This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json) Hash identifier: pS4oU4AVj/E621oXOyPEApsDO9sfOwnbAqU2t3bs6Y0= Subject key identifier: 56:F4:39:AE:FD:E7:FF:3F:EF:8A:C2:3F:0B:D9:8C:C6:12:DD:82:AD Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Certificate serial: 019AF0BF83644B36CFDD302B0BA572CA1CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft Manifest number: 025E Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=) 2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: D/2BF1qtgBLxVf36+roi6yhj9b4RlWWGHRSx1tQeodw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:83:64:4b:36:cf:dd:30:2b:0b:a5:72:ca:1c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=56f439aefde7ff3fef8ac23f0bd98cc612dd82ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:35:0b:9d:8a:b9:5b:85:08:7b:d1:7c:af: f7:19:92:35:17:96:05:45:83:52:12:a8:29:96:5a: b7:8b:82:13:ae:d5:a5:2d:bd:8c:70:08:6c:de:21: 17:10:41:2d:f7:df:85:1d:b7:4e:81:8e:24:17:11: 11:dd:ee:66:f4:1c:fd:53:48:9a:f3:dc:31:d3:e1: fa:25:59:0a:9f:78:05:f7:d3:39:1d:7c:cf:85:6c: 8a:21:96:97:37:5d:28:fe:51:e2:fe:31:c6:e6:6e: 92:97:32:38:8d:7b:28:96:6a:b6:a0:f4:3b:83:15: 65:0a:c8:97:c6:6f:fb:58:05:25:9f:b1:b0:b2:81: 48:08:dc:51:4f:42:0b:3d:12:85:52:3c:fe:1e:30: 0a:49:5e:36:ae:56:16:57:2e:d7:da:15:40:57:2e: 87:18:32:40:9b:92:d6:0c:a3:38:e2:9d:e9:5c:75: b2:d4:d8:be:34:6e:a9:46:3c:78:7f:1d:44:bf:3a: 59:51:94:da:0e:f0:b6:a5:83:86:73:8a:af:d1:be: 93:f2:f4:cf:c0:2d:6a:eb:d3:0d:c1:f8:74:12:43: 8e:95:31:06:d7:ba:71:25:ab:e2:48:22:eb:e9:70: 66:50:6e:c8:70:af:09:66:65:4b:50:f5:bd:07:5f: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:39:AE:FD:E7:FF:3F:EF:8A:C2:3F:0B:D9:8C:C6:12:DD:82:AD X509v3 Authority Key Identifier: keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:31:fa:32:cb:55:16:12:f2:fb:f4:1e:e8:85:a0:90:77:62: cb:45:2a:d2:d1:ed:b2:42:5c:5b:2e:2f:6e:ab:f7:03:2e:f2: 17:51:f1:8e:50:2c:24:0d:ce:64:4f:41:b0:f8:af:95:d8:62: ad:8f:23:57:47:48:f5:f9:a1:70:e0:f2:cd:ed:60:a9:6c:b9: 63:15:4c:1d:6a:14:39:02:93:a0:2c:99:f7:37:d9:9e:8e:a4: c8:8c:6a:05:f9:8a:d0:ef:c1:e2:1e:7a:aa:ea:03:27:8e:33: f8:3c:f6:82:29:3d:7e:72:92:b3:b4:df:16:4c:ec:94:e8:c1: 3d:1a:a1:ff:27:62:3c:53:65:f4:05:5b:4e:59:5a:1d:f8:78: 0a:2c:a7:2f:85:87:07:0a:a2:66:96:78:16:d5:2c:12:00:19: 39:a1:13:58:88:2b:14:4f:fa:c1:8f:c8:d3:2c:82:94:fd:a8: 8c:9f:03:12:ec:26:b0:c5:fc:cc:3f:4b:40:e9:b2:d8:ff:98: ec:15:b3:84:c2:e9:99:5b:78:15:14:36:ad:94:3f:56:4e:e0: 1f:c8:79:7f:d1:8d:57:92:f6:57:4e:90:7c:02:17:8d:cc:4b: ea:77:32:37:d5:88:62:a0:96:97:e4:49:52:ba:13:71:20:28: 12:42:06:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4NkSzbP3TArC6VyyhynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZjlkNTgxOWQ0NDBhZGNlY2RhMWVlZWI3Yzk4YWU5OWM0 ZDA3MDcwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD Eyg1NmY0MzlhZWZkZTdmZjNmZWY4YWMyM2YwYmQ5OGNjNjEyZGQ4MmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumo1C52KuVuFCHvRfK/3GZI1F5YF RYNSEqgpllq3i4ITrtWlLb2McAhs3iEXEEEt99+FHbdOgY4kFxER3e5m9Bz9U0ia 89wx0+H6JVkKn3gF99M5HXzPhWyKIZaXN10o/lHi/jHG5m6SlzI4jXsolmq2oPQ7 gxVlCsiXxm/7WAUln7GwsoFICNxRT0ILPRKFUjz+HjAKSV42rlYWVy7X2hVAVy6H GDJAm5LWDKM44p3pXHWy1Ni+NG6pRjx4fx1EvzpZUZTaDvC2pYOGc4qv0b6T8vTP wC1q69MNwfh0EkOOlTEG17pxJaviSCLr6XBmUG7IcK8JZmVLUPW9B1+LCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb0Oa795/8/74rCPwvZjMYS3YKtMB8GA1UdIwQY MBaAFFT51YGdRArc7Noe7rfJiumcTQcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTIt OWQzMTVkMTE1Y2JiLzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTItOWQzMTVkMTE1Y2Ji LzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjH6MstV FhLy+/Qe6IWgkHdiy0Uq0tHtskJcWy4vbqv3Ay7yF1HxjlAsJA3OZE9BsPivldhi rY8jV0dI9fmhcODyze1gqWy5YxVMHWoUOQKToCyZ9zfZno6kyIxqBfmK0O/B4h56 quoDJ44z+Dz2gik9fnKSs7TfFkzslOjBPRqh/ydiPFNl9AVbTllaHfh4CiynL4WH BwqiZpZ4FtUsEgAZOaETWIgrFE/6wY/I0yyClP2ojJ8DEuwmsMX8zD9LQOmy2P+Y 7BWzhMLpmVt4FRQ2rZQ/Vk7gH8h5f9GNV5L2V06QfAIXjcxL6ncyN9WIYqCWl+RJ UroTcSAoEkIGQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:57 2025 by rpki-client