This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json) Hash identifier: yYfK/Dd3D3TA47P7sIcxA2AvZovNpvdqQlCQmI8MCr0= Subject key identifier: AE:72:02:30:4D:3F:C6:22:73:BE:7E:D6:DC:B5:B3:7C:33:F7:6F:F4 Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3 Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3 Certificate serial: 019AF19AD9554BED56F8EE17C1547DB74BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft Manifest number: 0CF6 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: FzgbyIV03XjV0smx+ZbygjHAziFVXo31cHyTvyn+usg=) 2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d9:55:4b:ed:56:f8:ee:17:c1:54:7d:b7:4b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3 Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=ae7202304d3fc62273be7ed6dcb5b37c33f76ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:71:52:aa:11:be:cc:f7:44:7c:e3:06:b1:0c: 93:c8:c8:4c:ac:8d:24:21:d6:af:42:67:01:c7:c3: 92:97:35:10:42:8d:52:b4:fc:9b:f8:ad:5d:e2:89: ef:11:17:92:27:73:f0:00:dc:24:d2:be:ec:d2:a1: 15:05:55:95:2b:43:f1:7f:fb:1a:ef:da:ff:a2:ce: 78:2b:ee:39:08:a8:cb:c1:0c:d5:08:7e:18:b5:81: 4a:02:65:97:05:18:eb:4d:38:08:67:6d:82:a6:03: a6:f9:3d:05:d4:f1:52:2b:07:6f:e3:32:0a:cc:42: 27:a8:d8:74:74:5a:e8:b0:7a:f3:5a:28:ff:bb:23: b3:29:eb:89:c6:0a:99:80:31:99:19:10:e5:4e:a8: 13:6e:94:19:e3:ae:29:e5:e2:88:80:91:94:3d:d5: a1:30:9e:fd:01:71:02:46:ed:20:63:33:e0:e0:e1: c4:be:7f:b0:a5:83:79:78:c8:68:0b:46:c9:b7:11: f4:04:77:68:d2:73:01:6f:cc:40:9d:ea:81:d5:d2: 41:73:d8:6f:4b:2b:d3:f0:e3:21:7c:ce:57:c4:71: 43:da:b2:af:08:ac:1c:84:24:8c:0b:f3:b2:bb:91: 36:a2:d2:92:53:ef:28:10:13:fe:3d:82:50:a7:5b: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:72:02:30:4D:3F:C6:22:73:BE:7E:D6:DC:B5:B3:7C:33:F7:6F:F4 X509v3 Authority Key Identifier: keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8c:f8:32:29:5f:7a:54:a8:0f:99:f3:53:74:20:40:97:05: 30:7b:92:2d:bd:7e:2f:e9:e1:36:5a:29:a4:8b:30:6e:2b:a8: e1:2a:63:9e:91:81:18:3e:c1:74:34:6e:dc:f4:69:89:81:e0: e1:b8:e0:ae:94:03:34:19:a0:6f:fb:39:ee:8e:2f:cf:df:14: 0f:fa:cb:f1:b3:ac:06:21:ea:a9:80:86:b3:38:3f:7d:05:82: c7:a8:d6:64:c8:13:eb:10:49:e2:80:0f:db:1a:e2:c9:83:9b: d4:47:12:2b:ce:fc:61:8b:d4:92:90:f5:84:65:79:42:77:61: 1a:14:d3:7d:93:8e:d0:18:62:56:4d:74:06:77:a2:2f:97:e0: 5f:33:03:dc:dc:c7:58:0d:28:6d:60:36:66:a3:fd:ec:a0:a8: 75:d5:0e:7c:62:d4:2a:ed:00:eb:1b:e0:3c:37:fd:f8:8c:5a: c8:f0:f9:c7:d0:bf:06:f2:25:eb:46:cf:7b:15:6f:8f:db:45: 19:d8:e1:68:6b:ba:b1:48:02:6a:f4:c4:9b:8f:0c:d1:83:c1: 5b:05:9e:1a:18:bd:88:64:ef:43:99:e2:7d:b3:6c:e4:4b:ae: 1c:ca:ca:76:f7:ee:36:66:5c:84:d6:3d:9d:24:85:a3:17:1a: 12:35:1f:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtlVS+1W+O4XwVR9t0vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjU1MDU1MGQ1NjQxODBiMWRmN2RlYjViNThkM2E2YjEx MmU3ZTMwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD EyhhZTcyMDIzMDRkM2ZjNjIyNzNiZTdlZDZkY2I1YjM3YzMzZjc2ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHFSqhG+zPdEfOMGsQyTyMhMrI0k IdavQmcBx8OSlzUQQo1StPyb+K1d4onvEReSJ3PwANwk0r7s0qEVBVWVK0Pxf/sa 79r/os54K+45CKjLwQzVCH4YtYFKAmWXBRjrTTgIZ22CpgOm+T0F1PFSKwdv4zIK zEInqNh0dFrosHrzWij/uyOzKeuJxgqZgDGZGRDlTqgTbpQZ464p5eKIgJGUPdWh MJ79AXECRu0gYzPg4OHEvn+wpYN5eMhoC0bJtxH0BHdo0nMBb8xAneqB1dJBc9hv SyvT8OMhfM5XxHFD2rKvCKwchCSMC/Oyu5E2otKSU+8oEBP+PYJQp1umHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5yAjBNP8Yic75+1ty1s3wz92/0MB8GA1UdIwQY MBaAFFa1UFUNVkGAsd9961tY06axEufjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iZWFkN2YtNDgwZC00ODQxLWI3N2Qt ZjBlYjEzMTBlN2E3LzEvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iZWFkN2YtNDgwZC00ODQxLWI3N2QtZjBlYjEzMTBlN2E3 LzEvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIz4Milf elSoD5nzU3QgQJcFMHuSLb1+L+nhNloppIswbiuo4SpjnpGBGD7BdDRu3PRpiYHg 4bjgrpQDNBmgb/s57o4vz98UD/rL8bOsBiHqqYCGszg/fQWCx6jWZMgT6xBJ4oAP 2xriyYOb1EcSK878YYvUkpD1hGV5QndhGhTTfZOO0BhiVk10BneiL5fgXzMD3NzH WA0obWA2ZqP97KCoddUOfGLUKu0A6xvgPDf9+IxayPD5x9C/BvIl60bPexVvj9tF GdjhaGu6sUgCavTEm48M0YPBWwWeGhi9iGTvQ5nifbNs5EuuHMrKdvfuNmZchNY9 nSSFoxcaEjUfGg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:27:27 2025 by rpki-client