This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json) Hash identifier: iajuQyGZAmB/UIr1pkFJoa0ocYzD14ySQJc7+dQNa3I= Subject key identifier: C0:65:BD:88:57:D3:73:66:04:4F:D2:11:11:1E:AE:14:A1:28:C7:DF Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40 Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340 Certificate serial: 019B46CA8475136B79BD42AFA6DAC2BC2249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft Manifest number: 0AAF Signing time: Mon 22 Dec 2025 16:00:35 +0000 Manifest this update: Mon 22 Dec 2025 16:00:35 +0000 Manifest next update: Tue 23 Dec 2025 16:00:35 +0000 Files and hashes: 1: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: 8MlRsaySzLHKsTFDPJj4aANU+HEJtY41Xq8JpQYp7cQ=) 2: vpimmj50rM3b693dSW6yAkLWvvA.roa (hash: 5VKPzqmzdczcoLOJtvbaVQfmAQ+1p8lObAjIuI3KfsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:84:75:13:6b:79:bd:42:af:a6:da:c2:bc:22:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340 Validity Not Before: Dec 22 16:00:35 2025 GMT Not After : Dec 23 16:00:35 2025 GMT Subject: CN=c065bd8857d37366044fd211111eae14a128c7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:59:88:1b:b0:54:bd:6c:9a:63:20:e3:13:a5: e7:d5:3e:9f:9e:c1:08:01:b8:6d:6b:ee:37:6a:65: e5:bc:79:7e:3f:c4:c2:42:9d:43:84:20:6b:5f:d1: 9b:be:8f:c7:f7:cd:95:8c:0e:7a:ae:b1:04:fd:ad: d2:e7:86:11:aa:b9:d3:9a:7b:9d:2c:cc:a3:e8:3c: 23:47:24:a2:c4:c1:1d:8c:7d:1b:60:af:42:e0:bd: e2:46:b8:d0:3d:ea:ba:42:b3:0b:5c:57:f3:4a:5a: f1:8e:ec:e6:9c:6a:40:e8:f8:0e:ec:8d:7f:91:50: 5a:8e:1b:47:67:c0:7a:ee:76:ae:99:e2:ec:d9:0f: 27:62:71:94:dc:14:d6:a0:c5:cd:29:f2:2e:b2:2f: 63:67:e6:01:fa:d1:c9:e9:ce:56:54:27:46:9a:57: 7a:50:5d:9a:ac:90:fa:f3:e4:92:e1:a4:0a:8d:4c: 83:b2:19:be:a3:1c:af:c7:36:28:4d:ff:84:cf:ae: 4c:42:6b:91:cb:ff:1c:21:b8:e4:a7:4a:3f:f4:62: 43:52:57:98:9c:74:54:5c:00:b8:5b:d8:fd:04:3f: 9e:b4:d2:48:51:a6:f4:01:91:6c:75:8e:69:55:61: 1c:e6:85:a0:ee:53:ea:50:5d:74:35:6b:fa:a1:ed: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:65:BD:88:57:D3:73:66:04:4F:D2:11:11:1E:AE:14:A1:28:C7:DF X509v3 Authority Key Identifier: keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:53:eb:0d:2f:13:70:22:e3:bb:4d:dc:90:67:36:21:6f:75: 08:25:fc:0c:76:01:3a:29:12:ad:b0:b6:51:20:df:d6:a0:05: bc:f6:a8:c2:48:3f:7f:ba:fd:31:a4:75:14:c8:81:a3:ee:b0: ea:e1:c2:be:a4:cd:63:72:2b:d9:c5:07:58:ec:ef:e5:2f:24: 8e:9c:9c:38:7b:25:38:2c:7a:f3:da:a2:18:11:0d:a8:83:c4: 7a:52:ad:c9:47:57:79:6e:27:cf:80:11:88:f1:79:9e:c0:18: ab:20:08:bb:1d:8b:62:33:34:4e:5d:d8:df:16:e0:2e:fa:e0: e7:8f:92:d0:44:0b:94:95:80:99:08:ee:9e:f5:44:e3:16:ad: 07:4e:fc:4c:ad:56:2b:3f:9c:81:d0:48:df:da:2e:71:da:96: da:50:9d:8c:5d:ac:91:e1:5a:0b:79:6b:43:ba:47:56:2c:d9: 83:51:be:d5:ff:07:6a:ad:a1:18:a4:a4:4d:ac:fb:45:63:bc: 0f:d9:5a:74:d7:40:65:3c:14:90:99:9f:bd:ce:31:80:9f:61: 32:fc:83:a6:a2:a7:51:13:40:09:48:47:e3:f0:6f:37:b0:3c: 4e:cb:3b:46:87:c1:3d:21:dd:96:a2:48:dc:a0:a8:1b:24:be: 51:ad:d0:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyoR1E2t5vUKvptrCvCJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjcyMmE4ODVhYmViOWFhZmZiMzJkYTc2NGVmMDkxYjVi MjAzNDAwHhcNMjUxMjIyMTYwMDM1WhcNMjUxMjIzMTYwMDM1WjAzMTEwLwYDVQQD EyhjMDY1YmQ4ODU3ZDM3MzY2MDQ0ZmQyMTExMTFlYWUxNGExMjhjN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FmIG7BUvWyaYyDjE6Xn1T6fnsEI Abhta+43amXlvHl+P8TCQp1DhCBrX9Gbvo/H982VjA56rrEE/a3S54YRqrnTmnud LMyj6DwjRySixMEdjH0bYK9C4L3iRrjQPeq6QrMLXFfzSlrxjuzmnGpA6PgO7I1/ kVBajhtHZ8B67naumeLs2Q8nYnGU3BTWoMXNKfIusi9jZ+YB+tHJ6c5WVCdGmld6 UF2arJD68+SS4aQKjUyDshm+oxyvxzYoTf+Ez65MQmuRy/8cIbjkp0o/9GJDUleY nHRUXAC4W9j9BD+etNJIUab0AZFsdY5pVWEc5oWg7lPqUF10NWv6oe0SnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBlvYhX03NmBE/SEREerhShKMffMB8GA1UdIwQY MBaAFFb3IqiFq+uar/sy2nZO8JG1sgNAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUt ODE0MGMxMTZmMGM4LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUtODE0MGMxMTZmMGM4 LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxVPrDS8T cCLju03ckGc2IW91CCX8DHYBOikSrbC2USDf1qAFvPaowkg/f7r9MaR1FMiBo+6w 6uHCvqTNY3Ir2cUHWOzv5S8kjpycOHslOCx689qiGBENqIPEelKtyUdXeW4nz4AR iPF5nsAYqyAIux2LYjM0Tl3Y3xbgLvrg54+S0EQLlJWAmQjunvVE4xatB078TK1W Kz+cgdBI39oucdqW2lCdjF2skeFaC3lrQ7pHVizZg1G+1f8Haq2hGKSkTaz7RWO8 D9ladNdAZTwUkJmfvc4xgJ9hMvyDpqKnURNACUhH4/BvN7A8Tss7RofBPSHdlqJI 3KCoGyS+Ua3QJA== -----END CERTIFICATE-----Generated at Mon Dec 22 18:52:20 2025 by rpki-client