This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft File: VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json) Hash identifier: KFi4j0Q7kUtUUOlzHhKtcLgadx5iqG4ZziNkldkdnHQ= Subject key identifier: 4B:D5:A5:17:0F:06:D0:7F:3C:09:3F:A4:14:45:39:66:C0:C0:BD:BF Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3 Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3 Certificate serial: 019AF164682296195FE82097178C746ACC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft Manifest number: E8 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: 7KtA9E/r9YEU7R0T7wz7aYXuUA6Dpo7F5+YnrE66GjM=) 2: c5KTqi8Nppw4iBusDEEIOmLUG-E.roa (hash: P9QcxEVErHbCPZK93Fj+ercSMy5NY3qU2Mt1bLXX3+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:68:22:96:19:5f:e8:20:97:17:8c:74:6a:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3 Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=4bd5a5170f06d07f3c093fa414453966c0c0bdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:f3:05:23:ea:ca:82:25:e7:36:28:e7:0d: 86:e0:dc:db:1a:5b:f8:76:77:63:6a:01:6e:6f:3b: d6:31:fc:6c:6a:d6:7d:90:4a:fa:4a:a9:49:80:c4: b3:a8:ca:93:b8:42:68:7c:da:fe:fa:1a:37:12:0f: 88:78:d8:8f:40:9f:72:e5:fc:d0:f9:a5:78:bf:07: a8:46:d9:03:5c:b4:38:9e:c1:4a:58:a7:1b:30:1a: 9e:27:62:6a:c7:8f:77:38:e9:76:a7:98:6b:e3:19: 4d:86:33:51:b7:1c:ff:5e:62:ab:1b:96:b8:bb:01: a1:9d:37:b2:04:99:e0:79:a4:c6:6a:1e:17:3d:05: 32:c4:d2:dc:bf:4b:99:86:37:90:d9:57:30:60:d8: a6:24:c0:be:89:d1:f1:e9:a7:c1:d9:79:8e:5c:cf: 60:0d:25:d2:40:78:ca:2a:d4:92:ac:9c:c7:cb:8c: a2:4c:24:6d:60:5c:9a:44:80:09:56:a2:05:46:fb: 3c:68:99:6d:6b:b7:31:fc:a2:67:b1:ed:79:80:78: 45:50:ba:e2:5b:56:c1:eb:67:ce:b0:1c:b5:0b:8e: 66:0e:3a:db:3e:fa:c7:71:17:cf:a8:82:41:12:95: 4d:35:7d:b0:79:57:03:9d:ea:d1:e5:84:e7:49:11: cd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D5:A5:17:0F:06:D0:7F:3C:09:3F:A4:14:45:39:66:C0:C0:BD:BF X509v3 Authority Key Identifier: keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:60:45:69:8b:7f:48:d1:f7:a9:eb:e8:35:eb:cb:14:81: 5f:35:0b:a6:b6:ac:96:a3:d1:38:73:93:69:da:8b:6b:51:48: 1d:5b:1f:a6:e3:46:29:be:bd:f3:bc:0e:b4:8b:7f:35:ca:63: 65:f4:ee:c0:ee:1f:2f:71:31:01:b8:d1:1d:14:84:2e:71:11: f5:c5:af:37:ed:00:93:4b:26:9d:cc:a8:e5:5b:6f:b2:41:b4: 5e:38:9d:b3:d5:b1:eb:4a:36:14:df:d6:ec:87:1b:55:c7:d8: 29:dd:73:58:87:f0:c8:7d:3d:f9:ff:c5:c0:67:a2:52:f6:87: 63:d8:ae:71:ee:1a:e4:ff:58:19:ea:8b:a8:b1:24:d3:83:4c: 91:d8:cd:27:e9:ff:71:da:7c:63:e3:f9:ea:6d:d0:2a:ae:5d: 4b:bf:ee:4e:5c:75:0a:af:0b:33:f8:d6:a6:5c:7b:da:bf:21: b9:08:07:1c:51:ed:4f:e8:26:86:84:79:c2:ad:6e:9b:5f:0f: 71:1c:4c:2d:d0:b7:e2:b4:b6:b0:cf:cd:f0:d0:2b:66:4e:f1: 85:3d:3e:fc:b6:40:cd:0f:5b:49:b4:c1:33:46:6f:7d:50:d0: fd:91:98:d4:c4:b6:5f:ba:bb:1f:c0:cb:76:73:1b:91:25:66: 89:03:5d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGgilhlf6CCXF4x0asxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTM3YzMyMjQ5MTA3ZjI2YjE3NDE0NTFjZjEwMDM5Mzgw YjhiYzMwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD Eyg0YmQ1YTUxNzBmMDZkMDdmM2MwOTNmYTQxNDQ1Mzk2NmMwYzBiZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHjzBSPqyoIl5zYo5w2G4NzbGlv4 dndjagFubzvWMfxsatZ9kEr6SqlJgMSzqMqTuEJofNr++ho3Eg+IeNiPQJ9y5fzQ +aV4vweoRtkDXLQ4nsFKWKcbMBqeJ2Jqx493OOl2p5hr4xlNhjNRtxz/XmKrG5a4 uwGhnTeyBJngeaTGah4XPQUyxNLcv0uZhjeQ2VcwYNimJMC+idHx6afB2XmOXM9g DSXSQHjKKtSSrJzHy4yiTCRtYFyaRIAJVqIFRvs8aJlta7cx/KJnse15gHhFULri W1bB62fOsBy1C45mDjrbPvrHcRfPqIJBEpVNNX2weVcDnerR5YTnSRHNFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvVpRcPBtB/PAk/pBRFOWbAwL2/MB8GA1UdIwQY MBaAFFQTfDIkkQfyaxdBRRzxADk4C4vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQt YzhlMTU1NDBjODA2LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQtYzhlMTU1NDBjODA2 LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMhgRWmL f0jR96nr6DXryxSBXzULpraslqPROHOTadqLa1FIHVsfpuNGKb6987wOtIt/Ncpj ZfTuwO4fL3ExAbjRHRSELnER9cWvN+0Ak0smncyo5VtvskG0Xjids9Wx60o2FN/W 7IcbVcfYKd1zWIfwyH09+f/FwGeiUvaHY9iuce4a5P9YGeqLqLEk04NMkdjNJ+n/ cdp8Y+P56m3QKq5dS7/uTlx1Cq8LM/jWplx72r8huQgHHFHtT+gmhoR5wq1um18P cRxMLdC34rS2sM/N8NArZk7xhT0+/LZAzQ9bSbTBM0ZvfVDQ/ZGY1MS2X7q7H8DL dnMbkSVmiQNdpg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:38 2025 by rpki-client