This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json) Hash identifier: nfl8Tn66vAmi+6kcwo1ujgJg93cYhW1oWTt5eGbA0Iw= Subject key identifier: A9:D2:A9:A9:B8:8E:7E:94:B9:F9:FA:BC:F9:E3:4F:2E:61:07:91:F7 Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da Certificate serial: 019B54863D10748981333BD60E7E84F2639C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft Manifest number: 1792 Signing time: Thu 25 Dec 2025 08:00:42 +0000 Manifest this update: Thu 25 Dec 2025 08:00:42 +0000 Manifest next update: Fri 26 Dec 2025 08:00:42 +0000 Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: 56x9opEf+k6+XvzQlHbVYyH1JVvGFaWJNnFfbwlf6AU=) 2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:3d:10:74:89:81:33:3b:d6:0e:7e:84:f2:63:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da Validity Not Before: Dec 25 08:00:42 2025 GMT Not After : Dec 26 08:00:42 2025 GMT Subject: CN=a9d2a9a9b88e7e94b9f9fabcf9e34f2e610791f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:df:a2:f1:7e:17:15:01:ad:18:71:4e:30: 9b:47:ec:a1:8b:d5:66:a4:0a:05:ba:c6:5c:85:cb: a5:c1:a9:f5:3e:e3:22:16:28:80:92:f8:8f:e3:7f: 86:40:71:bf:75:4c:e8:f2:e8:c1:2f:de:28:13:3e: 1d:86:e9:47:f6:bc:87:3d:25:90:3f:75:d1:df:00: e3:c8:53:5d:ff:17:c9:cb:40:ba:65:17:29:84:75: 10:94:1a:10:7f:53:d5:33:53:d3:57:1d:61:53:7b: fb:61:8c:18:6c:18:9a:58:4c:e1:f9:5c:25:af:9c: 3e:57:c7:ea:06:64:d6:04:7f:ea:c4:ca:47:e9:65: af:a4:74:20:b6:4f:9e:15:16:13:94:4b:b5:c7:74: 06:aa:5e:75:36:fe:28:bd:d3:d9:d1:f7:04:8b:64: 85:72:e7:03:68:a2:98:ee:7f:d6:7d:cf:6c:40:47: 15:37:23:93:24:df:d2:a6:d0:a7:64:08:c0:ec:b7: c6:5a:8f:5b:78:5a:e6:b5:ea:0f:f6:66:3b:ff:8c: 51:e5:09:d2:56:a8:97:87:04:21:08:66:f8:dd:da: a7:dd:02:44:4c:c6:04:bd:a8:3d:67:c9:8f:d3:b6: 1e:8c:08:3c:7b:4d:34:e1:23:01:05:c6:e8:67:8c: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D2:A9:A9:B8:8E:7E:94:B9:F9:FA:BC:F9:E3:4F:2E:61:07:91:F7 X509v3 Authority Key Identifier: keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:04:77:a8:06:79:df:7c:0d:77:3d:97:4e:fb:0a:37:88:2a: 99:35:0e:77:03:79:38:ec:dc:36:55:31:81:07:01:92:8c:2e: 1c:0c:37:45:3f:ba:e6:8c:46:9b:e2:ef:5f:46:cb:41:9d:53: 01:34:47:61:62:e5:81:ae:5e:ba:4c:de:e5:3e:91:86:25:9f: 1b:56:e8:31:7e:72:0c:15:db:ab:53:a5:3b:42:24:01:59:f3: e6:4a:fe:7f:57:f2:00:cc:2d:b0:74:bc:34:fc:64:56:e1:37: dc:ed:49:f0:91:46:1a:db:93:c1:5c:49:d1:22:0f:fb:ca:bb: d4:e2:d4:d8:47:9b:a6:f2:98:ba:38:02:c1:b8:e7:34:0a:dc: 1b:78:62:b4:8b:86:a9:48:83:16:c8:5e:1f:5d:f2:99:c7:94: 3f:b1:2a:e5:6e:34:67:65:09:15:95:74:be:d8:a9:1e:91:12: f0:3b:a2:5c:9a:70:91:3d:b6:3f:ab:76:34:f1:b9:e9:07:b9: a8:49:eb:b5:27:74:23:cd:9f:43:a4:fe:4c:3f:9f:9b:e1:af: 93:8b:91:df:ba:2c:1a:0a:1d:38:e5:c0:e0:74:31:f8:5a:be: d1:47:37:fb:e5:f7:35:c3:11:57:4e:c7:c3:e5:42:ed:24:df: eb:bf:1d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhj0QdImBMzvWDn6E8mOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmM5YTljNjE5ODBhOTBiNWQwYzUxZjg2ZDdjYmFjOWZm MTQyZGEwHhcNMjUxMjI1MDgwMDQyWhcNMjUxMjI2MDgwMDQyWjAzMTEwLwYDVQQD EyhhOWQyYTlhOWI4OGU3ZTk0YjlmOWZhYmNmOWUzNGYyZTYxMDc5MWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAnfovF+FxUBrRhxTjCbR+yhi9Vm pAoFusZchculwan1PuMiFiiAkviP43+GQHG/dUzo8ujBL94oEz4dhulH9ryHPSWQ P3XR3wDjyFNd/xfJy0C6ZRcphHUQlBoQf1PVM1PTVx1hU3v7YYwYbBiaWEzh+Vwl r5w+V8fqBmTWBH/qxMpH6WWvpHQgtk+eFRYTlEu1x3QGql51Nv4ovdPZ0fcEi2SF cucDaKKY7n/Wfc9sQEcVNyOTJN/SptCnZAjA7LfGWo9beFrmteoP9mY7/4xR5QnS VqiXhwQhCGb43dqn3QJETMYEvag9Z8mP07YejAg8e0004SMBBcboZ4zmNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnSqam4jn6Uufn6vPnjTy5hB5H3MB8GA1UdIwQY MBaAFFVsmpxhmAqQtdDFH4bXy6yf8ULaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAt NDViMzQ0M2E3NmY5LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAtNDViMzQ0M2E3NmY5 LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAR3qAZ5 33wNdz2XTvsKN4gqmTUOdwN5OOzcNlUxgQcBkowuHAw3RT+65oxGm+LvX0bLQZ1T ATRHYWLlga5eukze5T6RhiWfG1boMX5yDBXbq1OlO0IkAVnz5kr+f1fyAMwtsHS8 NPxkVuE33O1J8JFGGtuTwVxJ0SIP+8q71OLU2EebpvKYujgCwbjnNArcG3hitIuG qUiDFsheH13ymceUP7Eq5W40Z2UJFZV0vtipHpES8DuiXJpwkT22P6t2NPG56Qe5 qEnrtSd0I82fQ6T+TD+fm+Gvk4uR37osGgodOOXA4HQx+Fq+0Uc3++X3NcMRV07H w+VC7STf678deQ== -----END CERTIFICATE-----Generated at Thu Dec 25 12:49:42 2025 by rpki-client