This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft File: VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json) Hash identifier: 8ffJ5n2Mz0NqnjzAcwjKYfM5FZ3hi3e+EhLt21OaSkA= Subject key identifier: 1D:DB:AD:A3:A1:78:88:C4:B8:21:27:E6:C2:17:AB:E3:36:BA:81:57 Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED Certificate issuer: /CN=5695c54a09593ddc83face12db52bf6a22b976ed Certificate serial: 019B194D51C5C16010BC34D7B00FF0434005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft Manifest number: 0887 Signing time: Sat 13 Dec 2025 20:00:56 +0000 Manifest this update: Sat 13 Dec 2025 20:00:56 +0000 Manifest next update: Sun 14 Dec 2025 20:00:56 +0000 Files and hashes: 1: VOCwh1utjz1n3G0fRSWrGdBLX3E.roa (hash: N86Thb+Z2Cee2FUQYjZTboBPyhDY9zRcG/ZzIf2sbhE=) 2: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: gFQ5HpRzxAmhdVRaBN/9OcKIZgBjI/pX4Hth2LtzFdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:51:c5:c1:60:10:bc:34:d7:b0:0f:f0:43:40:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed Validity Not Before: Dec 13 20:00:56 2025 GMT Not After : Dec 14 20:00:56 2025 GMT Subject: CN=1ddbada3a17888c4b82127e6c217abe336ba8157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:28:65:c2:4d:b8:42:8b:21:15:2b:39:d8:bc: 3c:9f:af:0e:ff:e8:b7:67:34:ae:46:41:15:aa:cd: 59:fb:9f:6b:6c:f2:9e:64:85:b7:1e:4d:e5:47:82: 82:ae:bc:f3:ef:19:09:7f:d9:a1:41:66:f5:81:db: 45:81:62:28:c6:73:6d:d0:38:27:2d:7e:c7:e3:44: 09:03:45:da:30:2c:ba:89:52:66:95:1d:73:42:eb: 63:19:78:4a:46:6d:7e:34:4e:ad:d5:16:55:05:f4: 08:70:4e:37:10:4c:42:44:30:d5:dc:84:26:b6:e0: 83:6b:82:bc:9d:b9:ff:3a:98:41:4d:98:79:c3:92: 6c:57:07:2a:92:cb:d8:b7:17:bc:96:b7:c9:b4:89: 00:ab:bd:40:94:e4:6f:7e:e0:f5:1a:72:06:8a:fe: 61:2c:49:6b:be:f3:cb:28:cb:d8:d4:46:d3:30:9e: 1f:26:04:65:f1:43:db:5c:53:c8:f1:d1:11:dc:1c: c9:f1:f3:6e:59:63:56:c2:79:ca:fd:95:35:b4:ca: 5c:e0:3c:98:5f:cc:ff:5d:98:fc:f1:08:ed:3e:87: 88:5e:e4:52:14:c2:b4:c8:cf:c8:5d:14:04:60:71: 39:a6:a3:03:c3:f9:08:5e:77:6c:79:a9:f1:2f:9c: a6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DB:AD:A3:A1:78:88:C4:B8:21:27:E6:C2:17:AB:E3:36:BA:81:57 X509v3 Authority Key Identifier: keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9a:79:69:ac:a4:ba:0c:ab:cd:55:4e:29:59:65:6a:f6:00: 67:21:1c:ee:a7:94:8b:bd:f6:52:a5:98:39:da:a4:2a:ac:b5: 4d:64:00:85:f5:a5:79:e6:e9:a9:03:f3:3d:08:25:34:73:ee: be:a2:39:58:96:bb:36:99:fa:77:25:1c:55:ea:67:77:d1:8c: 2a:76:1d:d1:ae:9c:f6:9d:2a:42:29:5b:4f:5e:06:8c:67:e3: 91:39:5a:9c:d2:45:c1:00:02:44:66:bf:d1:66:a9:68:5f:fc: d3:82:e6:16:d8:2a:25:90:ff:3f:95:06:8d:0a:88:49:32:b8: 93:01:d7:cf:4f:b8:37:78:b9:d3:e3:47:1a:d5:5a:97:e8:4c: 18:4b:03:21:b5:be:07:f1:4b:09:d8:9c:ef:9c:c2:bd:31:7f: a9:bd:1c:f0:eb:6f:83:33:dd:45:f4:46:fb:7e:c9:4f:96:c9: 6f:82:2d:b2:4d:d7:4d:e7:c6:ee:12:d9:5d:9a:f1:0a:21:e9: e4:e7:f1:0f:91:e1:f3:ad:d9:dc:80:3a:df:b9:7a:d7:7e:41: bb:53:89:bd:4f:e7:30:aa:3c:83:fb:20:01:a8:b1:42:2e:b8: c8:87:41:f0:4e:a7:a8:b1:1a:4a:a0:ee:50:e3:92:b4:1d:c8: 72:92:72:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTVHFwWAQvDTXsA/wQ0AFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OTVjNTRhMDk1OTNkZGM4M2ZhY2UxMmRiNTJiZjZhMjJi OTc2ZWQwHhcNMjUxMjEzMjAwMDU2WhcNMjUxMjE0MjAwMDU2WjAzMTEwLwYDVQQD EygxZGRiYWRhM2ExNzg4OGM0YjgyMTI3ZTZjMjE3YWJlMzM2YmE4MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Shlwk24QoshFSs52Lw8n68O/+i3 ZzSuRkEVqs1Z+59rbPKeZIW3Hk3lR4KCrrzz7xkJf9mhQWb1gdtFgWIoxnNt0Dgn LX7H40QJA0XaMCy6iVJmlR1zQutjGXhKRm1+NE6t1RZVBfQIcE43EExCRDDV3IQm tuCDa4K8nbn/OphBTZh5w5JsVwcqksvYtxe8lrfJtIkAq71AlORvfuD1GnIGiv5h LElrvvPLKMvY1EbTMJ4fJgRl8UPbXFPI8dER3BzJ8fNuWWNWwnnK/ZU1tMpc4DyY X8z/XZj88QjtPoeIXuRSFMK0yM/IXRQEYHE5pqMDw/kIXndseanxL5ymDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3braOheIjEuCEn5sIXq+M2uoFXMB8GA1UdIwQY MBaAFFaVxUoJWT3cg/rOEttSv2oiuXbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUt ZTNmYTllNjNiOWJjLzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUtZTNmYTllNjNiOWJj LzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJp5aayk ugyrzVVOKVllavYAZyEc7qeUi732UqWYOdqkKqy1TWQAhfWleebpqQPzPQglNHPu vqI5WJa7Npn6dyUcVepnd9GMKnYd0a6c9p0qQilbT14GjGfjkTlanNJFwQACRGa/ 0WapaF/804LmFtgqJZD/P5UGjQqISTK4kwHXz0+4N3i50+NHGtVal+hMGEsDIbW+ B/FLCdic75zCvTF/qb0c8OtvgzPdRfRG+37JT5bJb4Itsk3XTefG7hLZXZrxCiHp 5OfxD5Hh863Z3IA637l6135Bu1OJvU/nMKo8g/sgAaixQi64yIdB8E6nqLEaSqDu UOOStB3IcpJy8Q== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:00 2025 by rpki-client