This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft File: VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft (raw, json) Hash identifier: wZxLQXznLLSKEqI7QSY/yEIaNFOVJwf6Aoc5Yhrkm3g= Subject key identifier: B8:EB:27:EF:29:E2:3F:24:96:98:16:84:C4:04:C1:E9:E9:FC:F6:F2 Authority key identifier: 55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34 Certificate issuer: /CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34 Certificate serial: 019B3FB5B7CF5C090E528E8436965E10406C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft Manifest number: 0335 Signing time: Sun 21 Dec 2025 07:00:32 +0000 Manifest this update: Sun 21 Dec 2025 07:00:32 +0000 Manifest next update: Mon 22 Dec 2025 07:00:32 +0000 Files and hashes: 1: VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl (hash: SlKxe5AfZypRl6QKnHmUPlcQrXB53gSOExsRs2QgBAQ=) 2: cFSFiUfgBt4Spc18H9-ZzF1183k.roa (hash: ZNWRHScgd4Ned1XFsxXmg0KrCa9M5D/jC/IqkvHvkmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:b7:cf:5c:09:0e:52:8e:84:36:96:5e:10:40:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34 Validity Not Before: Dec 21 07:00:32 2025 GMT Not After : Dec 22 07:00:32 2025 GMT Subject: CN=b8eb27ef29e23f2496981684c404c1e9e9fcf6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3a:4e:f3:c4:f7:6f:00:9d:f4:0c:92:ae:80: 0a:d6:04:f3:da:26:11:34:80:16:f8:30:9a:b9:03: a9:4b:09:b8:32:1f:16:54:02:a3:de:df:50:4a:1f: ab:7a:9c:2e:62:43:6c:0f:78:8f:71:41:f3:70:cf: 03:ae:53:ee:9f:6f:aa:a8:6e:82:39:24:e6:e9:4b: f6:3b:cb:8a:a6:a8:9d:c2:85:5c:20:b9:f7:94:d8: ea:c4:1a:30:d9:04:92:db:84:fa:6b:87:41:07:2c: 2d:90:fa:c4:a0:2a:67:80:d0:b6:e1:c8:fd:3c:fb: 38:68:8e:ee:e3:49:04:ab:ce:06:cd:22:66:3a:be: 92:b2:84:6d:c8:d9:75:98:83:1f:7b:80:76:09:c0: c3:70:ea:12:38:1b:a1:fb:79:de:6b:97:51:43:7c: 1b:fd:c1:fa:10:0a:7d:fc:2e:65:11:d3:7e:ba:12: b8:c1:72:5c:01:e9:cb:58:54:c8:0f:9a:bc:d5:d1: d0:33:5e:cd:d7:e0:c9:52:e3:39:fc:b2:b8:a7:1a: 2a:59:86:4a:d6:0e:c2:e7:1d:4b:14:10:2e:c3:47: 84:c4:52:e4:80:f3:51:28:04:16:f8:bc:fe:56:77: 42:36:c1:3a:1c:55:a9:fb:29:fd:79:76:5d:27:6e: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:27:EF:29:E2:3F:24:96:98:16:84:C4:04:C1:E9:E9:FC:F6:F2 X509v3 Authority Key Identifier: keyid:55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fc:44:cc:da:79:2d:a5:2f:09:68:d7:5c:a1:f9:69:56:e6: 8f:19:42:37:7c:88:00:63:3b:80:6e:91:72:5f:4c:6e:a0:c3: 97:75:f9:bf:37:ed:fa:8f:1b:30:a8:0d:9b:e7:30:60:9e:a0: 20:28:ab:3a:95:ec:2b:c3:c9:4a:8f:9c:15:f8:6b:8c:c4:1c: 22:b1:7a:0d:24:be:5e:7b:e9:aa:bb:e6:1f:9a:5a:ab:6e:8f: 07:12:77:2d:18:ba:8a:e7:b9:5f:a6:19:2b:41:6f:1d:71:7f: 76:d8:a0:1b:f3:69:30:ec:c9:4c:d8:88:bb:d4:1f:31:08:6a: 1a:23:02:f5:e2:22:b5:fd:06:e9:5e:81:75:93:b4:91:72:6a: 15:15:67:96:ed:4c:ee:fa:1f:42:09:be:cf:29:63:47:83:58: c6:e4:57:17:8d:85:4b:3e:fb:18:7b:6b:2f:8b:5f:62:b4:55: 04:00:32:7f:37:6e:96:52:2a:d8:fd:4e:a4:b0:a4:b9:f8:40: 5f:ab:0c:4b:f2:6a:d2:0a:1a:2f:c7:13:de:8e:9f:b5:eb:6b: 50:34:3c:4c:4d:21:f6:fd:0e:ed:ee:dc:fb:ea:99:7b:af:f4: 19:36:56:0c:42:07:3e:a0:3c:aa:0b:8d:9d:2f:51:05:fa:40: 5e:04:1c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tbfPXAkOUo6ENpZeEEBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmU4MjI2NWFmYjZiYTYwZWUwYjBjNTAzYzQ4Y2E4YTA5 ZWRiMzQwHhcNMjUxMjIxMDcwMDMyWhcNMjUxMjIyMDcwMDMyWjAzMTEwLwYDVQQD EyhiOGViMjdlZjI5ZTIzZjI0OTY5ODE2ODRjNDA0YzFlOWU5ZmNmNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jpO88T3bwCd9AySroAK1gTz2iYR NIAW+DCauQOpSwm4Mh8WVAKj3t9QSh+repwuYkNsD3iPcUHzcM8DrlPun2+qqG6C OSTm6Uv2O8uKpqidwoVcILn3lNjqxBow2QSS24T6a4dBBywtkPrEoCpngNC24cj9 PPs4aI7u40kEq84GzSJmOr6SsoRtyNl1mIMfe4B2CcDDcOoSOBuh+3nea5dRQ3wb /cH6EAp9/C5lEdN+uhK4wXJcAenLWFTID5q81dHQM17N1+DJUuM5/LK4pxoqWYZK 1g7C5x1LFBAuw0eExFLkgPNRKAQW+Lz+VndCNsE6HFWp+yn9eXZdJ27LgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjrJ+8p4j8klpgWhMQEwenp/PbyMB8GA1UdIwQY MBaAFFVugiZa+2umDuCwxQPEjKignts0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlc2Q0pscjdhNllPNExERkE4U01xS0NlMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85MmQ1YjItZjc5My00ODlkLTg0Yzkt NmJiY2E0ZDc1N2EzLzEvVlc2Q0pscjdhNllPNExERkE4U01xS0NlMnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85MmQ1YjItZjc5My00ODlkLTg0YzktNmJiY2E0ZDc1N2Ez LzEvVlc2Q0pscjdhNllPNExERkE4U01xS0NlMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfxEzNp5 LaUvCWjXXKH5aVbmjxlCN3yIAGM7gG6Rcl9MbqDDl3X5vzft+o8bMKgNm+cwYJ6g ICirOpXsK8PJSo+cFfhrjMQcIrF6DSS+XnvpqrvmH5paq26PBxJ3LRi6iue5X6YZ K0FvHXF/dtigG/NpMOzJTNiIu9QfMQhqGiMC9eIitf0G6V6BdZO0kXJqFRVnlu1M 7vofQgm+zyljR4NYxuRXF42FSz77GHtrL4tfYrRVBAAyfzdullIq2P1OpLCkufhA X6sMS/Jq0goaL8cT3o6ftetrUDQ8TE0h9v0O7e7c++qZe6/0GTZWDEIHPqA8qguN nS9RBfpAXgQcTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:14:38 2025 by rpki-client