This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json) Hash identifier: 5M9r5f+wywCNhFqApyefJWV4dmWNneIyVEvlxIGA8Jc= Subject key identifier: 7C:95:24:52:E9:BB:B2:C3:C7:FE:64:6A:6A:12:21:FF:B8:DD:32:36 Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb Certificate serial: 019B3C7E22AAAB73B4D61E8A26882C7FBAAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft Manifest number: 04F1 Signing time: Sat 20 Dec 2025 16:00:57 +0000 Manifest this update: Sat 20 Dec 2025 16:00:57 +0000 Manifest next update: Sun 21 Dec 2025 16:00:57 +0000 Files and hashes: 1: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: Qy7jaZF1ONi90jPD9L5pBd/37LmXAYtW+cRq2xmUMt0=) 2: xe_FlpDuD-n9_M4USiSXk6Ycnbw.roa (hash: yJ1Pd1TWtovjk0/IapFR+YDI373SvMNyYMwVt0mGMMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:22:aa:ab:73:b4:d6:1e:8a:26:88:2c:7f:ba:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb Validity Not Before: Dec 20 16:00:57 2025 GMT Not After : Dec 21 16:00:57 2025 GMT Subject: CN=7c952452e9bbb2c3c7fe646a6a1221ffb8dd3236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:9b:90:39:e3:b3:72:4a:72:57:8a:bb:62: 0c:5c:00:f0:b9:ba:9b:d2:7a:7f:fa:50:d0:39:25: e0:93:ac:8b:14:17:4e:c5:93:f7:0e:f4:cf:44:53: 59:90:19:a3:89:66:cf:b0:cc:a4:a3:87:a1:04:57: cb:7f:94:a4:69:9c:4d:d4:1f:c6:c0:c7:bf:23:37: 6f:dd:a6:e3:6c:0e:56:2e:9b:06:3f:9d:5f:1c:05: 95:7a:89:a4:d9:8f:69:aa:f6:7b:17:3e:dc:55:52: d6:31:b5:86:06:d1:30:dd:d4:9e:a9:37:68:14:69: 53:a7:68:ef:6f:7f:9e:38:8a:76:69:7b:00:f2:8f: 80:48:21:1a:83:98:da:f8:40:c7:90:74:e0:d6:d9: 8a:15:11:a1:50:58:45:53:20:9c:8e:95:8d:0c:b4: c6:96:2a:9c:33:3c:69:c9:c2:1a:db:2e:de:0b:a6: b9:0f:25:0e:d3:07:2a:21:fc:83:02:cb:72:b5:03: 4a:f4:20:1c:74:a2:83:0d:47:eb:78:c6:45:37:33: 79:35:37:53:21:00:88:14:d5:5a:c9:aa:e8:ff:57: 83:d5:8f:e0:60:60:89:04:d0:de:13:e5:2c:81:4a: 3e:42:02:7c:d2:55:20:94:d2:57:65:c2:cc:73:6a: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:24:52:E9:BB:B2:C3:C7:FE:64:6A:6A:12:21:FF:B8:DD:32:36 X509v3 Authority Key Identifier: keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:48:43:8c:9c:8c:c6:e2:3b:24:96:1b:f1:d5:1c:73:97:df: ff:f0:e3:18:77:80:69:09:54:20:82:33:ab:b5:1d:36:b8:65: 25:59:cd:ec:a6:53:67:e3:e7:4c:24:ff:6e:a9:7a:7e:c1:1c: 79:1a:88:de:b5:b0:a8:e1:a1:5e:60:b7:89:c7:b8:c7:9a:25: 95:a0:ea:9b:76:f5:a6:bd:97:7d:4f:65:ef:98:35:ff:34:f8: ac:ce:3d:04:11:d9:c5:a1:23:21:19:46:47:07:1c:9c:0d:32: f3:9f:88:dd:fd:b0:6c:0c:27:d6:5b:40:3e:f6:2e:2f:de:86: 80:ab:cf:cc:7a:b5:c0:f7:52:e5:b5:1a:15:84:fa:7a:6d:cb: be:c5:c3:7d:fa:a4:04:7b:b2:ed:65:58:d6:66:64:8a:6d:ba: da:5c:72:05:8f:b1:51:ff:65:89:63:a8:75:81:57:cb:0a:cf: bb:04:68:4e:02:e5:c7:05:a4:3f:74:49:4e:14:c5:71:7e:cc: ab:3e:15:fe:37:82:07:14:b6:94:a5:d9:d7:4a:6a:8d:d6:40: 49:89:47:74:5b:c9:e0:99:40:df:5d:fb:44:9e:3e:a1:72:49: 37:00:e1:db:3e:c0:4a:73:a1:df:60:37:43:7a:55:a8:8c:96: 5c:0d:19:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiKqq3O01h6KJogsf7qsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1 MTc4ZmIwHhcNMjUxMjIwMTYwMDU3WhcNMjUxMjIxMTYwMDU3WjAzMTEwLwYDVQQD Eyg3Yzk1MjQ1MmU5YmJiMmMzYzdmZTY0NmE2YTEyMjFmZmI4ZGQzMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8CbkDnjs3JKcleKu2IMXADwubqb 0np/+lDQOSXgk6yLFBdOxZP3DvTPRFNZkBmjiWbPsMyko4ehBFfLf5SkaZxN1B/G wMe/Izdv3abjbA5WLpsGP51fHAWVeomk2Y9pqvZ7Fz7cVVLWMbWGBtEw3dSeqTdo FGlTp2jvb3+eOIp2aXsA8o+ASCEag5ja+EDHkHTg1tmKFRGhUFhFUyCcjpWNDLTG liqcMzxpycIa2y7eC6a5DyUO0wcqIfyDAstytQNK9CAcdKKDDUfreMZFNzN5NTdT IQCIFNVayaro/1eD1Y/gYGCJBNDeE+UsgUo+QgJ80lUglNJXZcLMc2rUrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyVJFLpu7LDx/5kamoSIf+43TI2MB8GA1UdIwQY MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct NTBkNmJhNmFhY2I4LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4 LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkhDjJyM xuI7JJYb8dUcc5ff//DjGHeAaQlUIIIzq7UdNrhlJVnN7KZTZ+PnTCT/bql6fsEc eRqI3rWwqOGhXmC3ice4x5ollaDqm3b1pr2XfU9l75g1/zT4rM49BBHZxaEjIRlG RwccnA0y85+I3f2wbAwn1ltAPvYuL96GgKvPzHq1wPdS5bUaFYT6em3LvsXDffqk BHuy7WVY1mZkim262lxyBY+xUf9liWOodYFXywrPuwRoTgLlxwWkP3RJThTFcX7M qz4V/jeCBxS2lKXZ10pqjdZASYlHdFvJ4JlA3137RJ4+oXJJNwDh2z7ASnOh32A3 Q3pVqIyWXA0ZUA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:34 2025 by rpki-client