This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json) Hash identifier: 58DIbIO6tUe8S/C0UQAxkjIZsIk03XRxY091s/X97Ro= Subject key identifier: 67:19:D9:8C:F8:C0:EF:7F:73:13:25:19:DD:49:C6:FA:17:83:A7:A4 Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee Certificate serial: 019AF1D1BABECE63CABDC23E73856512FC21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft Manifest number: 0154 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: Mt4ySnJ9tLnzzQYq2U6tfp3Q3JA.roa (hash: Czeue2iwQkgf4dbWmDFWclQeOMsHJV7V0inLeSwakN8=) 2: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: pmtCX//YUEgVQOSpCkVxLjzHfGB1VOpslVbbXK5o7pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ba:be:ce:63:ca:bd:c2:3e:73:85:65:12:fc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=6719d98cf8c0ef7f73132519dd49c6fa1783a7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:3d:f0:93:55:ca:07:e8:f2:16:2c:0f:97: a7:f7:d0:a0:2b:7a:e3:15:cc:c9:8f:25:3e:83:26: 2a:ac:74:90:b2:ce:4a:35:ad:d7:b1:13:e2:ac:e3: 8b:a1:20:3e:8c:53:ae:82:64:4d:1a:ef:de:cd:41: 80:77:1c:c7:18:e7:56:f9:0a:75:ed:f9:53:53:fd: 63:3f:f2:3c:03:6f:14:b4:b1:79:3c:c8:27:2d:60: 9d:36:6f:d1:a5:34:ac:fa:be:ff:73:67:f7:5b:76: b2:97:45:a3:e1:a6:28:79:1f:ca:e5:f3:40:31:eb: fc:57:38:a6:17:d5:6a:83:e9:8f:59:dc:a4:a7:63: ae:e9:64:94:f1:b0:6e:91:32:9f:e1:c9:ee:db:77: 28:17:9a:91:86:77:72:95:66:46:68:70:cf:aa:79: 9b:b4:98:1b:57:1d:bd:ab:80:4b:81:08:a5:d7:2d: 23:77:a4:89:24:49:e7:ba:d2:c1:ee:33:4e:78:44: 62:46:c4:63:93:45:7b:8f:b5:db:f3:63:86:2c:03: 9e:be:88:33:51:07:97:ae:cd:0f:8f:a9:32:04:ac: 68:2d:7d:fb:30:62:80:16:0d:93:60:b6:97:77:63: 6a:07:2c:3f:fe:69:85:c0:21:e4:18:65:76:09:8c: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:19:D9:8C:F8:C0:EF:7F:73:13:25:19:DD:49:C6:FA:17:83:A7:A4 X509v3 Authority Key Identifier: keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a6:25:06:6e:b5:69:4f:57:0c:be:04:06:64:10:56:f5:79: 39:a0:c3:17:2b:ba:21:0c:c2:1e:14:55:6a:b2:d0:e7:9d:0a: c3:24:65:66:0f:33:02:29:da:31:8a:7f:5b:7e:24:15:9f:9d: c4:b3:cb:b8:8c:fe:74:10:8e:61:ee:ea:9b:59:ec:50:3b:ce: df:41:d0:98:20:4b:d6:2e:83:46:85:72:c9:58:80:75:bc:56: 0b:84:4e:6c:31:95:a5:71:cf:33:b2:03:58:f9:71:96:b2:94: 90:35:a0:e9:5c:e5:81:d2:7f:1d:aa:d0:d4:84:fc:8e:d1:ac: e8:93:7b:37:3a:bd:10:52:7b:dd:ec:5c:64:6d:24:56:9b:97: b2:fc:90:c9:aa:74:a6:3e:60:a1:d2:18:15:2c:8c:5e:c5:98: 6e:b8:9f:34:3c:06:a1:52:00:99:10:f8:33:92:1f:11:00:e5: b7:1a:e7:ad:b3:c3:7e:43:50:08:58:d6:13:00:05:53:79:d8: e5:70:1c:2a:e5:04:7b:3a:e6:33:e4:f5:38:a7:97:6a:16:44: 45:87:64:75:37:6a:b5:c1:42:6b:82:ad:a6:db:68:d3:00:22: 25:f5:40:05:a7:2f:9b:0a:dd:e0:80:a1:e7:35:85:e1:25:94: 1b:49:a4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bq+zmPKvcI+c4VlEvwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDZkZjA3ZmYzY2IyNmRmY2Y0ZWViODc2MWZiMDE2Y2Fm N2Y5ZWUwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD Eyg2NzE5ZDk4Y2Y4YzBlZjdmNzMxMzI1MTlkZDQ5YzZmYTE3ODNhN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN498JNVygfo8hYsD5en99CgK3rj FczJjyU+gyYqrHSQss5KNa3XsRPirOOLoSA+jFOugmRNGu/ezUGAdxzHGOdW+Qp1 7flTU/1jP/I8A28UtLF5PMgnLWCdNm/RpTSs+r7/c2f3W3ayl0Wj4aYoeR/K5fNA Mev8VzimF9Vqg+mPWdykp2Ou6WSU8bBukTKf4cnu23coF5qRhndylWZGaHDPqnmb tJgbVx29q4BLgQil1y0jd6SJJEnnutLB7jNOeERiRsRjk0V7j7Xb82OGLAOevogz UQeXrs0Pj6kyBKxoLX37MGKAFg2TYLaXd2NqByw//mmFwCHkGGV2CYw9LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcZ2Yz4wO9/cxMlGd1JxvoXg6ekMB8GA1UdIwQY MBaAFFRG3wf/PLJt/PTuuHYfsBbK9/nuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDct NTY1NjBiMjZhMGRiLzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjg1ZGEtMzExZi00NWI0LWE3NDctNTY1NjBiMjZhMGRi LzEvVkViZkJfODhzbTM4OU82NGRoLXdGc3IzLWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6YlBm61 aU9XDL4EBmQQVvV5OaDDFyu6IQzCHhRVarLQ550KwyRlZg8zAinaMYp/W34kFZ+d xLPLuIz+dBCOYe7qm1nsUDvO30HQmCBL1i6DRoVyyViAdbxWC4RObDGVpXHPM7ID WPlxlrKUkDWg6VzlgdJ/HarQ1IT8jtGs6JN7Nzq9EFJ73excZG0kVpuXsvyQyap0 pj5godIYFSyMXsWYbrifNDwGoVIAmRD4M5IfEQDltxrnrbPDfkNQCFjWEwAFU3nY 5XAcKuUEezrmM+T1OKeXahZERYdkdTdqtcFCa4Ktptto0wAiJfVABacvmwrd4ICh 5zWF4SWUG0mkpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:38 2025 by rpki-client