This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft File: viphXepqVOryff6ZwH483I13X74.mft (raw, json) Hash identifier: SKc/DX2FDhcqBflkW+2XyF+4yTNWzXZQuNKlu0YtOWc= Subject key identifier: 74:B7:CD:C7:74:60:5C:CC:58:A9:D3:6C:AA:2A:68:99:A8:45:75:BC Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE Certificate issuer: /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe Certificate serial: 019B2B1C9D8959D8B05AA3839AB19BA01F66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft Manifest number: 02CA Signing time: Wed 17 Dec 2025 07:00:54 +0000 Manifest this update: Wed 17 Dec 2025 07:00:54 +0000 Manifest next update: Thu 18 Dec 2025 07:00:54 +0000 Files and hashes: 1: viphXepqVOryff6ZwH483I13X74.crl (hash: AELjn1qTrqtcu2uqYlT/QHRbNbrIGQDNIrZ6N1fy7UY=) 2: wsJ9zVExO6Kf6iOdA_nEJO3cLLQ.roa (hash: F7NYNFzGnUEmsJ3GWlX2+Nyqm/VO8SgUm860DLHCVag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:9d:89:59:d8:b0:5a:a3:83:9a:b1:9b:a0:1f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe Validity Not Before: Dec 17 07:00:54 2025 GMT Not After : Dec 18 07:00:54 2025 GMT Subject: CN=74b7cdc774605ccc58a9d36caa2a6899a84575bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:09:d0:93:ee:f0:d1:20:09:cc:57:a2:92: 74:19:ca:4e:19:8a:16:c7:33:c8:9b:12:42:4c:09: 52:93:7d:7e:19:9f:06:ef:95:6f:86:68:6b:af:c7: 50:82:2d:86:83:6e:01:e8:bf:08:cb:46:03:1b:9f: 53:22:c7:d2:86:6e:d7:12:1c:b2:76:fd:7f:7a:51: 80:9b:90:11:f0:98:24:25:53:ad:20:0f:a2:7d:92: f6:6a:0b:d5:86:e5:bf:5e:e6:a9:3c:f0:97:f3:b4: d3:6e:a6:f5:86:d6:b3:76:8e:e6:5a:e2:c3:ba:56: 6a:86:d0:d0:50:5d:93:7d:01:42:56:65:15:d9:a8: e0:9a:f1:2b:f3:0a:c9:34:35:ed:1a:87:4c:49:b2: 7a:1c:86:f5:31:58:28:07:be:41:47:8b:8d:6e:9e: 09:b0:c4:06:71:8a:c0:04:e7:02:60:c9:83:9e:d5: 1f:88:2c:f5:47:25:41:12:49:1e:2a:83:a8:f2:fa: 7c:9c:81:ba:a0:10:c9:de:b2:e3:c0:55:2f:31:4d: 9c:bb:2d:9d:fb:05:dd:1d:af:39:f0:64:5b:10:86: 6b:98:62:f7:67:8b:38:8e:99:93:43:94:d2:87:8f: a8:3d:b4:f1:86:42:f9:79:d9:f6:25:fe:75:24:3d: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B7:CD:C7:74:60:5C:CC:58:A9:D3:6C:AA:2A:68:99:A8:45:75:BC X509v3 Authority Key Identifier: keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:45:ff:79:a8:1a:57:98:50:bc:17:72:38:e6:69:74:3c:1b: bc:5d:db:b8:a1:63:e9:19:8b:90:5b:b6:b2:c7:fe:22:6e:13: 81:88:27:6e:55:f9:32:c6:42:5a:7f:a8:2f:1a:05:2b:23:40: c3:1c:50:93:d3:3b:f1:40:07:5a:30:cc:27:2c:53:7e:18:97: 99:84:ea:ae:39:7a:51:06:93:23:df:98:65:a0:ae:17:bb:7f: 40:7a:d1:80:0e:45:2a:b5:da:ea:cd:95:48:2f:6d:dc:2d:ec: 64:73:5c:2a:68:f6:81:7a:3a:d3:41:60:ee:cf:fb:b6:a4:5e: df:e6:8a:6a:8b:27:8e:a3:90:95:72:ea:fd:1b:cd:0f:df:be: 90:68:2e:03:fe:ca:04:12:a7:87:d4:b5:07:82:e8:43:ca:a1: 30:79:98:4c:9d:64:82:6c:c6:bb:5b:e2:d9:ba:03:91:e0:e3: 09:b8:3a:05:79:a6:02:08:c1:77:64:a2:86:69:c5:da:98:3a: 37:f1:40:f7:3a:a3:03:f9:93:01:1f:74:59:6a:67:cc:f2:3a: 87:63:eb:9c:06:ad:03:ef:f9:4e:7a:48:52:9f:f2:ef:9a:aa: 9e:3f:85:6c:66:3d:d8:2c:aa:e5:fb:41:32:61:33:c5:4b:f5: 2d:57:57:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHJ2JWdiwWqODmrGboB9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMmE2MTVkZWE2YTU0ZWFmMjdkZmU5OWMwN2UzY2RjOGQ3 NzVmYmUwHhcNMjUxMjE3MDcwMDU0WhcNMjUxMjE4MDcwMDU0WjAzMTEwLwYDVQQD Eyg3NGI3Y2RjNzc0NjA1Y2NjNThhOWQzNmNhYTJhNjg5OWE4NDU3NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqEJ0JPu8NEgCcxXopJ0GcpOGYoW xzPImxJCTAlSk31+GZ8G75Vvhmhrr8dQgi2Gg24B6L8Iy0YDG59TIsfShm7XEhyy dv1/elGAm5AR8JgkJVOtIA+ifZL2agvVhuW/XuapPPCX87TTbqb1htazdo7mWuLD ulZqhtDQUF2TfQFCVmUV2ajgmvEr8wrJNDXtGodMSbJ6HIb1MVgoB75BR4uNbp4J sMQGcYrABOcCYMmDntUfiCz1RyVBEkkeKoOo8vp8nIG6oBDJ3rLjwFUvMU2cuy2d +wXdHa858GRbEIZrmGL3Z4s4jpmTQ5TSh4+oPbTxhkL5edn2Jf51JD3G/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS3zcd0YFzMWKnTbKoqaJmoRXW8MB8GA1UdIwQY MBaAFL4qYV3qalTq8n3+mcB+PNyNd1++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUt ZmU1YWI4MTExYmYwLzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zYmExZTYtMWZlMi00OWZhLWIzNmUtZmU1YWI4MTExYmYw LzEvdmlwaFhlcHFWT3J5ZmY2WndINDgzSTEzWDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEX/eaga V5hQvBdyOOZpdDwbvF3buKFj6RmLkFu2ssf+Im4TgYgnblX5MsZCWn+oLxoFKyNA wxxQk9M78UAHWjDMJyxTfhiXmYTqrjl6UQaTI9+YZaCuF7t/QHrRgA5FKrXa6s2V SC9t3C3sZHNcKmj2gXo600Fg7s/7tqRe3+aKaosnjqOQlXLq/RvND9++kGguA/7K BBKnh9S1B4LoQ8qhMHmYTJ1kgmzGu1vi2boDkeDjCbg6BXmmAgjBd2SihmnF2pg6 N/FA9zqjA/mTAR90WWpnzPI6h2PrnAatA+/5TnpIUp/y75qqnj+FbGY92Cyq5ftB MmEzxUv1LVdXrA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:53 2025 by rpki-client