This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json) Hash identifier: qpQkrjsk3oMZqqXnrbfeUfTMWhqxcfXflsqnqVxLTVQ= Subject key identifier: 50:B0:9C:F8:EE:6E:33:B1:16:86:78:25:2C:44:53:28:84:45:3B:90 Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Certificate serial: 019B4324A637B24BFCE72650F13B3C79B7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft Manifest number: 0749 Signing time: Sun 21 Dec 2025 23:00:33 +0000 Manifest this update: Sun 21 Dec 2025 23:00:33 +0000 Manifest next update: Mon 22 Dec 2025 23:00:33 +0000 Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: Ftov2pqgDx+a6f0GbB+6fC0xLXrCxLoaSkkFl7zwIyQ=) 2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:a6:37:b2:4b:fc:e7:26:50:f1:3b:3c:79:b7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Validity Not Before: Dec 21 23:00:33 2025 GMT Not After : Dec 22 23:00:33 2025 GMT Subject: CN=50b09cf8ee6e33b1168678252c44532884453b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:d8:05:9a:54:22:f3:88:af:3c:66:7b:85: 8e:a4:31:e5:c3:be:59:d6:a7:09:a4:cf:75:c7:d3: 88:a8:39:00:47:53:cf:3b:0f:14:69:48:e6:a1:a4: 9c:19:5a:b7:e4:db:16:7a:d3:bf:8e:be:45:75:f6: 0c:13:d5:e8:b5:38:31:2e:b0:cf:d8:2a:de:81:69: 5b:38:5b:1d:1f:25:11:83:80:36:1d:e6:e0:2a:ff: 78:37:41:65:2c:c2:5f:aa:a2:bb:d6:48:07:55:56: 49:aa:9b:f0:41:03:60:95:0e:70:ec:cd:5b:e6:43: 27:b0:d8:ba:bd:88:03:77:7e:c6:cb:ee:e6:d4:78: 31:c5:9e:6c:f8:02:ac:c4:19:49:42:23:d0:51:e3: 57:79:89:47:ff:3e:65:00:8f:a4:f1:32:e7:86:1c: d4:fd:a6:7b:63:0e:d7:e0:5e:e3:7b:c4:2f:93:3a: c9:63:40:d5:19:9e:2a:e5:f3:0d:45:9c:f2:72:b6: ef:95:0d:fd:d8:c2:05:18:3d:52:00:be:df:b9:09: 03:c2:a3:12:30:1f:0d:62:2a:bb:f1:51:13:5d:5d: 55:6d:ca:64:ae:c4:63:b7:e6:cc:11:b8:0e:6c:6c: e2:ac:48:b0:0d:61:65:a2:a2:31:7a:d9:bf:7d:88: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B0:9C:F8:EE:6E:33:B1:16:86:78:25:2C:44:53:28:84:45:3B:90 X509v3 Authority Key Identifier: keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:56:10:c0:da:9e:bb:ac:15:c8:25:32:3f:3f:a0:7a:f5:81: b2:d8:ab:2d:1e:6d:d6:2b:03:e6:c2:f9:39:69:dc:2a:2f:7a: e9:15:91:82:70:8f:00:24:0b:5c:b2:fa:e7:64:8e:c0:3b:84: 49:6e:8d:f1:ee:5f:ff:43:ec:5c:29:9f:cd:da:b9:54:91:92: e7:9a:39:de:9e:b8:37:fe:77:77:d3:4a:ad:61:2b:00:33:af: 37:2f:69:33:e7:f9:17:d8:ce:1e:77:1e:26:49:9e:6d:91:01: 71:7d:b0:cd:66:01:42:84:f3:19:4e:cd:4c:22:01:af:14:64: 7e:4f:80:0f:ea:8f:ce:72:b7:b7:bb:29:28:18:c3:5c:7a:60: 9a:8c:6d:a1:5e:cd:2a:11:56:c9:c0:c5:45:20:c6:10:ee:ff: 4d:cb:56:ec:ce:99:0d:44:92:a3:bf:b3:79:e7:f2:6f:3d:46: bc:53:64:2b:26:ad:f2:07:20:7b:93:41:c1:7b:bb:b3:91:0d: e0:03:cd:81:e6:a4:ad:ea:41:72:b3:ce:c5:79:b9:59:94:7b: 0a:14:48:2a:b5:09:7c:fd:16:02:0c:49:73:e8:92:e7:37:f0: 96:8a:25:b8:0c:0e:3d:b9:2e:29:95:66:07:89:47:fe:c2:6b: 85:3a:26:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJKY3skv85yZQ8Ts8ebf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjIwNTliNzQ4ZDZkZGQ1YzVhMGMxZDM1ZTk3NWVmN2Jh ODg0NDIwHhcNMjUxMjIxMjMwMDMzWhcNMjUxMjIyMjMwMDMzWjAzMTEwLwYDVQQD Eyg1MGIwOWNmOGVlNmUzM2IxMTY4Njc4MjUyYzQ0NTMyODg0NDUzYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRDYBZpUIvOIrzxme4WOpDHlw75Z 1qcJpM91x9OIqDkAR1PPOw8UaUjmoaScGVq35NsWetO/jr5FdfYME9XotTgxLrDP 2CregWlbOFsdHyURg4A2HebgKv94N0FlLMJfqqK71kgHVVZJqpvwQQNglQ5w7M1b 5kMnsNi6vYgDd37Gy+7m1HgxxZ5s+AKsxBlJQiPQUeNXeYlH/z5lAI+k8TLnhhzU /aZ7Yw7X4F7je8QvkzrJY0DVGZ4q5fMNRZzycrbvlQ392MIFGD1SAL7fuQkDwqMS MB8NYiq78VETXV1VbcpkrsRjt+bMEbgObGzirEiwDWFloqIxetm/fYhWJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCwnPjubjOxFoZ4JSxEUyiERTuQMB8GA1UdIwQY MBaAFFWyBZt0jW3dXFoMHTXpde97qIRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTkt MjMwNjRlMjFkMTRkLzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTktMjMwNjRlMjFkMTRk LzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1YQwNqe u6wVyCUyPz+gevWBstirLR5t1isD5sL5OWncKi966RWRgnCPACQLXLL652SOwDuE SW6N8e5f/0PsXCmfzdq5VJGS55o53p64N/53d9NKrWErADOvNy9pM+f5F9jOHnce JkmebZEBcX2wzWYBQoTzGU7NTCIBrxRkfk+AD+qPznK3t7spKBjDXHpgmoxtoV7N KhFWycDFRSDGEO7/TctW7M6ZDUSSo7+zeefybz1GvFNkKyat8gcge5NBwXu7s5EN 4APNgeakrepBcrPOxXm5WZR7ChRIKrUJfP0WAgxJc+iS5zfwlooluAwOPbkuKZVm B4lH/sJrhTomyA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:03 2025 by rpki-client