This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json) Hash identifier: 7taF1aGFjczUfMo7FU1GfCAYR5MG/StVSoVn/pa+guU= Subject key identifier: 7A:71:BB:B3:B3:77:5A:CC:87:3A:72:BC:69:12:EA:C2:F8:D9:46:EA Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e Certificate serial: 019AFCC52AFFFECFAB1AC6B12E49BA753544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft Manifest number: 128F Signing time: Mon 08 Dec 2025 07:02:51 +0000 Manifest this update: Mon 08 Dec 2025 07:02:51 +0000 Manifest next update: Tue 09 Dec 2025 07:02:51 +0000 Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: t7l06ZFlvwuK+ujVCpWfDiNwyHZ58cDOl8ZGxpgODxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c5:2a:ff:fe:cf:ab:1a:c6:b1:2e:49:ba:75:35:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e Validity Not Before: Dec 8 07:02:51 2025 GMT Not After : Dec 9 07:02:51 2025 GMT Subject: CN=7a71bbb3b3775acc873a72bc6912eac2f8d946ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:c8:64:5f:f1:60:48:ea:bb:ae:9c:d8:c5: 2e:e5:38:25:e1:c3:18:8a:51:3c:77:fe:11:8a:71: d6:88:61:0b:0c:81:c5:1a:91:40:7a:e6:b9:66:a9: 47:99:2d:63:f0:d2:29:4b:da:ab:ad:56:b0:e3:c5: 84:69:c6:4e:cc:61:74:3f:04:8a:29:5e:b6:05:f3: 51:21:39:6a:cd:3e:8e:cb:13:b2:8c:e5:39:3b:b7: 46:2b:e0:3a:6c:2c:cf:83:ce:d5:03:e3:04:cc:48: f2:58:b4:90:3f:dd:bb:e5:51:41:d2:36:d9:86:c4: 15:54:fa:d4:ae:87:94:8c:79:2f:36:fc:45:ad:ce: fc:ee:11:06:d4:c8:2f:5a:35:91:f8:c2:fd:8e:44: a8:51:62:be:cb:d0:b8:75:d2:87:7b:4a:5e:f2:e9: f1:9e:82:04:26:6a:b2:ec:02:81:84:34:92:bf:e9: a3:c3:e0:ab:c4:49:6c:10:30:25:0c:bb:1a:9e:19: b3:f2:77:43:d9:73:bb:28:cd:9f:10:3a:f8:db:d4: 42:67:bc:31:e7:96:ef:b5:23:12:d8:d9:65:10:53: 57:aa:9b:09:8e:9e:2b:60:77:20:fc:42:14:a8:62: b1:98:8e:0a:84:56:ca:d4:f9:e5:a0:b0:bc:e0:b8: 78:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:71:BB:B3:B3:77:5A:CC:87:3A:72:BC:69:12:EA:C2:F8:D9:46:EA X509v3 Authority Key Identifier: keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cc:f6:59:f6:d5:19:0e:31:d6:65:72:2e:14:8b:63:59:0f: d6:ce:ae:3e:1d:43:a1:fb:fb:6c:b1:05:30:03:cb:0f:df:de: 2a:50:51:8c:be:50:03:c6:0b:f2:55:9d:62:0d:14:a4:dd:7f: 4f:c1:a1:09:43:24:d1:0a:f0:14:ad:be:5d:a5:62:24:54:27: 3b:0d:69:c7:bf:d0:1d:4f:35:a6:55:d3:fd:3b:7c:13:b6:b1: 3b:36:57:e3:7b:e2:10:d2:49:75:60:9b:b9:30:fc:bd:85:71: e5:b9:fc:0e:03:a0:be:f3:5f:5e:4e:44:5d:a9:08:1e:36:a6: 4b:d1:dc:3c:a6:f1:ea:cc:48:df:a5:ee:d3:40:77:3d:cf:52: fa:0f:2e:2f:aa:db:40:12:90:be:63:9a:74:33:66:1e:fc:2e: e1:03:92:48:b6:6a:78:fb:6c:2d:7b:07:41:00:af:b9:c7:83: 3d:21:c4:fb:e1:ff:65:46:8d:42:fd:55:67:d8:64:51:e3:f3: 18:24:0a:70:74:bb:71:6f:73:19:30:2d:64:59:af:d0:5e:cd: 8d:de:bf:98:0c:1c:e2:6e:ed:5b:d7:3c:af:1c:6d:57:09:68: be:f7:b2:f9:ce:53:ce:a0:cf:6b:3c:2f:a0:ae:ea:08:d6:d9: 1c:5c:02:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xSr//s+rGsaxLkm6dTVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTRmMmM3YzY0NmVjMzFhMDQ5NWUwNTFkNmE0ZGUxYWJm MGM3NGUwHhcNMjUxMjA4MDcwMjUxWhcNMjUxMjA5MDcwMjUxWjAzMTEwLwYDVQQD Eyg3YTcxYmJiM2IzNzc1YWNjODczYTcyYmM2OTEyZWFjMmY4ZDk0NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGvIZF/xYEjqu66c2MUu5Tgl4cMY ilE8d/4RinHWiGELDIHFGpFAeua5ZqlHmS1j8NIpS9qrrVaw48WEacZOzGF0PwSK KV62BfNRITlqzT6OyxOyjOU5O7dGK+A6bCzPg87VA+MEzEjyWLSQP9275VFB0jbZ hsQVVPrUroeUjHkvNvxFrc787hEG1MgvWjWR+ML9jkSoUWK+y9C4ddKHe0pe8unx noIEJmqy7AKBhDSSv+mjw+CrxElsEDAlDLsanhmz8ndD2XO7KM2fEDr429RCZ7wx 55bvtSMS2NllEFNXqpsJjp4rYHcg/EIUqGKxmI4KhFbK1PnloLC84Lh4GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpxu7Ozd1rMhzpyvGkS6sL42UbqMB8GA1UdIwQY MBaAFFUU8sfGRuwxoEleBR1qTeGr8MdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYt Mjc4MGQ2ZjE2MTJjLzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYtMjc4MGQ2ZjE2MTJj LzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcz2WfbV GQ4x1mVyLhSLY1kP1s6uPh1Dofv7bLEFMAPLD9/eKlBRjL5QA8YL8lWdYg0UpN1/ T8GhCUMk0QrwFK2+XaViJFQnOw1px7/QHU81plXT/Tt8E7axOzZX43viENJJdWCb uTD8vYVx5bn8DgOgvvNfXk5EXakIHjamS9HcPKbx6sxI36Xu00B3Pc9S+g8uL6rb QBKQvmOadDNmHvwu4QOSSLZqePtsLXsHQQCvuceDPSHE++H/ZUaNQv1VZ9hkUePz GCQKcHS7cW9zGTAtZFmv0F7Njd6/mAwc4m7tW9c8rxxtVwlovvey+c5TzqDPazwv oK7qCNbZHFwCmg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:06 2025 by rpki-client