This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json) Hash identifier: zZb1x2dNd5xMm36+weXPBtS34cx+oojPYxe4oiid5No= Subject key identifier: DD:27:7F:D8:4E:FB:2E:4E:55:74:2F:59:21:5A:F6:AD:99:1A:EC:38 Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Certificate serial: 019B47DD31630FC4723CF64AE602A55075BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft Manifest number: 04D4 Signing time: Mon 22 Dec 2025 21:00:37 +0000 Manifest this update: Mon 22 Dec 2025 21:00:37 +0000 Manifest next update: Tue 23 Dec 2025 21:00:37 +0000 Files and hashes: 1: V1Wl9oxl7r8nt_pqx0M-wgiurRQ.roa (hash: sSJ8RxEhRyTMuAByoaK6L4W5k8CwLIPUs3kMD8DH4rM=) 2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: jAGGxkCmnLamttSaKBxtTnEKIk0E/YUJD3rInA6q3/E=) 3: WUha7UrsdgndZN2i8LKGRI6xHz0.roa (hash: kPsS0TLTx3ZvH9JmthAMYgEGSgO6LHxlTkfSHRuTvZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:dd:31:63:0f:c4:72:3c:f6:4a:e6:02:a5:50:75:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Validity Not Before: Dec 22 21:00:37 2025 GMT Not After : Dec 23 21:00:37 2025 GMT Subject: CN=dd277fd84efb2e4e55742f59215af6ad991aec38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:79:98:8a:32:c9:bd:17:ac:74:2e:4a:c9: 21:14:cb:3b:53:6d:e0:03:ca:1d:34:f4:0e:6f:70: 68:d5:9d:fa:7c:b4:09:cf:ec:26:44:04:13:a1:8b: 91:30:c8:42:05:2e:97:4a:0e:e0:0b:a1:27:ef:bb: c7:b9:a2:79:94:e4:eb:db:bd:9d:fa:5b:2b:78:27: af:e2:79:17:2b:ac:39:d9:f1:37:94:25:21:bf:ba: e8:24:5c:ef:43:a7:d4:d3:ef:0d:77:24:e9:15:55: 23:dd:79:be:db:bc:43:b2:e1:73:17:ab:5f:3b:96: 9f:31:40:ef:e9:8f:f9:02:c5:86:5b:c3:ce:6a:b0: 19:85:1d:c1:f1:f7:28:24:af:7e:18:fe:53:71:26: fe:0b:eb:04:02:fd:fc:dc:f7:27:9b:00:f1:e4:f0: b7:b8:df:97:ee:04:c7:5d:ce:7a:43:1c:c3:af:34: 16:7a:9c:63:e4:2c:0e:66:21:4f:7d:bb:f3:97:a3: 01:db:5d:53:8c:54:1d:2b:53:df:89:33:95:c7:7a: 99:11:b9:47:ac:c7:4a:5e:ef:bb:48:11:1c:d1:6b: a8:0b:af:0a:9c:ee:92:03:61:3b:21:12:12:5d:f7: f5:94:e8:08:ef:4e:4e:f1:15:09:b1:aa:ca:25:d9: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:27:7F:D8:4E:FB:2E:4E:55:74:2F:59:21:5A:F6:AD:99:1A:EC:38 X509v3 Authority Key Identifier: keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ff:f9:df:84:7e:f4:02:38:72:0a:f1:c5:73:9f:5c:25:e9: 0a:17:a5:9f:01:fa:89:96:e7:6f:65:1b:bb:22:43:ce:70:ed: 38:11:8c:32:48:7e:1c:56:cd:8e:fa:99:57:7c:62:c6:74:45: 32:0e:13:1b:27:6d:b2:9c:67:ab:90:93:3a:1d:c7:73:70:7c: 4a:ed:ec:9a:7b:4e:cf:01:3b:7d:56:dc:5a:4e:29:3f:79:06: c6:49:86:2d:7d:1b:a1:1a:14:04:ba:9d:31:f1:4c:6c:ee:0f: a0:2c:98:f6:17:7e:26:1e:29:e2:d7:3d:fa:57:aa:54:7f:86: a0:e1:b4:f0:d4:db:56:71:cf:dc:ab:85:1e:c4:93:8b:8a:25: e1:11:a5:bf:a6:63:b7:9d:55:f8:5a:b0:24:60:e4:27:1f:47: 4c:83:16:cf:9d:4f:86:d7:16:3a:3a:8f:36:27:c0:a0:2e:b2: 12:83:b6:9f:e4:e3:66:df:7e:c2:85:80:ce:62:0f:ff:49:29: 52:b1:a2:bb:87:1c:66:60:0e:f4:2a:98:99:42:ba:a7:73:c6: ce:d9:85:cb:a3:c5:6d:b1:93:af:01:c4:ae:f6:8e:09:17:96: f4:68:25:e4:40:e6:92:31:97:19:6a:17:8f:35:65:da:4e:f7: 43:b5:f4:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtH3TFjD8RyPPZK5gKlUHW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDY0MTQ4NmJkYzk4ZDRhN2RlMDkyOGE0MmQ3ZDY4ZTYw MTVmMzAwHhcNMjUxMjIyMjEwMDM3WhcNMjUxMjIzMjEwMDM3WjAzMTEwLwYDVQQD EyhkZDI3N2ZkODRlZmIyZTRlNTU3NDJmNTkyMTVhZjZhZDk5MWFlYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfB5mIoyyb0XrHQuSskhFMs7U23g A8odNPQOb3Bo1Z36fLQJz+wmRAQToYuRMMhCBS6XSg7gC6En77vHuaJ5lOTr272d +lsreCev4nkXK6w52fE3lCUhv7roJFzvQ6fU0+8NdyTpFVUj3Xm+27xDsuFzF6tf O5afMUDv6Y/5AsWGW8POarAZhR3B8fcoJK9+GP5TcSb+C+sEAv383PcnmwDx5PC3 uN+X7gTHXc56QxzDrzQWepxj5CwOZiFPfbvzl6MB211TjFQdK1PfiTOVx3qZEblH rMdKXu+7SBEc0WuoC68KnO6SA2E7IRISXff1lOgI705O8RUJsarKJdkhSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0nf9hO+y5OVXQvWSFa9q2ZGuw4MB8GA1UdIwQY MBaAFFbWQUhr3JjUp94JKKQtfWjmAV8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2Et ZTNlMDRiZDRmMjQyLzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2EtZTNlMDRiZDRmMjQy LzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQP/534R+ 9AI4cgrxxXOfXCXpChelnwH6iZbnb2UbuyJDznDtOBGMMkh+HFbNjvqZV3xixnRF Mg4TGydtspxnq5CTOh3Hc3B8Su3smntOzwE7fVbcWk4pP3kGxkmGLX0boRoUBLqd MfFMbO4PoCyY9hd+Jh4p4tc9+leqVH+GoOG08NTbVnHP3KuFHsSTi4ol4RGlv6Zj t51V+FqwJGDkJx9HTIMWz51PhtcWOjqPNifAoC6yEoO2n+TjZt9+woWAzmIP/0kp UrGiu4ccZmAO9CqYmUK6p3PGztmFy6PFbbGTrwHErvaOCReW9Ggl5EDmkjGXGWoX jzVl2k73Q7X0dg== -----END CERTIFICATE-----Generated at Tue Dec 23 04:09:33 2025 by rpki-client