This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft File: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json) Hash identifier: 0j6fPEd4duy/Zk6wiltPM2VHUcxtNU039f9SWKhGXok= Subject key identifier: 98:A2:81:54:59:9B:CE:B8:65:76:C6:44:28:84:56:FC:E7:71:B8:64 Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Certificate serial: 019B08C766F11E1CA347C2E4782C5217E447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft Manifest number: 068F Signing time: Wed 10 Dec 2025 15:00:44 +0000 Manifest this update: Wed 10 Dec 2025 15:00:44 +0000 Manifest next update: Thu 11 Dec 2025 15:00:44 +0000 Files and hashes: 1: 2ce8BrFiQRs3VJ_Zautm0oa7EbU.roa (hash: fxQEApFN+/13TxFUm2ypGOLA2qi1xg5Iu/RGfT9GZ/0=) 2: 3YupD0E1MQgwS1xrKNs025XGrvU.roa (hash: 21HOFTvc6Ct7i0rTAQHqk7NP6aZsXA22C7NraCUFkZ8=) 3: 5aiNMpTbEsFotHPhSom_BLzlcx4.roa (hash: UmVtbJKGVJKhOV0/7a2vDBmEaTfGr1/DLMtgALmVgoc=) 4: A3WhCggzu4rYOo1yOfgZK9-xHYQ.roa (hash: 6lM2sKn0Kt/HS6iHxtxrLQeD9LqB5QoOTReZqqvo3Jc=) 5: Q9vzkSdQF14ioB3GAw9P4jbjWRM.roa (hash: 07c/KOp4+Vb2VyrM0tZBqnClLw7pWpgvcj2JSiSJlc4=) 6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: VVQ8H1K3+Vr491CWGkqkEznjo6RjUMLJgN5LxL0rIjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:66:f1:1e:1c:a3:47:c2:e4:78:2c:52:17:e4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099 Validity Not Before: Dec 10 15:00:44 2025 GMT Not After : Dec 11 15:00:44 2025 GMT Subject: CN=98a28154599bceb86576c644288456fce771b864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:c2:5e:9a:66:38:1f:f7:2c:2f:3b:a9:7b: 8c:d9:38:38:22:2d:ff:85:d8:71:c3:b2:59:01:17: af:95:15:7a:fa:39:15:1a:fe:e9:df:9b:04:7a:d9: e8:6b:45:cd:d0:b1:4b:f3:fb:93:5a:6a:9f:55:d9: ec:cc:a6:14:bb:86:62:59:64:e1:4a:0a:ff:8d:e4: 35:9e:fa:a6:75:50:08:8c:2f:47:16:de:f6:b4:a6: a9:cd:58:62:f8:55:88:06:fe:97:b3:d7:07:8e:f2: 65:39:4c:53:c9:62:09:46:12:5b:9d:32:3e:23:0b: 3b:6c:be:eb:da:e1:72:59:91:bf:0f:b1:17:70:2f: 6d:16:e2:27:de:79:17:57:a2:65:2d:f7:79:ba:62: e9:43:45:d6:ec:95:ab:8b:93:07:7b:d1:15:4e:fc: 46:df:71:a7:ed:d4:50:d3:43:8c:cd:79:cb:fb:22: 02:5a:0c:42:e5:fd:1b:7c:33:2f:b8:74:5a:ce:6c: 4f:eb:8e:fe:22:00:26:1e:b2:48:5f:13:e9:57:52: 95:7f:9d:e3:90:88:c0:dc:46:1f:8c:79:30:d1:08: e2:d4:ca:64:82:f9:d4:15:e1:05:87:6f:1c:1b:fc: dc:31:14:78:72:25:3a:9b:54:04:4c:25:c3:e0:30: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A2:81:54:59:9B:CE:B8:65:76:C6:44:28:84:56:FC:E7:71:B8:64 X509v3 Authority Key Identifier: keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ff:cc:7b:f3:2a:b0:3d:40:ba:73:cd:71:fd:89:ef:2d:f4: b3:57:1b:f7:fa:fa:64:7c:93:64:bf:83:8e:ac:0a:5c:4d:83: 62:54:ee:26:b2:62:c2:d0:06:36:37:ef:42:fb:37:56:27:36: a5:ef:a4:93:cb:95:a7:ea:7f:24:dc:a1:27:12:b9:b1:8d:6b: b0:72:31:ee:ba:81:3e:cd:e6:60:f6:44:85:0a:19:a7:12:28: e0:18:de:a7:3b:b8:71:0d:d1:69:ac:8a:3c:fd:af:16:0d:fa: f8:5c:6e:4a:af:cb:36:e7:ac:68:c6:41:8c:ed:71:f5:19:d8: 29:af:9a:1c:2f:2b:6e:df:2f:b4:b7:4e:06:d8:c3:14:3d:bc: 64:34:06:dc:84:53:27:bc:12:e7:73:73:21:fa:0e:0a:37:44: e0:84:8f:f0:b3:77:4b:7a:a8:ae:b6:63:ed:c1:56:2f:66:5e: 06:9c:d3:c4:a8:4f:3a:7c:4d:ed:e8:2d:49:be:97:43:08:18: 8f:c7:a9:6c:9f:a6:91:97:3f:50:45:c7:ee:88:45:07:80:74: 43:32:fc:1f:7a:fc:92:7f:dc:44:22:06:5a:ca:67:97:47:95: db:da:d8:3b:d7:54:e2:4b:de:fd:1c:68:3e:6a:f7:36:57:3e: 3e:16:a6:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx2bxHhyjR8LkeCxSF+RHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm YmUwOTkwHhcNMjUxMjEwMTUwMDQ0WhcNMjUxMjExMTUwMDQ0WjAzMTEwLwYDVQQD Eyg5OGEyODE1NDU5OWJjZWI4NjU3NmM2NDQyODg0NTZmY2U3NzFiODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CDCXppmOB/3LC87qXuM2Tg4Ii3/ hdhxw7JZARevlRV6+jkVGv7p35sEetnoa0XN0LFL8/uTWmqfVdnszKYUu4ZiWWTh Sgr/jeQ1nvqmdVAIjC9HFt72tKapzVhi+FWIBv6Xs9cHjvJlOUxTyWIJRhJbnTI+ Iws7bL7r2uFyWZG/D7EXcC9tFuIn3nkXV6JlLfd5umLpQ0XW7JWri5MHe9EVTvxG 33Gn7dRQ00OMzXnL+yICWgxC5f0bfDMvuHRazmxP647+IgAmHrJIXxPpV1KVf53j kIjA3EYfjHkw0Qji1MpkgvnUFeEFh28cG/zcMRR4ciU6m1QETCXD4DDycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiigVRZm864ZXbGRCiEVvzncbhkMB8GA1UdIwQY MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt M2FhMjIyN2JhZGZlLzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv/Me/Mq sD1AunPNcf2J7y30s1cb9/r6ZHyTZL+DjqwKXE2DYlTuJrJiwtAGNjfvQvs3Vic2 pe+kk8uVp+p/JNyhJxK5sY1rsHIx7rqBPs3mYPZEhQoZpxIo4Bjepzu4cQ3RaayK PP2vFg36+FxuSq/LNuesaMZBjO1x9RnYKa+aHC8rbt8vtLdOBtjDFD28ZDQG3IRT J7wS53NzIfoOCjdE4ISP8LN3S3qorrZj7cFWL2ZeBpzTxKhPOnxN7egtSb6XQwgY j8epbJ+mkZc/UEXH7ohFB4B0QzL8H3r8kn/cRCIGWspnl0eV29rYO9dU4kve/Rxo Pmr3Nlc+PhameQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:22:18 2025 by rpki-client