This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft File: viphXepqVOryff6ZwH483I13X74.mft (raw, json) Hash identifier: 4GgXLb+iVWC9KRHcyuJWi+xmHa76u/a8D98WqA1By7E= Subject key identifier: 89:57:24:54:FE:A5:D3:13:C5:FD:74:34:26:F0:00:18:1E:6A:95:21 Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe Certificate serial: 019B5975F687207B4F7A85B492DE4BC25928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft Manifest number: 02E2 Signing time: Fri 26 Dec 2025 07:01:01 +0000 Manifest this update: Fri 26 Dec 2025 07:01:01 +0000 Manifest next update: Sat 27 Dec 2025 07:01:01 +0000 Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: JH9T44A3USDdnhVO3He8IxOHq0eC/8So0t5PgokGmHU=) 2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:f6:87:20:7b:4f:7a:85:b4:92:de:4b:c2:59:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe Validity Not Before: Dec 26 07:01:01 2025 GMT Not After : Dec 27 07:01:01 2025 GMT Subject: CN=89572454fea5d313c5fd743426f000181e6a9521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:7d:ca:c1:80:4e:56:51:f0:98:50:dd:2a: 86:8d:72:5a:ba:4e:e8:b7:70:d2:9e:96:f6:64:09: cb:82:3d:6b:f2:8b:09:12:ec:76:c4:96:16:cb:48: 8f:37:7a:64:75:c9:99:ba:76:94:a7:13:59:50:2b: 35:d1:f4:19:b7:25:46:d6:69:53:ba:bf:c4:47:8c: d7:93:35:e1:d0:34:b6:a1:49:67:28:b7:26:e6:04: 83:5d:e2:b3:2d:c1:63:f3:e1:6b:b6:45:2d:48:ea: 1b:67:c7:58:51:35:dc:17:a4:0f:e2:b7:55:34:f7: 4e:87:99:cc:06:f8:75:55:d1:23:de:3b:96:de:9e: ed:3d:74:6d:b9:bb:75:40:6c:2b:e8:3d:52:10:9c: 62:71:02:e5:75:df:ab:d7:fd:d7:d9:d8:d4:f1:e6: 2a:60:ff:c3:b6:c2:90:15:d4:f2:19:76:f3:f9:0b: b3:9c:5c:df:14:1c:12:0e:8e:2b:94:9b:be:a5:58: 9c:76:b8:56:11:69:4c:69:df:e5:f4:db:f5:a2:06: 75:90:ce:f4:01:36:27:af:51:2e:60:17:8a:82:88: 5d:f7:01:9b:6a:25:24:37:1e:8c:d6:1c:c2:22:04: f1:d3:03:a9:f8:8d:00:11:d0:6a:d9:36:36:96:43: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:57:24:54:FE:A5:D3:13:C5:FD:74:34:26:F0:00:18:1E:6A:95:21 X509v3 Authority Key Identifier: keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4f:e8:94:c8:dc:12:9a:99:d1:f9:82:4e:79:e6:95:0f:2a: f0:0c:b0:b9:13:df:0f:1e:fd:e7:d6:48:77:f9:cb:1a:0f:b4: 1b:00:a8:ea:be:99:1d:bf:82:2a:95:73:8c:be:21:22:99:70: e8:fc:34:85:e3:11:14:89:3a:95:33:7f:c8:3f:1e:19:2c:7b: 4f:9a:7b:a3:68:0a:3f:61:d7:49:4b:a5:05:91:07:b1:fb:64: 57:b1:ac:9e:8d:7b:a4:cb:e9:99:e1:36:29:31:78:c4:5e:a6: c9:42:17:0d:db:c5:9b:c9:16:96:a2:c6:e5:c5:ba:ab:58:1b: e8:0d:30:e5:d1:f3:37:3b:31:38:91:5e:96:e0:82:47:8d:36: 51:6b:21:c8:79:64:f4:b8:e9:db:ee:07:de:e2:d3:4a:5b:52: 09:52:98:91:17:86:6a:2a:9b:63:aa:36:b8:09:03:cd:42:f2: 61:78:11:e4:a6:db:4b:26:4d:24:48:a2:4f:d8:25:cc:5f:d9: b9:cd:02:38:86:25:a0:fd:cf:b0:a5:db:12:0f:0a:be:bc:0f: ec:e6:d5:88:d9:33:58:46:a7:78:49:29:b3:3b:6f:40:16:26: 40:8c:a6:93:79:86:30:72:4e:a3:89:32:2e:bc:66:29:62:7d: 65:d8:7c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfaHIHtPeoW0kt5LwlkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMmE2MTVkZWE2YTU0ZWFmMjdkZmU5OWMwN2UzY2RjOGQ3 NzVmYmUwHhcNMjUxMjI2MDcwMTAxWhcNMjUxMjI3MDcwMTAxWjAzMTEwLwYDVQQD Eyg4OTU3MjQ1NGZlYTVkMzEzYzVmZDc0MzQyNmYwMDAxODFlNmE5NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ft9ysGATlZR8JhQ3SqGjXJauk7o t3DSnpb2ZAnLgj1r8osJEux2xJYWy0iPN3pkdcmZunaUpxNZUCs10fQZtyVG1mlT ur/ER4zXkzXh0DS2oUlnKLcm5gSDXeKzLcFj8+FrtkUtSOobZ8dYUTXcF6QP4rdV NPdOh5nMBvh1VdEj3juW3p7tPXRtubt1QGwr6D1SEJxicQLldd+r1/3X2djU8eYq YP/DtsKQFdTyGXbz+QuznFzfFBwSDo4rlJu+pVicdrhWEWlMad/l9Nv1ogZ1kM70 ATYnr1EuYBeKgohd9wGbaiUkNx6M1hzCIgTx0wOp+I0AEdBq2TY2lkOlWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlXJFT+pdMTxf10NCbwABgeapUhMB8GA1UdIwQY MBaAFL4qYV3qalTq8n3+mcB+PNyNd1++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUt ZmU1YWI4MTExYmYwLzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUtZmU1YWI4MTExYmYw LzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk/olMjc EpqZ0fmCTnnmlQ8q8AywuRPfDx7959ZId/nLGg+0GwCo6r6ZHb+CKpVzjL4hIplw 6Pw0heMRFIk6lTN/yD8eGSx7T5p7o2gKP2HXSUulBZEHsftkV7Gsno17pMvpmeE2 KTF4xF6myUIXDdvFm8kWlqLG5cW6q1gb6A0w5dHzNzsxOJFeluCCR402UWshyHlk 9Ljp2+4H3uLTSltSCVKYkReGaiqbY6o2uAkDzULyYXgR5KbbSyZNJEiiT9glzF/Z uc0COIYloP3PsKXbEg8KvrwP7ObViNkzWEaneEkpsztvQBYmQIymk3mGMHJOo4ky LrxmKWJ9Zdh8ng== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:43 2025 by rpki-client