This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json) Hash identifier: UlpPuMpU6rMPPulGKTGhEqqX0WwFaInuMkgObHfaj1U= Subject key identifier: A5:1F:F5:5A:0D:C5:FF:9F:3C:8F:FF:49:A8:CE:10:BA:71:3B:3A:62 Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee Certificate serial: 019B5A1AB9550D90C8B98F2EE1403F020708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft Manifest number: 018A Signing time: Fri 26 Dec 2025 10:00:59 +0000 Manifest this update: Fri 26 Dec 2025 10:00:59 +0000 Manifest next update: Sat 27 Dec 2025 10:00:59 +0000 Files and hashes: 1: Mt4ySnJ9tLnzzQYq2U6tfp3Q3JA.roa (hash: Czeue2iwQkgf4dbWmDFWclQeOMsHJV7V0inLeSwakN8=) 2: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: zXWqdlvjV2+GL6+qR4bTWDdeZ8AP6oXINLakSe861HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:b9:55:0d:90:c8:b9:8f:2e:e1:40:3f:02:07:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee Validity Not Before: Dec 26 10:00:59 2025 GMT Not After : Dec 27 10:00:59 2025 GMT Subject: CN=a51ff55a0dc5ff9f3c8fff49a8ce10ba713b3a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:a2:cd:30:1d:0b:d7:86:e5:6c:0d:61:c3: e9:9b:15:eb:63:54:57:9c:bf:a0:52:ac:b8:d7:ff: bf:7c:c3:61:68:d3:f3:65:c6:0b:79:8c:67:a1:38: 38:88:31:50:86:90:63:35:68:0f:88:b2:93:c1:e5: 1d:c6:68:c9:1b:3b:5b:b0:fc:f2:d4:92:97:3d:b7: e8:c8:0b:7c:22:d1:84:cf:df:25:38:10:ae:aa:53: ee:59:64:d9:a5:fa:c3:8a:b1:5c:ad:b2:e1:e4:68: c6:c0:87:b9:5b:f4:8e:8c:48:f1:71:1e:7d:d5:b2: 8c:f0:63:45:81:36:06:ee:d9:2a:6b:a1:9d:e0:b4: ca:92:a4:41:7c:9b:13:82:7f:76:3a:1c:04:71:ac: c4:6c:ee:57:a0:b7:06:13:b5:aa:78:e8:c1:27:9a: fa:48:24:7a:72:0f:0b:98:3d:1e:e8:88:21:d1:03: b2:2d:7d:ab:af:cc:0c:8e:8d:4b:24:c2:d8:04:df: 95:78:e8:24:b4:ec:89:2f:62:35:d5:7b:d6:36:67: 5d:b0:cb:3d:e5:4a:2c:70:b4:b6:46:77:65:41:b6: d4:ff:fc:b5:02:56:9f:18:88:a6:07:de:94:5a:3d: 09:ac:c2:87:ee:28:77:ce:f3:5d:69:7c:88:bd:9e: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1F:F5:5A:0D:C5:FF:9F:3C:8F:FF:49:A8:CE:10:BA:71:3B:3A:62 X509v3 Authority Key Identifier: keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e5:90:b0:be:17:cc:de:db:40:3b:dd:1d:cf:85:4e:5b:c2: 02:03:4e:25:81:a2:81:1e:b2:ef:ce:63:da:eb:8f:f6:1e:47: 6e:9f:a4:ff:32:02:26:cd:c2:cb:a4:5a:b6:8c:2b:5d:d2:04: 42:84:57:6b:04:5f:f2:dc:b4:05:dd:41:3c:12:50:36:2c:51: e8:2b:fd:72:47:29:87:2c:b9:3c:3f:92:ff:cc:3a:92:a8:f2: f2:24:35:82:c8:04:65:c3:42:8c:62:13:f3:98:5e:25:32:74: 92:4f:e7:33:da:8f:eb:a1:80:3f:bc:04:39:69:01:95:5b:3f: 80:33:83:91:79:62:67:4d:bd:23:40:d4:af:d1:51:7f:ea:13: 96:a7:06:8a:21:e3:91:a0:f0:19:18:bf:d4:73:81:b2:f9:08: 4a:61:06:5d:55:43:cc:89:de:a9:0b:45:a3:92:ab:af:75:a6: d1:a8:56:5e:bf:48:40:9a:19:a7:6d:b3:9f:d9:7d:8a:e3:1a: da:22:cc:13:a4:56:24:1e:27:e6:97:c1:1b:0d:fb:e1:c8:10: 4c:a0:c9:79:43:8a:95:ba:46:34:f2:21:c1:b1:73:fd:65:78: 50:1c:2e:d5:8f:60:28:f2:6b:c3:61:5b:ce:cb:51:83:31:ac: 6d:28:b2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrlVDZDIuY8u4UA/AgcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDZkZjA3ZmYzY2IyNmRmY2Y0ZWViODc2MWZiMDE2Y2Fm N2Y5ZWUwHhcNMjUxMjI2MTAwMDU5WhcNMjUxMjI3MTAwMDU5WjAzMTEwLwYDVQQD EyhhNTFmZjU1YTBkYzVmZjlmM2M4ZmZmNDlhOGNlMTBiYTcxM2IzYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCyizTAdC9eG5WwNYcPpmxXrY1RX nL+gUqy41/+/fMNhaNPzZcYLeYxnoTg4iDFQhpBjNWgPiLKTweUdxmjJGztbsPzy 1JKXPbfoyAt8ItGEz98lOBCuqlPuWWTZpfrDirFcrbLh5GjGwIe5W/SOjEjxcR59 1bKM8GNFgTYG7tkqa6Gd4LTKkqRBfJsTgn92OhwEcazEbO5XoLcGE7WqeOjBJ5r6 SCR6cg8LmD0e6Igh0QOyLX2rr8wMjo1LJMLYBN+VeOgktOyJL2I11XvWNmddsMs9 5UoscLS2RndlQbbU//y1AlafGIimB96UWj0JrMKH7ih3zvNdaXyIvZ58dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUf9VoNxf+fPI//SajOELpxOzpiMB8GA1UdIwQY MBaAFFRG3wf/PLJt/PTuuHYfsBbK9/nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDct NTY1NjBiMjZhMGRiLzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDctNTY1NjBiMjZhMGRi LzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuWQsL4X zN7bQDvdHc+FTlvCAgNOJYGigR6y785j2uuP9h5Hbp+k/zICJs3Cy6RatowrXdIE QoRXawRf8ty0Bd1BPBJQNixR6Cv9ckcphyy5PD+S/8w6kqjy8iQ1gsgEZcNCjGIT 85heJTJ0kk/nM9qP66GAP7wEOWkBlVs/gDODkXliZ029I0DUr9FRf+oTlqcGiiHj kaDwGRi/1HOBsvkISmEGXVVDzIneqQtFo5Krr3Wm0ahWXr9IQJoZp22zn9l9iuMa 2iLME6RWJB4n5pfBGw374cgQTKDJeUOKlbpGNPIhwbFz/WV4UBwu1Y9gKPJrw2Fb zstRgzGsbSiymg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:07 2025 by rpki-client