This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json) Hash identifier: p1bHSDnxvKa7nS8RLpAVhdZ1v2MG9RY/+p1qyodnCZM= Subject key identifier: A6:A4:67:24:D8:C9:51:15:F9:69:C2:1B:02:F0:B7:FD:C5:A0:32:36 Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e Certificate serial: 019B27E5161F96858D11803AAB08EF1EB458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft Manifest number: 1576 Signing time: Tue 16 Dec 2025 16:01:23 +0000 Manifest this update: Tue 16 Dec 2025 16:01:23 +0000 Manifest next update: Wed 17 Dec 2025 16:01:23 +0000 Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: m6qeiPVX22J1jHGuGR7iuvDPa91xKpmjzSfnI8Q+sdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e5:16:1f:96:85:8d:11:80:3a:ab:08:ef:1e:b4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e Validity Not Before: Dec 16 16:01:23 2025 GMT Not After : Dec 17 16:01:23 2025 GMT Subject: CN=a6a46724d8c95115f969c21b02f0b7fdc5a03236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:56:68:6d:83:a4:a5:6a:2f:6a:33:7c:f0: 79:7d:a3:9c:81:f9:73:b1:6f:cf:a3:69:64:d3:95: d2:2f:a6:c3:9b:4b:41:b6:d8:36:9f:ce:e1:c3:1c: 13:58:55:fb:e1:49:d2:43:61:83:e8:6e:bb:d4:19: e8:ee:5f:c2:61:ec:34:fa:1a:e4:91:c4:63:2e:0d: e3:6d:56:b8:55:54:a5:f1:ed:c4:85:f6:38:b7:a7: 23:3e:e9:e0:d8:ec:96:9b:14:9c:38:2d:8c:11:60: 33:59:51:75:f7:7b:8c:cd:a2:b8:48:73:a3:e7:45: 49:32:56:ef:07:32:16:84:69:b0:f3:13:0a:4d:2d: 61:d5:0a:6c:96:94:a2:d5:8f:cc:bd:bd:b5:36:70: bb:04:e7:d2:46:b2:42:75:ed:78:24:65:34:6d:a3: 93:43:84:5a:71:d7:e8:a5:30:6b:25:19:94:33:cc: 15:ad:f0:f5:ff:95:36:8d:15:00:ff:3c:47:7a:20: 3c:c5:f9:a5:80:b9:51:b8:ff:0a:91:1c:cc:12:6b: a5:d3:f6:e2:5c:0f:9d:7c:e7:8c:26:68:0f:82:a6: 24:96:d9:c1:01:75:03:59:0d:8e:a0:df:48:dd:c9: 51:69:9e:4c:d8:63:db:82:1b:51:57:a2:5b:68:43: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:67:24:D8:C9:51:15:F9:69:C2:1B:02:F0:B7:FD:C5:A0:32:36 X509v3 Authority Key Identifier: keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:10:a0:9a:7d:cd:74:cd:96:a3:4a:7a:1a:05:97:fc:41:04: f8:ee:08:f0:ac:90:22:3d:b8:4b:fb:a9:ca:ae:66:5f:bd:e0: cb:72:45:06:ff:86:a2:b3:9d:96:a5:57:c2:69:63:0d:25:12: 99:64:84:86:1f:e2:0d:8e:4e:22:4d:22:9a:c0:1c:c9:2c:f6: 76:4b:49:eb:67:b4:53:47:41:fa:f4:e4:bf:b3:c6:9e:30:ff: 94:87:62:94:9c:93:7f:41:56:4f:6f:35:57:7a:32:84:fb:6d: b4:3c:5c:52:40:d0:c4:99:7d:28:d3:9e:77:b7:2e:69:ad:7b: 2a:d1:54:f8:a2:fe:92:d7:a7:aa:77:bb:5e:39:d5:ba:19:41: 5b:86:33:3d:4e:59:41:dd:65:1a:5c:7b:48:b4:cb:e6:35:84: cb:f0:b4:42:ad:ae:1c:90:f6:f2:4b:f2:09:7c:79:cb:ca:ba: 8f:43:58:09:d8:6a:ff:d3:61:ef:4b:35:32:91:c4:5c:f6:67: 85:b4:01:20:89:e6:ea:0a:02:26:69:84:d7:b1:10:bf:06:ec: 3b:b0:1f:9c:e2:e6:c0:b5:2b:eb:4a:57:57:57:8f:db:2a:d8: fb:1b:c0:da:b5:5c:53:51:42:d8:57:d2:f5:56:8b:a1:77:db: 74:da:52:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5RYfloWNEYA6qwjvHrRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx ZDdkOGUwHhcNMjUxMjE2MTYwMTIzWhcNMjUxMjE3MTYwMTIzWjAzMTEwLwYDVQQD EyhhNmE0NjcyNGQ4Yzk1MTE1Zjk2OWMyMWIwMmYwYjdmZGM1YTAzMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopFWaG2DpKVqL2ozfPB5faOcgflz sW/Po2lk05XSL6bDm0tBttg2n87hwxwTWFX74UnSQ2GD6G671Bno7l/CYew0+hrk kcRjLg3jbVa4VVSl8e3EhfY4t6cjPung2OyWmxScOC2MEWAzWVF193uMzaK4SHOj 50VJMlbvBzIWhGmw8xMKTS1h1QpslpSi1Y/Mvb21NnC7BOfSRrJCde14JGU0baOT Q4RacdfopTBrJRmUM8wVrfD1/5U2jRUA/zxHeiA8xfmlgLlRuP8KkRzMEmul0/bi XA+dfOeMJmgPgqYkltnBAXUDWQ2OoN9I3clRaZ5M2GPbghtRV6JbaENPBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKakZyTYyVEV+WnCGwLwt/3FoDI2MB8GA1UdIwQY MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBCgmn3N dM2Wo0p6GgWX/EEE+O4I8KyQIj24S/upyq5mX73gy3JFBv+GorOdlqVXwmljDSUS mWSEhh/iDY5OIk0imsAcySz2dktJ62e0U0dB+vTkv7PGnjD/lIdilJyTf0FWT281 V3oyhPtttDxcUkDQxJl9KNOed7cuaa17KtFU+KL+ktenqne7XjnVuhlBW4YzPU5Z Qd1lGlx7SLTL5jWEy/C0Qq2uHJD28kvyCXx5y8q6j0NYCdhq/9Nh70s1MpHEXPZn hbQBIInm6goCJmmE17EQvwbsO7AfnOLmwLUr60pXV1eP2yrY+xvA2rVcU1FC2FfS 9VaLoXfbdNpS8w== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:29 2025 by rpki-client