This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json) Hash identifier: jBjA7yjkAOyLkIJ3NxXoRqbaCOdurkNlIO9WuRHta7E= Subject key identifier: E7:7B:1A:10:48:3F:83:E9:FE:2E:2F:4F:BB:2F:C1:79:05:04:BF:FD Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98 Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198 Certificate serial: 019B4CCCC0590DA9EC3994832EE55A707C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft Manifest number: 1110 Signing time: Tue 23 Dec 2025 20:00:45 +0000 Manifest this update: Tue 23 Dec 2025 20:00:45 +0000 Manifest next update: Wed 24 Dec 2025 20:00:45 +0000 Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=) 2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: ZdODojxcRprejEPWSiPg1ppuq/A7yfvmaU3cRd7CH4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:c0:59:0d:a9:ec:39:94:83:2e:e5:5a:70:7c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198 Validity Not Before: Dec 23 20:00:45 2025 GMT Not After : Dec 24 20:00:45 2025 GMT Subject: CN=e77b1a10483f83e9fe2e2f4fbb2fc1790504bffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:54:ee:d9:c1:c0:cc:24:f2:e5:4d:14:a0: 21:3f:8c:a7:6c:28:76:7d:b8:b9:e6:2a:b8:74:40: e6:91:62:2c:a2:fe:68:cb:9d:07:a2:c1:8d:70:3e: 48:5f:43:50:e7:ba:8f:c7:c0:92:87:44:dd:18:29: 45:5e:1d:9f:53:bf:cb:c1:81:b6:5e:ab:40:de:8a: 6a:7f:25:e8:a5:85:fa:45:f4:e0:4d:05:f5:a7:01: e2:b3:32:34:1b:93:83:ec:b6:62:0d:73:e9:cc:2d: e2:32:be:b4:ce:48:bf:d5:87:f4:8f:b9:a3:0c:0f: de:de:55:8c:eb:a3:af:f5:50:99:0b:fa:02:10:51: 47:77:87:fd:ca:b9:a9:88:6c:7a:01:65:2e:3f:45: 15:27:62:cd:d0:22:ae:37:f0:e9:ef:65:c1:f9:5a: 26:ad:95:c4:2c:1d:58:d3:2d:36:55:94:63:da:c5: 73:67:d4:a5:53:59:fd:15:6c:65:28:f9:58:60:71: 3c:74:92:04:f1:ea:76:04:56:f6:1d:0c:5c:71:45: a4:95:6a:7f:f4:16:72:e7:ff:3c:a3:5f:e3:0c:01: 49:61:a1:cb:b2:68:38:c5:63:4e:45:bf:3a:d4:94: b8:6d:0c:d2:c8:73:19:51:94:79:0a:85:c4:c7:93: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7B:1A:10:48:3F:83:E9:FE:2E:2F:4F:BB:2F:C1:79:05:04:BF:FD X509v3 Authority Key Identifier: keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:31:c6:5d:71:5c:7f:ba:f5:a7:ee:3f:d1:a7:88:b8:b2:96: fc:f2:fd:78:1e:d7:c4:79:0a:2f:4d:0d:09:c2:78:65:ba:88: 03:16:af:76:56:07:ad:23:0f:80:5a:94:31:99:d5:f2:1a:d1: a7:49:8f:c6:93:72:13:e7:db:b9:f4:25:a1:2a:ec:56:8b:a3: 8b:44:4f:e9:21:bf:d0:66:4b:22:20:b5:79:85:7b:7a:07:ac: 57:e8:97:aa:55:4e:ec:b5:6f:7f:b3:3d:77:39:02:c0:7e:75: e9:5a:68:cc:31:10:bd:02:ab:28:c1:17:49:34:96:c4:4d:a1: 23:70:29:90:37:aa:23:7c:3b:39:36:55:d8:06:8a:b7:e8:91: 6e:80:c5:b5:ae:78:93:91:f8:0e:1b:7c:b6:48:58:01:4b:a2: e3:81:b4:83:6d:5e:c5:97:64:76:fb:dc:d8:51:8c:a8:07:0b: 5e:72:92:06:e5:19:35:31:de:99:4f:bd:f4:6f:23:25:e9:3f: 9b:6d:74:65:09:5b:90:a7:82:ef:c2:4a:b0:7c:64:60:c4:93: 78:46:bd:99:03:64:83:59:f2:1c:5d:ed:d6:09:34:68:b8:be: 7c:66:bc:42:a9:e0:c5:f8:38:10:39:4f:eb:32:ca:85:ef:e1: cb:fb:9b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzMBZDansOZSDLuVacHwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWZjMzg4NDcwNWM0YWVkY2ZlN2E0ZDE3ZGRiNzUyZTFm ZTYxOTgwHhcNMjUxMjIzMjAwMDQ1WhcNMjUxMjI0MjAwMDQ1WjAzMTEwLwYDVQQD EyhlNzdiMWExMDQ4M2Y4M2U5ZmUyZTJmNGZiYjJmYzE3OTA1MDRiZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOFU7tnBwMwk8uVNFKAhP4ynbCh2 fbi55iq4dEDmkWIsov5oy50HosGNcD5IX0NQ57qPx8CSh0TdGClFXh2fU7/LwYG2 XqtA3opqfyXopYX6RfTgTQX1pwHiszI0G5OD7LZiDXPpzC3iMr60zki/1Yf0j7mj DA/e3lWM66Ov9VCZC/oCEFFHd4f9yrmpiGx6AWUuP0UVJ2LN0CKuN/Dp72XB+Vom rZXELB1Y0y02VZRj2sVzZ9SlU1n9FWxlKPlYYHE8dJIE8ep2BFb2HQxccUWklWp/ 9BZy5/88o1/jDAFJYaHLsmg4xWNORb861JS4bQzSyHMZUZR5CoXEx5P9rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd7GhBIP4Pp/i4vT7svwXkFBL/9MB8GA1UdIwQY MBaAFL6fw4hHBcSu3P56TRfdt1Lh/mGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYt MTkwNmE0YTFmOTkzLzEvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYtMTkwNmE0YTFmOTkz LzEvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajHGXXFc f7r1p+4/0aeIuLKW/PL9eB7XxHkKL00NCcJ4ZbqIAxavdlYHrSMPgFqUMZnV8hrR p0mPxpNyE+fbufQloSrsVouji0RP6SG/0GZLIiC1eYV7egesV+iXqlVO7LVvf7M9 dzkCwH516VpozDEQvQKrKMEXSTSWxE2hI3ApkDeqI3w7OTZV2AaKt+iRboDFta54 k5H4Dht8tkhYAUui44G0g21exZdkdvvc2FGMqAcLXnKSBuUZNTHemU+99G8jJek/ m210ZQlbkKeC78JKsHxkYMSTeEa9mQNkg1nyHF3t1gk0aLi+fGa8Qqngxfg4EDlP 6zLKhe/hy/ubXg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:33:16 2025 by rpki-client