This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft File: VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json) Hash identifier: /jmfrknByZqtyrx59McdRjDZnJCGRbAFT4guzbnuGxc= Subject key identifier: 99:BB:F4:CF:86:2C:A0:9A:97:0C:31:2D:C5:D2:30:67:30:33:F7:F2 Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 Certificate issuer: /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Certificate serial: 019AF27692FCA6EE962AFA904A0CE47F3ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:48 +0000 Manifest this update: Sat 06 Dec 2025 07:00:48 +0000 Manifest next update: Sun 07 Dec 2025 07:00:48 +0000 Files and hashes: 1: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (hash: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=) 2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: w+vxMoMWPhrg359TsXZUmO8/qLLFbJCtDxLVvlYiBS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:92:fc:a6:ee:96:2a:fa:90:4a:0c:e4:7f:3a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Validity Not Before: Dec 6 07:00:48 2025 GMT Not After : Dec 7 07:00:48 2025 GMT Subject: CN=99bbf4cf862ca09a970c312dc5d230673033f7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:f8:31:bb:e6:c1:0f:2e:2f:b0:1c:12:be: d4:b1:da:ca:c9:d8:44:84:01:72:67:18:37:4c:cf: c4:c5:08:62:c3:56:93:75:56:9d:e5:af:24:cf:2b: b3:67:bb:ea:e2:56:2e:a4:6f:7c:28:61:98:9b:db: db:e9:f2:60:8e:39:e1:c8:58:09:6f:bc:01:3c:d2: 9e:8e:5e:8f:21:ae:e5:35:00:a2:e4:46:40:dc:d8: 3a:4b:94:df:e1:14:e6:24:6c:0c:d7:02:45:73:a0: a8:c2:e8:53:c6:81:20:c2:69:52:78:df:72:0c:5a: 48:e5:bf:ee:27:42:88:d3:b7:41:46:2d:79:5f:29: 04:33:d9:98:ad:e5:c4:51:28:15:18:4b:51:29:8e: ab:2e:17:b0:08:e4:2d:e9:c1:dd:54:41:75:e9:61: a2:6d:de:1e:85:9b:50:b1:eb:c9:3a:4b:ae:c1:45: 68:1f:5d:d9:59:3c:e2:dc:f9:b0:72:84:02:44:7b: a9:ee:5b:a7:94:fa:4e:eb:06:51:23:f9:09:cd:24: 44:13:fb:11:86:49:45:dd:ff:67:00:a4:26:f7:3e: e4:27:7b:f5:59:7a:60:0b:27:9f:ee:7d:ab:f3:21: 59:ad:b3:ee:75:c5:c0:45:96:52:9c:88:a4:59:7f: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:F4:CF:86:2C:A0:9A:97:0C:31:2D:C5:D2:30:67:30:33:F7:F2 X509v3 Authority Key Identifier: keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dd:fb:c6:37:89:1a:d4:1a:75:64:5a:70:bb:17:54:53:4f: e7:85:6a:22:b8:fd:0c:69:bf:b2:06:68:70:62:93:cd:d3:1e: 7e:cc:37:a4:15:84:17:7a:99:91:e4:5a:38:4d:33:e2:91:81: 77:c1:66:8b:a3:3e:7e:fb:5b:5f:4c:b1:51:eb:66:b3:82:9b: 15:b8:2a:1e:fc:ff:0d:9d:13:be:e5:49:bd:1b:ea:93:16:af: 62:de:f9:20:0b:d7:28:da:cb:47:dd:60:e0:d8:31:d4:9b:cf: bd:c2:f5:ce:f0:ea:e4:e3:fc:f6:ec:5a:cb:12:44:15:85:33: f7:47:86:bc:4d:7e:ce:f6:f7:df:d1:92:64:cb:c8:ab:09:2c: f8:86:97:ed:90:77:a1:0b:e8:d8:0f:d2:d1:32:9b:b2:8f:08: 06:67:15:97:e6:a4:66:59:58:90:40:b8:ef:c0:6c:e6:dd:6f: b2:1d:00:9e:08:48:5e:34:81:58:db:86:7c:13:da:d4:9c:c1: a0:09:4f:11:2f:23:b1:0d:0d:fe:bb:5f:3e:53:a3:cb:ed:03: 13:29:2a:01:cf:0e:4e:c3:89:63:e8:81:90:a7:1d:e0:3f:26: f2:90:f8:ce:c6:c2:ac:45:3a:82:5e:f5:0a:51:c9:15:c9:e3: 46:30:f5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpL8pu6WKvqQSgzkfzrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjRiZmNkMDE2NGFkN2M2Njg4YWYyMjI0NmM4MmUxOTk1 ZGQzNTEwHhcNMjUxMjA2MDcwMDQ4WhcNMjUxMjA3MDcwMDQ4WjAzMTEwLwYDVQQD Eyg5OWJiZjRjZjg2MmNhMDlhOTcwYzMxMmRjNWQyMzA2NzMwMzNmN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsj4MbvmwQ8uL7AcEr7UsdrKydhE hAFyZxg3TM/ExQhiw1aTdVad5a8kzyuzZ7vq4lYupG98KGGYm9vb6fJgjjnhyFgJ b7wBPNKejl6PIa7lNQCi5EZA3Ng6S5Tf4RTmJGwM1wJFc6CowuhTxoEgwmlSeN9y DFpI5b/uJ0KI07dBRi15XykEM9mYreXEUSgVGEtRKY6rLhewCOQt6cHdVEF16WGi bd4ehZtQsevJOkuuwUVoH13ZWTzi3PmwcoQCRHup7lunlPpO6wZRI/kJzSREE/sR hklF3f9nAKQm9z7kJ3v1WXpgCyef7n2r8yFZrbPudcXARZZSnIikWX8zWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm79M+GLKCalwwxLcXSMGcwM/fyMB8GA1UdIwQY MBaAFFa0v80BZK18ZoivIiRsguGZXdNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQt MjQxNjY1ZjQ5ZDI1LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQtMjQxNjY1ZjQ5ZDI1 LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt37xjeJ GtQadWRacLsXVFNP54VqIrj9DGm/sgZocGKTzdMefsw3pBWEF3qZkeRaOE0z4pGB d8Fmi6M+fvtbX0yxUetms4KbFbgqHvz/DZ0TvuVJvRvqkxavYt75IAvXKNrLR91g 4Ngx1JvPvcL1zvDq5OP89uxayxJEFYUz90eGvE1+zvb339GSZMvIqwks+IaX7ZB3 oQvo2A/S0TKbso8IBmcVl+akZllYkEC478Bs5t1vsh0AnghIXjSBWNuGfBPa1JzB oAlPES8jsQ0N/rtfPlOjy+0DEykqAc8OTsOJY+iBkKcd4D8m8pD4zsbCrEU6gl71 ClHJFcnjRjD19w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:52 2025 by rpki-client