This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft File: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json) Hash identifier: btaJ6LJbnh95G/J53iAHlwQjZko/LVDu0tN2Gxdv8Vg= Subject key identifier: ED:FA:1E:D1:02:7A:87:F3:8B:89:37:34:55:37:C9:6D:34:B5:2C:C1 Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08 Certificate issuer: /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08 Certificate serial: 019AF12E7E6F31CB0A0ED39A9067B3A8551C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft Manifest number: 0F89 Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: UTTH-IaK-KygVMC3443mlQMx1tE.roa (hash: KaccohMbQWCa0xUtmGU3VvPQYUMzJjUZd1bKqbI3gbU=) 2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: uY/X9y7yX4B2aRRo1Yiuqh5G40jVakCkpnoXV0OEAbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7e:6f:31:cb:0a:0e:d3:9a:90:67:b3:a8:55:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08 Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=edfa1ed1027a87f38b8937345537c96d34b52cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:ab:0f:43:8b:8d:79:c4:54:79:40:42:a9: cf:64:27:26:27:9c:4c:58:68:c2:5e:b3:3a:02:80: 8a:bb:2d:74:3f:9a:27:a5:60:78:49:64:1e:1b:74: e8:99:6e:c0:02:ae:d6:65:81:59:57:00:d7:03:52: 28:bb:11:0c:58:7c:ee:d8:38:ed:50:de:02:23:d7: ad:cb:b9:09:c3:f0:89:80:78:ff:b9:4a:35:e2:be: fd:03:30:f8:87:7b:c6:2d:f8:1d:02:22:a9:1b:38: c5:93:29:d0:53:74:05:87:4c:aa:69:bf:ce:ae:39: 67:f1:06:d5:4f:5c:2b:c3:e1:e2:5e:a8:fd:61:67: 07:98:76:d9:27:a9:3a:99:1d:b1:74:4c:01:eb:8e: 92:d1:f7:1a:64:25:a6:eb:3f:df:b9:99:9a:7d:5c: 2a:d6:ab:a4:6a:8c:c1:6e:32:fb:77:d9:eb:49:2a: ef:65:7a:bf:31:49:0b:20:e0:af:25:10:14:d9:6b: 4d:93:07:14:f3:a6:f6:18:3a:ab:50:30:ef:e6:01: 34:4e:3f:b1:f4:87:4a:51:e9:00:0f:d1:d3:4a:46: 8a:c0:6a:32:13:b4:db:73:88:0e:73:7d:56:b6:03: 33:52:6e:aa:0d:2d:0c:0c:23:1d:96:5e:f7:04:6e: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FA:1E:D1:02:7A:87:F3:8B:89:37:34:55:37:C9:6D:34:B5:2C:C1 X509v3 Authority Key Identifier: keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0c:45:2a:22:04:3b:10:a0:7a:29:7a:67:51:6c:c0:e0:47: a6:e7:c7:c3:7c:42:29:1f:47:32:59:25:ca:cb:18:68:0b:e6: 3e:1c:e6:70:e0:fe:ea:7b:f6:06:5e:3f:92:fa:ae:e2:21:4b: f9:fd:65:be:cd:93:82:80:49:25:03:d6:b3:b6:b5:c2:aa:93: e0:c8:4f:bb:3a:19:47:c2:01:c3:be:46:49:25:0c:f7:1f:80: 7e:e2:71:35:c5:14:ac:5b:01:1e:c7:43:5f:f7:1e:a4:52:48: de:56:63:c9:5f:87:61:07:0b:4a:8b:0f:20:63:d1:c1:80:41: 0b:bf:42:0f:98:49:fa:46:42:68:0e:0d:1f:fe:39:81:14:76: d4:5e:c5:30:a5:bf:02:84:0e:cb:6b:80:1a:85:fe:84:51:ce: 68:84:35:27:1b:e0:4d:fd:c2:8d:5e:d0:0e:95:83:04:34:c2: a1:26:b8:b5:27:5d:e0:67:30:62:dc:7d:81:f0:06:dd:4b:cf: ca:e0:39:af:e6:f5:a0:cd:63:43:fe:06:7e:a0:25:53:81:12: bb:6f:cc:af:3b:cf:95:c7:57:81:5a:25:94:68:db:59:dc:cc: 6e:86:67:e6:f9:bf:1f:ff:01:9f:2a:12:df:e7:4e:cf:19:37: 7b:1a:63:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn5vMcsKDtOakGezqFUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWYxNTliYWI4MzY2MWZkOTNlYWQ0MzBjM2JkYjFlYWE3 ZWFmMDgwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD EyhlZGZhMWVkMTAyN2E4N2YzOGI4OTM3MzQ1NTM3Yzk2ZDM0YjUyY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GSrD0OLjXnEVHlAQqnPZCcmJ5xM WGjCXrM6AoCKuy10P5onpWB4SWQeG3TomW7AAq7WZYFZVwDXA1IouxEMWHzu2Djt UN4CI9ety7kJw/CJgHj/uUo14r79AzD4h3vGLfgdAiKpGzjFkynQU3QFh0yqab/O rjln8QbVT1wrw+HiXqj9YWcHmHbZJ6k6mR2xdEwB646S0fcaZCWm6z/fuZmafVwq 1qukaozBbjL7d9nrSSrvZXq/MUkLIOCvJRAU2WtNkwcU86b2GDqrUDDv5gE0Tj+x 9IdKUekAD9HTSkaKwGoyE7Tbc4gOc31WtgMzUm6qDS0MDCMdll73BG7irQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO36HtECeofzi4k3NFU3yW00tSzBMB8GA1UdIwQY MBaAFL6fFZurg2Yf2T6tQww72x6qfq8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnA4Vm02dURaaF9aUHExREREdmJIcXAtcndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNDgxZmEtMmQwZC00ZThlLWIyZDMt MjhkODI0OGI1YjYxLzEvdnA4Vm02dURaaF9aUHExREREdmJIcXAtcndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hNDgxZmEtMmQwZC00ZThlLWIyZDMtMjhkODI0OGI1YjYx LzEvdnA4Vm02dURaaF9aUHExREREdmJIcXAtcndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwxFKiIE OxCgeil6Z1FswOBHpufHw3xCKR9HMlklyssYaAvmPhzmcOD+6nv2Bl4/kvqu4iFL +f1lvs2TgoBJJQPWs7a1wqqT4MhPuzoZR8IBw75GSSUM9x+AfuJxNcUUrFsBHsdD X/cepFJI3lZjyV+HYQcLSosPIGPRwYBBC79CD5hJ+kZCaA4NH/45gRR21F7FMKW/ AoQOy2uAGoX+hFHOaIQ1JxvgTf3CjV7QDpWDBDTCoSa4tSdd4GcwYtx9gfAG3UvP yuA5r+b1oM1jQ/4GfqAlU4ESu2/MrzvPlcdXgVollGjbWdzMboZn5vm/H/8BnyoS 3+dOzxk3expjLA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:03 2025 by rpki-client