This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json) Hash identifier: 0B8yQSBW4yAGtXJ490dFbNwmc78W2JV5Mw58Od/UN8s= Subject key identifier: 53:1D:04:79:96:A3:13:F3:04:E6:C3:97:D0:93:AB:9D:32:1D:7D:24 Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94 Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194 Certificate serial: 019B31FA8D79F1F8AD9CAF47CE87009FB0A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 15:01:02 +0000 Manifest this update: Thu 18 Dec 2025 15:01:02 +0000 Manifest next update: Fri 19 Dec 2025 15:01:02 +0000 Files and hashes: 1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=) 2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: t3KFhrh8rGnEJfEcK955rqxKZZiUfRXl1KJJBiWLlBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:8d:79:f1:f8:ad:9c:af:47:ce:87:00:9f:b0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194 Validity Not Before: Dec 18 15:01:02 2025 GMT Not After : Dec 19 15:01:02 2025 GMT Subject: CN=531d047996a313f304e6c397d093ab9d321d7d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:53:61:d7:13:bc:07:cf:62:42:cf:67:14: 35:6a:58:43:3e:30:47:2d:b8:f4:4b:18:3a:53:10: 19:97:c6:7f:26:a4:8a:34:64:82:2c:4d:28:19:c9: d5:0e:98:e8:e2:ea:1f:2e:7b:ac:3d:c5:48:93:17: da:3b:b3:26:c6:b5:07:de:a7:90:17:cf:ae:bb:38: 42:98:94:2d:f4:f1:b1:f4:7a:f2:b6:f9:7f:1e:1b: 6b:4d:12:8c:40:00:d7:49:1e:18:e2:63:8b:31:88: 74:b2:07:88:b4:e2:21:ba:94:c3:3d:ab:2d:a8:78: a1:fa:87:31:13:f4:87:84:77:0f:ce:1c:87:01:94: c1:bc:9e:af:98:6e:a7:ee:b2:81:ba:59:1c:67:13: 97:bc:ba:68:4e:68:51:f0:6b:f1:a4:4b:71:9e:ff: 08:a2:f3:1c:0e:18:39:3d:0a:fe:86:4f:5a:85:47: cd:9c:fc:5c:59:ec:e2:40:3d:56:49:eb:9d:9e:6d: 07:ca:b2:14:ce:5b:96:f8:91:c6:8b:80:10:99:c0: 9e:77:87:bc:23:80:03:f5:b7:89:9a:6a:ce:07:05: a5:44:7c:99:c8:a0:e4:18:28:9e:9e:63:2f:ec:ed: 8a:85:e1:53:91:b3:41:6f:bd:c5:e8:17:63:17:83: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1D:04:79:96:A3:13:F3:04:E6:C3:97:D0:93:AB:9D:32:1D:7D:24 X509v3 Authority Key Identifier: keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:96:54:d9:ed:14:c5:51:21:ba:53:2b:be:66:53:d0:db:b7: f8:b5:b9:6d:bb:fc:23:0e:ca:1b:45:dc:02:95:fc:cf:75:9a: df:da:5c:75:bf:52:dc:a1:ac:26:e7:5f:32:50:68:e4:85:84: d3:d7:1d:4b:38:64:5e:bb:d8:2a:e4:08:f3:92:5f:0e:d0:4d: 62:a9:17:4f:8b:5a:b9:ec:0c:ef:26:e0:65:e2:96:e7:6a:d2: 6e:96:4c:0e:36:ec:48:4d:0e:18:9b:19:83:77:d1:b4:cd:fa: 58:6c:b1:4d:b1:5b:81:32:62:24:9a:ae:4e:09:d7:70:4d:c8: b1:58:9f:16:15:46:03:85:d0:48:0d:17:18:af:0d:0c:d4:a0: ae:d2:cb:21:6a:41:dc:b7:47:b7:e9:79:d1:69:8e:e6:32:de: 4d:83:72:75:e2:64:e5:cf:a4:fe:de:43:a8:3c:5a:14:bd:d2: 2f:d7:02:98:83:80:6c:22:6f:f7:4a:82:1e:10:9f:22:01:c8: c7:57:49:b6:40:71:0b:0b:86:8a:dc:e6:37:0f:1a:e3:90:b2: e2:ef:c7:be:9e:38:6a:70:e7:9b:17:e2:52:bc:46:cb:4f:36: 7f:b9:94:3c:5a:6c:68:0d:13:28:8b:67:8e:1d:1d:cf:fd:49: ac:a6:2e:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+o158fitnK9HzocAn7CiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOTY2ZGJlYjY0MTM4MmExNWY0NjdmNWEwM2U5YTk2ZmEx ZGMxOTQwHhcNMjUxMjE4MTUwMTAyWhcNMjUxMjE5MTUwMTAyWjAzMTEwLwYDVQQD Eyg1MzFkMDQ3OTk2YTMxM2YzMDRlNmMzOTdkMDkzYWI5ZDMyMWQ3ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo69TYdcTvAfPYkLPZxQ1alhDPjBH Lbj0Sxg6UxAZl8Z/JqSKNGSCLE0oGcnVDpjo4uofLnusPcVIkxfaO7MmxrUH3qeQ F8+uuzhCmJQt9PGx9Hrytvl/HhtrTRKMQADXSR4Y4mOLMYh0sgeItOIhupTDPast qHih+ocxE/SHhHcPzhyHAZTBvJ6vmG6n7rKBulkcZxOXvLpoTmhR8GvxpEtxnv8I ovMcDhg5PQr+hk9ahUfNnPxcWeziQD1WSeudnm0HyrIUzluW+JHGi4AQmcCed4e8 I4AD9beJmmrOBwWlRHyZyKDkGCienmMv7O2KheFTkbNBb73F6BdjF4OxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMdBHmWoxPzBObDl9CTq50yHX0kMB8GA1UdIwQY MBaAFL6Wbb62QTgqFfRn9aA+mpb6HcGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYt MTRiOGQzMGYxMzk3LzEvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYtMTRiOGQzMGYxMzk3 LzEvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpZU2e0U xVEhulMrvmZT0Nu3+LW5bbv8Iw7KG0XcApX8z3Wa39pcdb9S3KGsJudfMlBo5IWE 09cdSzhkXrvYKuQI85JfDtBNYqkXT4tauewM7ybgZeKW52rSbpZMDjbsSE0OGJsZ g3fRtM36WGyxTbFbgTJiJJquTgnXcE3IsVifFhVGA4XQSA0XGK8NDNSgrtLLIWpB 3LdHt+l50WmO5jLeTYNydeJk5c+k/t5DqDxaFL3SL9cCmIOAbCJv90qCHhCfIgHI x1dJtkBxCwuGitzmNw8a45Cy4u/Hvp44anDnmxfiUrxGy082f7mUPFpsaA0TKItn jh0dz/1JrKYuyw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:07 2025 by rpki-client