This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft File: VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json) Hash identifier: XSChcgBt3InELd6Bg7WL1huj1w+umsMNczmkhGnnBos= Subject key identifier: 3C:CB:CD:CD:0C:89:38:1D:B1:AA:86:5A:1C:9F:20:34:2F:9D:BE:DD Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced Certificate serial: 019AF24026762E94BF376EB1FC3DF6AE14D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: LBEzdww5t7GiFEnR6YE3famejERRLEE5IvWFt9T4wKg=) 2: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=) 3: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=) 4: zPr7HrZQ0fX72obaVzae4hA6SNc.roa (hash: vjUhNFOtlaK42JGVIDi0wjlCpnam1o78sbpNvjcx8Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:26:76:2e:94:bf:37:6e:b1:fc:3d:f6:ae:14:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=3ccbcdcd0c89381db1aa865a1c9f20342f9dbedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:f6:48:9a:f6:d5:8c:fc:ed:45:a8:3f:df: bc:f3:a3:78:d5:be:43:cc:44:75:26:69:7b:be:f8: 9f:6e:0d:90:85:93:4d:e6:48:6b:11:f9:28:15:7a: 55:3b:9f:af:a5:d5:05:ab:cb:f7:82:f1:a2:32:b5: 2e:91:4b:a0:09:d4:6f:b9:72:f7:19:1e:a7:83:83: f6:d7:a3:dd:e3:37:22:54:3b:62:01:88:f6:80:46: cb:34:f8:c2:af:51:c5:4f:d0:a2:b5:ab:09:1e:d6: 1b:dc:01:91:9f:91:78:b1:9d:87:2c:ec:e4:94:a4: 8d:66:db:95:be:67:3c:eb:59:56:89:f4:56:e5:f9: 0c:c5:b2:c5:f6:a7:58:33:5e:f7:cb:96:f5:64:d1: 13:45:10:32:ad:3c:2c:d8:ba:da:0e:c5:bd:61:1c: d5:0e:96:e0:92:ab:38:36:0f:da:84:cd:27:d6:2b: a1:7d:a2:9f:32:0b:f5:2d:43:68:4e:75:d9:29:e0: f4:27:9e:98:79:8b:c5:a4:10:0b:26:b0:f3:0f:19: 03:b2:3c:41:91:7b:d4:12:9f:65:75:4b:7f:db:85: ca:ce:2d:f5:05:ba:79:36:69:cc:35:7b:f1:93:c4: 0e:cc:10:80:7b:03:aa:46:f5:2d:fc:5d:43:2d:6b: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:CD:CD:0C:89:38:1D:B1:AA:86:5A:1C:9F:20:34:2F:9D:BE:DD X509v3 Authority Key Identifier: keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bc:c8:1b:a5:cf:fd:e6:12:d1:93:05:6c:05:d5:bb:2e:2f: 97:7e:ce:a1:c2:a9:65:62:49:01:42:1f:ec:77:4f:ba:cd:f7: 3a:b3:1f:79:b5:52:63:36:71:f8:9a:7e:82:73:64:77:06:ce: d9:7a:1e:8a:13:c4:61:4e:67:b2:79:b4:68:b8:b9:b8:a4:05: d3:83:fd:91:04:f1:14:1b:4c:8d:bf:6a:cd:f7:66:d8:2f:04: b8:26:21:97:4c:f7:d1:a1:5f:b0:63:16:ab:f9:ca:6d:b9:ae: a6:15:46:89:16:ee:c9:a6:10:ea:ea:e4:42:89:0f:b5:58:f0: 45:ba:87:e4:9c:ff:42:1c:56:0e:2e:4a:67:45:5c:36:d2:05: e9:08:9b:d6:3d:48:5a:eb:15:42:bc:52:ec:04:0e:be:f4:b3: 10:08:e1:3b:e7:28:93:23:d7:c5:21:c2:bf:fa:b1:93:82:4f: b9:4b:12:2d:c7:1a:32:6c:f3:21:7d:30:32:6d:c5:ab:a0:de: fb:a0:20:e6:3d:5f:94:ad:a6:fa:e4:99:e3:ae:b4:09:55:41: 7b:92:b2:c5:d9:19:37:07:1d:1e:e4:dc:95:71:f3:07:31:90: 70:4a:69:16:e0:f6:6e:23:2c:e6:4f:3a:21:28:88:0d:9d:92: 7a:29:4e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCZ2LpS/N26x/D32rhTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh YWZjZWQwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD EygzY2NiY2RjZDBjODkzODFkYjFhYTg2NWExYzlmMjAzNDJmOWRiZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRv2SJr21Yz87UWoP9+886N41b5D zER1Jml7vvifbg2QhZNN5khrEfkoFXpVO5+vpdUFq8v3gvGiMrUukUugCdRvuXL3 GR6ng4P216Pd4zciVDtiAYj2gEbLNPjCr1HFT9CitasJHtYb3AGRn5F4sZ2HLOzk lKSNZtuVvmc861lWifRW5fkMxbLF9qdYM173y5b1ZNETRRAyrTws2LraDsW9YRzV Dpbgkqs4Ng/ahM0n1iuhfaKfMgv1LUNoTnXZKeD0J56YeYvFpBALJrDzDxkDsjxB kXvUEp9ldUt/24XKzi31Bbp5NmnMNXvxk8QOzBCAewOqRvUt/F1DLWt8LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzLzc0MiTgdsaqGWhyfIDQvnb7dMB8GA1UdIwQY MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt MWIyNDQ4NGU1NWVjLzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrzIG6XP /eYS0ZMFbAXVuy4vl37OocKpZWJJAUIf7HdPus33OrMfebVSYzZx+Jp+gnNkdwbO 2XoeihPEYU5nsnm0aLi5uKQF04P9kQTxFBtMjb9qzfdm2C8EuCYhl0z30aFfsGMW q/nKbbmuphVGiRbuyaYQ6urkQokPtVjwRbqH5Jz/QhxWDi5KZ0VcNtIF6Qib1j1I WusVQrxS7AQOvvSzEAjhO+cokyPXxSHCv/qxk4JPuUsSLccaMmzzIX0wMm3Fq6De +6Ag5j1flK2m+uSZ4660CVVBe5KyxdkZNwcdHuTclXHzBzGQcEppFuD2biMs5k86 ISiIDZ2SeilOSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:33 2025 by rpki-client