This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json) Hash identifier: V5sha28pFLr8PoWxNc00tsV7+ETA6OymIQ9weyO327Y= Subject key identifier: DA:4B:24:D2:1D:4C:45:03:4C:FC:A8:30:8E:3A:FD:DC:8C:4F:85:6A Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81 Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181 Certificate serial: 019B39B39A4F0A4BD8759B7584A1DFA7EC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft Manifest number: 17C1 Signing time: Sat 20 Dec 2025 03:00:30 +0000 Manifest this update: Sat 20 Dec 2025 03:00:30 +0000 Manifest next update: Sun 21 Dec 2025 03:00:30 +0000 Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=) 2: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: dbquD7ijD4j6AKjmCS5ZrnOe0npwEmUpv6DGn7JqF6Y=) 3: lJ8px4kFruCbgU7f0EgDhNBCZsA.roa (hash: WxHHI6Ws+jaU8WsahxLJVovUVW7ZNJAIoO7glVty2Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:9a:4f:0a:4b:d8:75:9b:75:84:a1:df:a7:ec:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181 Validity Not Before: Dec 20 03:00:30 2025 GMT Not After : Dec 21 03:00:30 2025 GMT Subject: CN=da4b24d21d4c45034cfca8308e3afddc8c4f856a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:cc:40:69:25:8b:e6:e5:d4:e8:4f:87:87: 75:a0:1a:0a:ae:c9:a0:9c:f3:9c:f7:3f:96:3e:e2: e9:22:3f:48:78:9f:c3:44:aa:a4:b9:bc:84:ee:ee: e6:8e:04:ee:3a:fd:f4:c2:ca:6d:72:1c:ba:f7:c1: 76:2b:4e:46:7f:dc:bf:d2:e9:ad:f6:2d:0e:dd:e8: 31:0d:60:8a:89:af:77:b3:c7:40:12:60:53:71:b5: 6a:47:d1:20:ad:99:e9:62:0d:69:78:a7:8d:f1:48: 68:e8:f3:05:ec:f4:50:85:1e:0e:e7:2c:4b:45:2b: 7b:fb:0e:f1:74:b4:d7:cd:56:6e:99:b2:41:93:c8: 78:72:35:be:4b:ce:5d:ba:c7:9c:51:4c:f8:c8:2c: 12:f1:24:b0:13:4f:40:1d:56:d0:42:e4:dc:2a:be: f7:57:22:68:cb:8a:1f:cc:c9:e1:f6:e9:d9:d3:fe: 82:ad:37:a6:a3:cb:cb:f0:eb:48:c3:92:42:da:b5: d3:99:d0:85:1f:b0:2c:b2:11:85:0f:fd:ee:bb:66: 9b:c3:f6:61:59:0a:d0:12:44:92:1b:fc:4b:3e:ee: c8:49:b1:92:b5:e4:2a:44:43:91:f6:63:5a:93:63: a6:27:12:f2:c7:01:d9:f5:67:07:e6:b4:8f:3e:bb: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4B:24:D2:1D:4C:45:03:4C:FC:A8:30:8E:3A:FD:DC:8C:4F:85:6A X509v3 Authority Key Identifier: keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:77:a9:9a:ba:9d:ce:75:94:a3:a0:6b:a0:d6:e7:33:ce:10: 02:36:a1:4d:b7:53:20:15:c8:02:0c:cd:71:df:3d:d2:31:d9: 24:87:d7:ea:f2:87:d9:c5:4b:de:83:73:c1:90:52:b3:0f:c0: 7e:fc:8a:0e:22:cb:10:57:ab:2d:ad:cb:15:2c:4f:74:9f:d3: cf:4b:99:27:69:f7:4b:7a:6e:2b:85:63:ce:e7:7b:ff:41:db: e7:c8:d0:74:80:e5:88:92:b3:a3:d3:91:cb:52:d8:9f:67:0f: 10:ac:bd:b9:d0:f2:c8:17:ab:f1:8d:a8:74:fe:79:db:bb:0d: 86:2b:1d:f4:0c:08:51:83:da:3b:f9:71:db:43:ce:ac:81:3f: f5:be:d5:07:a8:5d:3c:a6:ca:bf:ed:f4:e7:5e:3b:11:47:81: 5e:13:ba:c1:be:19:f0:65:88:a1:8c:de:ec:28:01:d5:f3:04: e8:fa:8b:d3:92:be:45:0f:e4:7f:33:34:01:c9:ca:c7:c0:9c: 03:90:89:23:8c:b1:2b:e9:f2:77:5e:22:18:ed:0e:06:ec:01: 55:d8:ba:4f:80:14:33:1d:d3:27:47:d1:57:fc:69:1f:ad:c9: 2d:18:1b:4e:e0:c9:dd:05:5f:00:21:19:df:b2:d4:ab:9a:d5: a9:9a:1c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s5pPCkvYdZt1hKHfp+yZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MmFkM2EwYjRiNzRlODVhZjU0ZjU4YWQ3NWEzMDI2Yjdk ZjcxODEwHhcNMjUxMjIwMDMwMDMwWhcNMjUxMjIxMDMwMDMwWjAzMTEwLwYDVQQD EyhkYTRiMjRkMjFkNGM0NTAzNGNmY2E4MzA4ZTNhZmRkYzhjNGY4NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2bMQGkli+bl1OhPh4d1oBoKrsmg nPOc9z+WPuLpIj9IeJ/DRKqkubyE7u7mjgTuOv30wsptchy698F2K05Gf9y/0umt 9i0O3egxDWCKia93s8dAEmBTcbVqR9EgrZnpYg1peKeN8Uho6PMF7PRQhR4O5yxL RSt7+w7xdLTXzVZumbJBk8h4cjW+S85dusecUUz4yCwS8SSwE09AHVbQQuTcKr73 VyJoy4ofzMnh9unZ0/6CrTemo8vL8OtIw5JC2rXTmdCFH7AsshGFD/3uu2abw/Zh WQrQEkSSG/xLPu7ISbGSteQqREOR9mNak2OmJxLyxwHZ9WcH5rSPPrv89wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpLJNIdTEUDTPyoMI46/dyMT4VqMB8GA1UdIwQY MBaAFFUq06C0t06Fr1T1itdaMCa333GBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUt NDlhM2M0OWYzOTNjLzEvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xNmZjZjEtNjQxMi00ZGIyLWIzYWUtNDlhM2M0OWYzOTNj LzEvVlNyVG9MUzNUb1d2VlBXSzExb3dKcmZmY1lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXepmrqd znWUo6BroNbnM84QAjahTbdTIBXIAgzNcd890jHZJIfX6vKH2cVL3oNzwZBSsw/A fvyKDiLLEFerLa3LFSxPdJ/Tz0uZJ2n3S3puK4Vjzud7/0Hb58jQdIDliJKzo9OR y1LYn2cPEKy9udDyyBer8Y2odP5527sNhisd9AwIUYPaO/lx20POrIE/9b7VB6hd PKbKv+305147EUeBXhO6wb4Z8GWIoYze7CgB1fME6PqL05K+RQ/kfzM0AcnKx8Cc A5CJI4yxK+nyd14iGO0OBuwBVdi6T4AUMx3TJ0fRV/xpH63JLRgbTuDJ3QVfACEZ 37LUq5rVqZocMw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:43:02 2025 by rpki-client