This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json) Hash identifier: xN2Y035tMvK9h+gNqdsTcwSk7gEubDuCUhCY8vsAWJU= Subject key identifier: 37:10:DE:AE:7B:41:95:BD:2A:DA:2B:EA:C3:FE:85:C4:68:D5:4B:F6 Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb Certificate serial: 019AF509D371E9E3E4B6E2C9B1103306479D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft Manifest number: 04CC Signing time: Sat 06 Dec 2025 19:00:52 +0000 Manifest this update: Sat 06 Dec 2025 19:00:52 +0000 Manifest next update: Sun 07 Dec 2025 19:00:52 +0000 Files and hashes: 1: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: 07ifTRZdL5FIEoi+ng4w9Cw/2XGBHSVETwzvOa0Tbpk=) 2: xe_FlpDuD-n9_M4USiSXk6Ycnbw.roa (hash: yJ1Pd1TWtovjk0/IapFR+YDI373SvMNyYMwVt0mGMMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d3:71:e9:e3:e4:b6:e2:c9:b1:10:33:06:47:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb Validity Not Before: Dec 6 19:00:52 2025 GMT Not After : Dec 7 19:00:52 2025 GMT Subject: CN=3710deae7b4195bd2ada2beac3fe85c468d54bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:b2:d3:12:e2:35:06:0d:e8:49:9f:fe:13: b7:a9:07:cb:8d:d1:d2:b5:90:43:ab:6d:3a:59:6f: b3:5f:94:85:72:f5:0a:4d:3a:03:39:a6:92:eb:7a: ae:36:25:16:72:e1:7e:de:1c:3e:25:00:0c:bb:6d: 44:08:20:38:91:a6:64:ea:0b:8e:43:88:c3:f3:89: f8:ca:35:c6:73:4a:fc:4d:1b:4a:df:eb:ea:42:c0: a8:41:95:c3:eb:a9:bf:b6:e4:68:6a:3f:37:a8:d5: fb:e6:89:a4:67:d1:b0:cf:e5:87:6e:71:b8:70:35: db:0e:9c:48:ab:83:79:45:70:44:97:1b:e4:d5:be: 06:f1:32:44:3c:3c:ab:0b:64:10:e9:16:8b:43:5d: ae:ff:6d:81:97:86:55:0c:c9:33:a0:0c:e5:23:2a: 21:d0:4e:06:97:98:f4:33:20:a9:fa:1f:aa:20:98: 29:2c:9c:8f:c8:40:78:db:44:26:ed:03:e5:a6:db: 28:d0:40:c5:55:38:77:e5:a5:3d:a5:c5:2d:2c:a0: 70:9e:81:6c:df:a3:67:20:db:c0:d1:46:f1:35:0d: 7b:6a:76:ca:43:29:8a:d9:7a:91:94:30:db:59:8d: 36:54:8a:06:e8:aa:ce:14:b5:98:c4:3e:f1:24:e2: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:10:DE:AE:7B:41:95:BD:2A:DA:2B:EA:C3:FE:85:C4:68:D5:4B:F6 X509v3 Authority Key Identifier: keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5c:1d:58:d3:31:0e:50:48:3e:82:fa:b9:88:70:0a:f7:94: 19:ec:76:6f:a3:76:9a:91:2a:90:83:ef:9a:15:bb:b3:63:16: da:89:ee:5c:c7:3e:2e:90:b3:c3:3e:a9:13:18:19:b4:6a:bd: 29:7c:ac:83:24:3b:6d:73:2a:08:99:78:1f:12:77:a4:7d:61: 33:79:4e:b5:39:59:96:17:7d:f4:14:b2:5f:1f:f4:ff:54:0e: d0:56:c8:b3:94:47:5a:ea:b9:77:9a:48:19:cd:77:b0:23:c3: 7c:4d:a2:39:21:77:f1:77:cc:af:19:d8:07:48:45:6a:ad:43: 42:d9:2b:ea:1a:73:7b:61:6e:b1:85:55:08:5b:1a:a4:89:6a: 96:ad:88:34:b1:29:a9:f8:c9:ce:c7:7a:ef:ef:5a:8f:78:ef: d6:0e:6f:11:56:47:58:26:c0:b2:b9:56:42:73:1b:74:85:92: 24:5a:81:bc:a5:1c:f3:8d:22:bb:3e:f5:56:ef:fd:a3:08:f0: 12:16:be:64:02:75:da:89:7c:65:99:37:3e:11:21:e6:b9:45: ce:0d:27:7f:8c:d4:6a:b2:66:f0:b3:ac:ca:87:6a:bd:21:00: 9d:a0:6f:db:e6:bd:5d:33:ed:a0:8a:e7:68:70:42:fe:e2:a5: 78:6e:41:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdNx6ePktuLJsRAzBkedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1 MTc4ZmIwHhcNMjUxMjA2MTkwMDUyWhcNMjUxMjA3MTkwMDUyWjAzMTEwLwYDVQQD EygzNzEwZGVhZTdiNDE5NWJkMmFkYTJiZWFjM2ZlODVjNDY4ZDU0YmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxSy0xLiNQYN6Emf/hO3qQfLjdHS tZBDq206WW+zX5SFcvUKTToDOaaS63quNiUWcuF+3hw+JQAMu21ECCA4kaZk6guO Q4jD84n4yjXGc0r8TRtK3+vqQsCoQZXD66m/tuRoaj83qNX75omkZ9Gwz+WHbnG4 cDXbDpxIq4N5RXBElxvk1b4G8TJEPDyrC2QQ6RaLQ12u/22Bl4ZVDMkzoAzlIyoh 0E4Gl5j0MyCp+h+qIJgpLJyPyEB420Qm7QPlptso0EDFVTh35aU9pcUtLKBwnoFs 36NnINvA0UbxNQ17anbKQymK2XqRlDDbWY02VIoG6KrOFLWYxD7xJOLRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcQ3q57QZW9Ktor6sP+hcRo1Uv2MB8GA1UdIwQY MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct NTBkNmJhNmFhY2I4LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4 LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1wdWNMx DlBIPoL6uYhwCveUGex2b6N2mpEqkIPvmhW7s2MW2onuXMc+LpCzwz6pExgZtGq9 KXysgyQ7bXMqCJl4HxJ3pH1hM3lOtTlZlhd99BSyXx/0/1QO0FbIs5RHWuq5d5pI Gc13sCPDfE2iOSF38XfMrxnYB0hFaq1DQtkr6hpze2FusYVVCFsapIlqlq2INLEp qfjJzsd67+9aj3jv1g5vEVZHWCbAsrlWQnMbdIWSJFqBvKUc840iuz71Vu/9owjw Eha+ZAJ12ol8ZZk3PhEh5rlFzg0nf4zUarJm8LOsyodqvSEAnaBv2+a9XTPtoIrn aHBC/uKleG5BJg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:22 2025 by rpki-client