This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json) Hash identifier: rBA5BUFjRvfRkryImWzwtwpFdPlaJUETr+vGITO6Cqk= Subject key identifier: 21:BF:41:30:71:38:93:6D:DA:36:76:30:41:45:72:35:3C:C9:6B:91 Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Certificate serial: 019AF68A400387ADC38B492392A9ED32FAAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft Manifest number: 1392 Signing time: Sun 07 Dec 2025 02:00:46 +0000 Manifest this update: Sun 07 Dec 2025 02:00:46 +0000 Manifest next update: Mon 08 Dec 2025 02:00:46 +0000 Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=) 2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: Ui4SZiNZCBl38i3V8ehgD6G2O4vtt2LyRj7uaI8Vhlw=) 3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:40:03:87:ad:c3:8b:49:23:92:a9:ed:32:fa:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Validity Not Before: Dec 7 02:00:46 2025 GMT Not After : Dec 8 02:00:46 2025 GMT Subject: CN=21bf41307138936dda367630414572353cc96b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:b0:e9:33:72:22:df:9e:c9:b0:01:51:ba: 34:97:4a:79:2f:a6:f8:6c:65:17:d5:39:26:42:82: 1f:35:23:5f:a8:70:37:36:1f:f7:d3:67:d6:c9:e9: 18:48:75:68:6d:22:83:e0:e4:a3:a7:53:d0:1f:02: 42:b4:44:c8:c9:65:0d:b1:5d:6d:26:8b:c9:fa:ee: cd:53:aa:fe:ba:5c:9e:43:48:db:3e:c8:14:d1:f2: 1d:0c:0f:29:fb:a5:f9:95:c1:b6:d2:2e:7a:ac:1f: ca:bb:1c:15:f3:b4:d0:79:4a:de:26:f3:59:a1:48: dd:74:c3:ca:86:67:7c:5a:cb:1e:8c:5f:2b:ce:ed: c9:96:0c:22:5e:2a:81:27:f4:b5:b9:f0:78:22:de: 89:27:0d:64:fe:62:a7:40:cf:dc:a3:b1:c9:68:4f: 37:b1:47:cc:81:2d:03:f3:00:b4:33:b0:12:4f:ed: b6:9a:f5:94:b4:84:61:74:23:19:d8:8b:d8:e2:0c: cc:bf:1c:fe:19:80:62:46:2b:db:d6:b8:ad:a3:cb: cf:3d:c5:1b:1b:bd:7a:85:db:65:0b:a3:10:98:61: aa:c6:23:01:b8:81:a9:f7:6a:79:08:9f:22:4a:8b: 4c:fc:c9:36:3c:de:17:06:b8:a0:7e:de:b4:b4:e1: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:41:30:71:38:93:6D:DA:36:76:30:41:45:72:35:3C:C9:6B:91 X509v3 Authority Key Identifier: keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:13:89:aa:db:1f:50:4f:aa:b6:69:c3:11:81:db:fb:17:e7: 4d:a8:e3:37:f4:14:f2:ee:94:7d:f6:23:16:2c:d0:06:04:d5: 75:52:83:bd:27:75:37:c8:d2:25:50:36:29:b6:6e:99:ce:c7: fc:c5:0a:d7:4b:52:e1:fa:3a:2e:89:c6:72:91:79:1c:92:c6: 11:0e:7e:3d:7a:fc:f8:fc:a5:71:8a:f4:7c:19:3e:9c:99:e9: f5:95:3c:cf:d6:ff:06:a4:d0:80:32:a1:84:ab:e5:20:a9:5f: 02:50:ae:d5:b8:5e:9f:0c:cb:90:66:d5:78:a3:97:85:3c:0c: 77:a8:85:8d:83:df:16:8d:8c:f9:83:f9:83:cf:97:37:fd:92: 22:af:1e:3d:eb:71:c4:29:17:25:43:ff:8a:50:ff:a4:f7:8f: 16:8f:c0:98:e8:b1:71:98:6d:00:18:2d:22:c1:2f:23:e6:52: 3f:74:61:de:e7:a1:93:e2:4a:6c:54:12:bf:fa:90:c9:5b:ff: c3:1c:61:03:4e:4d:8c:d9:36:7b:fe:12:1d:db:94:cf:ab:40: 31:79:2d:89:9a:a9:32:c8:ff:a0:5c:96:ab:78:07:22:46:4f: 9c:06:6a:9b:33:bd:82:2c:85:44:53:e9:3e:c7:bb:20:aa:e5: 02:14:37:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ikADh63Di0kjkqntMvqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi NjlhMmMwHhcNMjUxMjA3MDIwMDQ2WhcNMjUxMjA4MDIwMDQ2WjAzMTEwLwYDVQQD EygyMWJmNDEzMDcxMzg5MzZkZGEzNjc2MzA0MTQ1NzIzNTNjYzk2YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Gw6TNyIt+eybABUbo0l0p5L6b4 bGUX1TkmQoIfNSNfqHA3Nh/302fWyekYSHVobSKD4OSjp1PQHwJCtETIyWUNsV1t JovJ+u7NU6r+ulyeQ0jbPsgU0fIdDA8p+6X5lcG20i56rB/KuxwV87TQeUreJvNZ oUjddMPKhmd8WssejF8rzu3JlgwiXiqBJ/S1ufB4It6JJw1k/mKnQM/co7HJaE83 sUfMgS0D8wC0M7AST+22mvWUtIRhdCMZ2IvY4gzMvxz+GYBiRivb1rito8vPPcUb G716hdtlC6MQmGGqxiMBuIGp92p5CJ8iSotM/Mk2PN4XBrigft60tOEW6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG/QTBxOJNt2jZ2MEFFcjU8yWuRMB8GA1UdIwQY MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt NjQyNzhjMGQ4ZWJmLzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxOJqtsf UE+qtmnDEYHb+xfnTajjN/QU8u6UffYjFizQBgTVdVKDvSd1N8jSJVA2KbZumc7H /MUK10tS4fo6LonGcpF5HJLGEQ5+PXr8+PylcYr0fBk+nJnp9ZU8z9b/BqTQgDKh hKvlIKlfAlCu1bhenwzLkGbVeKOXhTwMd6iFjYPfFo2M+YP5g8+XN/2SIq8ePetx xCkXJUP/ilD/pPePFo/AmOixcZhtABgtIsEvI+ZSP3Rh3uehk+JKbFQSv/qQyVv/ wxxhA05NjNk2e/4SHduUz6tAMXktiZqpMsj/oFyWq3gHIkZPnAZqmzO9giyFRFPp Pse7IKrlAhQ3oA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:23:31 2025 by rpki-client