This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json) Hash identifier: eykwJ897cwaVS2l1zW0374QAEpY5iIvivNBcAlxhPHs= Subject key identifier: 80:B2:6E:46:BA:51:F5:E6:BC:0E:E6:48:57:07:5E:0F:58:5B:FA:C3 Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Certificate serial: 019B59084B3C76FE50DCD90A7D986BE781D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft Manifest number: 0294 Signing time: Fri 26 Dec 2025 05:01:14 +0000 Manifest this update: Fri 26 Dec 2025 05:01:14 +0000 Manifest next update: Sat 27 Dec 2025 05:01:14 +0000 Files and hashes: 1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=) 2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: pATIoQtlGaZwpgRqVa6eh9cIr1tfqHeuG3BZp3X4PFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:4b:3c:76:fe:50:dc:d9:0a:7d:98:6b:e7:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Validity Not Before: Dec 26 05:01:14 2025 GMT Not After : Dec 27 05:01:14 2025 GMT Subject: CN=80b26e46ba51f5e6bc0ee64857075e0f585bfac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:8d:a0:95:17:1c:fe:91:d7:cf:bd:6c:68: 21:92:f9:99:eb:03:8a:35:b7:1a:6c:55:93:bf:e8: 10:82:99:42:2d:69:c4:d4:21:d6:20:c2:b7:9d:56: eb:3b:6c:87:3f:40:58:22:f5:90:f7:fa:d8:31:cc: 34:14:18:5e:b3:bb:f5:88:c0:00:c6:95:27:ec:f2: 5f:88:a4:72:7f:1f:b2:af:2f:2c:06:2f:1f:8f:a3: 87:71:2c:93:e5:82:d5:eb:9a:9c:6e:ad:f1:8c:82: dd:fe:bb:07:52:1a:a8:fc:e1:d5:aa:80:a9:6b:f2: 12:fa:94:b3:fd:b9:f9:d2:3f:d5:91:25:f3:99:2e: 8b:88:0b:d1:36:4f:bf:b3:72:6c:e1:9a:33:67:50: 7b:4d:32:f8:50:00:77:5c:75:59:ab:4c:18:96:22: 95:cf:84:34:e3:d6:36:b4:cf:df:0c:dd:8f:41:47: ff:9f:a6:e3:89:4b:27:50:e1:67:de:ec:52:af:6d: 4c:27:db:5a:d6:d3:a8:f0:39:e1:8e:b4:76:32:34: a8:0d:3f:96:a3:8c:49:6c:5a:b4:ba:07:88:8d:c2: 38:57:be:e3:b8:51:b8:80:1b:06:81:c3:e2:3d:f6: b1:e6:ab:47:29:4e:02:0b:79:40:d0:2a:62:67:5e: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:6E:46:BA:51:F5:E6:BC:0E:E6:48:57:07:5E:0F:58:5B:FA:C3 X509v3 Authority Key Identifier: keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8c:74:27:04:f3:3b:59:3d:27:75:da:2b:e2:f5:26:99:d6: b2:6d:93:8a:82:db:41:00:14:74:cb:e4:8e:80:82:3f:0d:ba: e7:0d:44:6f:54:2b:2d:54:11:a6:92:1b:b9:c6:7d:36:20:5e: 04:b7:9e:ab:6b:06:4e:de:6b:22:a9:73:ce:5c:c4:96:2b:2d: 0c:4a:3b:5b:99:fa:d5:8e:f8:40:a0:57:1d:98:60:9e:ae:91: cd:de:a8:b5:09:4b:11:13:af:99:7e:0a:07:a5:fa:c0:52:9d: bb:b0:a6:d5:d0:27:99:08:66:b3:36:ca:91:93:0c:84:57:3e: 99:a9:6b:07:8c:0c:7c:7e:75:be:25:65:73:ff:fd:40:72:3f: 70:1d:8c:51:a1:fb:30:95:7b:fa:bc:a0:ee:3f:72:22:c0:b4: cd:91:4a:f3:b1:2f:5c:85:9a:94:93:4a:71:76:43:1f:1b:87: be:ec:65:cf:51:d8:ce:5f:9d:52:58:99:78:2b:08:37:c5:f1: 40:a3:68:1d:73:bd:9d:32:5c:3b:86:51:2a:81:7b:8c:a6:42: f6:e7:0f:ac:b4:2a:90:2e:8d:4a:5b:ce:b1:0c:64:2e:ad:69: 6d:20:a3:be:1c:18:ec:45:8f:4c:d6:3c:ae:32:38:9f:87:98: e5:5c:ba:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCEs8dv5Q3NkKfZhr54HYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZjlkNTgxOWQ0NDBhZGNlY2RhMWVlZWI3Yzk4YWU5OWM0 ZDA3MDcwHhcNMjUxMjI2MDUwMTE0WhcNMjUxMjI3MDUwMTE0WjAzMTEwLwYDVQQD Eyg4MGIyNmU0NmJhNTFmNWU2YmMwZWU2NDg1NzA3NWUwZjU4NWJmYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdaNoJUXHP6R18+9bGghkvmZ6wOK NbcabFWTv+gQgplCLWnE1CHWIMK3nVbrO2yHP0BYIvWQ9/rYMcw0FBhes7v1iMAA xpUn7PJfiKRyfx+yry8sBi8fj6OHcSyT5YLV65qcbq3xjILd/rsHUhqo/OHVqoCp a/IS+pSz/bn50j/VkSXzmS6LiAvRNk+/s3Js4ZozZ1B7TTL4UAB3XHVZq0wYliKV z4Q049Y2tM/fDN2PQUf/n6bjiUsnUOFn3uxSr21MJ9ta1tOo8DnhjrR2MjSoDT+W o4xJbFq0ugeIjcI4V77juFG4gBsGgcPiPfax5qtHKU4CC3lA0CpiZ15qAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICybka6UfXmvA7mSFcHXg9YW/rDMB8GA1UdIwQY MBaAFFT51YGdRArc7Noe7rfJiumcTQcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTIt OWQzMTVkMTE1Y2JiLzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTItOWQzMTVkMTE1Y2Ji LzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIx0JwTz O1k9J3XaK+L1JpnWsm2TioLbQQAUdMvkjoCCPw265w1Eb1QrLVQRppIbucZ9NiBe BLeeq2sGTt5rIqlzzlzElistDEo7W5n61Y74QKBXHZhgnq6Rzd6otQlLEROvmX4K B6X6wFKdu7Cm1dAnmQhmszbKkZMMhFc+malrB4wMfH51viVlc//9QHI/cB2MUaH7 MJV7+ryg7j9yIsC0zZFK87EvXIWalJNKcXZDHxuHvuxlz1HYzl+dUliZeCsIN8Xx QKNoHXO9nTJcO4ZRKoF7jKZC9ucPrLQqkC6NSlvOsQxkLq1pbSCjvhwY7EWPTNY8 rjI4n4eY5Vy6ug== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:18 2025 by rpki-client