This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json) Hash identifier: G6YUVLhRiQWg/HujN9KmUZID/vs0XzgypmB6isDiwlI= Subject key identifier: 7D:29:1F:B3:B8:D9:29:2D:15:5C:D7:BB:A7:1F:83:6C:34:47:79:63 Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6 Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6 Certificate serial: 019AF23F985A28821210F91C9F06CE2E965F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft Manifest number: 14FD Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=) 2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: y4XOP+uhNB8R+fU6Hg8+byom/duQF0ebYgpg9WwHEXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:98:5a:28:82:12:10:f9:1c:9f:06:ce:2e:96:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=7d291fb3b8d9292d155cd7bba71f836c34477963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:b2:00:ac:ad:6d:16:88:95:6f:8d:14:0f: ae:22:2c:62:dc:ec:08:f3:b3:1c:fc:95:ed:b6:1c: c5:49:06:6a:41:fe:83:4d:86:25:9c:a6:78:68:9d: e9:8e:f7:2b:a4:c3:ed:3b:5b:a8:61:5a:08:d3:f1: da:d9:74:60:cc:9a:96:16:de:b8:46:62:66:64:af: ce:b5:14:64:1c:02:48:b2:c7:20:72:f8:43:c1:d2: 8a:c6:fe:e0:77:c3:af:64:00:47:c2:92:35:04:38: 5b:ce:5d:8a:9a:d4:e0:02:85:4c:37:33:01:76:e6: 52:7c:d9:53:2a:93:69:90:16:c0:a4:dc:09:d5:bd: 45:28:cf:e5:ee:f6:3b:c4:5b:03:dd:e7:a7:2d:f2: 4c:37:29:ec:db:06:ba:58:8b:13:2a:f9:50:1c:08: 42:1e:d3:02:f7:17:c3:a4:3a:e1:23:b6:2f:7a:8d: 6f:a3:e3:a6:8a:65:14:2a:31:52:19:99:ad:39:60: 20:dd:e1:02:9f:14:a3:35:6f:ea:59:e4:86:f0:3f: 00:f1:b7:ba:9f:d6:81:b0:34:91:49:18:98:2c:6c: 23:07:8d:88:ae:61:f2:06:c6:66:14:b7:43:58:ed: 93:27:4e:b7:c1:36:f8:4a:cb:da:77:29:64:8e:78: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:29:1F:B3:B8:D9:29:2D:15:5C:D7:BB:A7:1F:83:6C:34:47:79:63 X509v3 Authority Key Identifier: keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6a:af:13:47:0c:1e:e5:9a:63:ef:32:f6:e9:29:1c:80:c0: 3f:fc:ca:ab:28:86:44:21:86:5a:3e:c9:00:01:14:6e:9e:bb: fb:d1:c8:9c:41:eb:4f:34:60:78:75:2e:19:5e:4e:f1:bc:6e: 4a:19:b2:a4:64:c2:af:b1:29:22:3c:88:a1:97:6d:b0:a8:de: d7:0c:09:2c:f3:cc:f4:fd:d1:89:c4:e7:b1:6a:4f:da:7a:98: e0:59:8f:70:86:50:67:05:b1:f8:89:8b:61:90:35:76:b7:af: e3:ff:05:2e:66:ff:88:89:03:8b:de:1f:87:9a:c2:83:45:68: d6:a4:35:ec:02:ae:ff:73:65:eb:7c:11:3c:88:76:cd:a0:02: 0e:c7:51:a7:6a:0e:32:4b:1e:2e:81:ee:4f:6a:b8:5b:2a:c5: 8d:a1:4c:92:dc:e4:f3:e2:e7:3a:19:71:98:31:b4:cb:0e:66: 9b:cf:1c:b8:4b:a3:65:ea:8f:a9:c4:f7:bf:e7:9b:5f:d4:13: 29:ad:97:83:89:2e:77:97:a7:65:ed:e1:ba:10:41:06:e6:3d: a5:fc:86:e0:fd:e7:b7:a3:8f:55:3f:a8:60:41:c2:b8:65:28: c9:3e:40:2b:59:5c:1d:45:b3:a4:06:da:54:7e:b5:57:a1:bb: a2:95:71:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5haKIISEPkcnwbOLpZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjljZGY4YjdlNTNlZmNkOTc5OWIxMWU3NDBmNTU1ZmQ1 M2Y0YzYwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD Eyg3ZDI5MWZiM2I4ZDkyOTJkMTU1Y2Q3YmJhNzFmODM2YzM0NDc3OTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSGyAKytbRaIlW+NFA+uIixi3OwI 87Mc/JXtthzFSQZqQf6DTYYlnKZ4aJ3pjvcrpMPtO1uoYVoI0/Ha2XRgzJqWFt64 RmJmZK/OtRRkHAJIsscgcvhDwdKKxv7gd8OvZABHwpI1BDhbzl2KmtTgAoVMNzMB duZSfNlTKpNpkBbApNwJ1b1FKM/l7vY7xFsD3eenLfJMNyns2wa6WIsTKvlQHAhC HtMC9xfDpDrhI7Yveo1vo+OmimUUKjFSGZmtOWAg3eECnxSjNW/qWeSG8D8A8be6 n9aBsDSRSRiYLGwjB42IrmHyBsZmFLdDWO2TJ063wTb4SsvadylkjnjiVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0pH7O42SktFVzXu6cfg2w0R3ljMB8GA1UdIwQY MBaAFFW5zfi35T782XmbEedA9VX9U/TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMt NmZjNGNkY2IzZjE3LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMtNmZjNGNkY2IzZjE3 LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2qvE0cM HuWaY+8y9ukpHIDAP/zKqyiGRCGGWj7JAAEUbp67+9HInEHrTzRgeHUuGV5O8bxu ShmypGTCr7EpIjyIoZdtsKje1wwJLPPM9P3RicTnsWpP2nqY4FmPcIZQZwWx+ImL YZA1drev4/8FLmb/iIkDi94fh5rCg0Vo1qQ17AKu/3Nl63wRPIh2zaACDsdRp2oO MkseLoHuT2q4WyrFjaFMktzk8+LnOhlxmDG0yw5mm88cuEujZeqPqcT3v+ebX9QT Ka2Xg4kud5enZe3huhBBBuY9pfyG4P3nt6OPVT+oYEHCuGUoyT5AK1lcHUWzpAba VH61V6G7opVxaA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:19 2025 by rpki-client