This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft File: Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json) Hash identifier: IOCGcuWQOjMPg8gCvyvnug26uL8YXBm3t6XxKtECrW8= Subject key identifier: 07:B9:3A:21:4C:D5:E5:8C:24:E8:4C:2D:8A:A5:11:7D:F0:F1:94:C5 Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4 Certificate issuer: /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4 Certificate serial: 019B484B254382A1D78834B08E588002CB61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft Manifest number: 16B3 Signing time: Mon 22 Dec 2025 23:00:42 +0000 Manifest this update: Mon 22 Dec 2025 23:00:42 +0000 Manifest next update: Tue 23 Dec 2025 23:00:42 +0000 Files and hashes: 1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: kt+uosdeGyHwjrdDzsbA83isiVn74CtkYvfzEPXgKMQ=) 2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:25:43:82:a1:d7:88:34:b0:8e:58:80:02:cb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4 Validity Not Before: Dec 22 23:00:42 2025 GMT Not After : Dec 23 23:00:42 2025 GMT Subject: CN=07b93a214cd5e58c24e84c2d8aa5117df0f194c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:0b:1b:51:91:fd:0b:ff:d5:b8:ed:d5:1d: fc:ba:cc:49:5b:f1:66:13:d5:3b:f8:0e:0d:df:cb: 09:21:ad:d4:2a:cc:5f:30:29:d1:d6:99:cb:2a:26: 98:11:3f:37:dc:36:34:e1:8b:b5:0d:1e:96:3e:15: 3d:48:12:78:67:fe:2b:a3:46:1e:79:f4:33:24:05: 78:95:da:f7:ed:f5:b1:65:25:b4:66:f8:f8:92:8a: 5c:f8:cb:59:08:dd:d7:02:bb:87:38:c3:5e:a8:cf: 8f:c1:33:2f:9e:fd:92:8a:90:8c:62:2e:55:ae:3a: ae:de:bc:f8:8d:7a:43:e4:27:e4:39:1b:be:8a:63: 0d:15:d1:0c:b9:29:61:74:17:c2:3f:29:02:33:a1: 2c:5c:4f:6a:4c:cf:40:5b:06:39:7f:21:33:ab:08: 2a:9f:df:cc:6d:4a:93:3f:8d:b6:87:88:c1:2f:04: d9:7c:f2:bf:0a:db:4d:67:18:0a:53:6a:e3:fc:0a: 94:cd:ef:7a:16:70:e7:49:f3:7b:47:bf:bc:a6:3d: 0a:f5:fb:7c:83:a3:7a:eb:bd:6d:fa:9e:b2:d9:e3: ee:43:10:0c:12:fe:b5:84:47:64:5f:f6:6a:e0:91: 3e:f5:17:1f:0f:32:bb:70:8a:db:1a:02:b3:08:c4: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B9:3A:21:4C:D5:E5:8C:24:E8:4C:2D:8A:A5:11:7D:F0:F1:94:C5 X509v3 Authority Key Identifier: keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:36:b1:cd:19:1d:a0:c8:81:bf:a6:7e:8c:f1:ab:b9:04:aa: 9d:56:62:a2:74:d1:5c:c0:76:62:1c:a3:4f:c5:0a:48:46:42: f8:e7:9f:19:5d:29:2c:5d:5b:39:44:a4:d6:a8:71:72:cc:7c: f1:7b:9e:3f:13:1e:ec:e6:05:d6:95:94:4b:25:e1:57:a6:1d: d2:0a:c4:49:d5:8a:47:71:3b:f6:1e:cf:f6:47:a5:b9:78:be: 6b:1a:4e:f3:df:ec:b3:2c:fc:42:14:b4:68:3d:de:0e:95:6c: 1f:9e:f0:9e:58:fc:be:bb:c4:ac:4a:fd:73:9b:1a:93:67:21: 2f:20:98:01:b4:62:bd:4c:eb:e6:6a:0a:a0:35:5b:e9:87:8b: b3:d2:78:4c:7e:14:f1:4d:d6:7f:fd:7e:cc:5b:70:2b:fc:9d: dc:b6:ae:37:aa:0c:93:b3:84:67:a1:f0:86:a1:33:f4:59:fb: c5:ef:60:70:0c:c7:f9:44:c0:31:58:91:17:18:9c:2c:ea:7b: e0:b1:a9:db:82:30:42:7c:81:8c:db:33:9a:fd:3b:e2:0e:d3: 1c:35:45:2f:db:6c:a5:b2:33:75:d8:92:6d:1a:99:4a:e2:fe: 5d:07:be:3d:b8:00:b2:f9:ae:1d:85:cd:f1:70:76:60:27:b3: ea:2d:09:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISyVDgqHXiDSwjliAAsthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Y2M3ZjRhYzcwMGJiNWFkN2Y0YjIxYzExMTExNDkzZmY2 OTc3YTQwHhcNMjUxMjIyMjMwMDQyWhcNMjUxMjIzMjMwMDQyWjAzMTEwLwYDVQQD EygwN2I5M2EyMTRjZDVlNThjMjRlODRjMmQ4YWE1MTE3ZGYwZjE5NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3YLG1GR/Qv/1bjt1R38usxJW/Fm E9U7+A4N38sJIa3UKsxfMCnR1pnLKiaYET833DY04Yu1DR6WPhU9SBJ4Z/4ro0Ye efQzJAV4ldr37fWxZSW0Zvj4kopc+MtZCN3XAruHOMNeqM+PwTMvnv2SipCMYi5V rjqu3rz4jXpD5CfkORu+imMNFdEMuSlhdBfCPykCM6EsXE9qTM9AWwY5fyEzqwgq n9/MbUqTP422h4jBLwTZfPK/CttNZxgKU2rj/AqUze96FnDnSfN7R7+8pj0K9ft8 g6N6671t+p6y2ePuQxAMEv61hEdkX/Zq4JE+9RcfDzK7cIrbGgKzCMRN3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAe5OiFM1eWMJOhMLYqlEX3w8ZTFMB8GA1UdIwQY MBaAFFbMf0rHALta1/SyHBERFJP/aXekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMt OWI4NmJmZmM4MzNjLzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wOWJmOTgtNTkwZC00YWQ1LTllYjMtOWI4NmJmZmM4MzNj LzEvVnN4X1NzY0F1MXJYOUxJY0VSRVVrXzlwZDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejaxzRkd oMiBv6Z+jPGruQSqnVZionTRXMB2YhyjT8UKSEZC+OefGV0pLF1bOUSk1qhxcsx8 8XuePxMe7OYF1pWUSyXhV6Yd0grESdWKR3E79h7P9keluXi+axpO89/ssyz8QhS0 aD3eDpVsH57wnlj8vrvErEr9c5sak2chLyCYAbRivUzr5moKoDVb6YeLs9J4TH4U 8U3Wf/1+zFtwK/yd3LauN6oMk7OEZ6HwhqEz9Fn7xe9gcAzH+UTAMViRFxicLOp7 4LGp24IwQnyBjNszmv074g7THDVFL9tspbIzddiSbRqZSuL+XQe+PbgAsvmuHYXN 8XB2YCez6i0JCg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:19:30 2025 by rpki-client