This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft File: vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json) Hash identifier: AP2KYudAqyW33G8g8R5hNM5siZJmyoj2jzlJw+F2gJo= Subject key identifier: CF:84:CF:B3:C0:DF:64:61:2E:A9:7E:C0:DD:CE:40:C3:07:FE:CB:D5 Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B Certificate issuer: /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b Certificate serial: 019B5ABFD37D1413FF4B01DD8E445122D465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 13:01:19 +0000 Manifest this update: Fri 26 Dec 2025 13:01:19 +0000 Manifest next update: Sat 27 Dec 2025 13:01:19 +0000 Files and hashes: 1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: mYs/mtzLYOJ6aAmMbjMetAYy6Yj3xin8zcPy7aHfEzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d3:7d:14:13:ff:4b:01:dd:8e:44:51:22:d4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b Validity Not Before: Dec 26 13:01:19 2025 GMT Not After : Dec 27 13:01:19 2025 GMT Subject: CN=cf84cfb3c0df64612ea97ec0ddce40c307fecbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:bd:9e:e7:ce:63:15:1a:d8:17:14:80:a7: 78:75:e2:63:90:81:63:4d:70:dd:ea:db:97:b0:21: 8e:0d:6c:42:bf:f9:e0:46:c3:18:fc:d6:5d:81:bb: 59:8f:4f:c7:02:03:11:6b:4f:1f:e4:a3:99:5d:ab: 53:2e:d4:83:a0:79:02:d3:ac:e2:94:91:c1:6d:97: 64:8f:0d:c6:38:c8:66:f1:13:32:90:8d:b8:23:a2: dc:16:b9:99:09:8c:8b:06:6f:33:de:3f:f6:0b:19: 3f:d3:0d:73:6c:db:d7:80:e1:73:6e:73:63:ba:7e: d0:16:3c:52:d1:c9:cd:89:e1:fc:1f:48:cf:3b:a1: ef:86:4b:08:56:6d:9b:58:5e:6b:6e:98:77:32:53: d7:ce:71:7d:28:c9:6c:83:84:89:5b:45:1f:73:40: ea:c5:08:ec:2c:fd:ab:58:07:5f:ff:83:76:ca:49: 64:36:07:99:81:75:5d:3e:64:4d:3e:f4:45:05:5b: a9:b8:dd:40:30:b0:be:20:5e:0c:03:36:9e:a8:b7: 05:0c:47:fc:44:9a:e6:ab:c5:ca:06:a0:89:88:ad: 84:f3:f7:21:c9:16:44:5d:72:dc:07:ac:8f:27:a2: 0b:21:17:c7:df:be:01:aa:d4:48:98:83:d2:22:ac: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:84:CF:B3:C0:DF:64:61:2E:A9:7E:C0:DD:CE:40:C3:07:FE:CB:D5 X509v3 Authority Key Identifier: keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cf:b2:99:98:4c:a3:be:b8:86:78:db:c5:d1:00:85:50:46: 19:cf:c9:f9:5a:5b:2d:0f:78:85:a6:43:ea:0a:e4:1d:a7:8c: 61:0b:19:0e:69:88:f0:bc:26:70:99:d2:6d:f8:df:e7:da:1a: df:77:5e:e3:46:52:5a:05:8d:b5:01:57:29:d7:14:a8:74:f6: e6:19:c1:e9:c5:a1:66:8b:9f:c9:24:fb:a9:51:09:c5:23:c7: cc:3b:c3:75:6a:c7:3d:c5:4d:36:06:ca:9d:19:be:74:dd:55: fd:29:b7:29:04:99:3a:3c:aa:e6:36:67:1d:77:75:fb:dd:35: a2:25:f0:55:26:6f:fe:51:aa:94:56:65:0d:9e:26:b6:c7:23: 6b:5e:18:1b:95:52:06:10:c8:13:e0:66:e0:ed:ab:e8:6e:05: 4e:1d:32:f0:a0:62:56:68:78:92:6f:11:96:c1:21:43:0e:08: 9b:54:ec:15:b2:8f:52:3e:02:f1:40:0e:32:9d:6c:de:74:33: 98:dc:f1:08:68:30:3c:c8:a3:fe:dd:4e:63:20:10:30:4e:cc: 85:3c:c2:e2:5c:42:a5:e2:25:18:b3:65:c7:3b:67:df:79:3f: 5c:c1:f7:e5:d7:a8:8d:bf:0a:60:29:b9:df:29:a3:f5:dd:fe: 28:d2:26:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9N9FBP/SwHdjkRRItRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjNhOWQzNTIzZjRmMTU2NTg5YmEwYWEyNDlmZDM1MjVj ODVmNmIwHhcNMjUxMjI2MTMwMTE5WhcNMjUxMjI3MTMwMTE5WjAzMTEwLwYDVQQD EyhjZjg0Y2ZiM2MwZGY2NDYxMmVhOTdlYzBkZGNlNDBjMzA3ZmVjYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwa9nufOYxUa2BcUgKd4deJjkIFj TXDd6tuXsCGODWxCv/ngRsMY/NZdgbtZj0/HAgMRa08f5KOZXatTLtSDoHkC06zi lJHBbZdkjw3GOMhm8RMykI24I6LcFrmZCYyLBm8z3j/2Cxk/0w1zbNvXgOFzbnNj un7QFjxS0cnNieH8H0jPO6HvhksIVm2bWF5rbph3MlPXznF9KMlsg4SJW0Ufc0Dq xQjsLP2rWAdf/4N2yklkNgeZgXVdPmRNPvRFBVupuN1AMLC+IF4MAzaeqLcFDEf8 RJrmq8XKBqCJiK2E8/chyRZEXXLcB6yPJ6ILIRfH374BqtRImIPSIqxV5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+Ez7PA32RhLql+wN3OQMMH/svVMB8GA1UdIwQY MBaAFL7zqdNSP08VZYm6CqJJ/TUlyF9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAt ZGZlYWRlM2Q1NjQxLzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAtZGZlYWRlM2Q1NjQx LzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcM+ymZhM o764hnjbxdEAhVBGGc/J+VpbLQ94haZD6grkHaeMYQsZDmmI8LwmcJnSbfjf59oa 33de40ZSWgWNtQFXKdcUqHT25hnB6cWhZoufyST7qVEJxSPHzDvDdWrHPcVNNgbK nRm+dN1V/Sm3KQSZOjyq5jZnHXd1+901oiXwVSZv/lGqlFZlDZ4mtscja14YG5VS BhDIE+Bm4O2r6G4FTh0y8KBiVmh4km8RlsEhQw4Im1TsFbKPUj4C8UAOMp1s3nQz mNzxCGgwPMij/t1OYyAQME7MhTzC4lxCpeIlGLNlxztn33k/XMH35deojb8KYCm5 3ymj9d3+KNImkA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:25 2025 by rpki-client