This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft File: VdODtoo-r7MMJ7oMTGnworlQ3MU.mft (raw, json) Hash identifier: hal4OAA669LSdeXT3C2Gd/n6jt2Nz9R9wJ2I8OlRX8I= Subject key identifier: 6D:70:E0:D7:3E:99:35:D4:1E:6C:0E:7A:12:5A:0C:E5:39:31:77:35 Authority key identifier: 55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5 Certificate issuer: /CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5 Certificate serial: 019B5AF692EBFE7BA9C96406F0ABA95EB434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft Manifest number: 011A Signing time: Fri 26 Dec 2025 14:01:07 +0000 Manifest this update: Fri 26 Dec 2025 14:01:07 +0000 Manifest next update: Sat 27 Dec 2025 14:01:07 +0000 Files and hashes: 1: VdODtoo-r7MMJ7oMTGnworlQ3MU.crl (hash: Ls4dXXlKp/VC5vnvTmpvfSa23yuQkvkHcS5wcX+Z7Jw=) 2: _ibmZHaelkcyc4omh-Qm8NJPUxk.roa (hash: 6dSWb0nF2DGjmt5A4wFgvT5vOxkwCq5uvr2uq8+cBaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:92:eb:fe:7b:a9:c9:64:06:f0:ab:a9:5e:b4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5 Validity Not Before: Dec 26 14:01:07 2025 GMT Not After : Dec 27 14:01:07 2025 GMT Subject: CN=6d70e0d73e9935d41e6c0e7a125a0ce539317735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:40:75:a6:0b:dd:d3:24:35:74:d3:30:18:e5: b3:81:ef:19:b1:3d:7b:35:62:fa:8b:3c:32:02:57: e2:b6:df:ae:5b:74:6f:70:cf:93:94:29:d0:73:14: 58:46:38:0c:ab:eb:5e:bd:21:fb:72:14:8c:3d:8c: b2:03:55:3d:e4:f3:ab:62:bb:72:63:34:a3:71:82: ec:0b:a0:48:12:ea:ed:1f:b3:12:f5:8b:8f:f0:39: 8c:84:5f:4d:be:a6:e0:80:5d:28:e4:db:e9:7c:9a: 74:d4:ac:0e:3f:78:a9:f3:0f:29:1b:05:41:a0:2a: 46:30:2c:62:af:2d:ab:32:7e:72:05:ad:e6:38:f4: af:44:d5:13:47:fd:2e:fa:b6:8c:5a:2e:00:df:35: f9:4e:f8:3a:ae:d0:4f:53:c8:ea:76:17:68:81:54: db:56:1d:11:f4:30:76:ec:e4:6b:a6:6b:ff:6f:dc: 28:a6:bf:13:70:26:93:a4:34:2d:c0:24:00:c3:7d: b3:0c:fd:7b:4e:d4:74:c3:39:7a:0c:1e:7d:7d:17: fa:a6:79:ef:85:9f:c4:82:49:7b:62:bd:58:87:f2: d8:da:80:a3:8b:18:c5:cc:ae:cf:5b:b8:a1:7b:0c: 37:72:48:1f:0a:0c:1f:07:a5:7c:2f:88:2c:53:e5: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:70:E0:D7:3E:99:35:D4:1E:6C:0E:7A:12:5A:0C:E5:39:31:77:35 X509v3 Authority Key Identifier: keyid:55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:87:1d:4d:fa:83:97:4d:8c:f6:71:d7:a5:46:1e:8e:af:1a: 6b:45:e2:e4:58:11:62:84:3f:b9:e4:ab:43:b4:d9:54:30:7b: 0e:22:9d:dc:08:02:41:6c:18:01:c4:7e:40:ab:f9:4a:0f:be: 9b:15:07:b9:33:a5:cc:63:1c:42:9a:f0:a3:ca:a5:fb:12:d0: 12:5a:d6:5a:0d:94:3b:03:01:fd:cd:50:b3:7c:de:d0:d5:d5: 1e:15:10:e7:76:5b:2e:89:1a:3a:9a:91:56:60:84:db:02:81: ab:73:4b:bb:86:d5:81:0b:db:c1:19:b4:04:59:91:45:0b:22: 38:16:73:07:ea:5c:8b:24:fd:6a:1b:c4:cc:44:ff:ba:5e:0d: 62:dd:e6:ed:8b:ea:ab:d9:5a:c8:f5:b1:a7:bb:a1:25:0e:01: 78:d1:a5:21:1e:b4:ea:47:86:c3:ef:c2:b2:03:04:93:cc:e2: 1e:cf:78:c7:f1:61:42:94:a2:82:80:ff:9c:02:8c:dd:11:5b: 8b:ef:6d:31:cf:16:fc:77:cd:63:91:eb:2c:ab:b8:1e:b7:20: 55:18:b2:04:35:d7:ab:fd:23:89:c0:79:51:e6:3b:1a:45:24: 10:29:b3:94:99:fb:ce:58:d7:10:89:46:3d:fd:c6:73:a7:49: 8e:af:1d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9pLr/nupyWQG8KupXrQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDM4M2I2OGEzZWFmYjMwYzI3YmEwYzRjNjlmMGEyYjk1 MGRjYzUwHhcNMjUxMjI2MTQwMTA3WhcNMjUxMjI3MTQwMTA3WjAzMTEwLwYDVQQD Eyg2ZDcwZTBkNzNlOTkzNWQ0MWU2YzBlN2ExMjVhMGNlNTM5MzE3NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kB1pgvd0yQ1dNMwGOWzge8ZsT17 NWL6izwyAlfitt+uW3RvcM+TlCnQcxRYRjgMq+tevSH7chSMPYyyA1U95POrYrty YzSjcYLsC6BIEurtH7MS9YuP8DmMhF9NvqbggF0o5NvpfJp01KwOP3ip8w8pGwVB oCpGMCxiry2rMn5yBa3mOPSvRNUTR/0u+raMWi4A3zX5Tvg6rtBPU8jqdhdogVTb Vh0R9DB27ORrpmv/b9wopr8TcCaTpDQtwCQAw32zDP17TtR0wzl6DB59fRf6pnnv hZ/Egkl7Yr1Yh/LY2oCjixjFzK7PW7iheww3ckgfCgwfB6V8L4gsU+W3+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1w4Nc+mTXUHmwOehJaDOU5MXc1MB8GA1UdIwQY MBaAFFXTg7aKPq+zDCe6DExp8KK5UNzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAt MGYwZmMzNTM0N2ZmLzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAtMGYwZmMzNTM0N2Zm LzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwocdTfqD l02M9nHXpUYejq8aa0Xi5FgRYoQ/ueSrQ7TZVDB7DiKd3AgCQWwYAcR+QKv5Sg++ mxUHuTOlzGMcQprwo8ql+xLQElrWWg2UOwMB/c1Qs3ze0NXVHhUQ53ZbLokaOpqR VmCE2wKBq3NLu4bVgQvbwRm0BFmRRQsiOBZzB+pciyT9ahvEzET/ul4NYt3m7Yvq q9layPWxp7uhJQ4BeNGlIR606keGw+/CsgMEk8ziHs94x/FhQpSigoD/nAKM3RFb i+9tMc8W/HfNY5HrLKu4HrcgVRiyBDXXq/0jicB5UeY7GkUkECmzlJn7zljXEIlG Pf3Gc6dJjq8dog== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:36 2025 by rpki-client