This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json) Hash identifier: L+hxJ+A/qJSRwM4vpwdvpDiGIoeKENnU2FPz8QTcpOU= Subject key identifier: D1:6F:16:0C:CF:4C:43:82:EA:DD:96:BF:53:E4:A5:A3:47:EB:C8:FD Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Certificate serial: 019B2062287CA847023D3DB56EEADAFB22D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft Manifest number: 1781 Signing time: Mon 15 Dec 2025 05:01:02 +0000 Manifest this update: Mon 15 Dec 2025 05:01:02 +0000 Manifest next update: Tue 16 Dec 2025 05:01:02 +0000 Files and hashes: 1: 4DbDI_EnOkcmLXrBG5jeHwTwt2c.roa (hash: mJ/2UVoGEpFQIaST8cEuCkebUiYaaorOEoL9AoSGYIQ=) 2: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=) 3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: BqULw25dT2J7GZ/Gwds1TOG6s58l33p9CTtPTSRh+S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:28:7c:a8:47:02:3d:3d:b5:6e:ea:da:fb:22:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Validity Not Before: Dec 15 05:01:02 2025 GMT Not After : Dec 16 05:01:02 2025 GMT Subject: CN=d16f160ccf4c4382eadd96bf53e4a5a347ebc8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:57:fb:50:0c:17:eb:3b:2f:6a:f1:70:e7: 5f:28:fd:53:6a:fe:ce:45:72:5f:23:80:46:68:af: 1d:ae:28:60:ea:25:b5:27:89:c4:79:f4:91:a5:97: a3:96:9c:0d:19:c5:eb:75:79:8a:d9:85:e7:51:cf: 59:38:62:32:31:7e:9e:ea:e2:5d:97:3e:cf:9b:80: 73:2b:34:a8:ac:e8:97:13:89:4e:a7:3e:53:7a:de: 31:a2:de:77:5c:a3:bf:a3:03:d1:bf:fe:f6:00:7e: 7c:91:77:a0:4d:86:6e:8e:13:06:7c:2e:f6:05:c6: e3:e5:6c:d2:61:79:85:f1:d1:b8:a9:cb:1d:90:25: d8:8a:b4:7a:13:92:39:53:fb:98:87:3d:fc:01:0b: 4f:f6:37:15:0c:51:96:b5:33:14:5e:c8:d0:00:e3: 7e:3a:b1:8e:74:ff:a2:cc:e4:be:2a:fd:1f:5e:0c: 78:76:f8:b0:21:35:6b:05:f0:f6:5a:3e:f0:da:a1: 32:b4:05:e9:56:55:b6:4d:2a:b7:cd:c9:ec:df:9d: c2:d8:1a:f8:51:16:cc:6d:68:8c:84:0d:46:90:98: dd:04:9e:9f:89:6c:8c:a2:a7:b7:25:02:9f:58:2d: 27:a7:bb:a0:d8:cf:7d:77:e0:bd:9a:21:f8:8d:a3: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6F:16:0C:CF:4C:43:82:EA:DD:96:BF:53:E4:A5:A3:47:EB:C8:FD X509v3 Authority Key Identifier: keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e1:af:87:8d:5c:6e:b5:d3:e5:b1:63:f2:14:1f:0e:d9:43: 0d:e1:7e:84:9f:fe:d5:70:fd:be:1b:fc:54:6d:14:25:a2:37: 6a:38:b4:c7:5d:5a:53:7e:da:96:72:aa:3c:6c:f2:8f:5a:46: 67:4d:15:5a:4d:27:75:51:a3:cf:28:65:39:2f:18:3c:5e:48: bd:a0:4a:66:c5:10:91:8c:7f:af:13:4a:71:2b:d0:d5:52:f7: ea:5d:5b:5d:33:6c:e2:9c:a0:34:b9:a4:eb:b1:8c:79:4c:d5: 21:91:95:5f:a2:b6:46:d8:03:df:2f:bc:71:5f:b7:2a:24:92: 69:c8:61:8a:a2:0d:30:1f:e6:61:ed:17:98:86:8b:d5:33:53: f0:62:02:fe:91:57:37:bb:c1:7e:af:79:f5:23:66:67:ef:1b: 10:2c:50:2b:70:a9:3f:cc:ee:7c:80:30:f5:79:63:4b:a9:d2: 52:c7:bd:cf:c0:54:9b:18:3f:a0:36:d3:69:be:24:35:54:26: a7:55:81:85:41:90:88:72:d2:16:62:8e:f2:a5:63:2a:d6:e8: be:59:e6:f2:ef:02:8a:76:58:0e:1c:59:e5:51:7d:a8:df:07: d2:c0:fe:8a:64:8e:9d:c6:58:6f:d9:2b:88:5c:ce:7e:10:b7: 19:a4:b5:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYih8qEcCPT21bura+yLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDNlNWY4NDA1ZDYwODViOGRmNGJmY2UxZGQ5YmIzZTc4 YzIxOTkwHhcNMjUxMjE1MDUwMTAyWhcNMjUxMjE2MDUwMTAyWjAzMTEwLwYDVQQD EyhkMTZmMTYwY2NmNGM0MzgyZWFkZDk2YmY1M2U0YTVhMzQ3ZWJjOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto9X+1AMF+s7L2rxcOdfKP1Tav7O RXJfI4BGaK8drihg6iW1J4nEefSRpZejlpwNGcXrdXmK2YXnUc9ZOGIyMX6e6uJd lz7Pm4BzKzSorOiXE4lOpz5Tet4xot53XKO/owPRv/72AH58kXegTYZujhMGfC72 Bcbj5WzSYXmF8dG4qcsdkCXYirR6E5I5U/uYhz38AQtP9jcVDFGWtTMUXsjQAON+ OrGOdP+izOS+Kv0fXgx4dviwITVrBfD2Wj7w2qEytAXpVlW2TSq3zcns353C2Br4 URbMbWiMhA1GkJjdBJ6fiWyMoqe3JQKfWC0np7ug2M99d+C9miH4jaNLZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFvFgzPTEOC6t2Wv1PkpaNH68j9MB8GA1UdIwQY MBaAFFQD5fhAXWCFuN9L/OHdm7PnjCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAt MTVhNDJhYzllZmE4LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAtMTVhNDJhYzllZmE4 LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOGvh41c brXT5bFj8hQfDtlDDeF+hJ/+1XD9vhv8VG0UJaI3aji0x11aU37alnKqPGzyj1pG Z00VWk0ndVGjzyhlOS8YPF5IvaBKZsUQkYx/rxNKcSvQ1VL36l1bXTNs4pygNLmk 67GMeUzVIZGVX6K2RtgD3y+8cV+3KiSSachhiqINMB/mYe0XmIaL1TNT8GIC/pFX N7vBfq959SNmZ+8bECxQK3CpP8zufIAw9XljS6nSUse9z8BUmxg/oDbTab4kNVQm p1WBhUGQiHLSFmKO8qVjKtbovlnm8u8CinZYDhxZ5VF9qN8H0sD+imSOncZYb9kr iFzOfhC3GaS1fw== -----END CERTIFICATE-----Generated at Mon Dec 15 14:38:56 2025 by rpki-client