This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft File: VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json) Hash identifier: qFS3lI42qMrEOQWIpFbFapCP0eS1B1QvAVxzWggdWZY= Subject key identifier: 0A:EC:1A:BB:B2:7C:5C:1B:F0:69:0A:10:30:B7:5C:54:15:34:E4:E4 Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 Certificate issuer: /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Certificate serial: 019B3D5A0AC996C5BD2308C6CB026BB67754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft Manifest number: 0286 Signing time: Sat 20 Dec 2025 20:01:09 +0000 Manifest this update: Sat 20 Dec 2025 20:01:09 +0000 Manifest next update: Sun 21 Dec 2025 20:01:09 +0000 Files and hashes: 1: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (hash: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=) 2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: mufyGJh/3o8TcHNa6AlyGbH//NGUfHxdjtaKGllGdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:0a:c9:96:c5:bd:23:08:c6:cb:02:6b:b6:77:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Validity Not Before: Dec 20 20:01:09 2025 GMT Not After : Dec 21 20:01:09 2025 GMT Subject: CN=0aec1abbb27c5c1bf0690a1030b75c541534e4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:8e:13:37:78:6a:9a:87:4a:54:8e:ad:20: 9a:9a:6e:ac:56:d4:5e:89:03:62:c8:46:df:e3:22: 42:2c:36:46:ff:1c:08:67:47:b2:8c:57:ea:8c:82: 27:4e:f7:e6:5d:02:85:d9:94:b0:5a:69:18:81:69: aa:ab:47:b5:e9:7e:9f:0c:95:cb:19:29:16:09:ba: 06:39:a7:98:5d:6e:fd:c3:b5:ab:6c:42:cb:17:3b: 7d:dd:4a:9c:a3:d3:40:c1:17:57:ba:46:f8:28:aa: 61:aa:53:b5:25:66:17:eb:a6:e2:55:7f:be:42:b4: d5:33:e7:4c:62:a9:95:ab:f8:de:f9:b6:8a:9c:7a: 3f:3b:f1:8b:41:8d:04:8f:12:5b:48:da:ad:41:4e: 96:ce:27:e9:ad:c9:b6:da:e5:03:42:57:02:7c:17: 45:5e:b1:14:5c:a6:a7:d2:b1:5f:5d:07:fe:81:45: 15:01:0f:4b:74:5c:74:e5:1d:f7:7f:9c:d4:a4:5e: 0b:17:19:da:61:7b:b7:37:66:e5:29:72:6b:3b:8b: 43:26:64:60:0a:f0:d0:45:e8:7b:a3:b4:9c:f8:fa: 4c:84:e7:de:8f:b2:6f:c9:7e:a9:1f:75:5c:b7:09: b7:5c:9f:b3:79:0d:0a:f7:58:25:4b:02:e8:fe:f3: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EC:1A:BB:B2:7C:5C:1B:F0:69:0A:10:30:B7:5C:54:15:34:E4:E4 X509v3 Authority Key Identifier: keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bd:ad:fb:a7:40:10:81:db:5d:69:c1:1c:b9:82:f2:59:f8: a8:57:85:78:40:56:b3:f5:e7:cd:2b:e8:38:7d:f7:96:f4:f3: b7:59:ce:e0:ee:b9:92:4c:1c:84:d6:08:71:52:1c:a8:9d:46: 8b:ed:37:1a:2a:dd:40:84:a1:c9:ba:9a:78:7e:3f:97:c7:05: 1b:b0:d3:2d:ca:b4:aa:55:13:28:ec:39:82:93:b9:df:f3:bc: 53:a8:dc:ec:d2:d8:db:0c:89:9b:2e:86:88:87:b2:92:6b:c2: 3a:cc:82:72:fc:f0:fd:c0:de:e5:33:31:07:c4:81:26:97:e0: f9:89:50:36:90:4c:a1:4b:9f:e7:99:e1:b5:ca:b3:10:27:44: 70:a5:ba:e1:fd:f3:23:5f:87:ac:e1:48:7a:41:a0:b2:e4:af: 2d:04:d4:04:1f:c4:76:78:a5:4b:c7:39:8b:23:86:e3:dd:29: 43:ec:c5:cb:b8:23:fd:a4:ef:40:04:b6:15:66:47:c2:35:ae: 74:fd:64:3c:ff:9a:0d:6e:07:3d:f1:1e:1a:8f:e4:cd:2e:07: 79:56:35:a4:49:0a:b0:da:a8:99:e8:e1:e8:2d:db:75:c5:71: 7b:e1:eb:1c:51:75:79:87:21:53:5a:e8:32:c4:87:47:66:4d: e1:1b:23:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WgrJlsW9IwjGywJrtndUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWJmM2QxZDQ1ODgyNTg3ZjNiZmJhMjc0YjJmOGI5YTQ1 YmM4OTkwHhcNMjUxMjIwMjAwMTA5WhcNMjUxMjIxMjAwMTA5WjAzMTEwLwYDVQQD EygwYWVjMWFiYmIyN2M1YzFiZjA2OTBhMTAzMGI3NWM1NDE1MzRlNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOmOEzd4apqHSlSOrSCamm6sVtRe iQNiyEbf4yJCLDZG/xwIZ0eyjFfqjIInTvfmXQKF2ZSwWmkYgWmqq0e16X6fDJXL GSkWCboGOaeYXW79w7WrbELLFzt93Uqco9NAwRdXukb4KKphqlO1JWYX66biVX++ QrTVM+dMYqmVq/je+baKnHo/O/GLQY0EjxJbSNqtQU6Wzifprcm22uUDQlcCfBdF XrEUXKan0rFfXQf+gUUVAQ9LdFx05R33f5zUpF4LFxnaYXu3N2blKXJrO4tDJmRg CvDQReh7o7Sc+PpMhOfej7JvyX6pH3Vctwm3XJ+zeQ0K91glSwLo/vOEQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArsGruyfFwb8GkKEDC3XFQVNOTkMB8GA1UdIwQY MBaAFFVb89HUWIJYfzv7onSy+LmkW8iZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEt ZTIwYmI2MGEyNzkzLzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEtZTIwYmI2MGEyNzkz LzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb2t+6dA EIHbXWnBHLmC8ln4qFeFeEBWs/XnzSvoOH33lvTzt1nO4O65kkwchNYIcVIcqJ1G i+03GirdQIShybqaeH4/l8cFG7DTLcq0qlUTKOw5gpO53/O8U6jc7NLY2wyJmy6G iIeykmvCOsyCcvzw/cDe5TMxB8SBJpfg+YlQNpBMoUuf55nhtcqzECdEcKW64f3z I1+HrOFIekGgsuSvLQTUBB/EdnilS8c5iyOG490pQ+zFy7gj/aTvQAS2FWZHwjWu dP1kPP+aDW4HPfEeGo/kzS4HeVY1pEkKsNqomejh6C3bdcVxe+HrHFF1eYchU1ro MsSHR2ZN4Rsj8w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:43 2025 by rpki-client