This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft File: Vxp0VREn6Q1zotOylfGm_1FRn98.mft (raw, json) Hash identifier: grwtTTcPus+UfV8Wnv5L2HrOwzySN/L4OYcd0mPhbv0= Subject key identifier: EF:FB:70:A2:4F:2D:21:62:8B:1A:8B:1F:F1:66:17:93:86:ED:4D:D3 Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF Certificate issuer: /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf Certificate serial: 019AF577714BFD148E73AD5BA3D1E68C8711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft Manifest number: 09A0 Signing time: Sat 06 Dec 2025 21:00:36 +0000 Manifest this update: Sat 06 Dec 2025 21:00:36 +0000 Manifest next update: Sun 07 Dec 2025 21:00:36 +0000 Files and hashes: 1: Vxp0VREn6Q1zotOylfGm_1FRn98.crl (hash: /GKZNEuMdtFB0Qj879fzuOB/BVt7UbmHRfZmjTPdvkk=) 2: aNICsUm_YHsuMjtHuPHf5eTVELc.roa (hash: FFxXKtXGviWIg2hjziI4X0dpXs0FS5YBP6Wt80lUyGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:71:4b:fd:14:8e:73:ad:5b:a3:d1:e6:8c:87:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf Validity Not Before: Dec 6 21:00:36 2025 GMT Not After : Dec 7 21:00:36 2025 GMT Subject: CN=effb70a24f2d21628b1a8b1ff166179386ed4dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:a8:e9:f7:de:65:c4:5d:e8:b9:c6:64:08: e6:34:37:d9:05:25:b9:bd:82:ed:6f:8c:c4:2a:d5: 56:59:a7:86:60:36:eb:df:93:a7:ad:e2:24:41:e4: b8:ac:c9:fa:7e:1e:ec:73:e5:d3:14:cc:a4:79:d0: 43:43:7c:49:3c:6a:c4:44:82:d4:7e:93:14:8b:4c: b5:8d:85:80:0c:f3:6e:ee:64:c2:d9:1b:ff:18:65: b7:01:86:13:a8:4c:58:83:e5:66:02:99:f2:41:71: 55:b7:ea:6b:1c:eb:f1:19:9f:7d:b7:5b:b7:7b:59: 51:da:b8:86:db:5a:8c:d2:a5:78:6c:8e:0b:41:57: 76:0e:b0:a4:1c:40:89:de:29:40:24:04:46:e9:a8: b9:5e:e0:77:00:ee:ca:6e:c5:94:2b:21:bd:90:e5: 4c:c4:82:d6:de:a3:fb:c3:00:5d:a9:76:3f:f6:67: e2:00:a4:5d:bc:c0:c4:ed:52:3d:90:b5:c2:2a:ff: ea:57:4e:7d:a2:27:04:e3:9a:b5:4c:f8:39:4f:37: 01:63:ad:2a:a8:74:bc:31:34:c1:86:90:72:a0:77: 48:a4:6a:c5:a8:b9:f3:77:72:f8:50:b2:81:75:b8: ad:58:81:be:3a:74:86:eb:60:ea:5b:8b:f1:13:7f: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FB:70:A2:4F:2D:21:62:8B:1A:8B:1F:F1:66:17:93:86:ED:4D:D3 X509v3 Authority Key Identifier: keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fa:d9:85:4e:7d:7c:2f:68:f1:a9:eb:d3:92:44:f0:34:fb: 1b:e0:21:23:ce:23:df:58:f2:c6:e4:31:f6:13:be:e5:1c:f9: b8:cf:6e:f8:15:8b:3d:62:85:83:e1:70:bc:6f:d3:95:bf:15: 91:8e:20:86:47:c5:17:b7:10:30:49:cb:16:0a:dd:48:d0:de: dd:80:6b:a5:e6:c9:b2:53:c0:e2:09:c7:10:ed:71:f8:2a:82: e0:72:c3:90:1f:37:09:b1:cf:5d:66:b6:0c:8a:0f:a4:f5:cc: e0:d1:59:18:d0:2b:9d:b1:a3:d3:1c:8f:3b:ec:af:37:64:21: 3f:64:ea:74:0b:0c:c8:91:b4:99:88:47:58:c6:97:cd:5b:14: 94:52:c5:5b:eb:7a:fb:8f:9c:24:81:40:2d:93:8d:51:cc:28: a9:80:a2:5c:41:59:12:66:ee:57:e7:fb:ee:64:c0:8c:af:54: bc:60:11:3f:b2:ae:af:c7:58:bc:da:10:01:31:27:3f:37:dc: 0f:5c:dd:93:34:ad:90:7b:51:65:90:6e:4e:82:29:d5:bf:64: bf:6b:7e:94:53:76:7e:0d:13:4d:e1:35:37:c6:63:d6:b9:ce: da:b2:51:ec:a6:f0:3d:ab:f7:d0:f2:b1:c3:88:02:b0:95:74: ca:d3:0f:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3FL/RSOc61bo9HmjIcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWE3NDU1MTEyN2U5MGQ3M2EyZDNiMjk1ZjFhNmZmNTE1 MTlmZGYwHhcNMjUxMjA2MjEwMDM2WhcNMjUxMjA3MjEwMDM2WjAzMTEwLwYDVQQD EyhlZmZiNzBhMjRmMmQyMTYyOGIxYThiMWZmMTY2MTc5Mzg2ZWQ0ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAGo6ffeZcRd6LnGZAjmNDfZBSW5 vYLtb4zEKtVWWaeGYDbr35OnreIkQeS4rMn6fh7sc+XTFMykedBDQ3xJPGrERILU fpMUi0y1jYWADPNu7mTC2Rv/GGW3AYYTqExYg+VmApnyQXFVt+prHOvxGZ99t1u3 e1lR2riG21qM0qV4bI4LQVd2DrCkHECJ3ilAJARG6ai5XuB3AO7KbsWUKyG9kOVM xILW3qP7wwBdqXY/9mfiAKRdvMDE7VI9kLXCKv/qV059oicE45q1TPg5TzcBY60q qHS8MTTBhpByoHdIpGrFqLnzd3L4ULKBdbitWIG+OnSG62DqW4vxE3/g9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/7cKJPLSFiixqLH/FmF5OG7U3TMB8GA1UdIwQY MBaAFFcadFURJ+kNc6LTspXxpv9RUZ/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhwMFZSRW42UTF6b3RPeWxmR21fMUZSbjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kYzE1NDUtNTllZC00YjVlLWJjM2Yt NmViMDQ4MzIzNmRmLzEvVnhwMFZSRW42UTF6b3RPeWxmR21fMUZSbjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kYzE1NDUtNTllZC00YjVlLWJjM2YtNmViMDQ4MzIzNmRm LzEvVnhwMFZSRW42UTF6b3RPeWxmR21fMUZSbjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfrZhU59 fC9o8anr05JE8DT7G+AhI84j31jyxuQx9hO+5Rz5uM9u+BWLPWKFg+FwvG/Tlb8V kY4ghkfFF7cQMEnLFgrdSNDe3YBrpebJslPA4gnHEO1x+CqC4HLDkB83CbHPXWa2 DIoPpPXM4NFZGNArnbGj0xyPO+yvN2QhP2TqdAsMyJG0mYhHWMaXzVsUlFLFW+t6 +4+cJIFALZONUcwoqYCiXEFZEmbuV+f77mTAjK9UvGARP7Kur8dYvNoQATEnPzfc D1zdkzStkHtRZZBuToIp1b9kv2t+lFN2fg0TTeE1N8Zj1rnO2rJR7KbwPav30PKx w4gCsJV0ytMPxA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:16:55 2025 by rpki-client