This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json) Hash identifier: oUnaA0c0hBG8+/XHcTYZXpi6Uc0QEfRqgASqRtcRBDk= Subject key identifier: 3B:15:12:5F:F1:C6:25:91:C8:28:3B:E8:BC:A9:39:D3:F3:ED:D8:05 Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Certificate serial: 019B2B53C2E539E1F48B97ACD6A0439054A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft Manifest number: 1319 Signing time: Wed 17 Dec 2025 08:01:08 +0000 Manifest this update: Wed 17 Dec 2025 08:01:08 +0000 Manifest next update: Thu 18 Dec 2025 08:01:08 +0000 Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=) 2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: qmH9k6G5Id7NeCvvsablM6JTtFcYP7eZoqozSNNS3LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:c2:e5:39:e1:f4:8b:97:ac:d6:a0:43:90:54:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Validity Not Before: Dec 17 08:01:08 2025 GMT Not After : Dec 18 08:01:08 2025 GMT Subject: CN=3b15125ff1c62591c8283be8bca939d3f3edd805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:54:d4:f0:15:86:c1:cf:fd:67:6f:a6:bf: 30:a3:58:d4:b9:da:a7:4b:d7:cf:e6:d2:ea:97:28: 2d:22:79:bc:5f:22:bc:53:c5:30:bd:e2:8e:48:89: ce:13:59:17:00:e3:74:dd:3c:8a:19:f5:85:9a:a9: 02:a8:8d:54:ae:03:be:97:bb:4d:5e:39:c9:07:f0: d0:37:ec:ac:40:56:be:09:43:4e:9a:68:3e:31:0c: 4e:60:63:fc:5e:51:b8:5b:31:5f:75:16:12:ce:1e: 64:20:af:ff:6c:06:9f:a1:b6:cb:62:9d:03:41:72: fb:1f:70:e0:bc:09:0b:b8:ff:7a:5c:8e:17:06:8c: 70:64:3b:e6:7e:c0:3c:f7:64:97:12:9b:6a:f8:46: e9:aa:a0:bb:b4:ba:2e:af:11:97:33:f4:3f:e2:f1: 67:ff:49:a8:ff:2d:a3:dc:3a:9b:d1:dc:9f:96:c4: 77:9f:a7:cd:21:44:98:9e:20:16:d3:aa:f1:1b:0a: 82:9f:1d:e6:df:9e:9e:c7:1c:d1:15:e9:d7:70:54: ea:91:da:32:54:1b:94:7b:e6:03:96:dc:a1:39:63: 11:50:0b:81:ac:23:26:9e:72:48:4f:3b:0a:9d:ea: 63:f8:e8:d0:47:ce:b3:f8:bb:bf:f2:ad:7c:74:37: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:15:12:5F:F1:C6:25:91:C8:28:3B:E8:BC:A9:39:D3:F3:ED:D8:05 X509v3 Authority Key Identifier: keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:3d:99:eb:b4:d3:c8:2e:4e:bc:0f:e3:fe:b7:da:19:f4:84: 00:16:a4:bc:db:0f:4c:84:54:eb:b1:04:e8:24:08:84:37:a0: e0:51:4f:55:5b:5e:82:d7:a1:27:9e:46:07:73:83:d2:32:0f: 62:75:73:0d:40:66:bc:12:41:35:f6:f7:ea:f2:e9:93:b4:80: ee:b7:a4:49:1d:9e:7d:62:09:0a:3d:98:e1:9c:2e:a3:98:0d: 30:f6:77:a7:df:b2:08:a5:0c:df:c3:30:f1:b0:c4:24:75:29: 61:be:3e:3e:e8:df:9c:2f:40:8c:7c:7c:49:4c:55:05:96:3d: 15:d4:80:43:fc:e2:22:83:b5:9d:86:02:d0:4e:ee:8f:26:fa: 78:43:55:ca:85:23:50:36:cc:3c:8d:8c:b3:f2:5b:96:e7:39: 10:62:c0:a1:3a:6c:63:4b:60:2d:8d:93:d9:c4:70:ea:2f:ef: af:ac:8e:49:a9:b7:f7:9b:06:22:f0:54:ea:27:01:42:14:0e: 8d:40:77:86:35:17:5a:47:1e:8d:27:96:c2:84:59:38:40:9a: 13:14:1c:92:03:89:e0:58:3e:e9:c8:ed:42:33:51:1a:0a:81: 77:49:6f:fa:50:40:20:01:c7:67:7c:dc:9b:4f:c9:66:47:a8: 7d:ef:f6:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU8LlOeH0i5es1qBDkFSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm Y2IzYTYwHhcNMjUxMjE3MDgwMTA4WhcNMjUxMjE4MDgwMTA4WjAzMTEwLwYDVQQD EygzYjE1MTI1ZmYxYzYyNTkxYzgyODNiZThiY2E5MzlkM2YzZWRkODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv1U1PAVhsHP/Wdvpr8wo1jUudqn S9fP5tLqlygtInm8XyK8U8UwveKOSInOE1kXAON03TyKGfWFmqkCqI1UrgO+l7tN XjnJB/DQN+ysQFa+CUNOmmg+MQxOYGP8XlG4WzFfdRYSzh5kIK//bAafobbLYp0D QXL7H3DgvAkLuP96XI4XBoxwZDvmfsA892SXEptq+EbpqqC7tLourxGXM/Q/4vFn /0mo/y2j3Dqb0dyflsR3n6fNIUSYniAW06rxGwqCnx3m356exxzRFenXcFTqkdoy VBuUe+YDltyhOWMRUAuBrCMmnnJITzsKnepj+OjQR86z+Lu/8q18dDdgOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsVEl/xxiWRyCg76LypOdPz7dgFMB8GA1UdIwQY MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5z2Z67TT yC5OvA/j/rfaGfSEABakvNsPTIRU67EE6CQIhDeg4FFPVVtegtehJ55GB3OD0jIP YnVzDUBmvBJBNfb36vLpk7SA7rekSR2efWIJCj2Y4Zwuo5gNMPZ3p9+yCKUM38Mw 8bDEJHUpYb4+PujfnC9AjHx8SUxVBZY9FdSAQ/ziIoO1nYYC0E7ujyb6eENVyoUj UDbMPI2Ms/Jbluc5EGLAoTpsY0tgLY2T2cRw6i/vr6yOSam395sGIvBU6icBQhQO jUB3hjUXWkcejSeWwoRZOECaExQckgOJ4Fg+6cjtQjNRGgqBd0lv+lBAIAHHZ3zc m0/JZkeofe/2fg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:59 2025 by rpki-client