This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json) Hash identifier: eb22QSxQr70FIgDAuiTcjJN62jBTSp10sit93Sq70W4= Subject key identifier: B1:24:06:67:67:AF:CA:89:C7:8B:5C:88:37:91:56:05:F0:C8:2A:99 Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Certificate serial: 019AF12CD6A81A20543404E614367FE08444 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft Manifest number: 05A2 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=) 2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: WO+jAdKLMsqxEdsXuINMA8cGQwBH5tqrjai7TeOFyv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d6:a8:1a:20:54:34:04:e6:14:36:7f:e0:84:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=b124066767afca89c78b5c8837915605f0c82a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:80:6e:86:fd:c2:85:fd:ba:f8:de:61:54: 30:88:29:92:36:a6:bb:78:48:41:09:6c:82:e2:94: 1f:b2:46:22:ba:e9:0d:e8:17:de:af:74:93:a8:33: ef:6c:4c:51:69:bd:69:e4:ee:f5:37:50:af:1c:e6: 50:fc:15:48:b5:6b:6c:03:18:4d:01:7f:86:c2:35: f4:9c:7d:c9:d5:44:16:54:bb:55:44:31:39:27:43: d7:5f:b6:75:61:4b:ea:6b:5c:00:37:17:86:f3:95: 20:7e:67:5c:6f:e8:91:08:9b:e9:06:ac:ee:f7:be: 58:85:49:a8:8d:af:48:e8:6b:af:3c:c4:41:a5:fa: 04:29:33:e6:85:c2:d1:d7:49:b7:66:4e:cb:95:f2: 81:f2:3b:b5:4a:c8:7b:30:0b:0f:9d:22:99:40:8a: 5b:9f:b2:2c:e2:a2:80:c6:d6:91:c4:f5:5f:84:da: 9f:ae:00:91:02:f7:7f:41:f7:cc:a9:35:22:8b:94: 83:20:fe:3f:d2:eb:93:99:fb:a7:6b:cb:47:0f:e2: f8:8a:b4:40:f3:78:11:60:2a:59:e9:41:4f:db:85: 57:4b:96:55:72:26:48:ea:90:5a:5f:68:18:bb:d3: 0f:bd:7c:fa:0a:30:1a:c7:ab:a2:cf:8d:70:71:c7: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:06:67:67:AF:CA:89:C7:8B:5C:88:37:91:56:05:F0:C8:2A:99 X509v3 Authority Key Identifier: keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:84:43:a1:9e:28:96:df:36:64:36:54:38:87:27:46:a8:d3: ae:20:bf:98:6d:0b:87:bc:a8:22:37:ea:94:06:d7:a4:b0:d6: 02:e3:d8:f3:5b:86:98:30:40:32:36:9e:46:30:9b:87:30:16: ec:a1:e2:9c:cd:91:d8:db:7b:57:66:53:1b:26:46:ba:b2:75: 3a:82:cf:b9:dc:9a:de:91:d5:23:b6:88:ba:32:41:c4:c7:5e: 52:07:1c:06:29:19:09:f9:f2:82:c4:dd:39:b6:a5:fb:f0:45: 15:3c:a5:c0:da:56:79:c0:a7:79:8b:ff:2d:e3:3f:56:39:63: 5a:d2:c6:7d:78:85:31:5e:88:c1:74:67:98:b6:74:df:57:33: f9:8e:28:8b:d5:43:5c:87:96:7d:ca:fc:17:8c:77:04:32:ee: 2b:e8:d8:78:25:18:da:23:ab:ce:49:e8:51:e5:9d:88:3c:42: b5:0b:d2:9d:7f:e1:60:e1:9c:39:86:df:31:df:83:39:e7:92: 6e:1e:aa:18:c7:1e:fa:46:34:a7:55:e4:4b:22:2a:3e:07:17: 9d:16:a6:8b:5a:96:ad:63:5a:69:d5:6f:97:07:d9:b7:f0:25: ae:56:54:b5:ab:b7:0a:f1:76:09:ef:6d:2d:f8:fb:a2:70:f5: 57:36:96:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNaoGiBUNATmFDZ/4IREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTIxZTViOTJmZGU2NDg4OWY2YWFiMmNjNWNlODZmYzBl NWEwN2UwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EyhiMTI0MDY2NzY3YWZjYTg5Yzc4YjVjODgzNzkxNTYwNWYwYzgyYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI6Abob9woX9uvjeYVQwiCmSNqa7 eEhBCWyC4pQfskYiuukN6Bfer3STqDPvbExRab1p5O71N1CvHOZQ/BVItWtsAxhN AX+GwjX0nH3J1UQWVLtVRDE5J0PXX7Z1YUvqa1wANxeG85Ugfmdcb+iRCJvpBqzu 975YhUmoja9I6GuvPMRBpfoEKTPmhcLR10m3Zk7LlfKB8ju1Ssh7MAsPnSKZQIpb n7Is4qKAxtaRxPVfhNqfrgCRAvd/QffMqTUii5SDIP4/0uuTmfuna8tHD+L4irRA 83gRYCpZ6UFP24VXS5ZVciZI6pBaX2gYu9MPvXz6CjAax6uiz41wccdcvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEkBmdnr8qJx4tciDeRVgXwyCqZMB8GA1UdIwQY MBaAFFUSHluS/eZIifaqssxc6G/A5aB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMt YzNiNjM0NWEwZDA1LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMtYzNiNjM0NWEwZDA1 LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIRDoZ4o lt82ZDZUOIcnRqjTriC/mG0Lh7yoIjfqlAbXpLDWAuPY81uGmDBAMjaeRjCbhzAW 7KHinM2R2Nt7V2ZTGyZGurJ1OoLPudya3pHVI7aIujJBxMdeUgccBikZCfnygsTd Obal+/BFFTylwNpWecCneYv/LeM/VjljWtLGfXiFMV6IwXRnmLZ031cz+Y4oi9VD XIeWfcr8F4x3BDLuK+jYeCUY2iOrzknoUeWdiDxCtQvSnX/hYOGcOYbfMd+DOeeS bh6qGMce+kY0p1XkSyIqPgcXnRami1qWrWNaadVvlwfZt/AlrlZUtau3CvF2Ce9t Lfj7onD1VzaWWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:44:58 2025 by rpki-client