This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft File: VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json) Hash identifier: 7kPKk+mSREZRbtoLji30DtNEKHFLp3Bl/LaTTMfJIOI= Subject key identifier: 98:45:5F:B7:DE:05:B6:83:D2:9C:BD:66:B6:31:09:37:51:5D:FE:E6 Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1 Certificate issuer: /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1 Certificate serial: 019B619DA4B8441718E4C556695CAA481ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft Manifest number: 0607 Signing time: Sat 27 Dec 2025 21:01:19 +0000 Manifest this update: Sat 27 Dec 2025 21:01:19 +0000 Manifest next update: Sun 28 Dec 2025 21:01:19 +0000 Files and hashes: 1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: 6GTKuXNWS+pXwxXUQpetZCD6DK16/n3rf64AgE8DqlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:a4:b8:44:17:18:e4:c5:56:69:5c:aa:48:1e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1 Validity Not Before: Dec 27 21:01:19 2025 GMT Not After : Dec 28 21:01:19 2025 GMT Subject: CN=98455fb7de05b683d29cbd66b6310937515dfee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1e:f7:18:9f:9d:65:64:f5:aa:b7:83:43:6d: 62:3d:b4:4a:db:74:90:ec:7c:75:04:57:3d:a1:b2: d5:33:65:a7:2c:90:23:ab:5e:c7:70:4d:81:44:d6: b5:f1:37:23:87:c8:4e:75:64:73:f1:44:38:ae:26: 9a:ed:52:04:a6:8e:2c:73:d4:40:e0:26:3a:01:76: 51:4d:4d:fd:91:bc:6a:53:a5:99:67:7d:3b:a0:d4: 23:98:3f:ca:1d:fa:eb:d1:4a:9f:f8:1c:28:52:ef: f3:74:d2:9a:8e:83:89:9d:34:c8:38:7e:9c:50:3a: f4:e8:c1:38:19:dc:94:a4:15:36:3f:1f:74:67:f9: c5:3c:54:c5:d9:15:73:bc:e2:ed:48:70:86:24:f0: b2:c5:66:75:b3:6a:95:61:08:04:4a:9c:a9:09:39: 50:d1:18:d8:60:1a:ee:26:4d:c4:09:b1:d8:84:fb: 95:ca:57:74:b1:3b:74:77:f6:9b:6b:b1:84:07:93: e7:5f:8b:6f:a9:cd:c1:ba:62:88:21:74:2c:bc:d9: 08:07:58:a8:23:4b:38:1b:4c:07:1b:96:35:bc:a0: 8c:5a:99:f7:10:69:67:48:6f:26:b5:0f:9c:9b:fc: f7:08:0a:3e:b1:23:b1:be:4b:65:fe:91:2b:78:03: b3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:45:5F:B7:DE:05:B6:83:D2:9C:BD:66:B6:31:09:37:51:5D:FE:E6 X509v3 Authority Key Identifier: keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:41:65:43:8b:2d:57:05:a1:12:8b:d8:5c:5f:48:0f:a9:b1: 59:3f:93:67:c2:e3:01:e3:65:21:9f:a8:93:c6:6d:00:f9:23: 22:14:d1:fc:3c:6b:71:b1:37:15:cd:65:1a:2a:40:6f:46:9c: bf:8b:a1:52:92:38:ac:08:6d:bc:39:d9:b9:fb:22:22:68:d7: d5:d1:a3:82:45:e9:ae:ff:7c:1b:38:3c:37:8d:e2:0e:69:ad: 3c:34:d4:0b:e6:d7:8b:0c:e7:22:08:78:e8:17:29:44:da:8d: d0:43:6e:8b:ee:16:46:d6:6c:63:cd:3f:3a:d7:d5:2c:70:dc: 2d:b6:86:db:65:93:6b:de:a1:d4:87:61:aa:d6:86:be:e9:ab: 94:65:dd:01:43:56:d1:8e:eb:20:e1:70:d2:3e:3e:7a:03:aa: 16:33:e1:a2:87:66:6b:7b:3d:77:c5:64:10:5f:b1:af:16:5f: a7:34:65:14:85:32:80:43:24:2d:e6:12:a6:f3:0e:2e:00:5f: 18:35:5e:fc:1d:b4:18:06:8e:32:12:e8:b3:bd:b6:e3:ae:5a: b3:da:17:bf:96:cd:1d:0d:bf:91:ab:76:c1:c7:13:3b:8b:ba: 1d:64:9f:ca:69:ab:f0:2a:be:f0:6c:cc:60:ab:ca:16:73:c4: 97:db:b9:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnaS4RBcY5MVWaVyqSB7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Zjg2ODFlZmIyZmE5ZGNkNDhjN2M0ZmFmM2Q3OGMzYTFh ZDJkZDEwHhcNMjUxMjI3MjEwMTE5WhcNMjUxMjI4MjEwMTE5WjAzMTEwLwYDVQQD Eyg5ODQ1NWZiN2RlMDViNjgzZDI5Y2JkNjZiNjMxMDkzNzUxNWRmZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R73GJ+dZWT1qreDQ21iPbRK23SQ 7Hx1BFc9obLVM2WnLJAjq17HcE2BRNa18Tcjh8hOdWRz8UQ4riaa7VIEpo4sc9RA 4CY6AXZRTU39kbxqU6WZZ307oNQjmD/KHfrr0Uqf+BwoUu/zdNKajoOJnTTIOH6c UDr06ME4GdyUpBU2Px90Z/nFPFTF2RVzvOLtSHCGJPCyxWZ1s2qVYQgESpypCTlQ 0RjYYBruJk3ECbHYhPuVyld0sTt0d/aba7GEB5PnX4tvqc3BumKIIXQsvNkIB1io I0s4G0wHG5Y1vKCMWpn3EGlnSG8mtQ+cm/z3CAo+sSOxvktl/pEreAOziQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhFX7feBbaD0py9ZrYxCTdRXf7mMB8GA1UdIwQY MBaAFFb4aB77L6nc1Ix8T689eMOhrS3RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzkt ODNhOTM1MTVjYTYzLzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMjUxOTItYTBhMi00N2M4LWExYzktODNhOTM1MTVjYTYz LzEvVnZob0h2c3ZxZHpVakh4UHJ6MTR3Nkd0TGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkFlQ4st VwWhEovYXF9ID6mxWT+TZ8LjAeNlIZ+ok8ZtAPkjIhTR/DxrcbE3Fc1lGipAb0ac v4uhUpI4rAhtvDnZufsiImjX1dGjgkXprv98Gzg8N43iDmmtPDTUC+bXiwznIgh4 6BcpRNqN0ENui+4WRtZsY80/OtfVLHDcLbaG22WTa96h1IdhqtaGvumrlGXdAUNW 0Y7rIOFw0j4+egOqFjPhoodma3s9d8VkEF+xrxZfpzRlFIUygEMkLeYSpvMOLgBf GDVe/B20GAaOMhLos722465as9oXv5bNHQ2/kat2wccTO4u6HWSfymmr8Cq+8GzM YKvKFnPEl9u5fA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:25:57 2025 by rpki-client