This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft File: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json) Hash identifier: 3wN1+ul1SKQcVjbanKXuCPIHpBPj5IhBqg+bSHLpWoA= Subject key identifier: 13:57:E8:AC:DC:CE:D3:9E:54:56:04:B3:F9:25:2D:DB:88:07:FE:17 Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B Certificate issuer: /CN=555988478690ad8d81149aa5c4cae75af5385f1b Certificate serial: 019B3721324B60B7A2513DA00687952A1F49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft Manifest number: 0981 Signing time: Fri 19 Dec 2025 15:01:21 +0000 Manifest this update: Fri 19 Dec 2025 15:01:21 +0000 Manifest next update: Sat 20 Dec 2025 15:01:21 +0000 Files and hashes: 1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: bzg8uj1mwWLr8hbFhgu/vZX4wpK/7UL5a1e//AotAn0=) 2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:32:4b:60:b7:a2:51:3d:a0:06:87:95:2a:1f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b Validity Not Before: Dec 19 15:01:21 2025 GMT Not After : Dec 20 15:01:21 2025 GMT Subject: CN=1357e8acdcced39e545604b3f9252ddb8807fe17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:60:3f:b1:fd:49:39:78:74:c4:cd:ab:0d: a4:73:7a:84:a2:c1:9d:89:20:45:0e:d4:c1:52:d5: f1:e8:68:88:cf:15:c3:65:76:fc:af:5a:4a:9e:26: 0e:f9:f3:8d:8c:f4:a2:fd:45:bb:08:b6:a8:36:23: 5e:4f:5d:c2:f8:00:93:95:c8:c7:33:a4:b2:bd:87: e5:b7:e1:cd:b6:f8:98:72:d1:10:1f:7c:e4:46:27: f4:d1:80:c0:ad:0d:5c:25:d7:55:ec:c8:02:35:46: 82:f2:2b:4b:2b:f1:fc:64:52:ef:9d:97:84:4c:41: 9c:7f:1e:1a:56:ef:9c:99:a0:a0:43:b8:6e:51:e9: 9f:d2:14:bc:96:3b:9b:a1:05:4c:fe:ad:17:aa:9d: b9:06:71:f2:a4:33:3d:1c:f7:4d:9b:9d:f1:9d:78: 47:0e:bc:f7:ae:f5:70:15:7a:c6:6e:f2:78:90:85: b3:db:f4:0e:5e:ef:b0:b8:74:de:b3:e9:03:f2:2f: f8:af:13:f9:92:4f:4a:cf:7a:d3:06:b5:25:70:a4: 81:1a:7b:a4:be:1d:81:12:99:30:d7:79:00:59:07: 95:09:fe:e6:4a:52:52:dd:21:12:ba:47:be:96:49: 04:ae:ad:ee:bd:01:12:40:f3:b1:78:04:70:cf:6d: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:E8:AC:DC:CE:D3:9E:54:56:04:B3:F9:25:2D:DB:88:07:FE:17 X509v3 Authority Key Identifier: keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:20:e9:7e:a7:76:e7:f5:16:67:85:0b:4e:8c:8c:50:3a:57: a2:de:30:b6:ff:8b:b4:32:66:24:5f:27:20:40:f5:71:02:78: d9:78:72:5c:d8:27:94:17:7d:90:d2:ca:60:c2:b9:43:58:d6: c2:5e:a2:4d:2f:75:bc:a3:ba:c0:f3:96:20:57:b9:83:0a:f6: 45:51:cf:8a:07:69:32:d9:1a:06:2e:94:8b:75:fd:93:22:d8: 93:7c:54:84:9a:77:74:ae:63:01:17:7f:c6:9b:52:95:d9:63: 77:a6:a4:b3:fd:ac:a7:f7:81:c3:05:5a:d5:aa:50:fc:77:5e: f2:16:e5:47:f9:e3:4a:4f:33:b3:4c:d6:60:2e:da:cd:c7:36: b3:a5:54:ee:37:a7:19:15:bb:ca:c8:51:a5:7f:13:97:00:20: 43:56:43:17:65:2d:9a:b6:92:cb:6b:20:13:09:fc:14:b7:b8: 7e:ec:2b:e5:2f:23:aa:1f:ae:ad:0e:75:64:92:8f:5e:99:ab: 26:78:e1:6a:c2:5b:67:4b:11:40:8f:e5:26:fa:b4:b1:23:cc: a7:25:77:b5:0b:20:cb:fe:f6:d1:7c:dc:cb:88:dd:56:6b:5f: c1:09:5f:2e:d4:a8:97:ee:6e:a5:11:a0:d7:5f:17:8f:98:02: 96:73:f9:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ITJLYLeiUT2gBoeVKh9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NTk4ODQ3ODY5MGFkOGQ4MTE0OWFhNWM0Y2FlNzVhZjUz ODVmMWIwHhcNMjUxMjE5MTUwMTIxWhcNMjUxMjIwMTUwMTIxWjAzMTEwLwYDVQQD EygxMzU3ZThhY2RjY2VkMzllNTQ1NjA0YjNmOTI1MmRkYjg4MDdmZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVdgP7H9STl4dMTNqw2kc3qEosGd iSBFDtTBUtXx6GiIzxXDZXb8r1pKniYO+fONjPSi/UW7CLaoNiNeT13C+ACTlcjH M6SyvYflt+HNtviYctEQH3zkRif00YDArQ1cJddV7MgCNUaC8itLK/H8ZFLvnZeE TEGcfx4aVu+cmaCgQ7huUemf0hS8ljuboQVM/q0Xqp25BnHypDM9HPdNm53xnXhH Drz3rvVwFXrGbvJ4kIWz2/QOXu+wuHTes+kD8i/4rxP5kk9Kz3rTBrUlcKSBGnuk vh2BEpkw13kAWQeVCf7mSlJS3SESuke+lkkErq3uvQESQPOxeARwz21SOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNX6KzcztOeVFYEs/klLduIB/4XMB8GA1UdIwQY MBaAFFVZiEeGkK2NgRSapcTK51r1OF8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt OGQxZGE5ZjM4YTBiLzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi LzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyDpfqd2 5/UWZ4ULToyMUDpXot4wtv+LtDJmJF8nIED1cQJ42XhyXNgnlBd9kNLKYMK5Q1jW wl6iTS91vKO6wPOWIFe5gwr2RVHPigdpMtkaBi6Ui3X9kyLYk3xUhJp3dK5jARd/ xptSldljd6aks/2sp/eBwwVa1apQ/Hde8hblR/njSk8zs0zWYC7azcc2s6VU7jen GRW7yshRpX8TlwAgQ1ZDF2UtmraSy2sgEwn8FLe4fuwr5S8jqh+urQ51ZJKPXpmr JnjhasJbZ0sRQI/lJvq0sSPMpyV3tQsgy/720Xzcy4jdVmtfwQlfLtSol+5upRGg 118Xj5gClnP5EA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:27:08 2025 by rpki-client