This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft File: VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json) Hash identifier: jLW8g/EHofnzCMJIMiJempqG72J/RJJobxn/LD3l3es= Subject key identifier: F2:8E:42:8D:D7:F3:76:2E:A2:EB:FC:A4:26:29:1B:46:00:FB:3C:E7 Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Certificate serial: 019B53AC216DFE58B4860E64B711947551B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 04:02:28 +0000 Manifest this update: Thu 25 Dec 2025 04:02:28 +0000 Manifest next update: Fri 26 Dec 2025 04:02:28 +0000 Files and hashes: 1: 4QrnT_XJTlF0PYSILolpGGuemuA.roa (hash: ciXZfxtZULDs53T0jmGQdh2nATSMcvG+lkh6H0M894k=) 2: HxCUlOSwrEsEzFt9qpj2ZnlvEYk.roa (hash: 1rwGaSaF+TCLDzH6gzPE1D/ug+G6OIuBh6+9zI6sNQk=) 3: NbRmZt6RSfP6iqfHak1bMrr79pU.roa (hash: AH4SWAW98wWueZRIy8qKwKk1DzljGkyjoMlDMde17AI=) 4: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: QYaXdx476FPf4MgEak1FOVGxYt4JiRan/eSnrBZweDQ=) 5: petiIsIFbviSTRyaoMc5UMub-wE.roa (hash: l4qT7ZrSLWFzhclk+OXfLseDA6eVzRRK9BUNH6axnkY=) 6: qRfgJ3OnWqVp9n6MmuAVEkFdw0I.roa (hash: z4ijdqK6o/r9aonAGs2f4PTbJOqb1W3B/P9cGQoGZrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:21:6d:fe:58:b4:86:0e:64:b7:11:94:75:51:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Validity Not Before: Dec 25 04:02:28 2025 GMT Not After : Dec 26 04:02:28 2025 GMT Subject: CN=f28e428dd7f3762ea2ebfca426291b4600fb3ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:e1:cf:24:a5:76:f1:56:69:51:a7:b7:b0: bb:38:11:38:d2:f4:bb:d6:99:dd:e2:5b:9f:ac:5b: a6:c2:ae:23:13:37:22:12:a5:90:2c:76:22:97:a1: 81:3f:6e:25:f6:03:53:67:1b:ca:03:c7:b9:74:8c: b3:b4:78:84:e2:56:8b:59:b3:35:26:8b:c1:c3:5f: 81:f2:1d:e0:0b:9c:61:75:74:0a:a2:24:75:d5:3f: 4d:d7:65:ec:af:b4:6d:17:54:79:31:3a:6d:70:fe: fa:65:1e:d6:84:09:02:9c:fd:d5:0c:90:b7:9a:24: 02:45:6a:bf:17:ab:cf:4b:b9:43:e3:3a:c6:28:67: ac:99:32:cb:bd:82:92:ba:8f:37:c8:35:a8:a0:4f: 0a:a0:c0:9c:f2:f4:af:f8:fd:3a:32:10:89:9e:30: cb:f8:3d:d2:9b:82:84:89:ef:3b:b5:d0:d4:63:c6: 4a:33:82:fd:32:3c:39:c5:e8:d9:3a:67:de:f0:0c: 8e:44:e2:d4:bf:46:bf:0b:93:2a:cf:2a:db:d5:f6: 28:f5:02:69:18:7c:2f:9b:44:1f:08:8c:63:ad:cf: 26:07:b4:28:41:68:6e:ba:70:c3:ca:fc:b9:7f:32: 07:c9:c7:f7:3b:81:c5:87:3d:6d:cd:1f:3e:08:f9: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8E:42:8D:D7:F3:76:2E:A2:EB:FC:A4:26:29:1B:46:00:FB:3C:E7 X509v3 Authority Key Identifier: keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1a:ee:bd:e6:62:96:2e:4a:d5:d8:48:87:9e:07:c5:88:c9: 6c:04:76:70:22:43:e7:94:9a:05:89:a5:c8:e4:de:ad:98:e2: 77:8c:e6:61:c9:3c:f3:72:b5:32:c1:ad:d2:ed:b1:9a:12:49: 70:27:b6:00:0e:bd:2d:c8:14:38:0f:eb:e4:ce:d6:9b:80:d1: c8:87:2b:b0:8e:49:5f:6d:a6:e0:81:cf:77:73:4f:8f:48:47: d2:c2:5a:1a:e9:db:e3:db:f0:94:f7:44:de:30:cd:a1:52:66: 73:ed:84:73:06:e6:1e:9b:dd:0d:3f:f2:b5:e3:19:11:c9:42: 45:36:83:a3:73:38:09:d6:e4:17:92:08:3f:94:06:c8:ac:a6: 31:56:e9:be:49:63:08:13:db:17:f9:43:62:10:50:1e:67:24: e4:cc:fe:11:3a:a0:f5:bb:86:6b:63:bb:f1:70:19:1d:b8:ae: 42:da:91:4f:2c:d5:be:8d:9a:7d:99:08:12:a6:c7:42:29:3e: e9:e1:52:81:0b:32:c8:60:f6:0c:ba:1d:43:d3:b4:d2:c2:6f: 7d:36:f0:0a:06:60:d4:4d:d7:c3:4e:c0:67:d7:2e:3d:94:96: 30:cd:d7:6c:f1:3a:f4:79:d0:d3:72:a4:86:37:f2:23:3c:f4: 4d:cb:88:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrCFt/li0hg5ktxGUdVGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YzhhMTcxM2M3NDc2ZTAwZWQyYjc3ZmQ5OGZkODkzMzAz NjVkODcwHhcNMjUxMjI1MDQwMjI4WhcNMjUxMjI2MDQwMjI4WjAzMTEwLwYDVQQD EyhmMjhlNDI4ZGQ3ZjM3NjJlYTJlYmZjYTQyNjI5MWI0NjAwZmIzY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmHhzySldvFWaVGnt7C7OBE40vS7 1pnd4lufrFumwq4jEzciEqWQLHYil6GBP24l9gNTZxvKA8e5dIyztHiE4laLWbM1 JovBw1+B8h3gC5xhdXQKoiR11T9N12Xsr7RtF1R5MTptcP76ZR7WhAkCnP3VDJC3 miQCRWq/F6vPS7lD4zrGKGesmTLLvYKSuo83yDWooE8KoMCc8vSv+P06MhCJnjDL +D3Sm4KEie87tdDUY8ZKM4L9Mjw5xejZOmfe8AyOROLUv0a/C5Mqzyrb1fYo9QJp GHwvm0QfCIxjrc8mB7QoQWhuunDDyvy5fzIHycf3O4HFhz1tzR8+CPl2MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKOQo3X83Yuouv8pCYpG0YA+zznMB8GA1UdIwQY MBaAFFbIoXE8dHbgDtK3f9mP2JMwNl2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQt OTFlMzJjNTE3MTUyLzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQtOTFlMzJjNTE3MTUy LzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxruveZi li5K1dhIh54HxYjJbAR2cCJD55SaBYmlyOTerZjid4zmYck883K1MsGt0u2xmhJJ cCe2AA69LcgUOA/r5M7Wm4DRyIcrsI5JX22m4IHPd3NPj0hH0sJaGunb49vwlPdE 3jDNoVJmc+2EcwbmHpvdDT/yteMZEclCRTaDo3M4CdbkF5IIP5QGyKymMVbpvklj CBPbF/lDYhBQHmck5Mz+ETqg9buGa2O78XAZHbiuQtqRTyzVvo2afZkIEqbHQik+ 6eFSgQsyyGD2DLodQ9O00sJvfTbwCgZg1E3Xw07AZ9cuPZSWMM3XbPE69HnQ03Kk hjfyIzz0TcuI7A== -----END CERTIFICATE-----Generated at Thu Dec 25 07:10:29 2025 by rpki-client