This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json) Hash identifier: 6mbfu5yGyhU2rYaBzQtMe9CgPGFrKM9FiVKQnlV05Bw= Subject key identifier: 12:F0:85:EC:AD:2A:27:F8:A4:65:80:FD:3A:4E:39:C4:DB:F1:E8:8C Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0 Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0 Certificate serial: 019AF12EB7A0340B04071CA5B4F82BC01DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft Manifest number: 148C Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=) 2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: rHeYIGjELwKY8cIxAGatLyz31c82EDlgkckdU/WZSYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b7:a0:34:0b:04:07:1c:a5:b4:f8:2b:c0:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=12f085ecad2a27f8a46580fd3a4e39c4dbf1e88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:b4:d5:b5:9b:b5:c0:81:7b:a8:63:b5:a0: ef:03:a8:8e:91:68:8a:7b:75:81:b8:88:51:f1:d7: b7:9d:9f:a5:aa:55:28:61:3a:64:07:59:e1:2a:a5: 70:b4:0b:c2:55:ad:29:79:a7:b8:ec:6b:93:37:27: e4:c0:9b:fc:fd:76:a8:c7:00:cd:6a:e5:71:a6:88: b9:77:5f:9c:0a:f3:f5:26:93:0d:f2:9b:12:b4:b3: bf:75:b9:4d:84:22:7a:9e:0d:35:c6:bf:0e:c3:7c: 07:12:49:a3:8a:e0:19:a2:aa:eb:46:1a:5a:60:5b: 3a:44:dd:29:b1:8b:5b:ab:28:b8:45:12:35:ad:b5: a7:6a:b0:36:99:14:b5:f4:40:1a:e1:39:f5:7e:aa: 85:c8:b7:34:fe:fd:f6:7e:12:e6:eb:50:9e:33:e1: dd:84:55:eb:fe:fc:3e:70:fb:f0:c2:24:7e:92:b4: e4:9d:33:d0:13:93:0c:67:b6:eb:07:01:7e:cb:8a: ee:d0:c1:ef:ae:f3:6f:8c:08:0b:18:ab:c0:55:91: a7:cb:6b:c9:93:32:21:d3:54:62:67:a9:e2:3b:35: 9e:41:b9:c9:ca:34:35:12:64:18:be:88:1f:64:ac: 94:8f:1a:28:1c:9a:ad:30:9d:7c:73:f2:9c:ab:42: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:85:EC:AD:2A:27:F8:A4:65:80:FD:3A:4E:39:C4:DB:F1:E8:8C X509v3 Authority Key Identifier: keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:31:0f:df:08:09:c6:4b:0f:33:2f:17:5d:02:6b:44:f7:03: 0f:06:9c:f8:fa:cd:f1:2f:ad:ac:7a:88:82:d1:c9:01:51:fc: 2e:81:f5:91:4f:33:aa:c9:18:ce:17:9e:63:28:3c:bb:6c:a4: ed:2c:3c:a5:4b:e8:b8:8b:98:00:3b:da:a8:1c:55:aa:60:29: b9:6d:c2:d8:51:4e:89:6a:dc:9c:32:b2:cf:76:8b:d4:1f:b2: 8a:04:c2:d5:3c:08:2c:5a:6f:f2:e4:e3:8d:92:eb:95:37:46: 0e:fa:45:5e:94:78:52:eb:a1:ec:98:94:27:dc:59:45:62:01: 2b:7f:df:fa:25:3f:6c:c5:7e:b8:60:61:ee:7f:78:75:89:81: b0:91:8a:b1:e9:c1:23:49:14:41:4a:e1:70:47:e1:e9:11:78: 25:a7:1f:a0:66:a7:52:24:56:15:b8:b7:33:78:d6:a5:61:77: 1b:60:2d:be:95:2f:e7:29:3d:d5:42:57:5a:29:0f:46:e6:f3: 3b:22:76:8b:a1:c2:05:94:bb:7f:94:5d:ee:f0:e4:1b:05:34: f3:0f:af:d7:79:46:10:6b:e5:fe:da:79:4e:ac:b8:fa:24:1b: 78:5b:53:96:21:96:aa:78:78:97:bb:b9:ae:98:8d:83:1d:aa: 72:ae:22:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLregNAsEBxyltPgrwB3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTM3MzNmNTBhNmE0NGE5MTRiOWY4ZjhlYmY3OGQ3ZmE0 ZWE5YTAwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EygxMmYwODVlY2FkMmEyN2Y4YTQ2NTgwZmQzYTRlMzljNGRiZjFlODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDK01bWbtcCBe6hjtaDvA6iOkWiK e3WBuIhR8de3nZ+lqlUoYTpkB1nhKqVwtAvCVa0peae47GuTNyfkwJv8/XaoxwDN auVxpoi5d1+cCvP1JpMN8psStLO/dblNhCJ6ng01xr8Ow3wHEkmjiuAZoqrrRhpa YFs6RN0psYtbqyi4RRI1rbWnarA2mRS19EAa4Tn1fqqFyLc0/v32fhLm61CeM+Hd hFXr/vw+cPvwwiR+krTknTPQE5MMZ7brBwF+y4ru0MHvrvNvjAgLGKvAVZGny2vJ kzIh01RiZ6niOzWeQbnJyjQ1EmQYvogfZKyUjxooHJqtMJ18c/Kcq0J3nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLwheytKif4pGWA/TpOOcTb8eiMMB8GA1UdIwQY MBaAFFUTcz9QpqRKkUufj46/eNf6TqmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYjZiYTAtYjg3My00ODA4LWEyMmYt MTQxYjM5YTE5OWQ0LzEvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYjZiYTAtYjg3My00ODA4LWEyMmYtMTQxYjM5YTE5OWQ0 LzEvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDEP3wgJ xksPMy8XXQJrRPcDDwac+PrN8S+trHqIgtHJAVH8LoH1kU8zqskYzheeYyg8u2yk 7Sw8pUvouIuYADvaqBxVqmApuW3C2FFOiWrcnDKyz3aL1B+yigTC1TwILFpv8uTj jZLrlTdGDvpFXpR4Uuuh7JiUJ9xZRWIBK3/f+iU/bMV+uGBh7n94dYmBsJGKsenB I0kUQUrhcEfh6RF4JacfoGanUiRWFbi3M3jWpWF3G2AtvpUv5yk91UJXWikPRubz OyJ2i6HCBZS7f5Rd7vDkGwU08w+v13lGEGvl/tp5Tqy4+iQbeFtTliGWqnh4l7u5 rpiNgx2qcq4iMg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:08 2025 by rpki-client