This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json) Hash identifier: +vS025hxMEab8PhSTjrregZXmDInTI49aRK1zY3K/CI= Subject key identifier: 69:31:77:A0:0A:AB:21:92:0A:70:E9:C9:33:55:BC:3E:69:EE:BA:15 Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3 Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3 Certificate serial: 019AF42E0B426E9BD5747BC68624F04F1206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 15:00:49 +0000 Manifest this update: Sat 06 Dec 2025 15:00:49 +0000 Manifest next update: Sun 07 Dec 2025 15:00:49 +0000 Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=) 2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: jrU3CfUUzHJS6pi+mf4EfPHExyRLdNmntWyFFN/sxSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:0b:42:6e:9b:d5:74:7b:c6:86:24:f0:4f:12:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3 Validity Not Before: Dec 6 15:00:49 2025 GMT Not After : Dec 7 15:00:49 2025 GMT Subject: CN=693177a00aab21920a70e9c93355bc3e69eeba15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:0d:9c:36:4d:07:7e:43:36:67:d1:72:24: 92:3b:91:15:22:0c:ba:59:17:f4:87:72:94:41:fc: a9:f3:0c:55:be:81:fc:6b:15:b4:e7:dc:6b:3a:21: 90:f0:90:fc:cb:14:ff:38:04:ed:e1:bd:ac:4e:42: e0:be:5d:75:3f:11:a8:d7:33:c0:77:59:fc:4b:84: 0c:48:1c:3a:12:bf:9d:5a:b9:d2:65:20:22:1c:a1: d9:dd:a8:74:3c:f1:0d:a2:a2:c2:df:a7:29:35:88: dd:5a:5b:48:f8:b8:86:35:b9:95:4c:96:c7:a6:14: 49:05:62:94:15:19:d1:8a:aa:54:2b:a3:41:bc:91: 54:b2:c7:21:91:43:cc:53:8c:27:c5:72:11:20:f8: 5b:f9:71:16:eb:25:32:ed:12:b0:b6:de:50:f3:69: c8:1e:8d:0d:8b:c8:0d:56:d6:af:04:de:92:cb:b9: 4c:24:47:b6:f6:06:b7:7a:4a:73:4d:04:9c:2c:92: 3b:7d:61:35:a9:e7:77:65:c2:66:c6:3a:15:d1:96: 5a:1b:8e:cd:8f:e0:fb:37:cf:78:36:e5:17:56:86: 53:27:32:e0:d1:de:45:ff:3d:fa:95:cf:33:cd:5c: d7:d3:ca:a4:33:7e:7e:52:5e:80:71:ee:6e:a8:3b: c3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:77:A0:0A:AB:21:92:0A:70:E9:C9:33:55:BC:3E:69:EE:BA:15 X509v3 Authority Key Identifier: keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ec:7c:25:af:ad:37:08:d1:a8:e6:63:47:e6:69:6c:95:aa: 60:26:58:57:f8:ca:8b:8b:c2:7c:b1:a9:8f:76:06:69:a8:c4: 3a:93:ed:51:6a:0c:90:68:f8:9d:e4:2f:18:47:87:11:cf:6c: 06:04:8c:a0:42:07:ba:d1:d2:5d:e1:31:f8:a7:b2:dd:53:47: 58:66:94:3b:4e:94:3b:0c:a6:1b:08:78:87:6c:94:6f:97:78: 19:a9:77:da:70:f7:f8:39:95:7f:b3:7c:9b:1f:72:53:c1:d0: 29:32:71:2f:47:f0:c1:a0:22:2d:8b:49:5e:bf:2c:84:44:a5: f5:db:66:bb:ea:d7:61:0b:7c:cb:45:8a:d3:6a:dc:7a:8d:fc: 76:cb:35:65:b6:21:fa:0c:b1:f3:26:c5:aa:9b:41:19:e4:a9: 0a:7f:68:6d:b3:c4:8e:99:03:2e:64:b2:ca:a4:a2:73:0f:b6: 8b:47:b1:c4:d2:2a:26:c3:04:f5:b6:4b:bd:65:b5:83:af:e0: b8:13:c8:c3:c7:8f:b6:02:36:dc:dd:4e:a7:55:f7:ed:ec:f5: fe:84:6e:bf:4c:b5:a6:bf:4c:28:27:c8:3a:ba:44:18:32:60: f7:02:74:39:c8:bb:4d:3d:d3:51:be:c9:43:60:1c:f7:a4:48: df:24:9b:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgtCbpvVdHvGhiTwTxIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDA2YWZkMjZkMjUyMjM0MjdhN2EwZDVmOWUzMTU5MDYz ZmJjYTMwHhcNMjUxMjA2MTUwMDQ5WhcNMjUxMjA3MTUwMDQ5WjAzMTEwLwYDVQQD Eyg2OTMxNzdhMDBhYWIyMTkyMGE3MGU5YzkzMzU1YmMzZTY5ZWViYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p8NnDZNB35DNmfRciSSO5EVIgy6 WRf0h3KUQfyp8wxVvoH8axW059xrOiGQ8JD8yxT/OATt4b2sTkLgvl11PxGo1zPA d1n8S4QMSBw6Er+dWrnSZSAiHKHZ3ah0PPENoqLC36cpNYjdWltI+LiGNbmVTJbH phRJBWKUFRnRiqpUK6NBvJFUsschkUPMU4wnxXIRIPhb+XEW6yUy7RKwtt5Q82nI Ho0Ni8gNVtavBN6Sy7lMJEe29ga3ekpzTQScLJI7fWE1qed3ZcJmxjoV0ZZaG47N j+D7N894NuUXVoZTJzLg0d5F/z36lc8zzVzX08qkM35+Ul6Ace5uqDvDmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkxd6AKqyGSCnDpyTNVvD5p7roVMB8GA1UdIwQY MBaAFFXQav0m0lIjQnp6DV+eMVkGP7yjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNWU5OTQtMzE4ZC00YTU0LWI2Mjkt MTczZjAwOTZiZDg1LzEvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wNWU5OTQtMzE4ZC00YTU0LWI2MjktMTczZjAwOTZiZDg1 LzEvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATex8Ja+t NwjRqOZjR+ZpbJWqYCZYV/jKi4vCfLGpj3YGaajEOpPtUWoMkGj4neQvGEeHEc9s BgSMoEIHutHSXeEx+Key3VNHWGaUO06UOwymGwh4h2yUb5d4Gal32nD3+DmVf7N8 mx9yU8HQKTJxL0fwwaAiLYtJXr8shESl9dtmu+rXYQt8y0WK02rceo38dss1ZbYh +gyx8ybFqptBGeSpCn9obbPEjpkDLmSyyqSicw+2i0exxNIqJsME9bZLvWW1g6/g uBPIw8ePtgI23N1Op1X37ez1/oRuv0y1pr9MKCfIOrpEGDJg9wJ0Oci7TT3TUb7J Q2Ac96RI3ySbVA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:42 2025 by rpki-client