This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft File: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json) Hash identifier: g9XU6npZH6VMOkUss/dLIpfdk6MkBLGVnHuBsSqpbC4= Subject key identifier: BA:1C:4B:C6:EA:F7:D2:90:D8:03:50:76:50:1C:D1:69:A2:BF:F9:15 Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B Certificate issuer: /CN=555988478690ad8d81149aa5c4cae75af5385f1b Certificate serial: 019B71108694227E9A14EE4DE0703C2C1901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft Manifest number: 099F Signing time: Tue 30 Dec 2025 21:01:06 +0000 Manifest this update: Tue 30 Dec 2025 21:01:06 +0000 Manifest next update: Wed 31 Dec 2025 21:01:06 +0000 Files and hashes: 1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: Y4DY2s4o3oAegO6uni+Jj283bXeKNkR9d6WIksdKSWE=) 2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:86:94:22:7e:9a:14:ee:4d:e0:70:3c:2c:19:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b Validity Not Before: Dec 30 21:01:06 2025 GMT Not After : Dec 31 21:01:06 2025 GMT Subject: CN=ba1c4bc6eaf7d290d8035076501cd169a2bff915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:f4:91:b7:74:d6:39:8d:3d:ec:a8:a4:68: 52:5e:85:f8:81:13:42:43:bb:58:4f:b8:af:ee:49: e9:8f:4d:17:62:86:28:7c:a9:22:e0:90:f6:c1:72: 8e:f1:9b:4c:1b:7f:57:c2:f1:b1:3b:6c:1a:16:86: 1b:a1:43:eb:ee:ee:54:4d:fe:4e:2b:e2:2d:2a:31: 5e:55:b9:55:9a:55:79:2e:c2:0f:2c:94:ef:5f:15: e0:72:e7:91:76:3b:7e:53:8a:d6:d3:d1:2e:9c:8a: 2d:c0:18:54:d1:1f:03:81:71:a1:57:bd:fb:56:14: d9:f6:51:20:26:d6:b2:08:ab:1b:ca:60:40:11:02: 8d:91:5b:06:ef:e4:a6:33:ad:58:0c:84:41:b5:9a: 0a:4c:09:bb:3e:5c:0a:94:0a:df:a8:93:38:e7:3d: 00:24:da:68:a5:dd:ca:d8:e9:d1:29:1d:cf:1c:32: bc:1a:c0:c9:12:cb:22:96:38:73:d8:5e:13:e5:a5: 27:3f:9b:de:2b:61:e7:66:ee:d5:aa:66:07:bc:f6: c2:98:dd:47:0a:f3:b7:1c:88:e9:78:f1:ca:70:d7: 02:a6:a1:ff:ea:32:30:36:e4:62:b6:f2:5c:1c:0c: 5b:54:00:e9:75:fb:cc:f3:2b:d7:34:b3:b3:72:b8: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:4B:C6:EA:F7:D2:90:D8:03:50:76:50:1C:D1:69:A2:BF:F9:15 X509v3 Authority Key Identifier: keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:99:95:0d:a8:5a:50:f5:90:f2:0c:72:2b:f5:1c:22:e0: d5:dd:85:8e:1c:d5:f9:79:88:50:ee:42:c9:5f:85:03:65:fa: 73:3d:65:ae:1c:4d:e3:c4:bc:3f:9e:fb:ab:6f:d4:40:36:48: 64:a6:6f:03:67:88:ff:98:ee:05:6c:f5:f1:5a:57:6d:fa:d4: 75:62:33:65:eb:ed:95:e5:60:e6:49:a7:ee:07:5a:74:db:14: 1d:d0:65:c2:43:1c:da:e4:af:15:f5:60:b2:d9:aa:c6:30:1c: c7:c7:f5:3a:61:fe:f6:aa:5f:8d:fe:c7:8d:91:e5:04:e3:52: 40:95:a4:90:db:b9:b9:66:a7:7f:f5:44:ee:2a:b9:45:bc:c8: a7:86:9d:c3:46:01:74:ac:c7:7b:6b:01:6d:18:4e:99:6a:f7: ee:5e:ed:c5:e1:ed:6b:5b:fd:46:1f:59:02:8d:d7:8f:14:75: 18:41:9e:87:6a:1f:85:0f:0b:f2:b9:33:b2:dd:ed:c5:22:6e: 72:c9:ee:59:a6:b5:a0:c6:65:02:57:37:db:ba:0d:48:72:28: 39:7f:4d:b5:18:af:59:e3:32:21:74:a2:2e:85:cd:8f:74:76: f0:c7:48:6a:f1:a2:ab:ce:43:21:dc:d3:eb:d6:7d:61:da:d0: e6:e8:7f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEIaUIn6aFO5N4HA8LBkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NTk4ODQ3ODY5MGFkOGQ4MTE0OWFhNWM0Y2FlNzVhZjUz ODVmMWIwHhcNMjUxMjMwMjEwMTA2WhcNMjUxMjMxMjEwMTA2WjAzMTEwLwYDVQQD EyhiYTFjNGJjNmVhZjdkMjkwZDgwMzUwNzY1MDFjZDE2OWEyYmZmOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIH0kbd01jmNPeyopGhSXoX4gRNC Q7tYT7iv7knpj00XYoYofKki4JD2wXKO8ZtMG39XwvGxO2waFoYboUPr7u5UTf5O K+ItKjFeVblVmlV5LsIPLJTvXxXgcueRdjt+U4rW09EunIotwBhU0R8DgXGhV737 VhTZ9lEgJtayCKsbymBAEQKNkVsG7+SmM61YDIRBtZoKTAm7PlwKlArfqJM45z0A JNpopd3K2OnRKR3PHDK8GsDJEssiljhz2F4T5aUnP5veK2HnZu7VqmYHvPbCmN1H CvO3HIjpePHKcNcCpqH/6jIwNuRitvJcHAxbVADpdfvM8yvXNLOzcrgOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLocS8bq99KQ2ANQdlAc0Wmiv/kVMB8GA1UdIwQY MBaAFFVZiEeGkK2NgRSapcTK51r1OF8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt OGQxZGE5ZjM4YTBiLzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi LzEvVlZtSVI0YVFyWTJCRkpxbHhNcm5XdlU0WHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxKZlQ2o WlD1kPIMciv1HCLg1d2FjhzV+XmIUO5CyV+FA2X6cz1lrhxN48S8P577q2/UQDZI ZKZvA2eI/5juBWz18VpXbfrUdWIzZevtleVg5kmn7gdadNsUHdBlwkMc2uSvFfVg stmqxjAcx8f1OmH+9qpfjf7HjZHlBONSQJWkkNu5uWanf/VE7iq5RbzIp4adw0YB dKzHe2sBbRhOmWr37l7txeHta1v9Rh9ZAo3XjxR1GEGeh2ofhQ8L8rkzst3txSJu csnuWaa1oMZlAlc327oNSHIoOX9NtRivWeMyIXSiLoXNj3R28MdIavGiq85DIdzT 69Z9YdrQ5uh/iA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:03:30 2025 by rpki-client