This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json) Hash identifier: xfc2QLlGiuUA0c81dK4fCACVLI9B2QrpMne4dWGeodw= Subject key identifier: 47:AA:07:61:30:58:92:9F:51:F9:36:E4:56:0F:C4:8E:02:CA:5C:E7 Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Certificate serial: 019B19F1F81942C20D564ED09B211AAFBED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft Manifest number: 1310 Signing time: Sat 13 Dec 2025 23:00:46 +0000 Manifest this update: Sat 13 Dec 2025 23:00:46 +0000 Manifest next update: Sun 14 Dec 2025 23:00:46 +0000 Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=) 2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: YePgVwdUmz7jFnK2PDjFhqESHQdMaTmn0XRVuukxAr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:f8:19:42:c2:0d:56:4e:d0:9b:21:1a:af:be:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Validity Not Before: Dec 13 23:00:46 2025 GMT Not After : Dec 14 23:00:46 2025 GMT Subject: CN=47aa07613058929f51f936e4560fc48e02ca5ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:e0:d8:eb:11:33:81:b7:f9:48:41:89:09: 79:c8:1b:99:9e:4d:8a:06:a2:b8:8b:ac:93:a2:89: d7:5e:73:a2:0f:2a:95:ef:0b:d1:90:6f:c8:79:41: 8f:c7:53:80:e3:cf:7d:eb:93:76:89:7c:db:34:3c: 01:c3:93:b0:79:98:74:4e:2d:9e:02:1f:c9:19:b9: 19:ff:1d:d0:f2:db:70:01:ee:ba:9c:52:a8:25:8b: b7:d5:90:93:f6:b9:81:28:76:06:bb:44:59:94:d5: f2:d9:e6:fe:2a:1a:ff:a5:fc:ce:83:ab:b8:d8:72: a9:ee:72:88:2d:e8:a9:8e:a8:ae:88:e1:d9:7f:82: 36:84:c0:45:97:71:ff:77:20:91:f2:77:42:bc:5c: dd:1b:b4:c0:72:70:f0:72:15:39:85:14:21:d7:55: f1:31:92:ac:60:5e:40:c9:5f:7c:f1:7b:4c:bc:e2: 9f:bb:48:c7:78:c6:2d:71:05:32:2f:e8:70:a1:85: 14:39:55:85:11:28:55:23:89:be:f8:00:81:32:e7: 5e:ea:38:c3:ae:f2:b0:2a:fd:5d:e2:2e:8b:07:7b: b0:58:70:d6:4f:22:df:fb:b6:52:46:8d:2e:fb:1a: 94:d0:95:6a:d5:6e:37:da:a4:8c:86:f3:f8:cf:7a: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AA:07:61:30:58:92:9F:51:F9:36:E4:56:0F:C4:8E:02:CA:5C:E7 X509v3 Authority Key Identifier: keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:31:bc:ce:db:3b:8d:0c:ab:da:e3:a1:f4:f7:b2:ce:00:e0: 75:d6:c2:00:54:45:19:51:d6:1b:6c:f7:e2:3e:34:7b:1e:f6: c9:10:6c:d3:06:90:26:c1:8d:93:08:93:fc:2e:ae:39:a8:26: 22:3b:c7:4b:25:d4:45:64:87:43:93:e1:3d:17:43:4e:5c:4d: 8f:c8:36:b0:52:15:30:3c:bd:a3:ff:20:cb:ff:c9:72:7b:f9: d0:49:20:8e:11:7c:51:23:c1:1d:7b:49:25:0a:7b:e1:e6:8d: d9:2a:e3:d7:56:3b:c5:f9:48:f5:15:07:4e:02:b4:17:47:fc: ec:dd:65:28:e1:4d:4c:01:2d:34:35:6d:5f:11:b7:8f:d9:66: 92:f4:b7:89:50:af:f1:fb:df:6f:3c:a5:cc:38:ac:3c:80:e6: 34:fa:9c:2b:fa:a0:0a:25:53:a8:10:c8:67:fe:19:41:25:af: 45:9a:10:81:e9:c0:78:77:4b:66:bc:c6:74:37:51:8c:83:4a: ab:72:fd:18:da:b4:dc:84:86:64:a9:8f:75:2c:3c:46:11:6d: 7e:67:42:90:01:00:11:a5:f9:c0:f1:d7:ca:14:e4:a4:76:f9: a6:2b:93:a5:ab:36:83:6e:dc:d4:e0:7d:95:8d:e4:83:c3:ab: 38:0e:3d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8fgZQsINVk7QmyEar77TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm Y2IzYTYwHhcNMjUxMjEzMjMwMDQ2WhcNMjUxMjE0MjMwMDQ2WjAzMTEwLwYDVQQD Eyg0N2FhMDc2MTMwNTg5MjlmNTFmOTM2ZTQ1NjBmYzQ4ZTAyY2E1Y2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLTg2OsRM4G3+UhBiQl5yBuZnk2K BqK4i6yToonXXnOiDyqV7wvRkG/IeUGPx1OA489965N2iXzbNDwBw5OweZh0Ti2e Ah/JGbkZ/x3Q8ttwAe66nFKoJYu31ZCT9rmBKHYGu0RZlNXy2eb+Khr/pfzOg6u4 2HKp7nKILeipjqiuiOHZf4I2hMBFl3H/dyCR8ndCvFzdG7TAcnDwchU5hRQh11Xx MZKsYF5AyV988XtMvOKfu0jHeMYtcQUyL+hwoYUUOVWFEShVI4m++ACBMude6jjD rvKwKv1d4i6LB3uwWHDWTyLf+7ZSRo0u+xqU0JVq1W432qSMhvP4z3r7QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeqB2EwWJKfUfk25FYPxI4CylznMB8GA1UdIwQY MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATG8zts7 jQyr2uOh9PeyzgDgddbCAFRFGVHWG2z34j40ex72yRBs0waQJsGNkwiT/C6uOagm IjvHSyXURWSHQ5PhPRdDTlxNj8g2sFIVMDy9o/8gy//Jcnv50EkgjhF8USPBHXtJ JQp74eaN2Srj11Y7xflI9RUHTgK0F0f87N1lKOFNTAEtNDVtXxG3j9lmkvS3iVCv 8fvfbzylzDisPIDmNPqcK/qgCiVTqBDIZ/4ZQSWvRZoQgenAeHdLZrzGdDdRjINK q3L9GNq03ISGZKmPdSw8RhFtfmdCkAEAEaX5wPHXyhTkpHb5piuTpas2g27c1OB9 lY3kg8OrOA494g== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:39 2025 by rpki-client