This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft File: Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json) Hash identifier: /M7uYhsVjYZmS+f3oGe2Bfkl4f+Tg++EwVMxC6BtkyA= Subject key identifier: A2:26:45:2B:9E:EF:41:54:5E:59:11:7C:27:95:C9:E2:83:E5:1D:39 Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70 Certificate issuer: /CN=55a72cff41bdb7c7e01855d39076daf721742c70 Certificate serial: 019B465D611829743FC0FD774D475125B7E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft Manifest number: 1385 Signing time: Mon 22 Dec 2025 14:01:23 +0000 Manifest this update: Mon 22 Dec 2025 14:01:23 +0000 Manifest next update: Tue 23 Dec 2025 14:01:23 +0000 Files and hashes: 1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: uZ57rUqsrYiVL2RKYcnBc2GHNQ4JrYUIesUliWDd3Qo=) 2: hVVS9Cn-0kGfNBOiQMyNN9VUf0k.roa (hash: sbgdIqLYSK1OXVPg3GYNP6cJGG82G/AcVDZsAviuiqM=) 3: uHGvKFxGUbuZJitYbOKe-TvvsJA.roa (hash: 2ggmV/gZ71WHFH+tl+mSGN+dQgondzuBHty4bl2C+wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:61:18:29:74:3f:c0:fd:77:4d:47:51:25:b7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70 Validity Not Before: Dec 22 14:01:23 2025 GMT Not After : Dec 23 14:01:23 2025 GMT Subject: CN=a226452b9eef41545e59117c2795c9e283e51d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:38:ee:26:0c:fd:dc:6c:9f:21:c5:92:b7: 49:fd:01:bc:53:91:af:61:33:79:2b:26:86:09:f3: 02:89:67:c7:f6:02:cd:e3:96:85:11:2b:00:7d:3e: e0:5d:f3:a9:d7:8b:e4:01:bf:f0:c6:ee:d5:ef:ac: b7:21:20:f2:f6:4d:45:56:66:2d:87:90:fe:26:d7: 39:d8:55:0b:74:eb:db:04:c8:27:82:ec:2b:49:37: be:8d:0e:a1:0e:f4:53:b4:8a:41:26:1b:0b:d4:68: e8:81:e5:28:dd:f4:1b:3d:0f:fd:9c:f8:9c:6b:e3: bc:16:a8:4f:a5:89:0c:aa:df:ef:53:2d:3f:b1:70: 5d:10:fd:dd:48:b7:08:91:17:b3:2f:39:7f:77:7e: b9:d9:9e:70:c2:92:8c:6f:4b:59:52:af:b2:0f:f4: 2d:9e:1a:29:ed:38:b6:37:48:7f:84:6b:c1:1b:f9: 98:75:e2:07:8c:32:a9:94:62:e7:cf:16:38:70:b5: 71:4b:53:cb:ce:e6:98:1b:84:2c:3d:92:0c:87:5f: 22:ee:20:33:40:d7:d5:7a:88:c6:88:f5:c8:82:39: e7:12:6c:47:b6:b5:60:28:2b:cc:9e:a9:46:ab:e2: 7a:3a:71:1d:6f:5f:72:d5:ee:28:40:9d:c4:0c:82: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:26:45:2B:9E:EF:41:54:5E:59:11:7C:27:95:C9:E2:83:E5:1D:39 X509v3 Authority Key Identifier: keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c6:b6:5b:dd:bb:13:58:1d:f3:db:0d:14:9e:bc:34:97:55: 42:e8:0c:c1:eb:09:27:97:a6:18:2f:08:5a:03:fc:bd:d5:b0: 92:01:eb:5e:fa:2b:6d:73:6d:19:1f:27:a1:92:62:ec:11:a4: 2d:8e:e4:f4:c1:34:e7:5e:66:f9:d2:e9:8b:85:14:b0:9b:1a: dd:7a:07:00:f0:56:dc:fd:e6:08:58:0b:77:a4:2a:ba:07:2b: 65:19:3b:59:f9:ec:f7:7e:ac:58:e1:c6:94:d5:14:4f:5d:35: 14:eb:f9:be:25:9d:87:10:16:b4:fb:5c:1e:70:53:28:d2:83: 60:2b:e9:2e:78:49:6d:84:4e:91:b6:fe:d9:15:5c:76:b2:2b: ec:ed:9d:49:4c:8b:b7:a7:07:e6:6c:b1:07:04:d2:94:ae:c1: 12:9f:49:cd:86:7a:17:d9:dc:bc:74:7c:cb:f8:72:c4:04:cb: 2e:f7:ba:0c:04:06:02:5e:3a:a6:e1:e4:be:69:a6:aa:7d:76: c2:9d:24:11:4a:eb:25:fe:01:49:2b:58:b6:77:0a:65:ea:26: 64:88:dd:f5:c6:2c:b9:57:5f:26:f9:9e:43:cb:49:77:0f:e5: 59:f5:00:00:dc:8f:0d:2a:3f:c4:59:ee:81:3d:bd:c4:72:f3: ad:00:c1:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXWEYKXQ/wP13TUdRJbfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3 NDJjNzAwHhcNMjUxMjIyMTQwMTIzWhcNMjUxMjIzMTQwMTIzWjAzMTEwLwYDVQQD EyhhMjI2NDUyYjllZWY0MTU0NWU1OTExN2MyNzk1YzllMjgzZTUxZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04k47iYM/dxsnyHFkrdJ/QG8U5Gv YTN5KyaGCfMCiWfH9gLN45aFESsAfT7gXfOp14vkAb/wxu7V76y3ISDy9k1FVmYt h5D+Jtc52FULdOvbBMgnguwrSTe+jQ6hDvRTtIpBJhsL1GjogeUo3fQbPQ/9nPic a+O8FqhPpYkMqt/vUy0/sXBdEP3dSLcIkRezLzl/d3652Z5wwpKMb0tZUq+yD/Qt nhop7Ti2N0h/hGvBG/mYdeIHjDKplGLnzxY4cLVxS1PLzuaYG4QsPZIMh18i7iAz QNfVeojGiPXIgjnnEmxHtrVgKCvMnqlGq+J6OnEdb19y1e4oQJ3EDIIn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKImRSue70FUXlkRfCeVyeKD5R05MB8GA1UdIwQY MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct MzM4OTg2MTc2YjFmLzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsa2W927 E1gd89sNFJ68NJdVQugMwesJJ5emGC8IWgP8vdWwkgHrXvorbXNtGR8noZJi7BGk LY7k9ME0515m+dLpi4UUsJsa3XoHAPBW3P3mCFgLd6QqugcrZRk7Wfns936sWOHG lNUUT101FOv5viWdhxAWtPtcHnBTKNKDYCvpLnhJbYROkbb+2RVcdrIr7O2dSUyL t6cH5myxBwTSlK7BEp9JzYZ6F9ncvHR8y/hyxATLLve6DAQGAl46puHkvmmmqn12 wp0kEUrrJf4BSStYtncKZeomZIjd9cYsuVdfJvmeQ8tJdw/lWfUAANyPDSo/xFnu gT29xHLzrQDBnQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:40:07 2025 by rpki-client