This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json) Hash identifier: /HTbNzNb4rePL1kOKjbnm0iTW9TcmPccsHWgmHnhVYs= Subject key identifier: D3:C8:6A:DA:F1:68:84:91:5D:E7:DB:77:91:5D:99:1A:47:23:3B:26 Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8 Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8 Certificate serial: 019B465CFAB3F15737CD74D6EBAB83058CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 14:00:57 +0000 Manifest this update: Mon 22 Dec 2025 14:00:57 +0000 Manifest next update: Tue 23 Dec 2025 14:00:57 +0000 Files and hashes: 1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=) 2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: fAqIolScdl8NmKglr95lo/Gv7Jr/A1Q/mxMNP1vJswE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:fa:b3:f1:57:37:cd:74:d6:eb:ab:83:05:8c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8 Validity Not Before: Dec 22 14:00:57 2025 GMT Not After : Dec 23 14:00:57 2025 GMT Subject: CN=d3c86adaf16884915de7db77915d991a47233b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:64:1c:8f:de:95:9c:30:59:98:cf:63:a5:c1: dd:34:19:6a:c7:c8:92:b2:ce:ac:35:30:dc:29:4a: ed:13:ea:5d:58:06:ba:d6:9e:a0:83:30:6e:c2:ba: 9c:b1:35:39:42:12:5b:41:ea:e0:a9:d4:cb:30:d8: 45:a1:00:76:c1:ee:44:fb:7c:b3:a1:6e:9d:93:0a: d3:69:18:ea:09:96:07:00:ea:12:a6:99:bb:de:6a: da:a3:6b:00:b3:cc:34:e6:9c:2f:32:b6:38:a5:07: 3d:87:0d:94:e3:86:38:e4:ed:b6:f6:e8:6a:b1:b1: 74:b8:b1:eb:13:32:c9:67:f4:f6:23:81:6f:b9:f3: 5d:36:75:a8:40:a4:5d:c2:31:aa:9a:31:5a:ca:69: 38:4a:bd:e0:45:d3:cd:4d:75:dd:7e:b5:9f:77:3c: 47:f9:53:fa:e4:47:92:04:97:cf:93:a3:6b:8a:a2: 5a:b2:c9:8a:9b:4d:b9:cd:ca:21:13:59:17:a3:0a: f1:ab:b7:f4:9d:47:bd:1c:26:b5:6f:57:05:49:ce: ed:58:14:b0:72:2a:4b:79:ce:96:b5:8b:52:ff:91: cf:af:65:b3:e4:07:fb:63:2d:66:10:aa:4a:9f:07: 99:00:cb:5e:02:68:df:93:e0:11:82:0b:74:b9:15: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:6A:DA:F1:68:84:91:5D:E7:DB:77:91:5D:99:1A:47:23:3B:26 X509v3 Authority Key Identifier: keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d8:c5:76:bb:b5:77:ff:39:a4:9e:db:e9:b1:74:ab:0e:b9: bf:4e:cd:99:6c:b7:67:6c:ea:80:0b:af:35:54:37:69:5b:ef: 8c:1b:27:70:a1:af:f5:a1:a4:94:5c:ad:88:70:ca:02:a7:4b: 38:bc:56:7f:f8:57:fa:06:84:a6:78:08:ad:a8:fa:f9:8b:c3: 8d:6b:97:67:94:54:f1:62:bc:b2:31:7b:d2:ae:f1:05:a7:60: 2d:73:87:96:36:66:d6:07:9a:68:d9:e8:fe:9e:53:6d:58:d0: 2d:f9:9a:53:96:34:9a:9e:44:b1:ae:28:e4:09:5f:3c:5c:c4: 11:b4:da:f9:cc:ce:7e:f1:ae:61:ec:7c:1f:b7:f6:bb:48:65: 73:2c:b6:33:bc:98:85:6d:27:3c:4a:c7:cf:c6:b4:10:45:a6: 96:50:69:2d:cd:95:9c:77:ec:78:42:ee:21:d0:34:79:1e:a5: ab:5b:e1:89:0b:01:ea:b7:80:b9:db:5a:43:23:60:5c:e5:c1: 07:99:61:a6:c3:03:ee:12:e5:7d:97:2b:1a:bb:b2:25:f2:1a: e3:a4:11:23:cc:b6:80:bc:ff:82:00:05:3f:9f:48:a7:b9:ec: b1:4a:54:0f:ca:c6:1d:99:0d:82:bc:ea:91:45:a4:de:0b:e0: fe:ff:4c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXPqz8Vc3zXTW66uDBYynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YTAyMmRlYjA5MjhmNWQxYTBhNWZiMDBlOTZjYWQ0Yzdk OTExZDgwHhcNMjUxMjIyMTQwMDU3WhcNMjUxMjIzMTQwMDU3WjAzMTEwLwYDVQQD EyhkM2M4NmFkYWYxNjg4NDkxNWRlN2RiNzc5MTVkOTkxYTQ3MjMzYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GQcj96VnDBZmM9jpcHdNBlqx8iS ss6sNTDcKUrtE+pdWAa61p6ggzBuwrqcsTU5QhJbQergqdTLMNhFoQB2we5E+3yz oW6dkwrTaRjqCZYHAOoSppm73mrao2sAs8w05pwvMrY4pQc9hw2U44Y45O229uhq sbF0uLHrEzLJZ/T2I4FvufNdNnWoQKRdwjGqmjFaymk4Sr3gRdPNTXXdfrWfdzxH +VP65EeSBJfPk6NriqJassmKm025zcohE1kXowrxq7f0nUe9HCa1b1cFSc7tWBSw cipLec6WtYtS/5HPr2Wz5Af7Yy1mEKpKnweZAMteAmjfk+ARggt0uRUsuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPIatrxaISRXefbd5FdmRpHIzsmMB8GA1UdIwQY MBaAFFagIt6wko9dGgpfsA6WytTH2RHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFBaTNyQ1NqMTBhQ2wtd0RwYksxTWZaRWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmIyMDctZjQ3MS00YjY3LThjYjct ZTE1YTZjM2U0ZWE2LzEvVnFBaTNyQ1NqMTBhQ2wtd0RwYksxTWZaRWRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmIyMDctZjQ3MS00YjY3LThjYjctZTE1YTZjM2U0ZWE2 LzEvVnFBaTNyQ1NqMTBhQ2wtd0RwYksxTWZaRWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdjFdru1 d/85pJ7b6bF0qw65v07NmWy3Z2zqgAuvNVQ3aVvvjBsncKGv9aGklFytiHDKAqdL OLxWf/hX+gaEpngIraj6+YvDjWuXZ5RU8WK8sjF70q7xBadgLXOHljZm1geaaNno /p5TbVjQLfmaU5Y0mp5Esa4o5AlfPFzEEbTa+czOfvGuYex8H7f2u0hlcyy2M7yY hW0nPErHz8a0EEWmllBpLc2VnHfseELuIdA0eR6lq1vhiQsB6reAudtaQyNgXOXB B5lhpsMD7hLlfZcrGruyJfIa46QRI8y2gLz/ggAFP59Ip7nssUpUD8rGHZkNgrzq kUWk3gvg/v9Mcg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:39:57 2025 by rpki-client