This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json) Hash identifier: iZlvVvG1OibOlzJj8VONHvpoMIGgbKByUFBn94hwr+c= Subject key identifier: 9F:16:74:72:8D:30:DC:54:2C:A2:FA:FF:09:C1:E9:15:2A:E8:3B:FE Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Certificate serial: 019AF1645FDCA1D2EC29697AED4B2ED3B755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft Manifest number: 12FB Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=) 2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: fa6zUO1o7X+hPF3HCZzILezz5d8BrByrgn+Zy1f+J7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5f:dc:a1:d2:ec:29:69:7a:ed:4b:2e:d3:b7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=9f1674728d30dc542ca2faff09c1e9152ae83bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:b3:24:d2:91:65:a7:ba:f1:a2:48:bf:f1: d7:a5:c2:fa:84:f1:b2:ae:61:12:e1:7f:37:1f:28: 67:59:f3:e6:af:30:b0:ac:70:7e:88:7c:80:b5:ba: 7a:67:ad:f9:b4:6e:5d:ee:6f:ef:5b:b9:d3:ad:df: 92:43:4b:6c:bf:4d:72:33:45:db:5b:83:cd:f2:dc: c0:62:4f:ce:ed:8b:87:ff:eb:7b:bc:1e:38:1e:56: 67:bc:97:ae:c9:23:60:4f:a7:2a:eb:fb:07:7e:ee: 88:b8:93:28:8c:ea:12:9c:b4:98:a7:89:b9:12:c1: b1:b4:59:86:14:11:0c:d7:27:70:10:3d:ba:d8:a7: 4b:8f:2f:59:d9:9a:bd:86:38:39:aa:64:92:e5:4c: f4:d9:30:19:df:36:a2:22:bc:34:f9:77:ce:1a:6c: 0a:95:30:14:85:3e:95:c5:c7:a0:9e:39:32:a8:66: 24:36:d5:a6:27:9e:5a:cf:9b:fd:5e:4c:7e:a9:28: 6e:d2:9d:10:74:f5:42:f7:8b:ff:d8:04:2c:03:8b: a8:7f:b9:40:2b:8d:da:ae:7f:87:6a:85:dc:5c:16: 06:6b:fd:41:60:10:ce:7f:44:d9:92:07:b3:eb:b8: 71:2b:90:86:10:49:72:64:11:55:5d:98:c7:dd:62: 52:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:16:74:72:8D:30:DC:54:2C:A2:FA:FF:09:C1:E9:15:2A:E8:3B:FE X509v3 Authority Key Identifier: keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e3:e2:76:4f:50:64:84:54:01:8c:6c:d5:31:39:d7:79:c6: 9f:5e:58:79:42:ad:ce:65:ed:3a:44:ff:ed:29:96:97:88:97: 95:c0:05:b7:d5:a6:88:d2:06:c2:09:25:5f:a2:6c:b8:e5:c9: 67:89:9e:7d:4a:e3:56:a1:fc:4b:9c:cd:78:a8:eb:4f:c2:9b: a7:97:9e:c3:9c:f2:19:47:68:54:0d:5b:8a:b9:1e:e2:6e:1d: a2:ea:67:7f:66:37:96:b2:4a:1a:25:50:e8:af:02:f4:25:18: 47:c7:f2:27:a0:8b:b2:fd:cf:03:f2:c9:e7:87:ac:0b:dd:32: 6f:10:da:82:45:a2:8f:fb:4a:f0:3b:46:68:8d:a4:69:f0:c2: 94:4b:31:40:d7:ed:85:9c:27:5c:c6:65:df:b4:7e:b8:7b:7e: ed:1b:17:44:04:5a:0d:10:81:2c:0b:53:dc:be:0b:09:74:d0: bb:03:86:d0:70:18:97:50:9f:9c:06:16:71:42:b7:da:a7:83: 2d:9f:2d:65:c5:d4:7e:2d:a1:d8:2c:bc:a6:3d:96:55:ed:1b: 0d:c8:c7:a0:8b:9a:1a:dd:ec:f6:f2:b1:3b:ab:aa:47:f2:bd: c6:a3:d1:c1:bc:a4:46:24:6d:ee:54:8e:d3:39:3b:d0:74:d3: 15:34:de:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZF/codLsKWl67Usu07dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm Y2IzYTYwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD Eyg5ZjE2NzQ3MjhkMzBkYzU0MmNhMmZhZmYwOWMxZTkxNTJhZTgzYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iuzJNKRZae68aJIv/HXpcL6hPGy rmES4X83HyhnWfPmrzCwrHB+iHyAtbp6Z635tG5d7m/vW7nTrd+SQ0tsv01yM0Xb W4PN8tzAYk/O7YuH/+t7vB44HlZnvJeuySNgT6cq6/sHfu6IuJMojOoSnLSYp4m5 EsGxtFmGFBEM1ydwED262KdLjy9Z2Zq9hjg5qmSS5Uz02TAZ3zaiIrw0+XfOGmwK lTAUhT6VxcegnjkyqGYkNtWmJ55az5v9Xkx+qShu0p0QdPVC94v/2AQsA4uof7lA K43arn+HaoXcXBYGa/1BYBDOf0TZkgez67hxK5CGEElyZBFVXZjH3WJSFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8WdHKNMNxULKL6/wnB6RUq6Dv+MB8GA1UdIwQY MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuPidk9Q ZIRUAYxs1TE513nGn15YeUKtzmXtOkT/7SmWl4iXlcAFt9WmiNIGwgklX6JsuOXJ Z4mefUrjVqH8S5zNeKjrT8Kbp5eew5zyGUdoVA1birke4m4doupnf2Y3lrJKGiVQ 6K8C9CUYR8fyJ6CLsv3PA/LJ54esC90ybxDagkWij/tK8DtGaI2kafDClEsxQNft hZwnXMZl37R+uHt+7RsXRARaDRCBLAtT3L4LCXTQuwOG0HAYl1CfnAYWcUK32qeD LZ8tZcXUfi2h2Cy8pj2WVe0bDcjHoIuaGt3s9vKxO6uqR/K9xqPRwbykRiRt7lSO 0zk70HTTFTTeKw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:58 2025 by rpki-client