This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft File: VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json) Hash identifier: Zv3xjO5TXGD1KCAl6SfPKNYF60mdrnqZkf0x3KEwmsk= Subject key identifier: 92:DA:B2:3B:DD:B5:06:B1:33:0E:39:31:90:1D:E2:04:F9:7C:0A:3A Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86 Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86 Certificate serial: 019AF49C4C6B02C80FA27BD39C55486900D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft Manifest number: 08EA Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: UHSfE4hftpLBA2hYwDfKbMh6wvRjttDr9qGspI/mp64=) 2: h9iKJvVZnfW0FXjotXiiLLyPbso.roa (hash: w8EgDiQ9haRr92gwy4BUjwQFbUX6Z1nbUCBqudVVAGE=) 3: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (hash: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4c:6b:02:c8:0f:a2:7b:d3:9c:55:48:69:00:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86 Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=92dab23bddb506b1330e3931901de204f97c0a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:26:8d:80:b8:64:1d:49:0d:02:cb:50:0d: 97:9a:9f:93:a2:ad:f0:bf:bc:e2:34:7b:ad:28:d1: f5:0a:be:b7:bd:8e:3a:40:51:13:cf:7c:07:09:6c: 46:7e:c7:b1:aa:0b:f1:ce:59:96:af:79:34:a3:22: 3e:8c:a5:a7:e6:3c:11:fc:10:c9:81:cd:c8:f2:80: 21:78:ce:3a:22:4d:de:89:b8:f1:2b:70:cb:2d:91: 39:05:0e:28:35:9b:3b:c7:53:d9:19:0f:40:1a:21: 0e:50:03:e2:bb:b2:c5:13:ac:e6:fa:ba:9a:a4:1b: 61:4a:4a:66:d1:9e:a2:3d:be:b0:b5:2d:dd:f3:01: e4:df:93:75:69:08:48:be:7b:2c:5c:c4:16:e2:23: d8:51:1d:a1:92:c8:bf:93:0e:74:fd:cc:6b:4d:0f: ac:70:f6:70:a5:24:60:16:14:f4:7d:00:01:d4:0d: 3f:d0:ef:9f:63:bc:57:62:8c:f9:ad:3e:6d:29:f9: ce:88:ce:42:4d:03:2e:c0:d8:17:73:6a:ae:a7:53: 39:95:c4:a6:36:0b:c9:49:fb:82:bf:48:0e:21:5f: e4:66:09:49:8b:07:a1:d3:a5:23:38:58:1f:09:54: b2:2e:83:1f:53:62:b6:54:3f:8e:24:dc:c4:2f:71: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DA:B2:3B:DD:B5:06:B1:33:0E:39:31:90:1D:E2:04:F9:7C:0A:3A X509v3 Authority Key Identifier: keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b2:25:7b:1d:e5:74:4f:d4:74:52:09:e8:71:cf:95:86:70: 4a:d4:71:71:5e:5a:4b:62:d3:9e:aa:53:cd:b9:64:67:f6:47: 8d:4a:c0:fb:db:f4:5f:21:a9:b7:5a:9e:e3:6f:32:b6:e8:16: 08:5c:29:62:ee:8b:0b:45:df:2b:51:11:e2:3d:62:e1:a2:26: 94:b6:c8:3e:fc:fb:e6:94:7f:28:be:2d:3c:01:4e:18:5a:eb: 7a:fa:a0:5e:45:2f:09:01:b2:10:8a:cf:32:d9:d5:46:0a:84: 65:45:6d:a3:aa:62:99:16:a8:66:aa:b0:a2:6c:19:17:dc:09: 66:ea:a8:e2:5d:48:fa:f7:e1:ef:65:dd:6f:0f:21:9c:c8:62: dd:5f:4e:2f:ca:a1:ed:43:90:58:cf:c3:eb:9f:ee:e4:26:4f: a1:46:93:2e:62:f2:d2:15:d0:d4:e2:f5:d2:9d:d6:0f:28:92: 8d:31:b0:e4:98:10:3f:5b:98:bf:c5:dd:24:36:d2:ae:23:ed: e3:d2:67:49:3f:f5:41:19:8f:f2:36:bd:05:62:47:51:3a:0f: 12:bd:fa:66:8e:35:b0:fc:17:60:03:4f:83:d9:11:c2:ab:97: 74:4f:41:af:a7:17:c1:d7:05:52:d8:37:97:ae:60:5f:a1:25: d4:aa:d2:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nExrAsgPonvTnFVIaQDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZjdjYWJhOWJkNWY5ZmFjMWUwMTQ1YTc1NjdjOWI0NTlh OTVlODYwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD Eyg5MmRhYjIzYmRkYjUwNmIxMzMwZTM5MzE5MDFkZTIwNGY5N2MwYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu40mjYC4ZB1JDQLLUA2Xmp+Toq3w v7ziNHutKNH1Cr63vY46QFETz3wHCWxGfsexqgvxzlmWr3k0oyI+jKWn5jwR/BDJ gc3I8oAheM46Ik3eibjxK3DLLZE5BQ4oNZs7x1PZGQ9AGiEOUAPiu7LFE6zm+rqa pBthSkpm0Z6iPb6wtS3d8wHk35N1aQhIvnssXMQW4iPYUR2hksi/kw50/cxrTQ+s cPZwpSRgFhT0fQAB1A0/0O+fY7xXYoz5rT5tKfnOiM5CTQMuwNgXc2qup1M5lcSm NgvJSfuCv0gOIV/kZglJiweh06UjOFgfCVSyLoMfU2K2VD+OJNzEL3F2mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLasjvdtQaxMw45MZAd4gT5fAo6MB8GA1UdIwQY MBaAFFX3yrqb1fn6weAUWnVnybRZqV6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUt ZmMwN2NlNGEzN2U2LzEvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUtZmMwN2NlNGEzN2U2 LzEvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLIlex3l dE/UdFIJ6HHPlYZwStRxcV5aS2LTnqpTzblkZ/ZHjUrA+9v0XyGpt1qe428ytugW CFwpYu6LC0XfK1ER4j1i4aImlLbIPvz75pR/KL4tPAFOGFrrevqgXkUvCQGyEIrP MtnVRgqEZUVto6pimRaoZqqwomwZF9wJZuqo4l1I+vfh72Xdbw8hnMhi3V9OL8qh 7UOQWM/D65/u5CZPoUaTLmLy0hXQ1OL10p3WDyiSjTGw5JgQP1uYv8XdJDbSriPt 49JnST/1QRmP8ja9BWJHUToPEr36Zo41sPwXYANPg9kRwquXdE9Br6cXwdcFUtg3 l65gX6El1KrSYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:11 2025 by rpki-client