This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json) Hash identifier: ko3phi79qZ6f9tgdd6aEn74D8pg78eI6ySPLPhbgjyA= Subject key identifier: B2:3D:43:90:96:54:EF:AD:B4:CC:CC:45:F1:D7:A6:6F:41:AA:5D:67 Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98 Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198 Certificate serial: 019AF208FBA548D49E2737700D9591E9F316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft Manifest number: 10E1 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=) 2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: WZLfjnooiHNFVOvlJkwx/8dKo2/KV9KInK2nVgvcWak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fb:a5:48:d4:9e:27:37:70:0d:95:91:e9:f3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=b23d43909654efadb4cccc45f1d7a66f41aa5d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:5a:74:e7:63:a3:be:48:4c:40:0f:07:7c: 89:8b:c3:5e:55:eb:15:a1:4f:c4:ef:87:e9:7b:34: 52:52:47:6e:be:bd:79:8a:29:0c:68:61:34:04:d3: 71:6c:62:29:76:3d:a9:34:74:54:21:c5:fa:54:34: e0:a3:e7:a5:cc:df:1b:49:28:8d:59:d6:79:45:b4: 08:07:cb:4b:b0:16:46:85:c6:96:a1:a3:38:30:f4: 41:40:a3:ff:bd:ac:76:e0:ba:e5:57:f1:4e:f1:3b: 57:5b:13:f6:11:60:62:ba:70:27:36:0e:84:4a:40: ad:04:94:a2:ea:6d:82:c6:02:3f:0f:06:a2:41:b6: c1:df:2f:52:65:42:b5:b2:d2:14:cd:7f:1e:20:73: 46:c5:3b:51:af:0f:fe:bc:b0:9d:03:99:62:37:90: b5:b9:84:7e:d3:82:34:31:99:ce:2b:61:3d:2a:d4: 01:a1:84:d8:db:2a:21:af:18:98:9c:07:cb:8c:9f: b2:74:38:3c:73:0b:52:e2:df:3d:31:2f:a0:36:95: 8d:70:0a:75:af:b9:37:94:fe:dd:f3:d4:cc:b0:d6: e8:8d:25:7a:16:4b:ed:df:19:09:2a:ba:39:64:b1: 44:21:5b:b2:4c:ae:be:07:b0:dd:58:2d:a9:a6:67: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3D:43:90:96:54:EF:AD:B4:CC:CC:45:F1:D7:A6:6F:41:AA:5D:67 X509v3 Authority Key Identifier: keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:03:d8:e7:22:10:a3:63:eb:25:01:f9:bb:4a:b1:6b:03:b5: 41:da:16:e2:53:bb:ee:10:90:e9:86:72:5e:8c:c7:1e:4e:cc: de:61:cb:f1:b1:77:62:77:33:6b:b0:b7:eb:24:f3:4a:1a:a4: c0:ed:ea:5d:8f:10:87:42:ea:eb:08:d5:4a:19:32:de:53:05: ab:8c:30:30:d4:ff:45:52:32:d1:55:98:e8:22:2a:4f:cd:23: 0f:0d:73:e4:1b:dc:bc:4c:0b:78:13:d5:86:46:74:c6:5b:0c: bb:04:28:44:69:48:90:21:7f:9b:0d:8f:7f:cf:de:14:d0:53: 29:63:71:be:8d:c4:a5:4f:3a:10:6a:74:40:9d:8e:e6:ff:59: 99:7a:ac:69:f5:88:4c:b9:f9:5c:20:b9:ee:38:e8:6c:07:49: d3:54:d4:24:3a:37:9f:b5:12:50:4e:67:ac:92:67:06:f7:7b: 60:ae:71:f5:62:fc:0a:9e:12:1a:55:a5:20:63:f6:5f:dd:4e: 51:14:2b:30:47:a9:4c:51:9a:69:09:b5:ff:4f:c5:d0:c4:a8: 14:8f:3d:cc:b3:a2:65:3e:24:33:5b:27:0f:ea:ed:9d:23:b0: 70:cd:5d:8a:78:ad:8a:a3:12:1b:41:60:61:55:3e:2d:75:54: 3a:f6:64:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPulSNSeJzdwDZWR6fMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWZjMzg4NDcwNWM0YWVkY2ZlN2E0ZDE3ZGRiNzUyZTFm ZTYxOTgwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD EyhiMjNkNDM5MDk2NTRlZmFkYjRjY2NjNDVmMWQ3YTY2ZjQxYWE1ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqhadOdjo75ITEAPB3yJi8NeVesV oU/E74fpezRSUkduvr15iikMaGE0BNNxbGIpdj2pNHRUIcX6VDTgo+elzN8bSSiN WdZ5RbQIB8tLsBZGhcaWoaM4MPRBQKP/vax24LrlV/FO8TtXWxP2EWBiunAnNg6E SkCtBJSi6m2CxgI/DwaiQbbB3y9SZUK1stIUzX8eIHNGxTtRrw/+vLCdA5liN5C1 uYR+04I0MZnOK2E9KtQBoYTY2yohrxiYnAfLjJ+ydDg8cwtS4t89MS+gNpWNcAp1 r7k3lP7d89TMsNbojSV6Fkvt3xkJKro5ZLFEIVuyTK6+B7DdWC2ppmcM9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI9Q5CWVO+ttMzMRfHXpm9Bql1nMB8GA1UdIwQY MBaAFL6fw4hHBcSu3P56TRfdt1Lh/mGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYt MTkwNmE0YTFmOTkzLzEvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYtMTkwNmE0YTFmOTkz LzEvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAPY5yIQ o2PrJQH5u0qxawO1QdoW4lO77hCQ6YZyXozHHk7M3mHL8bF3Yncza7C36yTzShqk wO3qXY8Qh0Lq6wjVShky3lMFq4wwMNT/RVIy0VWY6CIqT80jDw1z5BvcvEwLeBPV hkZ0xlsMuwQoRGlIkCF/mw2Pf8/eFNBTKWNxvo3EpU86EGp0QJ2O5v9ZmXqsafWI TLn5XCC57jjobAdJ01TUJDo3n7USUE5nrJJnBvd7YK5x9WL8Cp4SGlWlIGP2X91O URQrMEepTFGaaQm1/0/F0MSoFI89zLOiZT4kM1snD+rtnSOwcM1dinitiqMSG0Fg YVU+LXVUOvZkkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:14 2025 by rpki-client