This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json) Hash identifier: L85//AsLwiPJ6Inn/hcn5kVGH83Xb1CfFNyMzVNsogY= Subject key identifier: 74:A9:5D:67:A4:67:D5:4A:3D:26:33:AB:8B:48:ED:82:84:F1:43:1A Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Certificate serial: 019B4BF10A6500E782C74AA7ED44653CD29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft Manifest number: 05D1 Signing time: Tue 23 Dec 2025 16:00:46 +0000 Manifest this update: Tue 23 Dec 2025 16:00:46 +0000 Manifest next update: Wed 24 Dec 2025 16:00:46 +0000 Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=) 2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: a1l0UeOUZsNGNy+SkOE6ZWxTQacKbjXkc3ytFDZVYtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:0a:65:00:e7:82:c7:4a:a7:ed:44:65:3c:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Validity Not Before: Dec 23 16:00:46 2025 GMT Not After : Dec 24 16:00:46 2025 GMT Subject: CN=74a95d67a467d54a3d2633ab8b48ed8284f1431a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:55:97:69:f8:9b:b9:82:d6:aa:a2:88:73: a0:cf:68:b3:0c:fd:19:e9:b6:7c:da:7b:c5:ed:75: 17:6f:29:9a:49:ae:e4:8b:fd:2c:95:78:7a:75:53: 87:14:77:dd:89:d5:3d:c4:ed:2a:b7:27:f9:c0:1d: 0f:8f:c3:4f:92:64:35:a2:17:f5:d6:92:04:c3:d5: 1f:86:c4:30:f0:48:f3:cf:13:4b:4b:42:dc:fe:c3: 6d:df:93:63:f8:fa:e7:04:d6:d8:80:a2:57:7f:07: ec:d0:b8:41:c1:42:aa:d1:4f:b5:cf:e9:0b:87:6c: ea:e1:06:87:a2:f9:ed:e8:fc:69:78:3b:a5:87:84: 1c:07:0f:aa:c7:67:04:9c:6e:28:55:56:83:b8:fa: 64:17:29:f1:f2:fe:bc:ae:c6:46:b0:d4:75:bb:11: 51:43:d7:d8:86:5b:78:bc:5f:db:74:67:e4:43:a9: c2:8f:fc:02:ab:74:2a:c9:a9:24:00:a3:e0:8f:8f: 95:fe:03:00:79:b8:db:47:45:2b:b6:51:b4:21:9d: 10:cc:6d:24:af:a3:9a:0e:36:d1:5f:48:5b:82:58: 1f:fe:79:90:56:2a:50:0b:cf:69:5a:90:d0:a6:c3: 02:53:f0:b5:90:3a:b4:89:5d:f4:b9:a7:d2:2a:46: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A9:5D:67:A4:67:D5:4A:3D:26:33:AB:8B:48:ED:82:84:F1:43:1A X509v3 Authority Key Identifier: keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:41:71:51:16:04:5b:fb:1c:6c:8b:a3:a4:1a:1d:fc:26:f5: bd:0d:53:c7:ec:65:ee:8c:5e:34:0f:95:a3:da:d5:0f:a4:f4: d0:7c:56:a5:79:68:60:6c:3b:75:17:df:af:db:b5:6a:28:86: 7c:97:09:3b:52:6a:a0:da:c3:97:61:99:63:56:61:c2:00:ac: 6c:7e:c5:56:99:65:c6:d8:05:2b:1a:33:90:65:f6:57:8f:5a: f1:b0:34:22:ef:64:27:40:ab:80:89:ac:40:60:3f:fc:b5:bc: 32:c1:d4:c9:82:5e:ee:b5:1c:47:01:95:8e:5e:af:6a:30:c4: 59:f2:12:4e:31:0e:5b:c5:1b:39:4a:74:29:9e:31:28:d2:35: 1b:69:f6:82:1c:91:e2:45:b6:1c:07:6f:2a:4e:c4:f8:53:18: 0c:d9:63:9f:3c:ad:ed:15:e5:4b:ee:ea:4b:83:3c:48:f7:1e: e7:eb:02:62:99:bc:d0:cd:8f:56:10:d1:5c:00:e2:c3:69:9d: 3e:ef:ab:8a:11:80:aa:39:ec:6c:77:40:be:bd:92:99:d6:b0: d2:2c:30:7e:31:23:6c:0a:13:5d:be:61:89:89:97:97:94:8d: 74:12:43:7a:a8:52:5a:bb:57:ef:e3:60:4b:98:11:1a:db:ae: a7:d7:1b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8QplAOeCx0qn7URlPNKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTIxZTViOTJmZGU2NDg4OWY2YWFiMmNjNWNlODZmYzBl NWEwN2UwHhcNMjUxMjIzMTYwMDQ2WhcNMjUxMjI0MTYwMDQ2WjAzMTEwLwYDVQQD Eyg3NGE5NWQ2N2E0NjdkNTRhM2QyNjMzYWI4YjQ4ZWQ4Mjg0ZjE0MzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1lVl2n4m7mC1qqiiHOgz2izDP0Z 6bZ82nvF7XUXbymaSa7ki/0slXh6dVOHFHfdidU9xO0qtyf5wB0Pj8NPkmQ1ohf1 1pIEw9UfhsQw8EjzzxNLS0Lc/sNt35Nj+PrnBNbYgKJXfwfs0LhBwUKq0U+1z+kL h2zq4QaHovnt6PxpeDulh4QcBw+qx2cEnG4oVVaDuPpkFynx8v68rsZGsNR1uxFR Q9fYhlt4vF/bdGfkQ6nCj/wCq3QqyakkAKPgj4+V/gMAebjbR0UrtlG0IZ0QzG0k r6OaDjbRX0hbglgf/nmQVipQC89pWpDQpsMCU/C1kDq0iV30uafSKkbIYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSpXWekZ9VKPSYzq4tI7YKE8UMaMB8GA1UdIwQY MBaAFFUSHluS/eZIifaqssxc6G/A5aB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMt YzNiNjM0NWEwZDA1LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMtYzNiNjM0NWEwZDA1 LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0FxURYE W/scbIujpBod/Cb1vQ1Tx+xl7oxeNA+Vo9rVD6T00HxWpXloYGw7dRffr9u1aiiG fJcJO1JqoNrDl2GZY1ZhwgCsbH7FVpllxtgFKxozkGX2V49a8bA0Iu9kJ0CrgIms QGA//LW8MsHUyYJe7rUcRwGVjl6vajDEWfISTjEOW8UbOUp0KZ4xKNI1G2n2ghyR 4kW2HAdvKk7E+FMYDNljnzyt7RXlS+7qS4M8SPce5+sCYpm80M2PVhDRXADiw2md Pu+rihGAqjnsbHdAvr2Smdaw0iwwfjEjbAoTXb5hiYmXl5SNdBJDeqhSWrtX7+Ng S5gRGtuup9cb/w== -----END CERTIFICATE-----Generated at Tue Dec 23 18:22:29 2025 by rpki-client