This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft File: VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json) Hash identifier: eBH9Br4A+gfzkKjleNdzKjGBrfVL8DsG8gxj4S6UEEs= Subject key identifier: B0:9A:7D:03:D8:79:7F:30:86:74:D5:FF:18:F0:A0:80:FA:AD:CF:0D Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A Certificate issuer: /CN=566469ba2ec56af4059f850756208479ce155b7a Certificate serial: 019AF2098B003C730A8B29BBCDA549E12495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft Manifest number: 069A Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: G8/fTKD6tCOsFdxzLazWD8ijS0yLLf9AUjD+gfCul7Q=) 2: kniutbSU_-qRAK95UI_8HV0omH8.roa (hash: O5mP5p6KZHlt5DYxryJnWdH3oyg1kqV5mUt5tDGEri0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8b:00:3c:73:0a:8b:29:bb:cd:a5:49:e1:24:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=b09a7d03d8797f308674d5ff18f0a080faadcf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:b2:8c:ac:2d:ec:14:94:94:58:4d:d4:8e: 7e:1c:c8:62:53:c2:b3:da:20:f8:03:c5:d3:db:7c: 7d:66:41:8a:86:4d:5d:46:b0:79:02:e8:1c:b7:44: e0:b8:63:7b:58:f1:58:8d:ec:a6:a9:99:f6:89:d7: df:58:2b:c0:ac:f7:1f:d9:3f:46:ae:a7:97:8b:3f: ae:62:4c:95:91:50:c0:c9:54:f8:ee:b4:1b:e1:2d: 45:cf:c7:0a:ed:f6:e4:e6:0b:3d:2e:9d:39:b6:1d: e7:70:b1:cb:3f:17:e8:a8:66:de:7b:d3:b7:70:99: 18:f7:c3:8a:6a:bb:1b:13:7c:82:30:ff:0e:5a:e5: 4f:79:da:cf:c2:71:e4:61:da:d7:9f:21:7d:51:ec: 4d:8e:92:53:93:25:63:13:70:0d:6c:14:6d:1b:0d: b6:69:34:08:92:30:cc:95:f8:e9:5e:27:24:df:8c: be:b0:35:a3:ed:36:b5:d4:e6:e8:55:94:80:59:31: 7d:82:0c:c0:8a:89:67:c5:17:d7:bb:45:a6:fb:dc: c1:eb:b1:89:28:00:ef:39:65:9c:13:f1:c0:84:95: 7e:01:cb:0f:17:38:64:85:8d:2e:96:fa:62:35:a7: 9b:22:39:25:89:36:37:41:c6:41:cf:af:0e:49:67: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9A:7D:03:D8:79:7F:30:86:74:D5:FF:18:F0:A0:80:FA:AD:CF:0D X509v3 Authority Key Identifier: keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a3:fa:ab:0e:05:cb:5f:95:b5:71:38:30:68:d4:ac:bf:c2: 93:6f:4f:4c:c0:a4:ea:e0:12:5a:c4:89:f4:9e:bc:89:d8:c2: e4:a0:0f:d6:b0:90:7c:7e:ce:c8:24:d4:0f:80:00:cf:f7:77: c0:f1:91:02:8e:a7:c6:53:6d:af:2b:a5:dc:f0:59:8f:a1:92: 23:74:39:f5:22:aa:5f:03:1c:33:28:a6:82:d0:0c:2b:af:83: d5:8e:5e:18:5c:d6:7e:26:0e:c8:47:01:08:37:93:2d:60:d9: 26:da:98:c7:cd:db:c6:e8:d1:46:0d:5b:fe:11:38:cc:2c:8e: b5:1d:b7:2d:11:e0:21:bc:ff:71:ff:46:82:52:13:53:92:cc: 08:b4:eb:bb:bc:1a:95:0c:79:a9:b4:cf:7b:76:67:41:4e:3a: 84:01:43:09:91:27:8c:33:c9:cb:a3:33:54:90:cd:ac:61:87: 8f:fe:47:fb:c5:85:2f:cf:83:15:85:2f:68:3f:cf:d1:5c:ea: 4c:c8:cb:12:95:7f:93:d2:e6:7c:c5:1c:8c:17:a2:07:c4:6a: d1:e3:6e:87:86:c4:77:99:0a:82:c5:0e:0e:8b:43:ee:da:f0: 3a:c6:cd:ea:c4:88:a7:ef:3d:6f:ee:70:02:4d:96:da:03:43: 2f:80:a9:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYsAPHMKiym7zaVJ4SSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NjQ2OWJhMmVjNTZhZjQwNTlmODUwNzU2MjA4NDc5Y2Ux NTViN2EwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhiMDlhN2QwM2Q4Nzk3ZjMwODY3NGQ1ZmYxOGYwYTA4MGZhYWRjZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuByyjKwt7BSUlFhN1I5+HMhiU8Kz 2iD4A8XT23x9ZkGKhk1dRrB5Augct0TguGN7WPFYjeymqZn2idffWCvArPcf2T9G rqeXiz+uYkyVkVDAyVT47rQb4S1Fz8cK7fbk5gs9Lp05th3ncLHLPxfoqGbee9O3 cJkY98OKarsbE3yCMP8OWuVPedrPwnHkYdrXnyF9UexNjpJTkyVjE3ANbBRtGw22 aTQIkjDMlfjpXick34y+sDWj7Ta11OboVZSAWTF9ggzAiolnxRfXu0Wm+9zB67GJ KADvOWWcE/HAhJV+AcsPFzhkhY0ulvpiNaebIjkliTY3QcZBz68OSWfqMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCafQPYeX8whnTV/xjwoID6rc8NMB8GA1UdIwQY MBaAFFZkabouxWr0BZ+FB1YghHnOFVt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm1ScHVpN0ZhdlFGbjRVSFZpQ0VlYzRWVzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iZTFjOTctNDE4Zi00ZTQ2LWJjMWMt ZWUwM2YzZGU0NGFhLzEvVm1ScHVpN0ZhdlFGbjRVSFZpQ0VlYzRWVzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9iZTFjOTctNDE4Zi00ZTQ2LWJjMWMtZWUwM2YzZGU0NGFh LzEvVm1ScHVpN0ZhdlFGbjRVSFZpQ0VlYzRWVzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaP6qw4F y1+VtXE4MGjUrL/Ck29PTMCk6uASWsSJ9J68idjC5KAP1rCQfH7OyCTUD4AAz/d3 wPGRAo6nxlNtryul3PBZj6GSI3Q59SKqXwMcMyimgtAMK6+D1Y5eGFzWfiYOyEcB CDeTLWDZJtqYx83bxujRRg1b/hE4zCyOtR23LRHgIbz/cf9GglITU5LMCLTru7wa lQx5qbTPe3ZnQU46hAFDCZEnjDPJy6MzVJDNrGGHj/5H+8WFL8+DFYUvaD/P0Vzq TMjLEpV/k9LmfMUcjBeiB8Rq0eNuh4bEd5kKgsUODotD7trwOsbN6sSIp+89b+5w Ak2W2gNDL4CpVw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:26 2025 by rpki-client