This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json) Hash identifier: SZCak0r+RKSck0pQDU6KJSbsgrjyxJVh5PY3PoxQTAE= Subject key identifier: BB:0E:65:0B:63:A5:CF:84:A4:11:C7:4C:8A:55:37:CF:D3:FE:5D:7E Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Certificate serial: 019B3F47D49070D5ABA02323EE7BAF27E919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft Manifest number: 13D8 Signing time: Sun 21 Dec 2025 05:00:30 +0000 Manifest this update: Sun 21 Dec 2025 05:00:30 +0000 Manifest next update: Mon 22 Dec 2025 05:00:30 +0000 Files and hashes: 1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=) 2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: 6+Js1Ym6w+vv29/MFqazaPu497uaXUqwzthmZQK7ts0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:d4:90:70:d5:ab:a0:23:23:ee:7b:af:27:e9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Validity Not Before: Dec 21 05:00:30 2025 GMT Not After : Dec 22 05:00:30 2025 GMT Subject: CN=bb0e650b63a5cf84a411c74c8a5537cfd3fe5d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:67:fe:d3:fd:cd:1e:ec:89:d4:c9:18:5a: 32:3d:d4:d1:42:3e:c2:88:0b:bc:19:82:6e:df:94: 90:a1:0f:4c:0c:84:99:05:f8:83:d6:f9:7e:9a:80: 93:7b:6d:88:72:96:0d:13:7d:a4:32:6a:29:5d:38: 0a:01:ab:fc:0c:87:6b:90:06:ce:90:44:de:d5:27: d7:de:42:42:a4:02:fa:8f:04:b0:81:b9:59:5a:6a: f7:7a:3f:a1:66:79:e4:09:62:68:a2:11:b3:b3:88: 0b:fc:e5:20:1f:a5:ae:d0:ce:37:d5:d3:15:bb:82: 34:07:8b:72:b0:d1:c0:3f:1a:f6:1c:c0:42:e6:81: 6d:ec:b1:b3:5b:97:04:f9:0a:36:23:7a:4a:2d:79: 5b:52:30:b3:b3:27:e8:6a:05:7c:ae:be:04:09:4d: 3b:97:75:7d:47:59:d8:be:f8:53:69:41:99:0a:08: a7:0d:e9:7d:af:c3:84:6d:bc:26:6b:c8:56:05:e5: 6a:39:11:64:13:72:0f:fc:33:e4:52:d9:2b:a0:36: cb:01:b2:73:e5:25:bd:4c:30:64:5e:b7:1b:97:e6: c9:34:80:48:77:35:cf:df:4d:96:25:5b:aa:f4:1a: 9f:96:c4:f0:e3:51:4a:89:84:51:bf:11:fb:d4:87: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:65:0B:63:A5:CF:84:A4:11:C7:4C:8A:55:37:CF:D3:FE:5D:7E X509v3 Authority Key Identifier: keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b7:02:cb:bf:73:c9:e6:5d:bc:e5:69:f0:4a:6b:38:b7:86: 20:f7:58:50:9f:4c:7e:41:99:ad:5c:cc:4d:1a:c2:eb:03:34: ac:74:e7:c3:42:e8:34:f8:7c:c9:a9:7c:51:10:ab:c1:92:39: ee:8a:e1:3c:6c:d9:00:15:15:2d:c6:1b:2c:9e:aa:18:f1:c0: aa:7a:44:86:ad:6f:10:76:0d:13:f8:6e:1d:6f:57:be:59:1c: 28:da:49:1a:cd:78:1d:e2:ae:e0:32:01:7e:e6:45:79:c5:fe: 84:26:a1:38:30:16:c9:04:96:b6:3e:f5:f7:0d:87:be:ec:82: e5:dd:a9:61:8e:70:88:42:9a:50:8e:2d:e1:2b:70:27:f5:2a: 2f:b5:d8:51:a2:9c:75:3d:4d:4a:a8:d6:ee:53:5b:63:db:96: 8f:a5:dd:dd:d7:5f:96:24:fd:df:2e:cc:80:57:3e:7f:04:47: 76:d0:42:ea:5f:bb:0f:ae:68:b7:41:b4:fd:b4:a2:e3:75:9d: 4d:0c:7b:d8:c5:19:73:34:60:91:90:cf:da:e1:11:8d:68:15: 83:58:1b:4b:e4:d1:e1:58:30:43:26:76:07:90:e9:b8:57:a1: 13:61:1f:fe:54:6e:4f:ed:1f:ee:dd:73:10:48:33:d6:c2:82: 07:08:4e:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R9SQcNWroCMj7nuvJ+kZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi NDExZDEwHhcNMjUxMjIxMDUwMDMwWhcNMjUxMjIyMDUwMDMwWjAzMTEwLwYDVQQD EyhiYjBlNjUwYjYzYTVjZjg0YTQxMWM3NGM4YTU1MzdjZmQzZmU1ZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVJn/tP9zR7sidTJGFoyPdTRQj7C iAu8GYJu35SQoQ9MDISZBfiD1vl+moCTe22IcpYNE32kMmopXTgKAav8DIdrkAbO kETe1SfX3kJCpAL6jwSwgblZWmr3ej+hZnnkCWJoohGzs4gL/OUgH6Wu0M431dMV u4I0B4tysNHAPxr2HMBC5oFt7LGzW5cE+Qo2I3pKLXlbUjCzsyfoagV8rr4ECU07 l3V9R1nYvvhTaUGZCginDel9r8OEbbwma8hWBeVqORFkE3IP/DPkUtkroDbLAbJz 5SW9TDBkXrcbl+bJNIBIdzXP302WJVuq9BqflsTw41FKiYRRvxH71IexvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsOZQtjpc+EpBHHTIpVN8/T/l1+MB8GA1UdIwQY MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4 LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbcCy79z yeZdvOVp8EprOLeGIPdYUJ9MfkGZrVzMTRrC6wM0rHTnw0LoNPh8yal8URCrwZI5 7orhPGzZABUVLcYbLJ6qGPHAqnpEhq1vEHYNE/huHW9XvlkcKNpJGs14HeKu4DIB fuZFecX+hCahODAWyQSWtj719w2HvuyC5d2pYY5wiEKaUI4t4StwJ/UqL7XYUaKc dT1NSqjW7lNbY9uWj6Xd3ddfliT93y7MgFc+fwRHdtBC6l+7D65ot0G0/bSi43Wd TQx72MUZczRgkZDP2uERjWgVg1gbS+TR4VgwQyZ2B5DpuFehE2Ef/lRuT+0f7t1z EEgz1sKCBwhO9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 15:00:13 2025 by rpki-client