This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json) Hash identifier: VaMzaav52Jgip6mfFR2giwEh2WdZQELwEAqoN4SVXj0= Subject key identifier: 01:E3:92:42:F7:98:FE:52:2D:5E:7B:0A:CE:46:DB:8C:A6:B1:2B:22 Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019B378F495C66D8697E03B8FF58DC94E907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft Manifest number: FE Signing time: Fri 19 Dec 2025 17:01:35 +0000 Manifest this update: Fri 19 Dec 2025 17:01:35 +0000 Manifest next update: Sat 20 Dec 2025 17:01:35 +0000 Files and hashes: 1: 1-uUbewaA737Ti2Wi8o8SjK77aHc.roa (hash: QlD9Cd20i+8EHA8BtB471vZBbtNQcm716KVmHTOuPJ0=) 2: 8_ja4y1JNGjzcRrjPOcvPb7iMqI.roa (hash: FTafPTHlq1IH+/Ui1c1N+bawak9jOSxUpNj0gy0d0pA=) 3: L8BLpkg4_ByhCbFcK7uHavm7f5g.roa (hash: e1aCzXYV4qmCe5iwORKEY38agwdUFZfW6yM8yoLYdTA=) 4: PrQLT7XmMWLDcNFZXhC6i5ipEO0.roa (hash: ZOoiI4PcKu9cyfI921BIlgDSlvuVbGjs4mAo/U6V33g=) 5: TsrYKQLQo5Rg5cBEWrCHl0f1sMo.roa (hash: L7l5IVK5YCyw8NKgAKcYl1DhviNDvXYviW43OOWjOwc=) 6: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: SsKit9Pe35Nrz4AgUxS96pYvMiz42AdFlfZe3knKebc=) 7: WkbmKOyOhHHxctalIzwqKHzBJT4.roa (hash: RPBwg7pSu4D2cDY0Ucro+5wA7+BcwF0jWYMllW0u0IA=) 8: buIXJtGqvKknwOy-e2YUQMQQ0Dk.roa (hash: UEtqDvy7n2JEoMUpwoBBhSaBKhablyOvFin5azQpZe0=) 9: loVwrvg92wZ7zx8vNurvGSPWCJg.roa (hash: oKtFkfmck2e1Bhm99yhzXyD5mQ2/n3sLoKcPg8KaNnE=) 10: o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa (hash: DhHj4T9kNHqPXFBDEITUBD0D/IF09iiNQ2ByB3yTJQI=) 11: xR1N0ZgWC0FpSzcR0b92EyDnzn8.roa (hash: n60D3DCSEgW83lG68CLjX8PIMIKZneTo8DEAS93I3sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:49:5c:66:d8:69:7e:03:b8:ff:58:dc:94:e9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Dec 19 17:01:35 2025 GMT Not After : Dec 20 17:01:35 2025 GMT Subject: CN=01e39242f798fe522d5e7b0ace46db8ca6b12b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:43:dc:a3:c8:77:4f:62:4a:f1:3a:15:fb:56: c2:f7:2d:1f:4f:64:e9:d2:97:3c:09:6b:18:af:f1: 06:1c:22:cc:6c:9c:8f:ff:0e:56:6a:69:23:d3:79: 53:e2:6e:87:92:f6:18:7d:25:f1:93:a0:b4:b6:ca: 45:56:8b:3e:bb:84:dd:71:96:04:5e:ec:7b:28:66: 73:c5:ad:53:c8:38:25:66:d8:90:45:a8:70:15:d2: 7f:81:8f:eb:b8:77:26:9c:8c:6d:fc:d1:70:b0:dd: 79:18:9c:a6:af:b7:45:de:31:f3:06:b4:17:b4:54: 2b:05:9d:0d:de:45:c9:8b:38:fc:af:b1:cf:8b:d0: ce:48:9c:c6:99:1e:54:40:3e:91:39:47:11:27:a1: ba:6f:67:66:11:4f:f7:8f:9b:39:16:fb:cb:a3:3e: b1:bc:9e:9a:9e:da:a0:76:f2:11:60:84:b9:e0:bb: 69:19:82:91:d4:06:f6:b8:99:60:57:ed:38:cc:7c: ee:20:5f:a8:d8:29:ff:73:69:6c:3b:6d:9d:2f:e6: 45:fa:bb:1c:f4:34:32:89:b5:21:5a:c3:3a:09:f0: 2a:32:ec:10:64:bc:15:e9:04:ff:af:75:16:04:0c: b7:f2:51:b2:ce:17:3e:f0:67:59:26:2c:63:30:e0: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E3:92:42:F7:98:FE:52:2D:5E:7B:0A:CE:46:DB:8C:A6:B1:2B:22 X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:64:77:25:7e:e2:be:0e:09:90:f9:90:42:78:12:b8:6e:b8: c1:ef:54:2d:36:a3:a5:3a:9d:42:4f:3e:c9:05:6c:66:d1:70: aa:c8:0a:11:bb:f3:c2:f3:e7:5d:ba:14:9c:6f:95:f0:f0:a1: 94:79:34:4e:84:b2:06:5b:0d:70:65:c2:42:27:1e:81:c4:85: a7:ee:41:4c:4c:c1:aa:36:63:8e:0c:89:cf:29:a3:cf:e0:14: 91:56:44:65:bf:c1:d5:53:56:2c:5e:60:24:14:e2:0d:f8:1e: 64:f6:8e:a6:b1:29:75:34:9f:a5:ea:c8:5d:26:9e:0c:1e:c4: 23:1f:c1:1c:c3:6c:34:d2:ca:bc:40:e9:99:da:46:d6:75:9f: 1e:d3:26:1b:79:b4:a8:78:3e:7d:9a:5c:9a:d5:c1:e9:64:3f: 39:ad:95:d1:6e:cc:e4:d1:f1:e8:f8:49:b7:ca:56:c4:a6:9c: d2:4b:a7:22:5d:32:b7:86:e4:aa:c7:cd:57:ea:47:c1:cf:42: 1f:fd:5e:5a:9d:48:26:fa:84:c6:88:d0:66:8c:78:0c:20:0b: b2:d4:fa:ae:c6:f7:25:8e:ce:d4:42:88:6d:b1:7b:12:69:ec: f7:83:5a:94:69:b8:bf:32:53:6f:1b:f7:e6:b0:59:f1:5e:3f: 8e:7c:ed:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3j0lcZthpfgO4/1jclOkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjUxMjE5MTcwMTM1WhcNMjUxMjIwMTcwMTM1WjAzMTEwLwYDVQQD EygwMWUzOTI0MmY3OThmZTUyMmQ1ZTdiMGFjZTQ2ZGI4Y2E2YjEyYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UPco8h3T2JK8ToV+1bC9y0fT2Tp 0pc8CWsYr/EGHCLMbJyP/w5Wamkj03lT4m6HkvYYfSXxk6C0tspFVos+u4TdcZYE Xux7KGZzxa1TyDglZtiQRahwFdJ/gY/ruHcmnIxt/NFwsN15GJymr7dF3jHzBrQX tFQrBZ0N3kXJizj8r7HPi9DOSJzGmR5UQD6ROUcRJ6G6b2dmEU/3j5s5FvvLoz6x vJ6antqgdvIRYIS54LtpGYKR1Ab2uJlgV+04zHzuIF+o2Cn/c2lsO22dL+ZF+rsc 9DQyibUhWsM6CfAqMuwQZLwV6QT/r3UWBAy38lGyzhc+8GdZJixjMOBlwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHjkkL3mP5SLV57Cs5G24ymsSsiMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2R3JX7i vg4JkPmQQngSuG64we9ULTajpTqdQk8+yQVsZtFwqsgKEbvzwvPnXboUnG+V8PCh lHk0ToSyBlsNcGXCQicegcSFp+5BTEzBqjZjjgyJzymjz+AUkVZEZb/B1VNWLF5g JBTiDfgeZPaOprEpdTSfperIXSaeDB7EIx/BHMNsNNLKvEDpmdpG1nWfHtMmG3m0 qHg+fZpcmtXB6WQ/Oa2V0W7M5NHx6PhJt8pWxKac0kunIl0yt4bkqsfNV+pHwc9C H/1eWp1IJvqExojQZox4DCALstT6rsb3JY7O1EKIbbF7Emns94NalGm4vzJTbxv3 5rBZ8V4/jnzthQ== -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:47 2025 by rpki-client