This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft File: VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json) Hash identifier: 9AwV0zBXM0nvUIh7I44lxZ2VD/ocpfzZP/Gp7l1Td5E= Subject key identifier: 59:22:7A:5E:BC:E7:7D:78:D8:91:C2:6C:3A:27:6B:BF:57:CC:7A:0F Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5 Certificate issuer: /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5 Certificate serial: 019B4581C36E3D00B094DCF004ACFAD1381C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft Manifest number: 0612 Signing time: Mon 22 Dec 2025 10:01:30 +0000 Manifest this update: Mon 22 Dec 2025 10:01:30 +0000 Manifest next update: Tue 23 Dec 2025 10:01:30 +0000 Files and hashes: 1: OTrg-ZEc2BLcvUJfh8jjFvLHsBc.roa (hash: LhGZ4Fn8zvdKFROkrhPv5B9fTX3FdgJSPFLUgkfRUhE=) 2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: kWlU1fa79Zs3oyem1ZhNf3/HPd9vScak0DDwxLJhzsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:c3:6e:3d:00:b0:94:dc:f0:04:ac:fa:d1:38:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5 Validity Not Before: Dec 22 10:01:30 2025 GMT Not After : Dec 23 10:01:30 2025 GMT Subject: CN=59227a5ebce77d78d891c26c3a276bbf57cc7a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:d8:d6:a8:96:94:66:8e:fd:0a:c7:a8:ea: 86:50:b8:e8:46:96:db:c0:1f:c2:7e:d6:a0:dd:fb: 4f:7e:0d:90:9d:c6:de:4c:51:db:e9:73:34:b1:dd: b1:bd:55:8a:e2:19:8f:80:0d:2a:ff:c6:f8:f5:bb: 20:d8:68:ef:a6:e2:fa:73:2f:0c:28:06:a7:fa:5e: 3e:09:b7:f0:5e:68:8c:5f:e7:92:c2:9a:45:5e:f4: a2:c5:5b:ce:1c:9f:a8:48:c6:a3:83:2a:f9:86:35: ea:4d:38:96:cc:e7:15:dc:ec:a0:47:31:7d:72:a4: fe:b9:74:54:52:ab:c4:e3:56:2b:4e:24:32:13:74: 0c:e0:39:b0:24:86:ce:51:7f:f1:18:d9:9e:23:b6: 5f:b2:68:9d:77:92:3f:49:51:8b:28:a9:17:aa:ad: 46:80:53:84:eb:a2:8f:f4:ec:ee:b2:21:90:24:f2: 36:56:86:cd:01:5b:79:a1:32:ee:aa:94:94:68:d5: dc:80:5b:5f:1f:05:1b:9c:9b:5a:47:a3:1c:d9:0c: bd:f9:bc:80:45:0d:96:93:80:e8:63:53:e5:0a:3e: 93:07:89:36:6a:54:63:b2:7a:11:d5:9f:46:48:52: 4f:9b:fd:92:b2:3a:ea:a8:e5:a3:77:1f:db:e5:37: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:7A:5E:BC:E7:7D:78:D8:91:C2:6C:3A:27:6B:BF:57:CC:7A:0F X509v3 Authority Key Identifier: keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:6d:9e:f4:8f:ec:c8:aa:98:93:48:e3:1a:08:26:5a:a2: fd:c4:bb:bf:47:91:86:75:09:33:29:c2:db:2f:df:8b:8b:12: b4:19:55:3c:34:98:51:17:0b:1d:82:bc:5d:20:c3:bc:ec:30: a1:1a:ff:7d:e9:d2:19:b9:a9:ea:c0:61:cd:67:87:60:72:02: 72:c7:6c:b9:8b:39:9c:84:81:2c:77:5e:49:93:9f:1c:e5:f3: 4b:3f:0e:0a:e9:d9:45:be:ae:73:af:33:5b:0b:be:a3:a6:d1: 91:c5:32:51:49:b5:7d:20:65:66:d9:c1:ee:49:8c:a6:0c:e7: ca:9d:e5:5b:21:04:1a:7d:62:76:85:cb:73:c1:d9:1f:aa:3e: da:80:10:9e:94:3c:17:17:21:11:fd:4d:90:79:10:a0:28:44: 9b:05:9a:d4:a7:91:8f:61:15:08:6f:3a:a1:68:3c:54:30:de: ef:0e:50:6b:d9:57:f9:0e:c5:8f:75:81:06:ad:8f:8b:01:7d: 41:bb:4f:e4:5f:1a:4c:1f:94:9a:58:9b:11:6e:28:e2:12:df: 1c:26:7c:85:bf:85:d4:d1:36:26:39:3e:c2:ae:18:71:c8:45: 9d:db:4e:e1:46:6d:48:7d:f7:f8:03:53:d9:d2:f5:bd:82:f6: 8e:a6:37:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgcNuPQCwlNzwBKz60TgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmVkMTFiYjZkNWUyZDZhNmVhYmExOWRhZjYzN2I1M2Y3 NjdlZDUwHhcNMjUxMjIyMTAwMTMwWhcNMjUxMjIzMTAwMTMwWjAzMTEwLwYDVQQD Eyg1OTIyN2E1ZWJjZTc3ZDc4ZDg5MWMyNmMzYTI3NmJiZjU3Y2M3YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7bY1qiWlGaO/QrHqOqGULjoRpbb wB/Cftag3ftPfg2QncbeTFHb6XM0sd2xvVWK4hmPgA0q/8b49bsg2GjvpuL6cy8M KAan+l4+CbfwXmiMX+eSwppFXvSixVvOHJ+oSMajgyr5hjXqTTiWzOcV3OygRzF9 cqT+uXRUUqvE41YrTiQyE3QM4DmwJIbOUX/xGNmeI7Zfsmidd5I/SVGLKKkXqq1G gFOE66KP9OzusiGQJPI2VobNAVt5oTLuqpSUaNXcgFtfHwUbnJtaR6Mc2Qy9+byA RQ2Wk4DoY1PlCj6TB4k2alRjsnoR1Z9GSFJPm/2SsjrqqOWjdx/b5TcbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkiel6853142JHCbDona79XzHoPMB8GA1UdIwQY MBaAFFVu0Ru21eLWpuq6Gdr2N7U/dn7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYt MTk5ODY2NWJkNzkzLzEvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYtMTk5ODY2NWJkNzkz LzEvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHFtnvSP 7MiqmJNI4xoIJlqi/cS7v0eRhnUJMynC2y/fi4sStBlVPDSYURcLHYK8XSDDvOww oRr/fenSGbmp6sBhzWeHYHICcsdsuYs5nISBLHdeSZOfHOXzSz8OCunZRb6uc68z Wwu+o6bRkcUyUUm1fSBlZtnB7kmMpgznyp3lWyEEGn1idoXLc8HZH6o+2oAQnpQ8 FxchEf1NkHkQoChEmwWa1KeRj2EVCG86oWg8VDDe7w5Qa9lX+Q7Fj3WBBq2PiwF9 QbtP5F8aTB+UmlibEW4o4hLfHCZ8hb+F1NE2Jjk+wq4YcchFndtO4UZtSH33+ANT 2dL1vYL2jqY3dg== -----END CERTIFICATE-----Generated at Mon Dec 22 12:49:23 2025 by rpki-client