This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json) Hash identifier: +IBAsq2xXWm8qNShxdRAC1WoX1QBGnI0rqSIH8t4+XM= Subject key identifier: AF:51:6D:1D:D2:7D:56:1C:7E:C7:63:DC:6C:FD:66:EE:76:99:77:50 Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Certificate serial: 019B3BA28A0918B4878185C8A178DF656AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft Manifest number: 041A Signing time: Sat 20 Dec 2025 12:01:06 +0000 Manifest this update: Sat 20 Dec 2025 12:01:06 +0000 Manifest next update: Sun 21 Dec 2025 12:01:06 +0000 Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: qK3y0W1tDB79t93oPDgmCqPIAiAGXzXLpSRmMsBbXyw=) 2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:8a:09:18:b4:87:81:85:c8:a1:78:df:65:6a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Validity Not Before: Dec 20 12:01:06 2025 GMT Not After : Dec 21 12:01:06 2025 GMT Subject: CN=af516d1dd27d561c7ec763dc6cfd66ee76997750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:f9:63:79:87:be:4a:36:96:9b:d1:f2:fa: 47:4e:06:a5:f7:22:8f:3d:51:28:64:26:90:c4:46: 27:0b:d1:ef:71:6c:f5:7a:16:2a:86:2d:8c:92:e1: 65:f1:59:f4:68:dc:56:5b:29:40:57:f2:62:da:7f: c1:f9:84:b6:d6:62:e6:63:c5:7d:7d:6d:d1:5f:97: bb:68:87:b1:b9:a7:a4:cc:0e:c8:69:0d:75:ef:eb: 01:6f:bd:ab:20:d4:3d:ac:60:03:36:fc:43:61:8d: bf:53:3e:04:96:d8:e2:e1:0c:f1:9d:dd:da:18:c2: c5:83:38:b2:43:a8:4f:77:11:1d:c7:90:86:d8:74: 67:e4:96:68:23:58:fd:3e:63:2a:18:30:9c:84:61: a6:05:47:20:af:d9:cb:c2:fc:b8:7e:ae:9a:47:08: 73:46:03:bb:cd:07:53:b9:e2:23:84:d5:80:9e:27: 25:e3:af:28:91:e0:e7:2b:02:77:a0:6e:20:4e:c0: 75:41:e7:a8:1e:64:42:5b:af:6f:a5:24:74:dc:4c: 9c:38:5b:c2:40:e2:51:4e:de:31:c3:0a:1c:52:98: e2:54:15:50:31:c0:ff:48:14:ad:42:62:c4:78:ca: ac:ff:85:91:a3:ba:e0:85:e3:29:f0:3a:94:aa:e0: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:6D:1D:D2:7D:56:1C:7E:C7:63:DC:6C:FD:66:EE:76:99:77:50 X509v3 Authority Key Identifier: keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:51:e2:eb:9a:e8:6f:47:82:0e:b4:e7:25:aa:0b:78:3b:0a: e1:72:9c:7f:8b:22:ce:e3:de:70:26:70:e5:9d:ae:a5:ca:cc: 27:a2:af:6d:0a:b9:a4:56:46:9d:b1:5b:f3:32:c8:c8:a8:11: e8:aa:27:1d:d4:8d:6a:a9:b6:3e:41:18:b3:65:0d:6f:ec:58: 69:ee:5a:66:56:34:05:ea:fd:84:79:f3:06:66:5f:9e:ca:80: 38:85:b0:a8:d8:f8:64:d6:52:60:17:53:fa:ec:dd:d1:e1:b6: c8:4e:b6:63:7e:ea:ab:85:fc:62:b9:57:ef:ea:3d:b2:aa:40: 8b:ac:9e:d3:32:dc:34:67:97:e0:a7:1a:46:21:4a:bd:85:60: 93:08:7e:0b:96:0e:5a:83:d4:15:ed:eb:0c:63:e9:c7:e2:83: 4f:42:cc:b7:fd:86:28:b7:d7:0e:41:32:86:0a:6c:1a:f6:6a: 6b:87:5b:9b:fb:8e:e2:46:49:05:f1:7d:78:33:fa:6a:8d:e4: 80:5c:e6:e8:25:15:77:05:cc:19:95:bf:bf:db:ea:fc:fd:7c: c3:e3:33:98:75:a4:6a:8e:3f:ce:e0:6c:87:83:34:73:6a:1c: b9:66:97:6e:f7:ef:ab:f0:9f:49:a5:76:8a:79:ef:85:11:8c: 8f:9e:e1:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oooJGLSHgYXIoXjfZWqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjAxYTFlOTllYTVkNGYzOTk0ZDMzMzA5ZDA5NDMxMmRj ODU0MjcwHhcNMjUxMjIwMTIwMTA2WhcNMjUxMjIxMTIwMTA2WjAzMTEwLwYDVQQD EyhhZjUxNmQxZGQyN2Q1NjFjN2VjNzYzZGM2Y2ZkNjZlZTc2OTk3NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAP5Y3mHvko2lpvR8vpHTgal9yKP PVEoZCaQxEYnC9HvcWz1ehYqhi2MkuFl8Vn0aNxWWylAV/Ji2n/B+YS21mLmY8V9 fW3RX5e7aIexuaekzA7IaQ117+sBb72rINQ9rGADNvxDYY2/Uz4Eltji4Qzxnd3a GMLFgziyQ6hPdxEdx5CG2HRn5JZoI1j9PmMqGDCchGGmBUcgr9nLwvy4fq6aRwhz RgO7zQdTueIjhNWAnicl468okeDnKwJ3oG4gTsB1QeeoHmRCW69vpSR03EycOFvC QOJRTt4xwwocUpjiVBVQMcD/SBStQmLEeMqs/4WRo7rgheMp8DqUquBBpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9RbR3SfVYcfsdj3Gz9Zu52mXdQMB8GA1UdIwQY MBaAFFbwGh6Z6l1POZTTMwnQlDEtyFQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgt MTMwZjdmMzhmNTM3LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgtMTMwZjdmMzhmNTM3 LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlHi65ro b0eCDrTnJaoLeDsK4XKcf4sizuPecCZw5Z2upcrMJ6KvbQq5pFZGnbFb8zLIyKgR 6KonHdSNaqm2PkEYs2UNb+xYae5aZlY0Ber9hHnzBmZfnsqAOIWwqNj4ZNZSYBdT +uzd0eG2yE62Y37qq4X8YrlX7+o9sqpAi6ye0zLcNGeX4KcaRiFKvYVgkwh+C5YO WoPUFe3rDGPpx+KDT0LMt/2GKLfXDkEyhgpsGvZqa4dbm/uO4kZJBfF9eDP6ao3k gFzm6CUVdwXMGZW/v9vq/P18w+MzmHWkao4/zuBsh4M0c2ocuWaXbvfvq/CfSaV2 innvhRGMj57hQA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:40:16 2025 by rpki-client