This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft File: VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json) Hash identifier: Qkw2EOW4/CtPCKSSB7J+2cG7+WXeauJRfeHuZiKk/Nk= Subject key identifier: AC:AB:44:1F:61:31:6B:90:71:B6:B2:D3:87:2F:79:53:78:10:96:EB Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6 Certificate serial: 019B2F66E2BA9F2349FD21F3CAB1EB482486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft Manifest number: 05B5 Signing time: Thu 18 Dec 2025 03:00:30 +0000 Manifest this update: Thu 18 Dec 2025 03:00:30 +0000 Manifest next update: Fri 19 Dec 2025 03:00:30 +0000 Files and hashes: 1: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: bM4klYJ6UYvjkgy53uVB+cd6Sp8CnzKPdAtO+GE0XMg=) 2: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (hash: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:e2:ba:9f:23:49:fd:21:f3:ca:b1:eb:48:24:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6 Validity Not Before: Dec 18 03:00:30 2025 GMT Not After : Dec 19 03:00:30 2025 GMT Subject: CN=acab441f61316b9071b6b2d3872f7953781096eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:b9:73:e1:55:43:eb:1b:5b:ea:5e:06:c8: c9:aa:e5:9e:69:60:ee:2b:25:23:ee:25:9d:0b:0e: 8a:5b:5b:8d:23:25:37:93:e5:58:ba:cb:31:6e:a3: f5:d5:63:dd:5b:72:48:67:3c:d3:d0:4e:58:6e:e0: 9b:cc:74:6e:ac:9e:c5:d1:49:c2:c0:1e:83:6c:a3: a7:21:7b:4a:81:67:58:63:de:d1:bc:96:17:a0:f6: dc:07:7d:f4:15:d6:f4:65:2d:52:d2:c1:e4:09:b0: c8:70:28:8d:38:59:47:80:43:33:a6:22:1a:89:69: d7:d7:bc:5b:9f:ad:cf:14:0e:10:3c:dc:7b:ca:2d: 7d:32:d2:8f:08:91:05:13:79:14:fa:c4:49:99:ca: 38:5d:17:d7:d2:6c:cc:89:40:9f:57:85:5c:23:08: 0f:4c:c1:c7:93:04:5f:a8:0b:53:6a:07:3c:a7:7b: 11:bd:bd:db:ee:be:3b:76:09:dd:4c:31:31:a9:47: 84:c6:12:db:38:41:84:57:50:0a:cb:90:a0:85:c1: 3d:73:cf:4b:3a:08:1d:fd:ed:db:c0:63:d8:00:86: 48:19:0b:11:00:4e:17:25:37:82:e3:70:93:6f:ea: 05:a6:4d:f9:f3:bc:20:44:65:ce:cd:2c:44:ba:e5: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AB:44:1F:61:31:6B:90:71:B6:B2:D3:87:2F:79:53:78:10:96:EB X509v3 Authority Key Identifier: keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:16:c4:93:c7:78:6c:fc:79:9f:c5:54:7a:d8:3c:25:c2:3b: a7:c0:0a:e6:c9:fa:99:92:37:7d:8b:7f:69:55:02:bd:ef:37: 25:d2:8d:56:97:cc:4a:d4:d3:01:98:df:05:d1:63:25:33:ef: fb:1c:92:68:5a:48:29:f7:2a:7e:be:f3:cc:57:2f:10:14:e1: 2c:c8:ac:b7:10:d8:3a:96:e7:cc:7c:86:ea:81:35:aa:38:15: d5:86:d6:bd:ec:99:38:4f:20:de:6f:e1:fb:55:b9:63:c6:7a: a0:c2:c3:e9:d4:fd:81:c8:76:47:46:c6:8d:3e:ac:c4:88:cb: 33:e9:52:2f:8d:9b:61:24:0d:35:3d:6e:18:c3:69:1c:59:1f: e8:b5:1f:ae:a5:5e:51:10:6b:64:ff:7d:c0:31:28:8a:81:b0: 28:56:ef:ee:95:fa:11:c2:74:3f:cd:2a:58:bf:b3:ba:c7:c8: 0f:7f:d6:2b:30:3e:94:4f:77:9e:cc:ef:a4:ec:a0:a7:c0:28: 6e:79:e9:ad:0b:6a:aa:af:07:8a:64:be:00:f1:9a:64:1c:36: bc:da:79:67:61:6b:e7:bb:fb:9d:70:d8:9e:dd:8e:0e:60:a0: 17:ea:1b:21:23:0b:c7:b3:95:67:96:1b:b2:36:0b:1b:2f:6d: d6:ba:23:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZuK6nyNJ/SHzyrHrSCSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Mjk4NjQ4NGVjZDAxNTg1N2ViZjYxZGM0YjM2MTMwMmM3 OTE2YzYwHhcNMjUxMjE4MDMwMDMwWhcNMjUxMjE5MDMwMDMwWjAzMTEwLwYDVQQD EyhhY2FiNDQxZjYxMzE2YjkwNzFiNmIyZDM4NzJmNzk1Mzc4MTA5NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs65c+FVQ+sbW+peBsjJquWeaWDu KyUj7iWdCw6KW1uNIyU3k+VYussxbqP11WPdW3JIZzzT0E5YbuCbzHRurJ7F0UnC wB6DbKOnIXtKgWdYY97RvJYXoPbcB330Fdb0ZS1S0sHkCbDIcCiNOFlHgEMzpiIa iWnX17xbn63PFA4QPNx7yi19MtKPCJEFE3kU+sRJmco4XRfX0mzMiUCfV4VcIwgP TMHHkwRfqAtTagc8p3sRvb3b7r47dgndTDExqUeExhLbOEGEV1AKy5CghcE9c89L Oggd/e3bwGPYAIZIGQsRAE4XJTeC43CTb+oFpk3587wgRGXOzSxEuuWkKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyrRB9hMWuQcbay04cveVN4EJbrMB8GA1UdIwQY MBaAFFUphkhOzQFYV+v2HcSzYTAseRbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMt YTE2NDg4NmZmYzIwLzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81NzdiMDktOGQxMi00MmM3LTlhZjMtYTE2NDg4NmZmYzIw LzEvVlNtR1NFN05BVmhYNl9ZZHhMTmhNQ3g1RnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBbEk8d4 bPx5n8VUetg8JcI7p8AK5sn6mZI3fYt/aVUCve83JdKNVpfMStTTAZjfBdFjJTPv +xySaFpIKfcqfr7zzFcvEBThLMistxDYOpbnzHyG6oE1qjgV1YbWveyZOE8g3m/h +1W5Y8Z6oMLD6dT9gch2R0bGjT6sxIjLM+lSL42bYSQNNT1uGMNpHFkf6LUfrqVe URBrZP99wDEoioGwKFbv7pX6EcJ0P80qWL+zusfID3/WKzA+lE93nszvpOygp8Ao bnnprQtqqq8HimS+APGaZBw2vNp5Z2Fr57v7nXDYnt2ODmCgF+obISMLx7OVZ5Yb sjYLGy9t1roj1w== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:22 2025 by rpki-client