This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft File: VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json) Hash identifier: CE9Qjy+IeZShp/VCWsyj3k6lLPkHzVDwsiHp90ZAO8k= Subject key identifier: 32:5F:25:C7:09:B8:89:F0:82:67:56:AC:1D:E9:AF:00:CE:97:E4:9F Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43 Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43 Certificate serial: 019B2DB08EFC58AB6B6D7117D836C62D50A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft Manifest number: 0A61 Signing time: Wed 17 Dec 2025 19:01:44 +0000 Manifest this update: Wed 17 Dec 2025 19:01:44 +0000 Manifest next update: Thu 18 Dec 2025 19:01:44 +0000 Files and hashes: 1: Lh0KUJ3V35wYz2i99gYTrV6dktc.roa (hash: Svr4T1ZPQxakxnAH0s4zkcIB6ko9R8TkXB+xdSHMUeE=) 2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: 5i46sPHghOl5Br09O9fUPHdeQtjz8WNZ5+v12CABC+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:8e:fc:58:ab:6b:6d:71:17:d8:36:c6:2d:50:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43 Validity Not Before: Dec 17 19:01:44 2025 GMT Not After : Dec 18 19:01:44 2025 GMT Subject: CN=325f25c709b889f0826756ac1de9af00ce97e49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:c2:b7:b4:63:4e:1c:1f:78:77:35:0c:75: 6a:90:d6:ea:8c:47:8d:66:0a:4c:cc:3a:ce:f3:a0: 00:e4:b7:f5:35:38:6e:d0:3f:8a:30:24:62:59:e8: 9c:c9:73:e3:7d:42:fb:e3:90:3e:c1:71:ca:08:a8: 45:f4:29:a8:e9:e5:0e:0d:9a:02:4e:8c:df:ff:f3: b2:29:37:33:79:7c:7e:b7:71:52:ad:b4:e7:11:f2: dc:d9:00:d3:83:ad:32:b4:37:b8:1f:e7:eb:8d:52: b3:7e:df:8f:b2:cc:ae:9a:20:62:9a:78:05:d6:fb: d5:b2:9c:71:5c:9a:b6:c9:cb:ff:dc:0f:a3:29:e5: cb:ed:e5:12:bd:25:27:e8:d6:5b:3c:a9:10:86:fe: b0:b1:3a:3f:cb:9d:47:6e:a0:29:af:9f:00:88:68: 49:8e:c0:99:80:b7:ee:33:7f:cb:39:ab:89:3e:9e: e4:21:a7:12:d8:3f:14:d1:7a:8e:b2:92:7c:ce:d8: c7:c3:d8:f3:c2:ac:10:a2:e4:5d:70:f2:9e:36:56: c3:92:7e:bb:79:f7:f9:a3:a5:1f:ab:6c:35:3b:25: bf:4a:b2:71:31:00:b9:88:4b:2d:fd:ba:39:e9:dc: 73:d4:fe:fc:dd:71:a1:3e:26:99:cc:5d:9e:fb:3a: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5F:25:C7:09:B8:89:F0:82:67:56:AC:1D:E9:AF:00:CE:97:E4:9F X509v3 Authority Key Identifier: keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c1:8c:40:55:3d:da:fd:d4:09:47:77:ac:39:ac:c1:30:80: e5:e6:23:d5:3d:eb:b8:3a:27:82:50:7f:29:a2:81:3d:7d:4a: 82:2a:f9:7d:0c:52:cd:d3:bc:de:26:cb:fd:7d:da:b8:a5:17: ea:ef:cc:fe:99:01:d3:7e:5d:46:f2:a6:71:bf:8b:83:9d:93: b8:8d:99:7f:84:b5:8b:5b:54:f0:47:a5:d3:ea:a5:23:8a:b9: a2:95:bd:1f:98:5d:36:26:c2:1b:70:e9:57:92:9b:fa:ea:b1: 8d:19:77:2b:74:24:e5:df:84:26:c2:c6:42:11:cb:b8:9d:a4: b7:1e:5f:7a:ef:46:09:d1:82:2e:b7:d0:3b:76:dd:29:76:7a: c4:a4:6b:c7:76:52:62:76:58:2e:58:c7:33:54:6b:ad:70:f3: 61:b5:fa:c9:5f:e2:19:b2:c1:99:0a:17:9f:0e:b5:ef:a9:b3: 79:1e:02:95:84:b2:56:51:c8:db:a9:d3:05:ff:bc:95:27:aa: 92:df:ac:1e:92:55:c4:2f:e3:89:35:f1:08:a0:47:d1:65:fe: 2b:84:d7:0a:14:71:23:d1:92:d4:03:ff:8a:55:2f:21:2c:8d: 6f:ea:dc:0b:50:50:52:d1:86:be:fa:c1:6d:81:b3:3d:94:0d: 18:1f:ad:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsI78WKtrbXEX2DbGLVCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NjEwYTU5ZGRmZmJkMjRlZTRiMjk5ZTliMjRiMWJmMDM2 ZjhlNDMwHhcNMjUxMjE3MTkwMTQ0WhcNMjUxMjE4MTkwMTQ0WjAzMTEwLwYDVQQD EygzMjVmMjVjNzA5Yjg4OWYwODI2NzU2YWMxZGU5YWYwMGNlOTdlNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dzCt7RjThwfeHc1DHVqkNbqjEeN ZgpMzDrO86AA5Lf1NThu0D+KMCRiWeicyXPjfUL745A+wXHKCKhF9Cmo6eUODZoC Tozf//OyKTczeXx+t3FSrbTnEfLc2QDTg60ytDe4H+frjVKzft+PssyumiBimngF 1vvVspxxXJq2ycv/3A+jKeXL7eUSvSUn6NZbPKkQhv6wsTo/y51HbqApr58AiGhJ jsCZgLfuM3/LOauJPp7kIacS2D8U0XqOspJ8ztjHw9jzwqwQouRdcPKeNlbDkn67 eff5o6Ufq2w1OyW/SrJxMQC5iEst/bo56dxz1P783XGhPiaZzF2e+zoZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJfJccJuInwgmdWrB3prwDOl+SfMB8GA1UdIwQY MBaAFFVhClnd/70k7kspnpsksb8Db45DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUt OWZiNDE1YjA5YjVlLzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUtOWZiNDE1YjA5YjVl LzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMGMQFU9 2v3UCUd3rDmswTCA5eYj1T3ruDonglB/KaKBPX1Kgir5fQxSzdO83ibL/X3auKUX 6u/M/pkB035dRvKmcb+Lg52TuI2Zf4S1i1tU8Eel0+qlI4q5opW9H5hdNibCG3Dp V5Kb+uqxjRl3K3Qk5d+EJsLGQhHLuJ2ktx5feu9GCdGCLrfQO3bdKXZ6xKRrx3ZS YnZYLljHM1RrrXDzYbX6yV/iGbLBmQoXnw6176mzeR4ClYSyVlHI26nTBf+8lSeq kt+sHpJVxC/jiTXxCKBH0WX+K4TXChRxI9GS1AP/ilUvISyNb+rcC1BQUtGGvvrB bYGzPZQNGB+tvQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:46 2025 by rpki-client