE8inDE3fmdsd C6KZABwOkEFl/95fX/ABA0q8i1szAMLQ4vixeTf4aTvqbFhUXaV0gObfe09vuRnS i4rBEIDirWll1LXReg56I9Y02GHavzG3mDCR790sEcH6gE0U6QsO7RrDUmhCGJ7w WposX2fDOiJV1A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:03 2025 by rpki-client