This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json) Hash identifier: g5uxGhQgZWjLTUTj1qGaq7aQt4Qb2Tr+eNw4ehdXwbA= Subject key identifier: EA:BB:9F:0C:11:76:53:D3:DB:91:46:43:28:1E:D0:70:18:C2:4E:C9 Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1 Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1 Certificate serial: 019AF50ACBB2BCAADC15E9F6A40E724A954E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft Manifest number: 0686 Signing time: Sat 06 Dec 2025 19:01:56 +0000 Manifest this update: Sat 06 Dec 2025 19:01:56 +0000 Manifest next update: Sun 07 Dec 2025 19:01:56 +0000 Files and hashes: 1: NZvb2qKNw6TNNeDvqlV_-QChDh8.roa (hash: AvipIjBdsS0207+aK/JkUYN7M+6rcBf9DVuXv7pl1K0=) 2: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: H7ZTAtI5QewrOUneeWbY6Jtm5x9Hos5IpC/oGsYUgpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:cb:b2:bc:aa:dc:15:e9:f6:a4:0e:72:4a:95:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1 Validity Not Before: Dec 6 19:01:56 2025 GMT Not After : Dec 7 19:01:56 2025 GMT Subject: CN=eabb9f0c117653d3db914643281ed07018c24ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b7:ce:17:41:ff:e6:16:80:aa:2d:16:db:bc: 65:fc:03:f6:a2:8e:5d:83:a7:c4:8a:b3:00:f0:82: 8c:cf:28:bd:84:07:70:db:3f:27:5d:50:0d:2a:fe: 74:65:ed:7a:6f:c7:5d:63:e3:3d:7e:a2:37:0d:a0: 0e:fe:91:74:68:b8:92:7f:40:b9:cb:e7:bf:0f:c8: d4:ae:0a:30:58:5b:a3:c8:7b:28:a8:64:99:f9:99: a4:cb:73:50:31:dc:25:7e:10:0f:da:55:64:5a:08: 05:bf:80:22:f5:c5:0d:a5:87:a7:11:30:14:3a:81: d0:97:13:90:ac:87:4b:35:f1:17:6f:c1:35:b4:af: 2d:13:69:23:eb:58:83:7f:a6:05:fe:15:b2:15:3d: d8:25:71:45:c3:8d:58:23:8a:22:28:64:d9:d6:04: 6b:bb:ac:f1:65:b5:d5:dd:67:41:dd:7a:90:c5:b1: 24:6a:67:05:47:c2:a6:59:f2:da:3f:46:66:f3:24: 3f:fb:99:a0:ca:9a:64:d0:6e:59:f8:58:53:f0:ed: 4f:0e:41:85:d7:80:0a:dd:c6:2f:41:91:67:fa:62: e2:3e:4d:75:7a:5e:bf:9e:02:28:7d:f1:e3:b5:db: 38:44:14:75:31:b3:06:bf:bd:25:a6:dc:5d:6d:26: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BB:9F:0C:11:76:53:D3:DB:91:46:43:28:1E:D0:70:18:C2:4E:C9 X509v3 Authority Key Identifier: keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b0:74:35:7d:ce:b0:83:e7:6d:f9:90:74:86:fc:2f:56:11: d0:65:2f:f9:1b:98:92:20:be:e9:d8:5c:ab:9f:1f:a2:f7:63: 37:88:49:75:ca:06:16:cd:83:4f:63:d1:4a:f1:f5:80:1d:09: df:73:3c:0a:5a:07:49:c1:0a:8e:eb:e8:33:ff:2e:29:33:2e: 70:73:98:58:1c:04:82:67:4f:de:27:d0:dd:df:18:36:c8:b8: b0:0a:30:1c:a2:f1:be:96:13:27:2a:a8:72:39:9e:f5:fd:f4: 89:bf:e2:f6:9e:f4:7e:35:9b:3d:87:ee:f0:ed:28:b3:d7:5b: b0:3a:91:76:40:5b:3f:f3:99:b5:e4:0c:60:57:b6:ee:7f:38: 86:1a:03:30:43:3c:9c:0c:19:f4:d5:9b:e5:56:bc:a3:b8:53: fc:b2:2a:80:1d:91:63:95:88:44:40:85:a3:c1:24:be:90:71: 10:57:b9:0d:43:bf:1b:81:8b:1d:c8:70:b0:1c:c6:07:d7:3d: 6f:3b:d0:da:85:f6:03:fc:28:31:35:03:e7:0c:47:7d:10:55: 62:97:d6:43:cd:3b:d4:a7:64:70:8e:f9:0e:68:d1:50:81:32: 63:97:2e:d5:14:a9:03:d0:08:26:ce:28:b4:bc:13:41:c5:1f: 8c:11:94:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CsuyvKrcFen2pA5ySpVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YmJkYjJkOTgwYWMwYTgyN2MwY2M2ZWQwZjkwNjc0OWNi MmNlYTEwHhcNMjUxMjA2MTkwMTU2WhcNMjUxMjA3MTkwMTU2WjAzMTEwLwYDVQQD EyhlYWJiOWYwYzExNzY1M2QzZGI5MTQ2NDMyODFlZDA3MDE4YzI0ZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7fOF0H/5haAqi0W27xl/AP2oo5d g6fEirMA8IKMzyi9hAdw2z8nXVANKv50Ze16b8ddY+M9fqI3DaAO/pF0aLiSf0C5 y+e/D8jUrgowWFujyHsoqGSZ+Zmky3NQMdwlfhAP2lVkWggFv4Ai9cUNpYenETAU OoHQlxOQrIdLNfEXb8E1tK8tE2kj61iDf6YF/hWyFT3YJXFFw41YI4oiKGTZ1gRr u6zxZbXV3WdB3XqQxbEkamcFR8KmWfLaP0Zm8yQ/+5mgyppk0G5Z+FhT8O1PDkGF 14AK3cYvQZFn+mLiPk11el6/ngIoffHjtds4RBR1MbMGv70lptxdbSbwOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq7nwwRdlPT25FGQyge0HAYwk7JMB8GA1UdIwQY MBaAFFS72y2YCsCoJ8DMbtD5BnScss6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQt ZjM4NTU5YmU4MGU5LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQtZjM4NTU5YmU4MGU5 LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLB0NX3O sIPnbfmQdIb8L1YR0GUv+RuYkiC+6dhcq58fovdjN4hJdcoGFs2DT2PRSvH1gB0J 33M8CloHScEKjuvoM/8uKTMucHOYWBwEgmdP3ifQ3d8YNsi4sAowHKLxvpYTJyqo cjme9f30ib/i9p70fjWbPYfu8O0os9dbsDqRdkBbP/OZteQMYFe27n84hhoDMEM8 nAwZ9NWb5Va8o7hT/LIqgB2RY5WIRECFo8EkvpBxEFe5DUO/G4GLHchwsBzGB9c9 bzvQ2oX2A/woMTUD5wxHfRBVYpfWQ8071KdkcI75DmjRUIEyY5cu1RSpA9AIJs4o tLwTQcUfjBGUwA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:22 2025 by rpki-client