This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json) Hash identifier: YokxI0532+7orJEmJe1UcvXOz234f6qzp+R+utng4Wc= Subject key identifier: C6:C8:28:C5:9C:73:63:03:E7:D5:06:CA:16:0D:39:D2:40:99:A1:C7 Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16 Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716 Certificate serial: 019B53E1BEB086190EBFB5C1D8C145B15517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft Manifest number: 0A89 Signing time: Thu 25 Dec 2025 05:01:01 +0000 Manifest this update: Thu 25 Dec 2025 05:01:01 +0000 Manifest next update: Fri 26 Dec 2025 05:01:01 +0000 Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=) 2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=) 3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: vGvoyN9g7sFtJQywTzNr9taERm+TdBAGTkvRGNFInLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:be:b0:86:19:0e:bf:b5:c1:d8:c1:45:b1:55:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716 Validity Not Before: Dec 25 05:01:01 2025 GMT Not After : Dec 26 05:01:01 2025 GMT Subject: CN=c6c828c59c736303e7d506ca160d39d24099a1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:7b:91:10:fc:ad:4b:56:01:39:9f:5a:b9: d6:c6:51:2b:f1:9f:44:58:db:10:09:4e:1e:e6:64: ff:73:5f:7b:26:f9:15:44:03:bf:88:2d:f8:3e:1a: a3:5c:51:20:99:57:ab:b3:21:c7:73:e5:fe:ef:d9: 16:a1:98:54:14:57:68:04:37:42:72:f8:40:80:96: ea:bc:6e:9e:ae:f9:07:70:e0:86:1f:49:1d:99:ed: ed:b4:d9:92:27:73:ec:dc:41:6b:ce:39:1b:bc:71: e4:1e:49:e0:f9:a3:16:f9:90:db:86:a6:e4:f9:9e: 17:b2:60:35:4e:df:0d:76:bc:20:5f:66:e7:90:4e: 82:86:a4:64:8d:30:75:7c:bd:a7:af:7f:53:e9:3e: 24:27:3e:1d:48:85:49:73:f3:3f:d8:6e:01:b4:4b: b5:53:bf:50:4d:11:1e:1d:f6:ec:d6:5b:a3:56:64: 16:01:e1:52:4e:07:cf:36:4c:5d:7f:9e:0c:da:1b: c6:c4:ab:15:51:4f:aa:65:d9:57:18:10:42:46:5a: 60:fe:67:81:d3:87:0e:c9:03:14:37:3c:93:c1:7a: b9:6e:2d:0c:39:9c:1e:82:23:64:c3:c3:93:69:0f: 11:82:d5:65:66:92:9d:61:71:fd:c0:ee:06:a5:68: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:28:C5:9C:73:63:03:E7:D5:06:CA:16:0D:39:D2:40:99:A1:C7 X509v3 Authority Key Identifier: keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:48:13:6f:46:41:a2:1b:62:2a:d8:79:d5:df:5e:a4:af:3f: 56:6e:41:b6:9e:a7:45:5a:99:94:49:3a:f4:6d:a4:55:54:4f: 3b:13:06:e3:d2:32:51:d6:4a:39:ac:60:43:ab:c0:de:72:c1: 39:3c:de:ce:0c:e0:94:77:20:74:d6:e4:e8:89:5c:66:57:10: b2:86:c9:d3:35:11:91:62:96:1d:19:c2:f3:1b:df:21:22:61: 57:6a:71:78:ac:7c:f0:f0:5c:2f:24:10:08:6f:94:45:4d:8b: 62:57:96:fc:ee:49:d0:b9:05:ed:54:ea:46:1d:e0:99:17:6d: 17:18:35:b6:e1:e8:f5:86:6b:24:28:ac:e4:0a:2e:5f:e8:ec: 56:a1:fd:7c:56:8d:cf:c6:bf:74:24:94:49:7f:df:ee:99:ab: 06:d8:01:3d:30:8e:33:7e:e6:71:0d:83:ac:a7:e1:b1:fb:66: 08:37:d5:2a:dd:be:65:8a:d3:9b:9b:61:5f:96:0c:35:41:fa: 72:f5:41:7a:20:ff:7a:c7:47:20:b7:52:bd:1b:9a:f6:1c:8f: 2c:13:de:a5:6c:8d:14:05:2e:c1:62:44:ef:e7:f6:3c:e3:53: 49:37:6f:4c:9b:d0:5e:22:86:34:aa:5b:0b:a2:39:d5:1e:db: 25:55:06:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4b6whhkOv7XB2MFFsVUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWI2Y2IyZTgwN2FlY2ViZDdlMDNhODA4MDhmYWIyM2Q5 YzQ3MTYwHhcNMjUxMjI1MDUwMTAxWhcNMjUxMjI2MDUwMTAxWjAzMTEwLwYDVQQD EyhjNmM4MjhjNTljNzM2MzAzZTdkNTA2Y2ExNjBkMzlkMjQwOTlhMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUh7kRD8rUtWATmfWrnWxlEr8Z9E WNsQCU4e5mT/c197JvkVRAO/iC34PhqjXFEgmVersyHHc+X+79kWoZhUFFdoBDdC cvhAgJbqvG6ervkHcOCGH0kdme3ttNmSJ3Ps3EFrzjkbvHHkHkng+aMW+ZDbhqbk +Z4XsmA1Tt8NdrwgX2bnkE6ChqRkjTB1fL2nr39T6T4kJz4dSIVJc/M/2G4BtEu1 U79QTREeHfbs1lujVmQWAeFSTgfPNkxdf54M2hvGxKsVUU+qZdlXGBBCRlpg/meB 04cOyQMUNzyTwXq5bi0MOZwegiNkw8OTaQ8RgtVlZpKdYXH9wO4GpWhaqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbIKMWcc2MD59UGyhYNOdJAmaHHMB8GA1UdIwQY MBaAFL2rbLLoB67OvX4DqAgI+rI9nEcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2It MjlmNzhjMjc5ODlmLzEvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2ItMjlmNzhjMjc5ODlm LzEvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUgTb0ZB ohtiKth51d9epK8/Vm5Btp6nRVqZlEk69G2kVVRPOxMG49IyUdZKOaxgQ6vA3nLB OTzezgzglHcgdNbk6IlcZlcQsobJ0zURkWKWHRnC8xvfISJhV2pxeKx88PBcLyQQ CG+URU2LYleW/O5J0LkF7VTqRh3gmRdtFxg1tuHo9YZrJCis5AouX+jsVqH9fFaN z8a/dCSUSX/f7pmrBtgBPTCOM37mcQ2DrKfhsftmCDfVKt2+ZYrTm5thX5YMNUH6 cvVBeiD/esdHILdSvRua9hyPLBPepWyNFAUuwWJE7+f2PONTSTdvTJvQXiKGNKpb C6I51R7bJVUGxg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:34:38 2025 by rpki-client