This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft File: VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json) Hash identifier: eJP/Ojg8mZTkL96mZ4Jfnkrf+YvUc6jQjVw2hmUze9I= Subject key identifier: 0E:F5:93:50:62:DF:96:3E:98:B5:60:0C:A0:9B:73:7D:E6:98:C0:B7 Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 Certificate issuer: /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Certificate serial: 019B3F48A6132B2411B2DE5D3379E0608958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft Manifest number: 0287 Signing time: Sun 21 Dec 2025 05:01:24 +0000 Manifest this update: Sun 21 Dec 2025 05:01:24 +0000 Manifest next update: Mon 22 Dec 2025 05:01:24 +0000 Files and hashes: 1: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (hash: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=) 2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: 4oiQ1nfYDPpDQCPrWQmeZteGVby74nC63TEBzrf4mh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:a6:13:2b:24:11:b2:de:5d:33:79:e0:60:89:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Validity Not Before: Dec 21 05:01:24 2025 GMT Not After : Dec 22 05:01:24 2025 GMT Subject: CN=0ef5935062df963e98b5600ca09b737de698c0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:3f:06:53:4e:02:80:bb:4b:a9:b0:5a:a7: c0:d7:62:25:c2:92:11:92:9f:99:3f:4b:88:52:36: f6:e9:d0:63:29:3e:ed:06:87:58:61:0f:da:37:8d: f4:a0:f3:1c:6c:76:12:95:d4:d9:a5:9c:be:08:b7: 00:07:47:0e:4b:c7:23:43:bc:9d:75:90:78:06:7e: 1f:65:cc:16:43:ab:24:b0:4a:e9:36:10:0b:e1:4c: e8:e7:d8:32:27:e3:ca:19:71:49:30:ff:ab:9e:3c: dd:04:6d:94:75:64:0a:4c:f8:02:55:03:0e:fd:b7: 21:a3:a3:69:6a:b4:02:47:96:0f:2d:50:dd:29:eb: dd:53:29:4f:5e:3e:7f:bb:92:53:97:0f:f4:18:94: ad:b6:7c:24:b4:0f:f2:8d:dc:03:b1:1c:e1:06:47: 32:01:25:70:51:a2:8b:fb:09:1b:f0:65:65:24:5a: 1b:27:96:0e:d0:84:3c:cf:a5:76:4d:9e:d3:8c:93: 57:b9:c1:c0:b7:97:b0:9f:0f:11:fa:16:9a:b1:ad: c0:c3:15:bc:1e:7c:43:6d:5b:02:a1:37:67:2f:5a: dd:ba:49:a4:ab:44:3f:9e:ec:cf:4d:fb:62:b0:88: 67:76:0d:b1:ee:ed:d2:17:40:40:80:06:e6:9c:94: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F5:93:50:62:DF:96:3E:98:B5:60:0C:A0:9B:73:7D:E6:98:C0:B7 X509v3 Authority Key Identifier: keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9e:4d:37:0d:c3:51:5b:f1:fa:3c:c6:49:fb:61:63:e0:df: 3a:d4:65:c5:5f:51:07:64:92:50:d1:ee:a5:55:8d:e9:6f:75: ee:3b:d9:96:02:32:69:d4:c2:f2:8f:28:d2:06:60:6f:93:9c: 14:e9:20:a7:08:cb:b9:75:16:3e:e4:18:fe:9b:97:b3:bf:c7: 88:52:9c:58:87:df:2c:7e:03:83:5f:aa:18:17:59:e0:92:6f: de:3b:b8:74:da:aa:fc:c5:d7:b0:47:6a:fc:2a:b0:ca:9a:54: 80:08:3e:66:2c:a3:64:31:7c:9c:7c:0a:76:5b:88:b7:e1:db: 23:74:9f:1f:e0:0c:02:2e:9e:5f:02:05:b2:fe:9b:51:a3:96: c7:29:55:80:ad:50:31:fa:d5:f6:9f:a0:b9:97:6a:97:6c:f2: 1b:ee:55:f7:ea:de:ad:dc:e5:4c:2d:19:01:b5:e0:eb:45:45: cb:43:2b:6f:90:66:a7:2c:3d:e2:31:43:57:24:f8:10:8a:83: e4:1e:34:ca:0f:7e:7e:05:93:ac:33:52:cf:67:9d:bb:ed:a9: 39:fd:e2:16:a1:06:3f:c4:68:67:79:ee:79:00:b5:e5:5c:c3: af:c9:d7:e3:d4:e5:4a:e4:66:17:63:b3:f8:e5:a4:9e:8b:c0: 98:55:16:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKYTKyQRst5dM3ngYIlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWJmM2QxZDQ1ODgyNTg3ZjNiZmJhMjc0YjJmOGI5YTQ1 YmM4OTkwHhcNMjUxMjIxMDUwMTI0WhcNMjUxMjIyMDUwMTI0WjAzMTEwLwYDVQQD EygwZWY1OTM1MDYyZGY5NjNlOThiNTYwMGNhMDliNzM3ZGU2OThjMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyE/BlNOAoC7S6mwWqfA12IlwpIR kp+ZP0uIUjb26dBjKT7tBodYYQ/aN430oPMcbHYSldTZpZy+CLcAB0cOS8cjQ7yd dZB4Bn4fZcwWQ6sksErpNhAL4Uzo59gyJ+PKGXFJMP+rnjzdBG2UdWQKTPgCVQMO /bcho6NparQCR5YPLVDdKevdUylPXj5/u5JTlw/0GJSttnwktA/yjdwDsRzhBkcy ASVwUaKL+wkb8GVlJFobJ5YO0IQ8z6V2TZ7TjJNXucHAt5ewnw8R+haasa3AwxW8 HnxDbVsCoTdnL1rdukmkq0Q/nuzPTftisIhndg2x7u3SF0BAgAbmnJQfzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA71k1Bi35Y+mLVgDKCbc33mmMC3MB8GA1UdIwQY MBaAFFVb89HUWIJYfzv7onSy+LmkW8iZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEt ZTIwYmI2MGEyNzkzLzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEtZTIwYmI2MGEyNzkz LzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm55NNw3D UVvx+jzGSfthY+DfOtRlxV9RB2SSUNHupVWN6W917jvZlgIyadTC8o8o0gZgb5Oc FOkgpwjLuXUWPuQY/puXs7/HiFKcWIffLH4Dg1+qGBdZ4JJv3ju4dNqq/MXXsEdq /CqwyppUgAg+ZiyjZDF8nHwKdluIt+HbI3SfH+AMAi6eXwIFsv6bUaOWxylVgK1Q MfrV9p+guZdql2zyG+5V9+rerdzlTC0ZAbXg60VFy0Mrb5Bmpyw94jFDVyT4EIqD 5B40yg9+fgWTrDNSz2edu+2pOf3iFqEGP8RoZ3nueQC15VzDr8nX49TlSuRmF2Oz +OWknovAmFUWvg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:13 2025 by rpki-client