This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json) Hash identifier: tzonQmJYKuJ6p0PfZlkSqkXkSBhVCVhmXDyOdK5CRCU= Subject key identifier: A2:E7:A4:53:FD:D5:BE:54:CA:1B:D6:66:61:87:36:BE:30:35:43:32 Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Certificate serial: 019B4A02BC8F3FA90B4D57CB6D2166782DB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft Manifest number: 05D0 Signing time: Tue 23 Dec 2025 07:00:51 +0000 Manifest this update: Tue 23 Dec 2025 07:00:51 +0000 Manifest next update: Wed 24 Dec 2025 07:00:51 +0000 Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=) 2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: muUSDqh5MEEdxhIAxRpWrMgoxhCqIAeaIYwEoOM1s8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:bc:8f:3f:a9:0b:4d:57:cb:6d:21:66:78:2d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Validity Not Before: Dec 23 07:00:51 2025 GMT Not After : Dec 24 07:00:51 2025 GMT Subject: CN=a2e7a453fdd5be54ca1bd666618736be30354332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:40:81:02:46:c3:5b:ff:3f:4e:14:39:cd: c2:b7:ab:24:df:b7:9b:c3:bf:a4:d5:4f:66:ba:2f: f2:17:88:57:2d:90:e0:36:eb:59:85:04:88:ed:de: 3e:b7:ac:a6:02:6b:65:74:b5:88:15:24:0f:d4:a7: ee:0e:8c:04:0b:c5:40:21:3c:51:e8:55:d7:7c:43: 5b:83:d9:36:6d:5c:e9:2c:c2:66:71:c1:ee:94:eb: 55:56:25:e9:b6:8c:07:27:04:d5:ae:f6:93:7c:05: 4f:43:b1:ae:da:f8:dc:a7:8f:76:36:e9:76:c5:90: 86:4d:23:44:78:91:f4:cb:66:e2:01:0a:d0:38:83: 7e:b3:91:a3:3b:48:9e:ab:60:51:a8:d7:ed:e9:85: 59:12:40:16:d0:73:08:1c:ff:b9:6a:5f:f3:56:5e: fd:2f:b2:a0:06:92:5e:ee:ea:a2:79:1c:27:d6:05: c4:cb:19:0f:4d:d4:3a:0d:ab:08:8a:9c:0e:e4:ff: eb:06:fd:ed:8e:91:cd:51:eb:04:d3:e1:75:20:21: 83:51:f0:91:29:69:d1:04:bc:6f:67:7d:41:5b:c3: ab:dc:97:59:4b:7a:85:8d:68:0c:68:0e:27:a2:e7: d8:7f:58:28:d5:f4:51:3e:05:a8:c3:d5:50:55:3c: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E7:A4:53:FD:D5:BE:54:CA:1B:D6:66:61:87:36:BE:30:35:43:32 X509v3 Authority Key Identifier: keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ba:ae:c8:2f:6e:2c:ad:0c:6e:34:55:b5:54:ce:cb:f6:e1: ab:70:20:81:9a:3b:8b:c5:6a:9e:6d:eb:ff:cf:6d:99:ab:b1: 4d:44:4a:85:40:07:89:b0:f1:a2:9d:d8:6e:0d:3b:8c:42:34: e5:6a:06:c6:65:7c:2a:c2:4b:6d:b4:97:d3:67:ef:13:6d:42: 7b:57:b0:65:ae:5d:82:fa:67:14:65:5d:d7:85:b3:a8:c9:1f: 10:7b:41:d4:d5:cd:eb:d4:6f:1c:aa:37:68:11:45:8f:ca:dd: d5:61:be:1c:cc:6b:d2:2d:e7:5f:e2:2d:5a:75:97:d2:eb:b7: ef:9b:a3:b3:33:51:f4:13:e8:31:c6:0a:70:5a:57:03:f9:26: 17:74:03:c0:31:c8:5b:3d:9f:69:1b:a1:2d:4a:cb:a1:98:23: 26:f5:a8:0c:e6:96:73:4d:e1:0d:f6:c5:64:5b:80:9d:a6:2d: d1:85:cc:5b:f7:9d:42:fd:1c:61:e6:d2:a5:de:d4:0b:e6:92: 9b:af:6b:ff:e5:49:54:94:72:ec:bc:45:11:2e:19:5a:39:e7: 71:ff:c7:06:e4:3d:10:2e:69:00:c3:b0:a4:0f:92:57:6d:51: 5f:ff:63:1e:b6:6a:92:c4:1c:42:ad:63:f2:73:90:47:44:69: 92:8b:61:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAryPP6kLTVfLbSFmeC2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTIxZTViOTJmZGU2NDg4OWY2YWFiMmNjNWNlODZmYzBl NWEwN2UwHhcNMjUxMjIzMDcwMDUxWhcNMjUxMjI0MDcwMDUxWjAzMTEwLwYDVQQD EyhhMmU3YTQ1M2ZkZDViZTU0Y2ExYmQ2NjY2MTg3MzZiZTMwMzU0MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt5AgQJGw1v/P04UOc3Ct6sk37eb w7+k1U9mui/yF4hXLZDgNutZhQSI7d4+t6ymAmtldLWIFSQP1KfuDowEC8VAITxR 6FXXfENbg9k2bVzpLMJmccHulOtVViXptowHJwTVrvaTfAVPQ7Gu2vjcp492Nul2 xZCGTSNEeJH0y2biAQrQOIN+s5GjO0ieq2BRqNft6YVZEkAW0HMIHP+5al/zVl79 L7KgBpJe7uqieRwn1gXEyxkPTdQ6DasIipwO5P/rBv3tjpHNUesE0+F1ICGDUfCR KWnRBLxvZ31BW8Or3JdZS3qFjWgMaA4noufYf1go1fRRPgWow9VQVTw9gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLnpFP91b5UyhvWZmGHNr4wNUMyMB8GA1UdIwQY MBaAFFUSHluS/eZIifaqssxc6G/A5aB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMt YzNiNjM0NWEwZDA1LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMtYzNiNjM0NWEwZDA1 LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7quyC9u LK0MbjRVtVTOy/bhq3AggZo7i8Vqnm3r/89tmauxTURKhUAHibDxop3Ybg07jEI0 5WoGxmV8KsJLbbSX02fvE21Ce1ewZa5dgvpnFGVd14WzqMkfEHtB1NXN69RvHKo3 aBFFj8rd1WG+HMxr0i3nX+ItWnWX0uu375ujszNR9BPoMcYKcFpXA/kmF3QDwDHI Wz2faRuhLUrLoZgjJvWoDOaWc03hDfbFZFuAnaYt0YXMW/edQv0cYebSpd7UC+aS m69r/+VJVJRy7LxFES4ZWjnncf/HBuQ9EC5pAMOwpA+SV21RX/9jHrZqksQcQq1j 8nOQR0RpkothIQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:51:00 2025 by rpki-client