This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft File: VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json) Hash identifier: 5vIxKrS46cJJLJZbRjXUWxSyRe2sXLtecFmihNi61LY= Subject key identifier: BA:D3:80:FD:F9:92:54:F1:59:07:2F:92:12:0B:D2:AF:DC:68:D0:5F Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e Certificate serial: 019AF164A1E835844E6163003C2D1F0833F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft Manifest number: 13D1 Signing time: Sat 06 Dec 2025 02:01:35 +0000 Manifest this update: Sat 06 Dec 2025 02:01:35 +0000 Manifest next update: Sun 07 Dec 2025 02:01:35 +0000 Files and hashes: 1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: bRv7raEKTzLU3NUi23GlCFj6pW5ITiOKr8Bc3agwpZE=) 2: zAJ4z_rLfNTVDiMWL6ncN_yYa24.roa (hash: EtILhqnqDOPzVUQWUC5GlrRe7wnUPr/w8yX9c4PVZr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:a1:e8:35:84:4e:61:63:00:3c:2d:1f:08:33:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e Validity Not Before: Dec 6 02:01:35 2025 GMT Not After : Dec 7 02:01:35 2025 GMT Subject: CN=bad380fdf99254f159072f92120bd2afdc68d05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:3d:f2:2a:5e:0b:e3:31:18:12:c0:05:a4: ba:95:89:26:16:d3:c8:ad:ed:15:fa:bb:e8:50:87: 51:7d:1a:60:b2:85:fe:d4:17:3c:95:d0:de:33:70: 51:b4:a7:82:ac:87:a9:cb:00:a1:d0:33:81:80:68: 5d:a0:69:fc:97:c0:b6:2d:49:e7:a4:e7:e3:88:af: be:db:a7:f9:76:39:bc:9b:95:82:89:65:cb:40:2d: 56:d7:f6:da:67:c1:95:73:51:9b:e6:70:f9:b4:b8: f1:4a:a3:4f:62:45:aa:bc:0a:78:b8:ad:15:bd:47: 05:4e:d4:73:45:27:10:6e:6b:81:d9:14:94:1c:53: cc:8a:5e:9f:d3:09:c2:77:e7:50:f9:c7:61:cd:54: 4c:0d:0d:53:41:81:55:6a:b5:fc:fb:44:d7:28:64: 86:56:d6:36:fe:45:04:fa:55:30:b9:53:67:aa:bd: ee:d2:4e:3d:48:92:93:38:7f:f5:86:a4:06:b0:24: 7c:d2:28:0c:b8:f2:8e:65:96:43:7e:77:e4:c4:f6: 88:20:52:dd:a0:7c:85:33:3c:2b:cc:10:65:9a:a9: 5a:d4:78:dc:95:b7:76:86:57:6b:2c:23:ca:45:14: 6b:d5:61:74:bf:70:41:51:6b:bd:78:09:29:39:29: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D3:80:FD:F9:92:54:F1:59:07:2F:92:12:0B:D2:AF:DC:68:D0:5F X509v3 Authority Key Identifier: keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0b:e6:92:da:88:8a:b6:b0:bc:35:6d:73:63:4e:ec:6a:9e: 9c:8c:f2:63:66:e3:ad:9f:49:2b:7c:fc:61:77:07:40:24:61: 48:c3:12:24:0e:8d:52:0b:49:43:5f:3d:d8:42:39:db:cc:51: 55:0e:e3:4a:d6:cc:c9:c2:ac:55:df:63:63:71:2f:77:05:9c: b2:d7:db:65:a1:62:eb:64:cc:00:02:e9:9e:c6:88:d1:07:41: 8e:07:0e:03:ce:38:84:0c:f9:e3:64:ed:21:51:33:d6:8c:48: e3:f9:2b:91:ab:69:84:76:83:de:7b:4d:89:47:80:4a:17:91: 14:7f:9b:0c:8f:1e:29:a9:68:0c:8f:14:8d:86:d7:a1:3a:50: 1e:39:04:d3:c2:f3:93:54:41:1c:cb:f0:11:60:be:fa:0d:be: b2:54:bc:f2:3b:71:e0:9f:2b:2b:f3:15:45:64:85:31:60:dc: 87:80:fe:b2:eb:07:c9:1a:a8:dc:64:dc:a1:79:84:86:32:6e: c7:37:44:ef:c0:3c:83:25:2d:6e:5b:49:c8:05:18:82:be:99: 3d:a8:5f:e1:ca:44:f0:df:af:09:d5:f7:b1:c0:ea:c0:31:3f: 4b:8f:ea:50:c9:ab:1a:78:f5:86:11:2a:c6:3b:1e:58:2e:06: c2:37:48:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZKHoNYROYWMAPC0fCDPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTQzYmVlN2E3Y2NmNDc4MDJmNTVlYWU1NTdiYTVmY2Y5 Zjc5NWUwHhcNMjUxMjA2MDIwMTM1WhcNMjUxMjA3MDIwMTM1WjAzMTEwLwYDVQQD EyhiYWQzODBmZGY5OTI1NGYxNTkwNzJmOTIxMjBiZDJhZmRjNjhkMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2098ipeC+MxGBLABaS6lYkmFtPI re0V+rvoUIdRfRpgsoX+1Bc8ldDeM3BRtKeCrIepywCh0DOBgGhdoGn8l8C2LUnn pOfjiK++26f5djm8m5WCiWXLQC1W1/baZ8GVc1Gb5nD5tLjxSqNPYkWqvAp4uK0V vUcFTtRzRScQbmuB2RSUHFPMil6f0wnCd+dQ+cdhzVRMDQ1TQYFVarX8+0TXKGSG VtY2/kUE+lUwuVNnqr3u0k49SJKTOH/1hqQGsCR80igMuPKOZZZDfnfkxPaIIFLd oHyFMzwrzBBlmqla1Hjclbd2hldrLCPKRRRr1WF0v3BBUWu9eAkpOSnLIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrTgP35klTxWQcvkhIL0q/caNBfMB8GA1UdIwQY MBaAFFQUO+56fM9HgC9V6uVXul/Pn3leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEt Yjc1YjVmMzdkYjA5LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEtYjc1YjVmMzdkYjA5 LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgvmktqI irawvDVtc2NO7GqenIzyY2bjrZ9JK3z8YXcHQCRhSMMSJA6NUgtJQ1892EI528xR VQ7jStbMycKsVd9jY3EvdwWcstfbZaFi62TMAALpnsaI0QdBjgcOA844hAz542Tt IVEz1oxI4/krkatphHaD3ntNiUeASheRFH+bDI8eKaloDI8UjYbXoTpQHjkE08Lz k1RBHMvwEWC++g2+slS88jtx4J8rK/MVRWSFMWDch4D+susHyRqo3GTcoXmEhjJu xzdE78A8gyUtbltJyAUYgr6ZPahf4cpE8N+vCdX3scDqwDE/S4/qUMmrGnj1hhEq xjseWC4GwjdIeg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:38 2025 by rpki-client