This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft File: Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json) Hash identifier: RUnciC10CQnDe5Zc6UNBwdJTt9L5KIh4+FTOykWJsxU= Subject key identifier: 69:AF:FB:F1:FF:98:FF:F5:CF:4A:AF:BD:49:A0:EB:2E:94:EB:6C:FB Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4 Certificate issuer: /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4 Certificate serial: 019B4E16934AB213C2F03F7EF3C4B4B0655B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft Manifest number: 16B6 Signing time: Wed 24 Dec 2025 02:01:00 +0000 Manifest this update: Wed 24 Dec 2025 02:01:00 +0000 Manifest next update: Thu 25 Dec 2025 02:01:00 +0000 Files and hashes: 1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: x1GPetMkkD1xei7iCwAEe3gcp7MjTQf7vxX9Qithvpo=) 2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:93:4a:b2:13:c2:f0:3f:7e:f3:c4:b4:b0:65:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4 Validity Not Before: Dec 24 02:01:00 2025 GMT Not After : Dec 25 02:01:00 2025 GMT Subject: CN=69affbf1ff98fff5cf4aafbd49a0eb2e94eb6cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:3d:ff:bc:53:23:b3:b5:fa:ce:5b:19:c5: 98:ef:91:7c:c4:6e:60:ca:a6:c5:29:e4:dc:db:9b: 9b:0f:95:14:9d:0b:d5:01:6e:b4:e4:9f:19:41:7c: b8:4a:7b:b1:aa:b9:83:09:6d:64:b5:c6:bb:70:13: e8:b8:ba:51:85:4d:32:b3:cb:eb:5f:d4:cb:11:d6: 34:27:3b:9e:a9:5a:ca:78:1b:77:19:c0:a9:1a:45: 15:c8:21:8c:6c:a2:c8:21:2c:06:f0:10:19:61:fd: 87:5e:8e:8f:a2:b8:72:f1:ab:a5:1e:99:d8:c6:b3: 21:6e:b4:c1:73:8c:ce:b7:20:c2:ba:10:64:fd:57: f5:c9:d8:cc:ac:14:23:d1:23:31:28:b8:ef:d7:90: 70:aa:57:c3:3c:23:f3:0a:83:ca:38:b2:e3:b3:96: d8:55:14:31:4e:12:08:81:00:e2:27:4d:cf:6b:e8: 8f:82:c6:12:0d:21:62:f7:f5:cb:af:43:a5:7e:94: 98:cc:6f:23:cb:8d:8c:96:0a:cc:a2:35:48:c4:b4: 12:95:22:4c:84:59:e9:e5:bb:11:dd:99:cc:54:1d: cc:f1:47:a1:6d:13:85:11:ef:49:37:5d:09:30:1e: 81:dc:77:91:95:0d:d6:d8:13:7b:64:10:9b:4c:68: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:FB:F1:FF:98:FF:F5:CF:4A:AF:BD:49:A0:EB:2E:94:EB:6C:FB X509v3 Authority Key Identifier: keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:44:17:a4:19:b6:0b:84:8c:9e:3f:37:e0:c0:14:e7:bb:08: 5f:f3:43:d8:af:43:b6:01:35:c4:31:6b:99:5e:fe:15:f8:57: c2:d2:36:7f:48:cf:59:93:17:60:be:e4:cc:30:35:61:49:6e: d3:17:e5:a9:0c:05:26:6a:19:06:ec:be:02:22:b1:bb:75:6f: 27:b8:ed:76:5f:2b:1d:5e:cb:42:24:d8:55:e1:68:67:1e:4e: 05:64:d4:b9:78:85:e8:35:6b:4a:8b:8a:8e:35:08:d5:1b:a9: 02:cc:46:f8:a3:20:62:01:4a:84:a2:ef:a8:33:23:3d:bf:2d: 14:24:e8:7e:39:94:7e:67:b9:a6:f7:c4:d9:52:36:93:ec:f6: a4:f7:b7:4b:06:3a:12:a8:0a:a1:2a:f8:27:77:ac:56:46:25: 6d:b7:d1:10:4c:87:c0:60:20:36:de:5b:78:53:61:0c:46:08: 35:82:bd:be:0d:0d:d8:c6:46:33:23:57:77:a8:79:21:04:e6: 19:f0:f6:40:a8:62:85:24:6d:6b:86:ce:60:0b:b6:bf:f5:be: a9:65:09:85:b0:0a:dd:69:89:cb:b5:39:bc:b1:93:45:e1:05: 1f:94:67:24:6f:ce:26:88:b5:d0:a1:79:a0:b2:99:10:ca:dc: 46:ec:10:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFpNKshPC8D9+88S0sGVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Y2M3ZjRhYzcwMGJiNWFkN2Y0YjIxYzExMTExNDkzZmY2 OTc3YTQwHhcNMjUxMjI0MDIwMTAwWhcNMjUxMjI1MDIwMTAwWjAzMTEwLwYDVQQD Eyg2OWFmZmJmMWZmOThmZmY1Y2Y0YWFmYmQ0OWEwZWIyZTk0ZWI2Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p89/7xTI7O1+s5bGcWY75F8xG5g yqbFKeTc25ubD5UUnQvVAW605J8ZQXy4SnuxqrmDCW1ktca7cBPouLpRhU0ys8vr X9TLEdY0JzueqVrKeBt3GcCpGkUVyCGMbKLIISwG8BAZYf2HXo6Porhy8aulHpnY xrMhbrTBc4zOtyDCuhBk/Vf1ydjMrBQj0SMxKLjv15BwqlfDPCPzCoPKOLLjs5bY VRQxThIIgQDiJ03Pa+iPgsYSDSFi9/XLr0OlfpSYzG8jy42MlgrMojVIxLQSlSJM hFnp5bsR3ZnMVB3M8UehbROFEe9JN10JMB6B3HeRlQ3W2BN7ZBCbTGjY0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmv+/H/mP/1z0qvvUmg6y6U62z7MB8GA1UdIwQY MBaAFFbMf0rHALta1/SyHBERFJP/aXekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMt OWI4NmJmZmM4MzNjLzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMtOWI4NmJmZmM4MzNj LzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUQXpBm2 C4SMnj834MAU57sIX/ND2K9DtgE1xDFrmV7+FfhXwtI2f0jPWZMXYL7kzDA1YUlu 0xflqQwFJmoZBuy+AiKxu3VvJ7jtdl8rHV7LQiTYVeFoZx5OBWTUuXiF6DVrSouK jjUI1RupAsxG+KMgYgFKhKLvqDMjPb8tFCTofjmUfme5pvfE2VI2k+z2pPe3SwY6 EqgKoSr4J3esVkYlbbfREEyHwGAgNt5beFNhDEYINYK9vg0N2MZGMyNXd6h5IQTm GfD2QKhihSRta4bOYAu2v/W+qWUJhbAK3WmJy7U5vLGTReEFH5RnJG/OJoi10KF5 oLKZEMrcRuwQNQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:28:18 2025 by rpki-client