This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json) Hash identifier: Mv4+/ady3x8sVpWEu22Igq4weQjJJi8aw48pKpFxowE= Subject key identifier: 2B:B6:27:A4:B1:27:80:0A:B2:D8:34:5A:AC:4C:5E:41:EE:18:C7:17 Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79 Certificate serial: 019B37218B4FDB956F72F940F1867193BF5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft Manifest number: 125B Signing time: Fri 19 Dec 2025 15:01:43 +0000 Manifest this update: Fri 19 Dec 2025 15:01:43 +0000 Manifest next update: Sat 20 Dec 2025 15:01:43 +0000 Files and hashes: 1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=) 2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: dbJ9Z6Xo9J1wQxnciSkC9rQq8H3jZHNzNwXsc8bFcGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:8b:4f:db:95:6f:72:f9:40:f1:86:71:93:bf:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79 Validity Not Before: Dec 19 15:01:43 2025 GMT Not After : Dec 20 15:01:43 2025 GMT Subject: CN=2bb627a4b127800ab2d8345aac4c5e41ee18c717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:cc:85:b8:87:eb:63:13:79:7f:61:f4:51: 08:aa:f1:4d:62:2c:b9:54:83:84:ff:96:5d:bc:87: 30:ad:e0:8c:e2:49:7a:a6:6c:98:23:4a:34:82:21: ea:5f:a3:88:3f:c5:b6:d6:99:67:65:61:74:47:84: 64:ae:ac:63:aa:03:c1:ab:a6:ee:5d:c4:9f:be:7c: 45:d4:6c:95:eb:66:cb:e0:09:07:e8:1c:c2:04:c1: 22:f2:a7:4f:d0:ef:58:0e:85:0d:7f:81:d0:55:70: 3a:74:ff:0c:1f:6f:77:53:3e:87:b6:ab:25:f6:8c: 28:0c:5b:ab:70:df:72:7f:0d:51:0d:ed:be:88:9f: 83:0e:7f:1a:e5:eb:8f:55:b3:13:5a:9f:07:c7:3d: ea:b7:73:f2:2c:7e:88:06:c8:b8:b3:ed:95:ff:2b: 14:a6:96:d2:37:3a:0b:53:06:86:67:8b:21:fc:52: c3:2e:e8:59:8b:7f:0d:04:40:eb:26:76:2e:95:bf: 1f:78:07:95:f7:5e:1b:f4:e7:18:5a:e3:54:5d:8e: 0a:ef:6a:52:05:2b:a9:08:bc:bf:fa:6f:2d:99:ea: 0f:64:f8:77:7f:cd:b9:bb:94:17:24:32:b6:bb:12: 6c:d8:e8:a3:70:c5:b0:08:80:66:00:09:8d:34:f5: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B6:27:A4:B1:27:80:0A:B2:D8:34:5A:AC:4C:5E:41:EE:18:C7:17 X509v3 Authority Key Identifier: keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:26:af:d2:15:f7:cc:31:dc:9b:6f:ff:af:7a:50:df:db:1f: c4:b6:ae:44:50:e9:aa:b4:d3:06:53:5c:f0:97:96:53:ef:c5: 3c:a2:94:b7:5b:ee:39:f0:43:68:40:55:45:6c:56:84:a4:80: c8:0c:59:13:d4:48:86:ac:4b:21:95:1b:20:43:85:2a:34:51: ee:81:03:41:6f:b3:eb:17:21:07:f4:48:d5:a6:ee:de:97:d8: 27:da:4a:5d:84:4b:0d:b6:ee:fd:43:63:b3:d2:09:df:4b:c2: 44:7c:ea:b1:b3:8f:1a:8d:2b:ec:52:e7:f2:78:04:2b:14:84: e0:bf:4f:15:92:12:9f:9b:6c:9c:01:62:3b:43:92:ad:ab:3a: eb:38:4f:d0:0a:d8:e2:da:e4:14:d3:6c:1f:88:af:5e:2d:34: aa:76:d6:a1:16:25:56:9d:7b:1e:93:80:da:43:ff:bb:2a:46: 28:eb:ff:f6:aa:9a:35:61:ac:11:97:1d:93:86:74:82:c5:69: 5e:99:92:54:54:50:99:62:a1:31:ea:aa:9f:d7:a2:3e:0a:a9: 4a:7b:07:dc:55:ed:fe:c3:c9:86:46:29:43:ff:e6:77:e9:35: a4:19:69:74:e1:23:a0:9c:7e:c2:ea:4c:03:16:25:14:f8:e8: 17:54:36:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IYtP25VvcvlA8YZxk79cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjU3NzVhNzA2YWMwMGM4MmZhMjkzMzllMjJlNDMxMDgw OTllNzkwHhcNMjUxMjE5MTUwMTQzWhcNMjUxMjIwMTUwMTQzWjAzMTEwLwYDVQQD EygyYmI2MjdhNGIxMjc4MDBhYjJkODM0NWFhYzRjNWU0MWVlMThjNzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt3MhbiH62MTeX9h9FEIqvFNYiy5 VIOE/5ZdvIcwreCM4kl6pmyYI0o0giHqX6OIP8W21plnZWF0R4RkrqxjqgPBq6bu XcSfvnxF1GyV62bL4AkH6BzCBMEi8qdP0O9YDoUNf4HQVXA6dP8MH293Uz6Htqsl 9owoDFurcN9yfw1RDe2+iJ+DDn8a5euPVbMTWp8Hxz3qt3PyLH6IBsi4s+2V/ysU ppbSNzoLUwaGZ4sh/FLDLuhZi38NBEDrJnYulb8feAeV914b9OcYWuNUXY4K72pS BSupCLy/+m8tmeoPZPh3f825u5QXJDK2uxJs2OijcMWwCIBmAAmNNPWi6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu2J6SxJ4AKstg0WqxMXkHuGMcXMB8GA1UdIwQY MBaAFFUld1pwasAMgvopM54i5DEICZ55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjkt Nzk1NGVkMzhjOGJhLzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjktNzk1NGVkMzhjOGJh LzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSav0hX3 zDHcm2//r3pQ39sfxLauRFDpqrTTBlNc8JeWU+/FPKKUt1vuOfBDaEBVRWxWhKSA yAxZE9RIhqxLIZUbIEOFKjRR7oEDQW+z6xchB/RI1abu3pfYJ9pKXYRLDbbu/UNj s9IJ30vCRHzqsbOPGo0r7FLn8ngEKxSE4L9PFZISn5tsnAFiO0OSras66zhP0ArY 4trkFNNsH4ivXi00qnbWoRYlVp17HpOA2kP/uypGKOv/9qqaNWGsEZcdk4Z0gsVp XpmSVFRQmWKhMeqqn9eiPgqpSnsH3FXt/sPJhkYpQ//md+k1pBlpdOEjoJx+wupM AxYlFPjoF1Q2Fw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:54:05 2025 by rpki-client