This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft File: VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft (raw, json) Hash identifier: 3CpfRuJLtzvPVXN1T9ctvR/1m7VYyjVhWvnBux8adZ4= Subject key identifier: 9B:0B:90:B5:BE:29:39:07:9D:47:44:FF:DA:14:CE:E1:48:78:28:2A Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4 Certificate issuer: /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4 Certificate serial: 019AF31D31D984E4F3ECDDD4F95A9E5E44B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:48 +0000 Manifest this update: Sat 06 Dec 2025 10:02:48 +0000 Manifest next update: Sun 07 Dec 2025 10:02:48 +0000 Files and hashes: 1: HbLrWYvpZ3oR_JlftkugbPFu1sg.roa (hash: hyVYRW9dEIvcdUsfvs+O6FvP8/Ig+3miBLv5dJqVY64=) 2: VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl (hash: H4nnvIXxvaOY+V2AQXI+INgSY+5pm1LKXDeqyiMWCjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:31:d9:84:e4:f3:ec:dd:d4:f9:5a:9e:5e:44:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4 Validity Not Before: Dec 6 10:02:48 2025 GMT Not After : Dec 7 10:02:48 2025 GMT Subject: CN=9b0b90b5be2939079d4744ffda14cee14878282a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:9d:cc:4b:24:25:a6:23:e1:76:09:80:44: aa:74:b9:53:88:76:08:db:35:54:fd:51:47:92:4c: 2d:ad:2e:83:41:22:aa:48:dd:13:ba:40:b7:29:83: 2c:4a:be:0b:d9:19:16:ef:31:00:6d:20:40:4a:96: f1:a1:1c:3e:1e:cd:b9:e8:8c:da:93:6e:42:e8:e9: c3:6a:3d:68:bd:13:39:5b:6a:a3:48:e5:80:72:1d: 93:5d:e8:39:18:73:50:c0:21:f0:0a:90:f3:8a:72: e3:e8:57:9c:a8:73:fc:bf:c4:2f:a3:5a:43:60:29: db:ad:49:6a:21:5f:7b:9f:c6:51:6c:71:46:28:14: e6:19:08:e8:ae:f0:3a:be:d2:59:3e:49:ef:be:b6: d0:d7:79:70:ad:3f:28:1d:8c:f7:0b:4c:66:9e:04: 6a:c6:bf:6c:85:a0:6d:e0:dc:b8:90:fb:4b:f0:32: 20:8a:29:03:dd:24:40:00:1b:a3:fb:1e:58:93:c9: 67:0a:2c:7e:4e:34:ba:d6:11:e5:a6:3e:af:8a:44: 4a:57:3f:51:82:f2:df:6d:8c:7e:47:1f:0c:f3:a3: ed:3e:72:cf:29:20:9b:a5:75:f8:2a:e9:da:01:46: 07:7b:e6:b4:c3:44:c5:34:5b:37:88:18:e0:da:23: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0B:90:B5:BE:29:39:07:9D:47:44:FF:DA:14:CE:E1:48:78:28:2A X509v3 Authority Key Identifier: keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bd:cd:69:3c:80:7e:fb:c5:f8:0f:ed:7b:a4:e8:f8:bb:df: bb:7b:bf:c1:0c:f7:10:58:85:aa:56:dc:f0:6e:b6:6c:95:fd: 13:2f:ba:c4:7a:40:31:9c:e6:e6:66:36:7a:f8:71:d7:24:bd: 1a:42:4e:7f:a4:cb:62:e4:80:33:1b:54:e0:70:99:6f:75:3b: 80:7f:a0:1b:2c:0d:a6:72:53:1d:49:01:b4:05:db:95:fd:1d: 8e:f8:e7:14:d7:5f:dc:da:86:c5:20:9d:c3:e2:69:f1:44:89: e4:18:39:e8:a0:21:85:9e:af:3c:76:81:4c:5d:b4:9f:d0:a5: 14:e1:5b:c3:ca:00:27:d0:7c:88:c6:00:30:4a:0f:5a:c8:a4: d1:b9:1f:89:11:d1:da:e1:53:50:4c:e4:ad:d5:9e:df:77:38: ca:5f:74:ef:19:59:ca:dc:80:76:24:0b:98:47:4d:cd:53:3a: b9:ab:9b:67:d0:02:dc:3b:c8:94:ee:ff:a4:87:39:8c:39:78: 1e:27:f5:e3:b9:76:8d:98:41:20:dc:f0:f5:03:dc:11:c1:d6: 25:aa:2f:59:08:26:9b:4a:17:dc:44:a9:9b:5d:5b:da:a6:82: d5:c4:68:05:a0:1c:48:41:73:0e:de:e7:ae:69:de:be:00:93: 95:73:53:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTHZhOTz7N3U+VqeXkS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OTBlZmEyM2M3NzhlZjc0NzBmM2FjMGE5MDU2MTliYzdj Mjc3ZTQwHhcNMjUxMjA2MTAwMjQ4WhcNMjUxMjA3MTAwMjQ4WjAzMTEwLwYDVQQD Eyg5YjBiOTBiNWJlMjkzOTA3OWQ0NzQ0ZmZkYTE0Y2VlMTQ4NzgyODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiadzEskJaYj4XYJgESqdLlTiHYI 2zVU/VFHkkwtrS6DQSKqSN0TukC3KYMsSr4L2RkW7zEAbSBASpbxoRw+Hs256Iza k25C6OnDaj1ovRM5W2qjSOWAch2TXeg5GHNQwCHwCpDzinLj6FecqHP8v8Qvo1pD YCnbrUlqIV97n8ZRbHFGKBTmGQjorvA6vtJZPknvvrbQ13lwrT8oHYz3C0xmngRq xr9shaBt4Ny4kPtL8DIgiikD3SRAABuj+x5Yk8lnCix+TjS61hHlpj6vikRKVz9R gvLfbYx+Rx8M86PtPnLPKSCbpXX4KunaAUYHe+a0w0TFNFs3iBjg2iPYIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsLkLW+KTkHnUdE/9oUzuFIeCgqMB8GA1UdIwQY MBaAFFaQ76I8d473Rw86wKkFYZvHwnfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2It ODNhZTJmMjE0MTIxLzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2ItODNhZTJmMjE0MTIx LzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq73NaTyA fvvF+A/te6To+Lvfu3u/wQz3EFiFqlbc8G62bJX9Ey+6xHpAMZzm5mY2evhx1yS9 GkJOf6TLYuSAMxtU4HCZb3U7gH+gGywNpnJTHUkBtAXblf0djvjnFNdf3NqGxSCd w+Jp8USJ5Bg56KAhhZ6vPHaBTF20n9ClFOFbw8oAJ9B8iMYAMEoPWsik0bkfiRHR 2uFTUEzkrdWe33c4yl907xlZytyAdiQLmEdNzVM6uaubZ9AC3DvIlO7/pIc5jDl4 Hif147l2jZhBINzw9QPcEcHWJaovWQgmm0oX3ESpm11b2qaC1cRoBaAcSEFzDt7n rmnevgCTlXNT3g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:26 2025 by rpki-client