This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json) Hash identifier: JVX+wbl1zZQTSEiShWEzRbjupKI+5o4KD7IccV3nISQ= Subject key identifier: 37:D5:E2:9E:72:25:09:7E:63:57:D1:93:22:1F:AA:0B:16:86:25:26 Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Certificate serial: 019AF2091C23E5D23B1AA52D5C589FBEE7D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 4DbDI_EnOkcmLXrBG5jeHwTwt2c.roa (hash: mJ/2UVoGEpFQIaST8cEuCkebUiYaaorOEoL9AoSGYIQ=) 2: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=) 3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: ToB9N09simi18aDpAMSQQ0szWI2r/Wq/tcyZ2nK1ZuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1c:23:e5:d2:3b:1a:a5:2d:5c:58:9f:be:e7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=37d5e29e7225097e6357d193221faa0b16862526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:d2:ea:7a:84:b9:c7:5a:13:6a:54:5e:69: 78:f0:a5:c7:77:2a:46:e2:5b:48:3b:96:f0:e5:e5: 87:06:49:61:66:73:3b:39:b2:52:c6:91:78:fe:ee: bc:aa:c1:73:c5:40:16:ec:59:d7:dd:3f:00:61:14: c3:bb:56:6e:e5:b4:8f:4f:5c:18:e2:44:58:0f:fb: f2:a1:93:b3:4f:f8:ad:77:4d:7d:9d:c3:d1:47:d6: e2:99:0e:74:82:14:85:1b:d7:42:48:ea:ce:5a:32: cd:82:26:21:e9:f0:b4:fd:c8:39:da:2c:5b:a1:f5: 56:3a:aa:40:05:ce:06:31:2e:73:7a:8a:c3:2c:5d: c2:9d:43:31:7a:42:a6:ed:4e:9f:e6:e1:e4:4e:ea: 83:16:d2:14:de:f3:1e:8b:db:c0:90:69:c2:8b:b2: 29:2c:cb:0b:97:69:a9:e5:d8:28:c4:bd:64:05:80: 41:66:a9:61:47:34:73:d2:94:41:16:63:ac:17:67: 2c:0b:3f:30:c5:e8:63:0f:09:b2:70:b0:00:e8:03: 4a:72:10:46:09:71:62:6a:29:a8:fc:00:0d:fb:01: 98:05:93:e7:c7:36:31:80:a8:44:6f:a5:ea:b9:cf: 5f:62:c6:a1:ad:25:79:b6:38:78:4f:10:0c:9a:d7: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D5:E2:9E:72:25:09:7E:63:57:D1:93:22:1F:AA:0B:16:86:25:26 X509v3 Authority Key Identifier: keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:97:d7:e9:7b:8a:5d:1a:cf:45:b7:8b:ad:81:aa:ab:65:9a: 68:2d:8e:b6:19:b0:6f:40:0b:37:b0:40:ad:18:86:da:c4:6b: 0f:2a:7a:b5:32:5f:3e:41:16:9a:35:9e:99:38:7f:55:e6:3e: fd:cf:1c:df:28:c0:36:53:c0:22:e6:8c:67:a0:03:54:ac:f9: dc:ef:96:0e:1c:61:b8:d6:3b:46:b3:f2:b3:06:20:a2:28:e7: 1e:f2:47:93:9f:c5:ce:9f:48:d4:71:28:87:5e:bc:29:18:4e: 54:31:d4:50:cb:5a:ab:3f:d5:7c:db:4c:f4:6f:c2:0c:60:a7: e1:7a:70:22:91:40:e6:b2:7e:cc:34:41:28:c5:e3:03:3c:67: 7d:08:69:67:c8:69:d5:7f:e8:98:ea:06:ce:0a:2b:d2:b2:6a: 70:7f:02:6d:3d:4c:69:3f:cc:82:dd:17:e7:ca:dc:cf:bf:13: a9:b2:ae:52:8b:a2:07:12:30:90:78:eb:17:62:dd:63:a1:1d: 5c:20:44:bc:b2:d1:a4:a2:a6:32:e8:dd:00:e8:d7:82:f8:cd: 3f:ed:9b:67:f9:80:03:b8:9e:e4:00:a8:fe:36:c7:40:23:b8: bd:41:30:38:b1:41:df:d0:bb:25:5c:6d:f1:44:61:e5:ea:ac: 00:5a:d2:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRwj5dI7GqUtXFifvufVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDNlNWY4NDA1ZDYwODViOGRmNGJmY2UxZGQ5YmIzZTc4 YzIxOTkwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EygzN2Q1ZTI5ZTcyMjUwOTdlNjM1N2QxOTMyMjFmYWEwYjE2ODYyNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOrS6nqEucdaE2pUXml48KXHdypG 4ltIO5bw5eWHBklhZnM7ObJSxpF4/u68qsFzxUAW7FnX3T8AYRTDu1Zu5bSPT1wY 4kRYD/vyoZOzT/itd019ncPRR9bimQ50ghSFG9dCSOrOWjLNgiYh6fC0/cg52ixb ofVWOqpABc4GMS5zeorDLF3CnUMxekKm7U6f5uHkTuqDFtIU3vMei9vAkGnCi7Ip LMsLl2mp5dgoxL1kBYBBZqlhRzRz0pRBFmOsF2csCz8wxehjDwmycLAA6ANKchBG CXFiaimo/AAN+wGYBZPnxzYxgKhEb6Xquc9fYsahrSV5tjh4TxAMmtfDfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfV4p5yJQl+Y1fRkyIfqgsWhiUmMB8GA1UdIwQY MBaAFFQD5fhAXWCFuN9L/OHdm7PnjCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAt MTVhNDJhYzllZmE4LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAtMTVhNDJhYzllZmE4 LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZfX6XuK XRrPRbeLrYGqq2WaaC2Othmwb0ALN7BArRiG2sRrDyp6tTJfPkEWmjWemTh/VeY+ /c8c3yjANlPAIuaMZ6ADVKz53O+WDhxhuNY7RrPyswYgoijnHvJHk5/Fzp9I1HEo h168KRhOVDHUUMtaqz/VfNtM9G/CDGCn4XpwIpFA5rJ+zDRBKMXjAzxnfQhpZ8hp 1X/omOoGzgor0rJqcH8CbT1MaT/Mgt0X58rcz78TqbKuUouiBxIwkHjrF2LdY6Ed XCBEvLLRpKKmMujdAOjXgvjNP+2bZ/mAA7ie5ACo/jbHQCO4vUEwOLFB39C7JVxt 8URh5eqsAFrSrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:54 2025 by rpki-client