This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json) Hash identifier: S/njHnzI/RFBYLR4l0qLy62vAXSCH7OtSKuZoyq6k8c= Subject key identifier: 50:EE:EB:3F:B4:0C:40:96:44:8C:BD:AC:98:70:FA:14:8A:9D:2C:78 Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Certificate serial: 019AF2097D18B52705C3A5A1710C90AA33FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft Manifest number: 071F Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: XA8vSvRoAdbE8iHOklWhgspMTG3vCpYKGr7rjyLUiY8=) 2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7d:18:b5:27:05:c3:a5:a1:71:0c:90:aa:33:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=50eeeb3fb40c4096448cbdac9870fa148a9d2c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:1c:67:eb:aa:01:2d:b9:6e:92:7d:9f:41: 73:3f:2b:56:66:33:fa:69:2b:42:c2:d5:34:2a:0f: 2e:39:22:22:72:bd:76:17:3e:83:08:56:01:cc:12: d5:92:2b:a8:32:d4:e0:61:c5:82:4a:94:5a:44:a6: 1e:f8:88:20:8e:b6:23:74:f7:c5:5e:c3:e3:2c:51: 9e:b4:c4:61:ec:98:82:42:d1:32:73:17:57:19:c2: 35:b4:b0:a7:ad:70:89:d6:82:86:66:91:7e:13:92: 34:27:e2:39:fa:78:2a:5c:e6:d4:c8:4c:96:01:2a: 46:5d:16:2f:05:0d:86:ce:c2:4d:02:b3:ec:fb:5a: f7:f7:a8:fd:0f:e4:d7:ca:a5:5b:76:a5:d6:79:a3: d1:38:a3:87:4f:3b:b7:b7:70:2d:e7:fc:cd:86:51: 33:30:87:d3:bd:82:40:da:63:33:53:e6:9c:04:e3: d2:d9:cc:4a:be:55:03:08:d8:96:17:dd:31:69:03: b2:0b:92:a2:8a:35:7a:0f:d6:a3:ea:da:d1:b7:70: 64:c4:70:b0:03:6d:91:8f:03:0d:7a:e4:97:b1:c8: 0b:b8:e7:cd:d4:25:e0:50:1c:3d:7a:3c:ab:b0:3d: f8:fc:b6:c9:46:31:ee:10:9d:30:91:dd:64:b1:ca: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EE:EB:3F:B4:0C:40:96:44:8C:BD:AC:98:70:FA:14:8A:9D:2C:78 X509v3 Authority Key Identifier: keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:88:d8:f7:57:21:1c:d9:34:db:35:61:fe:fe:ef:e7:4e:c0: b6:c4:33:87:bd:1d:80:fe:fa:56:59:7a:c5:0a:2b:41:a3:a7: 76:a5:b3:ce:7b:48:ed:7f:37:70:ef:97:b5:ff:44:f5:8e:94: 4e:14:06:02:12:6d:af:9b:5e:67:23:77:5c:95:6c:44:24:d1: 18:c9:7c:20:82:ad:68:d7:96:27:66:10:f8:a0:38:d4:00:5f: d7:81:d6:25:4b:6b:9e:0e:25:28:ef:f3:6c:09:5f:7e:60:4f: 44:4b:89:94:e8:4d:ed:93:85:95:e8:7f:c4:ea:46:7f:f1:9d: d2:27:1d:ff:bd:36:e0:c2:c6:b6:94:1e:54:85:27:c4:a1:15: bb:19:04:c9:d9:f6:34:2a:6a:9e:61:52:ba:3d:96:39:55:e8: 3e:69:c4:19:3b:f6:f5:ab:72:25:4b:d9:e2:28:54:41:0d:0b: cd:8c:03:d9:52:f8:89:0d:79:c0:d1:9d:1e:7c:04:02:8c:07: 08:ad:55:0a:08:2d:ad:e7:d3:d0:72:56:d6:3a:f9:26:de:77: 35:46:37:8e:97:c2:5c:a4:42:c8:45:c3:84:97:a3:19:bf:3f: fd:6b:4b:c0:31:f5:ae:44:77:48:2e:36:af:f1:70:fc:9a:d5: 86:6a:0c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX0YtScFw6WhcQyQqjP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjIwNTliNzQ4ZDZkZGQ1YzVhMGMxZDM1ZTk3NWVmN2Jh ODg0NDIwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg1MGVlZWIzZmI0MGM0MDk2NDQ4Y2JkYWM5ODcwZmExNDhhOWQyYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzkcZ+uqAS25bpJ9n0FzPytWZjP6 aStCwtU0Kg8uOSIicr12Fz6DCFYBzBLVkiuoMtTgYcWCSpRaRKYe+IggjrYjdPfF XsPjLFGetMRh7JiCQtEycxdXGcI1tLCnrXCJ1oKGZpF+E5I0J+I5+ngqXObUyEyW ASpGXRYvBQ2GzsJNArPs+1r396j9D+TXyqVbdqXWeaPROKOHTzu3t3At5/zNhlEz MIfTvYJA2mMzU+acBOPS2cxKvlUDCNiWF90xaQOyC5KiijV6D9aj6trRt3BkxHCw A22RjwMNeuSXscgLuOfN1CXgUBw9ejyrsD34/LbJRjHuEJ0wkd1kscplqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDu6z+0DECWRIy9rJhw+hSKnSx4MB8GA1UdIwQY MBaAFFWyBZt0jW3dXFoMHTXpde97qIRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTkt MjMwNjRlMjFkMTRkLzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTktMjMwNjRlMjFkMTRk LzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIjY91ch HNk02zVh/v7v507AtsQzh70dgP76Vll6xQorQaOndqWzzntI7X83cO+Xtf9E9Y6U ThQGAhJtr5teZyN3XJVsRCTRGMl8IIKtaNeWJ2YQ+KA41ABf14HWJUtrng4lKO/z bAlffmBPREuJlOhN7ZOFleh/xOpGf/Gd0icd/7024MLGtpQeVIUnxKEVuxkEydn2 NCpqnmFSuj2WOVXoPmnEGTv29atyJUvZ4ihUQQ0LzYwD2VL4iQ15wNGdHnwEAowH CK1VCggtrefT0HJW1jr5Jt53NUY3jpfCXKRCyEXDhJejGb8//WtLwDH1rkR3SC42 r/Fw/JrVhmoMKw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:17 2025 by rpki-client