This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json) Hash identifier: NHQ6hhCPS51NpgGAwqZuaEhAtSqR/H4/cA4grdD2QlE= Subject key identifier: C0:DA:05:F0:EF:9A:87:C8:94:BF:8C:ED:5E:2B:0D:2E:2F:E9:F6:B8 Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb Certificate serial: 019B5975E03ADE890200E4F81850F64893B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft Manifest number: 0611 Signing time: Fri 26 Dec 2025 07:00:55 +0000 Manifest this update: Fri 26 Dec 2025 07:00:55 +0000 Manifest next update: Sat 27 Dec 2025 07:00:55 +0000 Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=) 2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: aE55cEIGB80ZXuUwZr27Y4akar2cLKstWotSGkrXxks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e0:3a:de:89:02:00:e4:f8:18:50:f6:48:93:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb Validity Not Before: Dec 26 07:00:55 2025 GMT Not After : Dec 27 07:00:55 2025 GMT Subject: CN=c0da05f0ef9a87c894bf8ced5e2b0d2e2fe9f6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:cc:e7:47:aa:94:20:da:0a:14:3d:74:56: 68:83:f6:c2:89:c4:ca:d0:61:fd:70:12:ee:5a:ea: 5a:49:54:6d:ea:01:b7:6e:83:5c:dc:38:54:2a:aa: 53:f0:09:14:8b:78:f3:e8:86:3f:46:19:08:87:7f: 82:f9:a1:ed:74:66:db:47:f1:65:88:d4:7e:e5:77: 31:52:15:b3:61:b4:46:f0:c4:66:8e:48:1c:73:4f: 54:b2:64:5e:e2:28:68:c6:25:d7:76:e8:1e:3c:a2: d2:06:25:be:b7:41:20:92:58:03:5c:7e:95:4f:6b: c8:e8:6e:71:90:30:01:31:7d:f6:ca:0c:b6:39:65: 96:b5:01:c4:c1:e6:c5:ea:71:76:db:1f:15:05:8d: 5b:c5:8f:7d:a8:f4:2b:a6:17:24:91:cc:96:00:54: e5:6a:4f:9f:9a:fc:8c:a5:3f:fd:64:86:54:63:27: d8:d2:ff:80:85:be:8a:51:c4:37:4d:32:78:97:5a: 1a:03:0f:65:fc:76:2f:4a:de:57:4e:8a:25:1f:a6: 73:74:41:0d:f1:65:24:26:69:dc:e7:5b:77:b1:90: 28:fb:7a:44:23:4d:be:ec:b2:49:c8:5d:60:2c:2c: 5c:c7:0a:b1:8b:e6:5a:a3:d2:55:c5:85:4b:68:5c: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:05:F0:EF:9A:87:C8:94:BF:8C:ED:5E:2B:0D:2E:2F:E9:F6:B8 X509v3 Authority Key Identifier: keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fa:f6:ca:76:c5:87:4e:60:45:0e:11:5f:bd:57:96:1e:a8: bf:09:3a:e3:df:1f:f9:0c:ee:6c:93:31:f8:e4:d7:d1:01:b1: f1:48:53:c7:f0:7d:b5:38:aa:f1:88:55:07:42:02:85:00:03: be:a0:af:4c:32:65:e4:2d:84:55:f7:b5:5d:aa:93:71:76:98: ea:73:d0:eb:90:51:7d:9b:70:c3:d7:6b:c4:bd:db:8e:32:43: 76:8c:c6:fb:ef:f9:db:eb:62:ac:47:75:4a:7c:80:47:b5:7a: 9f:b9:2e:10:c2:2c:a4:42:cb:48:5b:e2:05:53:64:07:15:cb: 3b:82:4d:38:39:c5:fc:aa:75:ae:c1:4d:8f:92:26:d4:af:8c: 07:28:b2:bd:a8:ef:05:3b:fa:70:b1:dd:6c:1f:08:49:8c:c1: 8a:b4:37:70:f2:4d:e5:3b:4f:6f:9f:82:bc:2f:69:6f:55:e6: 5c:e2:8a:6c:33:67:bc:ea:eb:05:9a:d5:0d:cc:07:b4:f4:c5: f8:5f:99:ae:3c:61:f6:13:f8:31:3b:cf:86:bd:5f:7a:3c:d8: 11:a2:4a:8f:2c:3f:64:71:00:10:43:5b:1b:3e:2f:79:d4:b7: c4:4a:55:9b:34:45:44:bf:87:c6:af:41:01:ac:3a:9a:db:15: 6f:3a:a4:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdeA63okCAOT4GFD2SJOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Mzc2ZGVmMTIyNDgzOWE2MTEzZDFkMGNkZDM5ODEwNGZh YWYyZmIwHhcNMjUxMjI2MDcwMDU1WhcNMjUxMjI3MDcwMDU1WjAzMTEwLwYDVQQD EyhjMGRhMDVmMGVmOWE4N2M4OTRiZjhjZWQ1ZTJiMGQyZTJmZTlmNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7rM50eqlCDaChQ9dFZog/bCicTK 0GH9cBLuWupaSVRt6gG3boNc3DhUKqpT8AkUi3jz6IY/RhkIh3+C+aHtdGbbR/Fl iNR+5XcxUhWzYbRG8MRmjkgcc09UsmRe4ihoxiXXdugePKLSBiW+t0EgklgDXH6V T2vI6G5xkDABMX32ygy2OWWWtQHEwebF6nF22x8VBY1bxY99qPQrphckkcyWAFTl ak+fmvyMpT/9ZIZUYyfY0v+Ahb6KUcQ3TTJ4l1oaAw9l/HYvSt5XToolH6ZzdEEN 8WUkJmnc51t3sZAo+3pEI02+7LJJyF1gLCxcxwqxi+Zao9JVxYVLaFxeKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDaBfDvmofIlL+M7V4rDS4v6fa4MB8GA1UdIwQY MBaAFFY3be8SJIOaYRPR0M3TmBBPqvL7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYt ZDgwODQ3MzNlOTgwLzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYtZDgwODQ3MzNlOTgw LzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/r2ynbF h05gRQ4RX71Xlh6ovwk6498f+QzubJMx+OTX0QGx8UhTx/B9tTiq8YhVB0IChQAD vqCvTDJl5C2EVfe1XaqTcXaY6nPQ65BRfZtww9drxL3bjjJDdozG++/52+tirEd1 SnyAR7V6n7kuEMIspELLSFviBVNkBxXLO4JNODnF/Kp1rsFNj5Im1K+MByiyvajv BTv6cLHdbB8ISYzBirQ3cPJN5TtPb5+CvC9pb1XmXOKKbDNnvOrrBZrVDcwHtPTF +F+Zrjxh9hP4MTvPhr1fejzYEaJKjyw/ZHEAEENbGz4vedS3xEpVmzRFRL+Hxq9B Aaw6mtsVbzqkcQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:37 2025 by rpki-client