This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft File: vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft (raw, json) Hash identifier: 9pdbs2uqmMPNcxVpEwt8i+tGAVjYEJlcrOgNffAT7qc= Subject key identifier: 25:9D:4A:6F:F1:4C:EE:BB:C4:AC:85:9F:63:34:A1:0B:74:5D:AA:D8 Authority key identifier: BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08 Certificate issuer: /CN=beffadb46a30360bb84f80701bcafb470f064208 Certificate serial: 019B428045218977A827F0ACE5C4980EA4C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft Manifest number: 051A Signing time: Sun 21 Dec 2025 20:01:01 +0000 Manifest this update: Sun 21 Dec 2025 20:01:01 +0000 Manifest next update: Mon 22 Dec 2025 20:01:01 +0000 Files and hashes: 1: vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl (hash: 2OkuP2hOykc5QreE3j5qix0BcHFV++QRLKANmOmGSZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:45:21:89:77:a8:27:f0:ac:e5:c4:98:0e:a4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beffadb46a30360bb84f80701bcafb470f064208 Validity Not Before: Dec 21 20:01:01 2025 GMT Not After : Dec 22 20:01:01 2025 GMT Subject: CN=259d4a6ff14ceebbc4ac859f6334a10b745daad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:c3:ae:dc:b6:2e:f1:f9:8f:aa:bd:c4:42: b1:18:7d:55:1c:f9:62:ef:fd:dc:6d:a7:06:6c:b7: 15:f9:ae:13:d1:b0:a8:74:41:dc:af:aa:ed:77:0b: 98:05:14:dc:14:22:cb:73:5d:0d:7a:0a:d7:53:19: 24:a0:67:9e:32:04:e3:6d:ea:c0:c2:a2:ee:a0:3c: 93:ca:5b:49:9e:84:e6:2f:71:2c:db:ad:c1:a3:20: b7:c2:d8:42:d4:5a:90:dc:57:2f:d8:ec:ba:c5:ba: 2c:b1:24:4f:94:70:de:f9:e4:66:1b:d0:6d:ef:3c: 6d:9a:80:8b:0b:c7:86:6d:fe:2c:e7:bf:94:ea:f9: c9:b1:33:d3:6a:2b:29:3c:c7:1f:28:c7:62:3b:30: 25:88:5d:1b:93:96:d4:85:eb:4d:d9:0a:89:91:c5: ad:a2:3e:02:ea:82:35:27:98:53:ba:46:67:57:da: b0:60:b4:2c:a4:c1:04:cf:2a:0b:55:2f:b6:e2:cd: 92:79:c7:19:72:af:8e:4f:80:26:43:63:5a:29:d3: 63:a9:57:b3:26:00:a3:ea:58:a9:a6:5f:92:f3:50: 41:6b:f5:1a:ff:f7:54:9a:51:c2:f6:0d:43:37:5c: 36:00:de:34:cc:7c:42:d1:4a:97:a6:aa:a1:ac:2e: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:4A:6F:F1:4C:EE:BB:C4:AC:85:9F:63:34:A1:0B:74:5D:AA:D8 X509v3 Authority Key Identifier: keyid:BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5a:1d:7d:a0:b9:b7:ea:09:cc:9c:48:ce:72:eb:b6:9b:1b: 51:38:36:e1:47:dc:75:8a:5e:17:bd:92:b0:1b:24:0e:f1:9a: ff:90:b7:4c:ee:1a:bb:5b:39:b8:16:50:8b:39:33:6c:6a:ab: 92:74:88:3f:dd:ff:d3:64:dc:ba:2d:e6:d4:99:cf:c7:3f:73: ea:17:98:72:45:b5:e2:fa:31:86:62:41:55:e0:04:f9:c0:8e: 50:81:16:6f:dc:08:d4:dc:18:4a:a8:b1:b8:1a:8a:3f:d6:aa: ea:4d:57:26:14:0f:4c:c0:17:31:8c:d0:56:77:d2:9e:af:a1: e2:63:29:d6:74:77:d8:8c:bd:cd:f1:3c:ef:10:a1:e9:82:aa: e1:3a:37:83:fc:3b:7d:a8:85:3a:f6:a8:60:0c:85:9f:fd:22: b1:9c:0a:f7:1a:58:e4:0d:57:f9:36:1e:97:0e:53:50:5a:20: 61:49:8d:76:2e:78:17:ac:78:02:0f:f6:bb:49:18:ce:f3:e8: e7:b2:01:ab:b1:ba:67:b0:20:e5:e2:ab:05:02:b5:18:56:43: 71:9a:a3:1d:8b:fa:8c:da:e3:66:57:5f:21:ed:69:15:36:ba: d6:68:fe:f5:1d:f3:97:54:f5:92:88:44:60:3b:b9:86:48:81: c9:4a:d4:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgEUhiXeoJ/Cs5cSYDqTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZmZhZGI0NmEzMDM2MGJiODRmODA3MDFiY2FmYjQ3MGYw NjQyMDgwHhcNMjUxMjIxMjAwMTAxWhcNMjUxMjIyMjAwMTAxWjAzMTEwLwYDVQQD EygyNTlkNGE2ZmYxNGNlZWJiYzRhYzg1OWY2MzM0YTEwYjc0NWRhYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YbDrty2LvH5j6q9xEKxGH1VHPli 7/3cbacGbLcV+a4T0bCodEHcr6rtdwuYBRTcFCLLc10NegrXUxkkoGeeMgTjberA wqLuoDyTyltJnoTmL3Es263BoyC3wthC1FqQ3Fcv2Oy6xbossSRPlHDe+eRmG9Bt 7zxtmoCLC8eGbf4s57+U6vnJsTPTaispPMcfKMdiOzAliF0bk5bUhetN2QqJkcWt oj4C6oI1J5hTukZnV9qwYLQspMEEzyoLVS+24s2SeccZcq+OT4AmQ2NaKdNjqVez JgCj6lippl+S81BBa/Ua//dUmlHC9g1DN1w2AN40zHxC0UqXpqqhrC70XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWdSm/xTO67xKyFn2M0oQt0XarYMB8GA1UdIwQY MBaAFL7/rbRqMDYLuE+AcBvK+0cPBkIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnYtdHRHb3dOZ3U0VDRCd0c4cjdSdzhHUWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zNDQ0ZDktM2RjOC00NzI5LWFiZDct ODY1ZDBjZDIzYTFhLzEvdnYtdHRHb3dOZ3U0VDRCd0c4cjdSdzhHUWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zNDQ0ZDktM2RjOC00NzI5LWFiZDctODY1ZDBjZDIzYTFh LzEvdnYtdHRHb3dOZ3U0VDRCd0c4cjdSdzhHUWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1odfaC5 t+oJzJxIznLrtpsbUTg24UfcdYpeF72SsBskDvGa/5C3TO4au1s5uBZQizkzbGqr knSIP93/02Tcui3m1JnPxz9z6heYckW14voxhmJBVeAE+cCOUIEWb9wI1NwYSqix uBqKP9aq6k1XJhQPTMAXMYzQVnfSnq+h4mMp1nR32Iy9zfE87xCh6YKq4To3g/w7 faiFOvaoYAyFn/0isZwK9xpY5A1X+TYelw5TUFogYUmNdi54F6x4Ag/2u0kYzvPo 57IBq7G6Z7Ag5eKrBQK1GFZDcZqjHYv6jNrjZldfIe1pFTa61mj+9R3zl1T1kohE YDu5hkiByUrUfQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:24:05 2025 by rpki-client