This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: +yf+VDKUWxEjm7QIRyWv7sw4yYg/1XjuPHPqtiTbDqI= Subject key identifier: E7:2A:E1:97:2E:71:4A:E8:94:18:CA:0D:DA:99:38:A2:95:7E:AC:65 Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019AC868244A12897F722382018CDE5F4865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: C3 Signing time: Fri 28 Nov 2025 03:00:59 +0000 Manifest this update: Fri 28 Nov 2025 03:00:59 +0000 Manifest next update: Sat 29 Nov 2025 03:00:59 +0000 Files and hashes: 1: 1-uUbewaA737Ti2Wi8o8SjK77aHc.roa (hash: QlD9Cd20i+8EHA8BtB471vZBbtNQcm716KVmHTOuPJ0=) 2: 8_ja4y1JNGjzcRrjPOcvPb7iMqI.roa (hash: FTafPTHlq1IH+/Ui1c1N+bawak9jOSxUpNj0gy0d0pA=) 3: L8BLpkg4_ByhCbFcK7uHavm7f5g.roa (hash: e1aCzXYV4qmCe5iwORKEY38agwdUFZfW6yM8yoLYdTA=) 4: PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa (hash: ZOoiI4PcKu9cyfI921BIlgDSlvuVbGjs4mAo/U6V33g=) 5: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: 63DGyuwjTt4AOk2wR5sJiRNSLP90brns4lJ0hmgMfIE=) 6: buIXJtGqvKknwOy-e2YUQMQQ0Dk.roa (hash: UEtqDvy7n2JEoMUpwoBBhSaBKhablyOvFin5azQpZe0=) 7: loVwrvg92wZ7zx8vNurvGSPWCJg.roa (hash: oKtFkfmck2e1Bhm99yhzXyD5mQ2/n3sLoKcPg8KaNnE=) 8: o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa (hash: DhHj4T9kNHqPXFBDEITUBD0D/IF09iiNQ2ByB3yTJQI=) 9: xR1N0ZgWC0FpSzcR0b92EyDnzn8.roa (hash: n60D3DCSEgW83lG68CLjX8PIMIKZneTo8DEAS93I3sE=) 10: yfGFaoydK8GX9iZlnYz29tjx0mQ.roa (hash: jxsx5pHRIq4+3llBu+CdYcYp8fft9epR+tIujzWmFnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c8:68:24:4a:12:89:7f:72:23:82:01:8c:de:5f:48:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Nov 28 03:00:59 2025 GMT Not After : Nov 29 03:00:59 2025 GMT Subject: CN=e72ae1972e714ae89418ca0dda9938a2957eac65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c7:31:6d:51:63:30:49:2d:22:8a:17:a7:82: 6b:92:e2:a8:1c:25:53:15:16:dd:e7:4d:09:8e:f8: 31:89:4c:a5:0c:38:c6:93:ea:9a:ed:dd:f1:c8:32: 52:35:1e:1d:74:df:26:c9:c8:97:5c:ad:c0:1b:83: 8a:1c:5c:f8:4e:5e:38:38:87:45:81:c1:a0:85:82: fa:99:9c:e5:4e:ef:50:a9:17:20:27:2f:b4:e2:c6: d3:5c:33:11:7e:80:e6:c8:c7:af:8f:d5:62:dd:f1: 17:6b:9a:9c:5a:69:bc:4b:2b:f8:f2:cc:e6:25:8e: 8a:4c:d1:75:c2:33:b4:67:37:0a:c5:4f:2d:ad:67: 2b:94:14:11:9b:87:b0:18:eb:8c:fe:be:01:9f:26: e4:81:21:12:f3:ae:bb:c8:d8:99:e5:a3:c7:77:65: bb:d6:c6:2a:7d:bb:93:1b:99:c2:2f:2d:b6:79:6a: 64:00:d7:13:a7:ca:dd:bf:68:8e:f5:d2:38:ca:40: 6a:18:67:a8:95:ec:97:51:d9:89:c4:74:23:77:86: f3:1d:46:ee:0e:24:9e:2f:ce:a2:76:66:fb:00:e7: 5e:eb:a9:82:1e:20:c4:9f:97:05:11:87:00:45:ea: b8:f9:7d:a4:cb:cd:5b:02:72:c3:c3:66:02:a6:bc: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2A:E1:97:2E:71:4A:E8:94:18:CA:0D:DA:99:38:A2:95:7E:AC:65 X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b2:ab:9f:16:db:43:aa:98:c6:05:b3:35:a2:7b:72:57:5c: 0a:1f:f1:55:98:f2:63:27:85:12:5a:6d:3b:1e:44:5c:ac:1e: 93:e1:d6:4d:b9:5e:d7:9b:5c:e6:9b:7a:7c:53:b1:bb:30:f7: 89:11:56:b7:6d:87:2f:07:05:f8:0c:25:95:b7:25:42:e9:db: c5:01:5c:ba:52:4c:68:d0:c1:ab:9d:cb:26:8f:4e:de:18:3c: f1:55:fc:55:d4:6c:07:a6:2d:57:43:17:a4:5f:93:96:0a:c3: a4:1e:99:81:3b:b9:c4:5b:a7:c1:2e:88:f5:0a:9f:c0:da:a0: 27:aa:4b:97:3f:1c:ee:d2:29:cc:e7:2f:03:64:ae:36:4c:bd: ca:4a:db:ad:fa:ae:16:a0:81:31:18:8e:1b:74:5c:1c:2e:05: 80:dd:13:f4:05:03:d5:80:65:b7:71:a1:1e:bb:ee:c4:77:11: 80:01:50:57:7d:e8:fd:43:75:20:b3:51:94:6c:b4:30:45:6e: 10:35:64:eb:a5:1b:7b:b3:3b:e8:78:8b:31:ff:20:ac:96:d7: 39:25:49:29:07:d9:83:e8:d7:b2:75:a0:fa:af:eb:af:27:47: 3a:4d:70:fe:61:63:db:a4:77:56:a2:cd:6e:ff:6d:9c:80:87: d3:9e:a0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrIaCRKEol/ciOCAYzeX0hlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjUxMTI4MDMwMDU5WhcNMjUxMTI5MDMwMDU5WjAzMTEwLwYDVQQD EyhlNzJhZTE5NzJlNzE0YWU4OTQxOGNhMGRkYTk5MzhhMjk1N2VhYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjccxbVFjMEktIooXp4JrkuKoHCVT FRbd500JjvgxiUylDDjGk+qa7d3xyDJSNR4ddN8myciXXK3AG4OKHFz4Tl44OIdF gcGghYL6mZzlTu9QqRcgJy+04sbTXDMRfoDmyMevj9Vi3fEXa5qcWmm8Syv48szm JY6KTNF1wjO0ZzcKxU8trWcrlBQRm4ewGOuM/r4BnybkgSES8667yNiZ5aPHd2W7 1sYqfbuTG5nCLy22eWpkANcTp8rdv2iO9dI4ykBqGGeoleyXUdmJxHQjd4bzHUbu DiSeL86idmb7AOde66mCHiDEn5cFEYcAReq4+X2ky81bAnLDw2YCprwDowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcq4ZcucUrolBjKDdqZOKKVfqxlMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirKrnxbb Q6qYxgWzNaJ7cldcCh/xVZjyYyeFElptOx5EXKwek+HWTble15tc5pt6fFOxuzD3 iRFWt22HLwcF+AwllbclQunbxQFculJMaNDBq53LJo9O3hg88VX8VdRsB6YtV0MX pF+TlgrDpB6ZgTu5xFunwS6I9QqfwNqgJ6pLlz8c7tIpzOcvA2SuNky9ykrbrfqu FqCBMRiOG3RcHC4FgN0T9AUD1YBlt3GhHrvuxHcRgAFQV33o/UN1ILNRlGy0MEVu EDVk66Ube7M76HiLMf8grJbXOSVJKQfZg+jXsnWg+q/rrydHOk1w/mFj26R3VqLN bv9tnICH056gVg== -----END CERTIFICATE-----Generated at Fri Nov 28 05:42:45 2025 by rpki-client