This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json) Hash identifier: PBjapN5PxA4Jvc+eTKP10YFCooOjaigHOFyXzyWo5hM= Subject key identifier: F4:DB:02:FE:F8:EA:5F:A4:74:49:37:E2:7C:B4:C3:CC:18:55:E2:24 Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Certificate serial: 019B6DD85CE66AC7EEEF1DC9DB17FE0E1BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft Manifest number: 0434 Signing time: Tue 30 Dec 2025 06:00:54 +0000 Manifest this update: Tue 30 Dec 2025 06:00:54 +0000 Manifest next update: Wed 31 Dec 2025 06:00:54 +0000 Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: hBfGXJrzqJ5XAWnzDJTgQ/YtmPeLJId5LTdVXh9Epac=) 2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:5c:e6:6a:c7:ee:ef:1d:c9:db:17:fe:0e:1b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Validity Not Before: Dec 30 06:00:54 2025 GMT Not After : Dec 31 06:00:54 2025 GMT Subject: CN=f4db02fef8ea5fa4744937e27cb4c3cc1855e224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:8d:af:ff:58:53:9e:d1:4f:b7:4c:0c:d7: 33:1f:47:84:9f:29:5d:cb:f4:9b:7f:7e:d2:fa:3f: 4d:53:ef:4d:ed:a3:be:d9:2a:5c:c6:f2:71:e8:57: 89:38:01:08:1f:8c:ca:8d:1f:7e:c4:a6:66:5c:5d: 6e:fe:85:31:92:ee:28:ec:5f:45:06:79:ae:a4:28: 4f:e3:68:1b:ea:50:6c:e3:b2:4b:b2:34:4a:9e:64: 9c:30:23:9e:b8:22:bb:ae:b1:03:1e:08:8b:37:5f: 88:a2:65:d4:29:26:e4:f3:6e:63:73:76:93:ac:82: c4:07:88:f7:cf:e5:4f:0d:ec:21:97:a2:a0:9d:c6: 05:8e:d7:61:f0:17:de:79:4c:21:83:c8:01:ad:b1: b0:5c:4a:9d:d6:26:e7:06:75:22:9d:2c:e3:1b:24: 85:75:72:45:15:c7:8e:97:dc:97:0b:6c:79:16:61: fc:ff:b7:65:6e:66:2c:03:11:a1:13:d4:9d:53:9a: 98:cd:07:12:c4:4e:b8:24:ca:25:b7:66:a2:e4:60: 22:ec:89:92:e0:0b:86:5c:18:46:cf:55:08:60:bd: 01:98:92:07:e6:f5:82:a7:4b:69:c6:d0:2d:4b:1f: 03:e4:29:bf:4c:61:45:0a:35:79:ae:e3:41:24:ed: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:02:FE:F8:EA:5F:A4:74:49:37:E2:7C:B4:C3:CC:18:55:E2:24 X509v3 Authority Key Identifier: keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:2d:86:0c:72:23:81:f3:c4:73:ce:ab:71:30:b3:3e:95:45: fb:13:a9:1d:b7:6e:31:2d:13:dc:2d:03:33:4a:c2:4f:ec:a9: 8e:c1:67:70:1f:35:a6:2a:ed:65:90:38:e1:20:99:e0:0f:87: 71:de:c9:dc:a9:7a:96:bf:e7:88:f1:53:7d:32:7e:23:d9:b1: e2:ee:2f:23:97:f1:cb:9b:b2:f6:79:62:cd:e9:a8:d7:2a:2d: f6:ec:1b:a0:4e:08:52:cb:be:10:3c:54:37:85:e8:2f:9f:8a: d5:fa:5b:1e:ee:7f:e1:5c:0a:f2:43:5b:fa:c5:96:3a:a3:3b: 8f:74:2e:d1:83:c8:a5:8c:07:bc:41:45:a8:0e:77:6c:6f:12: da:53:60:4d:e3:28:ac:6a:67:fe:3f:a3:7e:06:d3:70:6b:82: bd:a8:0a:91:20:d9:5a:71:54:2e:72:50:98:e9:36:a8:c0:8c: 9f:3a:a2:56:a9:be:f9:63:a4:b3:4a:b0:07:7b:30:ff:d3:d3: f6:bf:a7:96:7f:9b:72:ca:bf:ef:9d:b0:42:60:3c:bb:8a:8b: 89:64:f5:51:fb:48:c4:c9:9c:cb:cb:9c:f5:c8:2e:c5:ce:c8: 14:84:53:5d:23:bd:93:aa:ce:d0:d7:7a:2a:52:4f:e4:4e:52: a1:b2:86:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2Fzmasfu7x3J2xf+DhvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjAxYTFlOTllYTVkNGYzOTk0ZDMzMzA5ZDA5NDMxMmRj ODU0MjcwHhcNMjUxMjMwMDYwMDU0WhcNMjUxMjMxMDYwMDU0WjAzMTEwLwYDVQQD EyhmNGRiMDJmZWY4ZWE1ZmE0NzQ0OTM3ZTI3Y2I0YzNjYzE4NTVlMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh6Nr/9YU57RT7dMDNczH0eEnyld y/Sbf37S+j9NU+9N7aO+2SpcxvJx6FeJOAEIH4zKjR9+xKZmXF1u/oUxku4o7F9F BnmupChP42gb6lBs47JLsjRKnmScMCOeuCK7rrEDHgiLN1+IomXUKSbk825jc3aT rILEB4j3z+VPDewhl6KgncYFjtdh8BfeeUwhg8gBrbGwXEqd1ibnBnUinSzjGySF dXJFFceOl9yXC2x5FmH8/7dlbmYsAxGhE9SdU5qYzQcSxE64JMolt2ai5GAi7ImS 4AuGXBhGz1UIYL0BmJIH5vWCp0tpxtAtSx8D5Cm/TGFFCjV5ruNBJO2DrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTbAv746l+kdEk34ny0w8wYVeIkMB8GA1UdIwQY MBaAFFbwGh6Z6l1POZTTMwnQlDEtyFQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgt MTMwZjdmMzhmNTM3LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgtMTMwZjdmMzhmNTM3 LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxy2GDHIj gfPEc86rcTCzPpVF+xOpHbduMS0T3C0DM0rCT+ypjsFncB81pirtZZA44SCZ4A+H cd7J3Kl6lr/niPFTfTJ+I9mx4u4vI5fxy5uy9nlizemo1yot9uwboE4IUsu+EDxU N4XoL5+K1fpbHu5/4VwK8kNb+sWWOqM7j3Qu0YPIpYwHvEFFqA53bG8S2lNgTeMo rGpn/j+jfgbTcGuCvagKkSDZWnFULnJQmOk2qMCMnzqiVqm++WOks0qwB3sw/9PT 9r+nln+bcsq/752wQmA8u4qLiWT1UftIxMmcy8uc9cguxc7IFIRTXSO9k6rO0Nd6 KlJP5E5SobKGRA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:50:10 2025 by rpki-client