This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json) Hash identifier: 949iMhNfIsK9kd4sYtdWHx16h4K3YcLz+JBcSvVpVXk= Subject key identifier: 88:84:01:BC:13:6C:E2:52:69:6E:50:C5:A4:C4:C7:7E:B6:4D:D1:AA Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb Certificate serial: 019B3AFDDBFADCA7D78443AD0C73A17F93D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft Manifest number: 0281 Signing time: Sat 20 Dec 2025 09:01:13 +0000 Manifest this update: Sat 20 Dec 2025 09:01:13 +0000 Manifest next update: Sun 21 Dec 2025 09:01:13 +0000 Files and hashes: 1: EslCT3gxkxtf5DQ7QkwYmLYeFlo.roa (hash: Uhm0SZdyDhhQLcGTvxZ7EAQVgtjflrvk9JNzMwkUJ7I=) 2: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: AF3kuwZnEcTS++lilmvvbYa2YXQlr94MfZGELhDoNpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:db:fa:dc:a7:d7:84:43:ad:0c:73:a1:7f:93:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb Validity Not Before: Dec 20 09:01:13 2025 GMT Not After : Dec 21 09:01:13 2025 GMT Subject: CN=888401bc136ce252696e50c5a4c4c77eb64dd1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:0d:21:25:cd:aa:07:93:54:af:2a:60:c6: 1d:f0:c0:d8:19:84:67:ee:86:ae:6e:56:38:0f:04: e2:aa:df:4f:b9:7c:2a:7f:bf:85:2f:83:d2:94:b1: f5:77:7a:e8:8e:6e:1b:6c:a3:af:13:a4:ea:80:c6: f3:54:ce:8b:8b:3b:08:c3:e9:db:dd:eb:e0:0f:42: c7:f1:67:bd:a0:8a:3a:34:0a:b7:68:83:d0:e9:ce: 34:0d:87:07:78:27:c9:47:b4:4e:d7:8b:72:13:e4: ba:3c:a6:72:ee:ba:35:c9:53:ca:34:17:5f:0c:63: c4:5e:60:39:19:89:d9:fe:1a:f1:73:a1:f5:05:91: 45:6a:fa:38:83:08:6c:6a:b6:27:f6:86:67:96:68: e0:82:fe:84:d0:ef:a7:89:25:11:5f:7f:87:9f:c7: f2:a1:4e:04:ef:3e:84:37:84:d8:b4:b8:0f:be:40: 7c:c2:da:25:00:e9:1b:c6:86:22:ee:e7:f0:10:3c: 80:76:c3:f6:87:a3:7f:ce:3b:33:60:4b:1a:4b:26: 8f:c8:56:a4:72:f0:91:76:ad:4b:ac:9c:3f:f9:9c: 58:6b:f7:23:ac:d3:1e:8a:c5:2c:8e:27:10:74:ea: 17:81:7c:f4:19:68:3c:7d:82:72:01:99:d4:5c:56: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:84:01:BC:13:6C:E2:52:69:6E:50:C5:A4:C4:C7:7E:B6:4D:D1:AA X509v3 Authority Key Identifier: keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:77:7e:f9:5a:04:62:5b:2a:04:ff:3c:2c:aa:e8:0a:23:71: 17:3f:6b:87:87:8f:ee:4f:cc:c9:95:d8:3b:0a:4c:4d:7c:f7: 38:f0:dc:3d:ef:88:48:f0:4f:fc:9d:7e:d5:96:68:48:01:ee: 21:a2:04:3a:a0:6a:7d:e2:29:b5:3e:88:01:c1:6b:de:13:be: fd:f6:33:0e:a9:6b:3b:6b:01:b7:11:99:40:b8:5e:b1:70:2f: 87:7f:8e:b5:17:11:15:ff:13:46:17:92:96:c3:b5:e9:24:55: 39:36:27:68:97:3c:7b:44:26:38:67:2a:f7:7a:5a:48:4b:0d: 60:bd:75:a6:5c:16:72:98:43:82:36:f1:3d:11:f1:b7:b6:26: d8:8e:85:7c:c0:ef:ba:0a:ce:4b:d5:af:bd:cf:d0:f3:16:16: 8e:e8:42:3b:6d:c3:7a:cd:38:84:23:cc:dc:48:27:cb:86:0c: e4:99:c9:13:08:87:5a:d6:77:e4:81:c6:ae:22:66:04:44:93: e1:e4:f1:89:bd:bd:d3:26:a1:69:31:95:d3:ba:85:4b:dd:0d: e3:e8:9a:53:10:c3:6f:be:a9:d4:95:9f:7c:fc:2b:f8:10:56: 74:5c:c8:08:5f:89:cf:32:47:57:1c:bf:36:07:36:f6:86:0c: 91:e9:31:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/dv63KfXhEOtDHOhf5PVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmRiNjk1ZGRmMzFlMjg5ODQ2NmVmOWVkZmJhNDg4MGQ4 ZTE5ZmIwHhcNMjUxMjIwMDkwMTEzWhcNMjUxMjIxMDkwMTEzWjAzMTEwLwYDVQQD Eyg4ODg0MDFiYzEzNmNlMjUyNjk2ZTUwYzVhNGM0Yzc3ZWI2NGRkMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/oNISXNqgeTVK8qYMYd8MDYGYRn 7oaublY4DwTiqt9PuXwqf7+FL4PSlLH1d3rojm4bbKOvE6TqgMbzVM6LizsIw+nb 3evgD0LH8We9oIo6NAq3aIPQ6c40DYcHeCfJR7RO14tyE+S6PKZy7ro1yVPKNBdf DGPEXmA5GYnZ/hrxc6H1BZFFavo4gwhsarYn9oZnlmjggv6E0O+niSURX3+Hn8fy oU4E7z6EN4TYtLgPvkB8wtolAOkbxoYi7ufwEDyAdsP2h6N/zjszYEsaSyaPyFak cvCRdq1LrJw/+ZxYa/cjrNMeisUsjicQdOoXgXz0GWg8fYJyAZnUXFbIBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiEAbwTbOJSaW5QxaTEx362TdGqMB8GA1UdIwQY MBaAFFVttpXd8x4omEZu+e37pIgNjhn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NDE0NjItYWRiNi00YzY2LWI1NDIt MDUyZWFlYWM2NDdlLzEvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81NDE0NjItYWRiNi00YzY2LWI1NDItMDUyZWFlYWM2NDdl LzEvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHd++VoE YlsqBP88LKroCiNxFz9rh4eP7k/MyZXYOwpMTXz3OPDcPe+ISPBP/J1+1ZZoSAHu IaIEOqBqfeIptT6IAcFr3hO+/fYzDqlrO2sBtxGZQLhesXAvh3+OtRcRFf8TRheS lsO16SRVOTYnaJc8e0QmOGcq93paSEsNYL11plwWcphDgjbxPRHxt7Ym2I6FfMDv ugrOS9Wvvc/Q8xYWjuhCO23Des04hCPM3Egny4YM5JnJEwiHWtZ35IHGriJmBEST 4eTxib290yahaTGV07qFS90N4+iaUxDDb76p1JWffPwr+BBWdFzICF+JzzJHVxy/ Ngc29oYMkekxiw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:57:06 2025 by rpki-client