This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft File: VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json) Hash identifier: XFdi0zGLPB3eC/dJHn1a/BWP718zOKtbP9mLpEG2XHU= Subject key identifier: 01:54:94:8B:5F:65:5D:97:EB:5D:1C:39:A6:96:28:E3:1D:D5:7E:F5 Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90 Certificate issuer: /CN=56d4f20e488207b025b70000d08e653a643cf790 Certificate serial: 019B3C7E2302D847359ABB80ADAD91777314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft Manifest number: 04C8 Signing time: Sat 20 Dec 2025 16:00:58 +0000 Manifest this update: Sat 20 Dec 2025 16:00:58 +0000 Manifest next update: Sun 21 Dec 2025 16:00:58 +0000 Files and hashes: 1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: XXJ6HHtQ16uzA3CwYHOG3WRr2vOCwuLgbLYRtp/B6fE=) 2: ljHEtmGW3cEet7KrFAXFqk3Ea5o.roa (hash: g9odyMeFUXbz4KA3It8y0JaaRZFHbE8uEJXFJGKvhPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:23:02:d8:47:35:9a:bb:80:ad:ad:91:77:73:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790 Validity Not Before: Dec 20 16:00:58 2025 GMT Not After : Dec 21 16:00:58 2025 GMT Subject: CN=0154948b5f655d97eb5d1c39a69628e31dd57ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:31:04:c9:1f:81:a5:2e:e2:9b:e6:dc:36: c1:32:a0:e4:e6:29:ee:10:89:9f:4b:b7:dd:5b:48: cd:f3:7b:0f:d3:4b:de:d3:80:ce:fa:72:1a:ea:70: 4e:c4:f9:b3:78:91:f4:8e:17:fc:90:a8:cb:f2:d8: 69:ca:ca:7b:33:5c:3a:89:62:37:87:90:72:d6:0e: 72:d3:05:76:87:97:9b:4c:16:71:54:9b:68:c0:1b: 45:82:61:0e:1b:20:88:e4:e9:69:5e:4d:0a:00:61: c7:3a:a5:2d:1a:fd:cb:7b:75:65:4b:d1:6d:4f:a4: db:50:2b:fe:c5:54:40:27:e6:8a:3d:65:e3:e5:91: 6c:e9:57:83:71:21:c3:5c:10:89:bc:d8:01:00:1f: db:51:ed:6e:68:09:22:df:20:cf:d7:55:ab:c4:a6: 90:32:27:6e:79:8c:13:27:2c:b2:45:75:d5:5c:77: b2:97:12:e3:46:19:e8:2b:14:1f:2d:ea:4a:41:d7: 94:30:79:ea:6c:3f:3b:57:ed:45:c3:56:37:70:63: 52:9c:b6:53:b1:1b:7d:4b:bc:92:4a:1b:ba:90:87: c1:26:5f:85:3a:15:3b:c6:9d:32:d6:84:57:e9:0b: 42:03:dd:b4:1c:b8:7a:a2:87:55:c6:99:4e:76:7c: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:54:94:8B:5F:65:5D:97:EB:5D:1C:39:A6:96:28:E3:1D:D5:7E:F5 X509v3 Authority Key Identifier: keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:25:9e:47:9a:b1:00:53:33:10:46:c1:5c:7a:62:3f:8d:37: b3:6b:27:34:ae:2a:f6:0f:27:1c:1a:93:0c:81:87:0e:69:20: 0a:b7:8f:be:42:f1:ee:60:8e:3e:87:c7:bb:57:4f:9e:92:02: d6:fb:5c:fa:a2:91:5c:6a:6a:41:33:90:a4:01:02:c4:fe:29: 5c:e7:66:c9:c8:1b:68:37:99:c0:88:54:ac:ec:c8:8f:15:78: b4:9f:05:9a:9a:a0:af:ec:b9:f9:f9:68:75:8c:a0:7f:08:7d: 00:c3:05:76:a0:11:91:6a:42:38:f8:07:fe:8e:26:46:5f:34: 59:d1:3d:5f:6b:02:dc:42:a9:75:84:37:37:e5:14:c2:db:39: 68:ed:49:b5:af:ca:f9:c6:48:70:b8:77:e1:6d:5e:73:b1:5c: ff:53:71:2a:98:4e:c1:38:5b:f1:c1:2d:bc:27:d7:dd:e1:17: 00:46:37:b0:4c:21:80:e4:81:9b:4e:d2:e3:13:6e:cc:0e:50: 05:f9:0b:f5:e3:48:34:d2:1e:35:cf:53:b7:77:79:9c:88:b4: b1:7e:fc:d4:70:b6:a6:c7:72:48:90:59:83:27:de:b6:a8:5c: 44:76:0d:74:5b:19:66:8e:5c:2e:76:85:ca:b5:86:da:0d:23: bb:ab:a9:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiMC2Ec1mruAra2Rd3MUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDRmMjBlNDg4MjA3YjAyNWI3MDAwMGQwOGU2NTNhNjQz Y2Y3OTAwHhcNMjUxMjIwMTYwMDU4WhcNMjUxMjIxMTYwMDU4WjAzMTEwLwYDVQQD EygwMTU0OTQ4YjVmNjU1ZDk3ZWI1ZDFjMzlhNjk2MjhlMzFkZDU3ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfkxBMkfgaUu4pvm3DbBMqDk5inu EImfS7fdW0jN83sP00ve04DO+nIa6nBOxPmzeJH0jhf8kKjL8thpysp7M1w6iWI3 h5By1g5y0wV2h5ebTBZxVJtowBtFgmEOGyCI5OlpXk0KAGHHOqUtGv3Le3VlS9Ft T6TbUCv+xVRAJ+aKPWXj5ZFs6VeDcSHDXBCJvNgBAB/bUe1uaAki3yDP11WrxKaQ MidueYwTJyyyRXXVXHeylxLjRhnoKxQfLepKQdeUMHnqbD87V+1Fw1Y3cGNSnLZT sRt9S7ySShu6kIfBJl+FOhU7xp0y1oRX6QtCA920HLh6oodVxplOdnybtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFUlItfZV2X610cOaaWKOMd1X71MB8GA1UdIwQY MBaAFFbU8g5IggewJbcAANCOZTpkPPeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYt OTA4ZTY5MmNmM2MyLzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYtOTA4ZTY5MmNmM2My LzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCWeR5qx AFMzEEbBXHpiP403s2snNK4q9g8nHBqTDIGHDmkgCrePvkLx7mCOPofHu1dPnpIC 1vtc+qKRXGpqQTOQpAECxP4pXOdmycgbaDeZwIhUrOzIjxV4tJ8Fmpqgr+y5+flo dYygfwh9AMMFdqARkWpCOPgH/o4mRl80WdE9X2sC3EKpdYQ3N+UUwts5aO1Jta/K +cZIcLh34W1ec7Fc/1NxKphOwThb8cEtvCfX3eEXAEY3sEwhgOSBm07S4xNuzA5Q BfkL9eNINNIeNc9Tt3d5nIi0sX781HC2psdySJBZgyfetqhcRHYNdFsZZo5cLnaF yrWG2g0ju6up0Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:29 2025 by rpki-client