This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft File: vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json) Hash identifier: GbAlnjiMcHgUv+u+M8d3q6xEmrdc8qwVspULrdkMIdg= Subject key identifier: 82:D2:00:E9:4D:CB:4C:B3:B4:16:44:60:1F:93:AE:BE:1C:AA:94:28 Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98 Certificate issuer: /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198 Certificate serial: 019B7D148B18B5AD8C3EE3640C11D2951689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft Manifest number: 1129 Signing time: Fri 02 Jan 2026 05:00:56 +0000 Manifest this update: Fri 02 Jan 2026 05:00:56 +0000 Manifest next update: Sat 03 Jan 2026 05:00:56 +0000 Files and hashes: 1: OxQ5KD2enOW3Q6SG5w9YoHDtQi4.roa (hash: 7v/MM1L+QU9CF1kjU9dOBbxcjiq8aqzftr7NOP1GZsU=) 2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: MrDTUwNI9CEn+kruLWOgJNwokVwgizgNbkjlXbAMYQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:14:8b:18:b5:ad:8c:3e:e3:64:0c:11:d2:95:16:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198 Validity Not Before: Jan 2 05:00:56 2026 GMT Not After : Jan 3 05:00:56 2026 GMT Subject: CN=82d200e94dcb4cb3b41644601f93aebe1caa9428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:16:ca:51:6b:17:b2:5f:09:1b:9d:fd:3c: 6d:b4:16:68:4d:e7:64:f6:5f:d1:ef:ca:52:d2:63: 65:bc:f5:4a:e6:3c:b3:d0:7d:43:65:33:22:bd:e9: c6:19:72:51:88:ed:19:32:12:65:c3:d3:d6:99:d7: 81:e0:66:7b:f6:1e:e6:06:ef:e1:0b:60:aa:20:06: 0c:21:d3:82:65:71:a0:ee:f9:ed:ea:66:b1:b6:9e: 2f:f3:1a:15:cb:25:22:bb:d0:f2:d9:99:21:9d:e3: 41:eb:52:34:c5:bf:36:d5:b4:75:7f:23:34:4d:17: 96:74:e8:db:47:aa:5e:b8:eb:c7:6d:1b:0b:cc:31: 4f:03:01:7d:57:e9:d9:6e:88:1a:bc:95:7f:cf:f5: 10:88:83:e4:55:24:82:41:8e:55:7b:8f:11:41:e1: 61:23:c5:08:9b:f6:61:e4:a6:3f:76:1a:f9:f5:95: 0c:ec:4c:be:9f:c6:fc:a1:b3:5d:97:f9:d6:50:37: 65:60:49:25:87:ff:43:04:ef:f0:ed:9c:17:95:42: e1:94:08:47:77:14:4c:95:29:86:95:f4:7e:8e:08: b8:df:94:a5:12:62:3e:da:f0:75:14:30:8e:5c:71: fd:cc:f0:52:63:de:a0:97:48:c4:15:e2:78:d8:a9: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:00:E9:4D:CB:4C:B3:B4:16:44:60:1F:93:AE:BE:1C:AA:94:28 X509v3 Authority Key Identifier: keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f6:69:3c:97:2c:0e:ee:2e:5d:47:1f:78:24:bd:cb:25:00: ad:17:1a:38:5d:ea:a2:be:b3:d6:8a:b2:10:1b:66:3b:56:bf: cb:a8:64:67:d1:4d:24:6e:6b:bd:43:ae:cc:14:04:95:69:bf: ff:a9:57:44:83:74:13:45:55:5d:18:40:3f:6a:f0:3f:e3:ec: 50:45:4b:dd:e8:d3:d5:44:5b:14:1e:f6:56:b5:0d:b5:18:34: 21:0a:16:b9:92:e9:4c:58:7b:80:2f:76:bf:2c:5b:04:71:85: 3a:da:3e:b9:53:11:49:5c:94:d6:e8:fe:bb:0f:0f:fa:1d:88: 6c:be:e2:a4:a5:01:74:29:82:e5:22:de:af:d2:f9:7a:cf:9a: ec:90:85:b1:b3:8c:7b:7f:5c:3d:cd:fd:38:9c:a7:16:a8:36: ea:c4:74:1c:6a:7a:6a:48:1d:41:29:b6:58:c3:84:4d:0e:4e: 61:d9:fd:2d:b5:ab:f4:c3:43:cf:2e:38:fa:7a:98:43:89:0e: 36:0e:8f:ce:9a:4c:f1:36:1e:af:4d:80:36:cd:87:36:23:92: bb:e7:c5:3a:71:b2:c7:e0:86:f3:93:17:f6:7b:ff:4d:10:b6: e6:b3:2e:19:5c:d4:71:c7:5f:0c:32:db:cf:ad:47:69:66:f6: fb:e6:23:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9FIsYta2MPuNkDBHSlRaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWZjMzg4NDcwNWM0YWVkY2ZlN2E0ZDE3ZGRiNzUyZTFm ZTYxOTgwHhcNMjYwMTAyMDUwMDU2WhcNMjYwMTAzMDUwMDU2WjAzMTEwLwYDVQQD Eyg4MmQyMDBlOTRkY2I0Y2IzYjQxNjQ0NjAxZjkzYWViZTFjYWE5NDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMYWylFrF7JfCRud/TxttBZoTedk 9l/R78pS0mNlvPVK5jyz0H1DZTMivenGGXJRiO0ZMhJlw9PWmdeB4GZ79h7mBu/h C2CqIAYMIdOCZXGg7vnt6maxtp4v8xoVyyUiu9Dy2ZkhneNB61I0xb821bR1fyM0 TReWdOjbR6peuOvHbRsLzDFPAwF9V+nZbogavJV/z/UQiIPkVSSCQY5Ve48RQeFh I8UIm/Zh5KY/dhr59ZUM7Ey+n8b8obNdl/nWUDdlYEklh/9DBO/w7ZwXlULhlAhH dxRMlSmGlfR+jgi435SlEmI+2vB1FDCOXHH9zPBSY96gl0jEFeJ42KkWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILSAOlNy0yztBZEYB+Trr4cqpQoMB8GA1UdIwQY MBaAFL6fw4hHBcSu3P56TRfdt1Lh/mGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYt MTkwNmE0YTFmOTkzLzEvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYtMTkwNmE0YTFmOTkz LzEvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfZpPJcs Du4uXUcfeCS9yyUArRcaOF3qor6z1oqyEBtmO1a/y6hkZ9FNJG5rvUOuzBQElWm/ /6lXRIN0E0VVXRhAP2rwP+PsUEVL3ejT1URbFB72VrUNtRg0IQoWuZLpTFh7gC92 vyxbBHGFOto+uVMRSVyU1uj+uw8P+h2IbL7ipKUBdCmC5SLer9L5es+a7JCFsbOM e39cPc39OJynFqg26sR0HGp6akgdQSm2WMOETQ5OYdn9LbWr9MNDzy44+nqYQ4kO Ng6PzppM8TYer02ANs2HNiOSu+fFOnGyx+CG85MX9nv/TRC25rMuGVzUccdfDDLb z61HaWb2++YjPg== -----END CERTIFICATE-----Generated at Fri Jan 2 08:20:15 2026 by rpki-client