This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft File: VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft (raw, json) Hash identifier: Wwj4QnpDJJIEQssTSVOeZpxy1Lc4Ell7tFUSp2W/qM8= Subject key identifier: 39:99:04:45:11:69:4D:57:19:0C:05:05:44:4A:73:70:10:A7:3C:08 Authority key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C Certificate issuer: /CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c Certificate serial: 019AF1D1FFDEC5CED6578825BFE15F3B8546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft Manifest number: 15D2 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl (hash: xouYsKm45ZE+C7LwOoQ2KCArTXwqbeVkHmYam2SJ4HQ=) 2: rja0swvI9FWxE8KMSBLX04uSXw0.roa (hash: Z2Ufwd9m2IoyJqT+av4hl2D/R56gkSmO/5BjIjrBUGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ff:de:c5:ce:d6:57:88:25:bf:e1:5f:3b:85:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=3999044511694d57190c0505444a737010a73c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:9b:a5:59:99:24:f1:1f:7e:86:0e:1e:81: 83:40:20:a1:54:4b:ac:83:ab:c2:51:3e:5d:28:1f: 82:eb:65:b6:4d:c8:a5:ae:78:5f:aa:ac:45:a0:77: a5:41:30:2f:17:25:c5:2a:a1:2f:09:93:81:5a:99: 37:a2:2a:95:6e:48:db:93:81:39:fd:c7:87:64:9f: 62:62:16:87:98:02:00:f9:ea:59:04:fb:42:a5:9a: f6:ed:82:e7:57:bf:8c:55:74:a6:04:f2:03:24:31: bc:c2:3a:94:99:78:10:7d:0e:87:8a:7a:52:93:db: 16:0d:5c:4b:00:2c:f2:74:6a:99:da:6c:39:48:4e: 7d:04:d9:41:72:18:e5:69:ef:d2:09:00:ba:1b:5d: 0c:d7:fa:3b:6f:ac:93:4e:e7:03:a6:35:7a:8c:78: a3:52:e5:fc:ec:66:67:ed:11:c7:fa:2c:bc:24:f1: ef:f1:07:a3:b7:cf:cd:34:82:87:fd:b0:e6:84:25: 7a:4e:ef:ea:62:33:4b:70:8f:3b:f8:50:ee:9f:fc: 33:e5:1c:be:d8:8e:c6:2c:7f:3b:66:72:24:50:c4: 91:93:bb:ea:a9:ff:f2:b0:f8:f4:f4:db:a6:06:94: 75:f2:f5:3a:ff:91:96:e6:37:bc:0f:24:34:04:9e: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:04:45:11:69:4D:57:19:0C:05:05:44:4A:73:70:10:A7:3C:08 X509v3 Authority Key Identifier: keyid:55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fe:c6:e8:b1:30:80:fe:71:2f:9e:ff:e5:b0:46:de:f1:44: 71:6f:ab:5a:ee:a6:c2:0a:b6:b1:b8:3b:df:52:a3:05:f2:55: 6d:78:17:77:c7:f0:88:49:7e:0e:e3:fb:9e:fd:6c:51:69:b9: a5:75:fa:eb:ec:fd:2c:c0:6a:6b:da:c7:39:f6:b7:64:4f:3f: 7a:24:05:e8:86:07:c3:f5:a2:0e:a5:32:c2:e1:40:57:63:46: 24:a7:5a:06:7f:05:de:4b:e5:2b:3d:04:c2:99:21:69:a4:4e: 32:1d:7a:09:ac:d9:7e:c6:1f:58:f8:9b:d7:6d:dd:2f:52:69: a9:ec:48:dc:a5:a4:eb:14:f1:03:fa:c8:df:cd:b8:e1:31:a1: 8c:0b:f2:53:db:05:92:1e:8a:21:53:0f:a0:ca:41:a4:ad:9c: 19:37:0c:df:ab:7a:9f:a8:75:7d:ff:47:e1:21:b3:17:bc:ce: ed:cd:7c:38:97:e2:b6:f9:c9:3f:b6:87:88:73:0e:43:cf:4d: 33:97:0f:f8:3c:81:a4:d9:80:41:fe:df:d1:b5:44:db:9b:4d: 64:c8:40:a3:44:1f:43:e9:8f:cd:9b:bc:18:fd:25:58:b5:6b: e4:8f:5c:b4:18:32:84:22:11:b3:1c:d2:f8:ce:1f:4e:a8:c7: 0d:e3:f3:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0f/exc7WV4glv+FfO4VGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTMwYmEwZWNjNmU2OTE4OTQ2MzU2MWQ0ZWE1NGMyM2Qx MzhmM2MwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EygzOTk5MDQ0NTExNjk0ZDU3MTkwYzA1MDU0NDRhNzM3MDEwYTczYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwImbpVmZJPEffoYOHoGDQCChVEus g6vCUT5dKB+C62W2TcilrnhfqqxFoHelQTAvFyXFKqEvCZOBWpk3oiqVbkjbk4E5 /ceHZJ9iYhaHmAIA+epZBPtCpZr27YLnV7+MVXSmBPIDJDG8wjqUmXgQfQ6HinpS k9sWDVxLACzydGqZ2mw5SE59BNlBchjlae/SCQC6G10M1/o7b6yTTucDpjV6jHij UuX87GZn7RHH+iy8JPHv8Qejt8/NNIKH/bDmhCV6Tu/qYjNLcI87+FDun/wz5Ry+ 2I7GLH87ZnIkUMSRk7vqqf/ysPj09NumBpR18vU6/5GW5je8DyQ0BJ6w/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmZBEURaU1XGQwFBURKc3AQpzwIMB8GA1UdIwQY MBaAFFXjC6DsxuaRiUY1YdTqVMI9E488MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jMGI1M2EtZWVlYy00MDM4LTkyMzgt ZjgxYWM1NmNjM2RjLzEvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jMGI1M2EtZWVlYy00MDM4LTkyMzgtZjgxYWM1NmNjM2Rj LzEvVmVNTG9Pekc1cEdKUmpWaDFPcFV3ajBUanp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav7G6LEw gP5xL57/5bBG3vFEcW+rWu6mwgq2sbg731KjBfJVbXgXd8fwiEl+DuP7nv1sUWm5 pXX66+z9LMBqa9rHOfa3ZE8/eiQF6IYHw/WiDqUywuFAV2NGJKdaBn8F3kvlKz0E wpkhaaROMh16CazZfsYfWPib123dL1JpqexI3KWk6xTxA/rI38244TGhjAvyU9sF kh6KIVMPoMpBpK2cGTcM36t6n6h1ff9H4SGzF7zO7c18OJfitvnJP7aHiHMOQ89N M5cP+DyBpNmAQf7f0bVE25tNZMhAo0QfQ+mPzZu8GP0lWLVr5I9ctBgyhCIRsxzS +M4fTqjHDePzDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:55 2025 by rpki-client