This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json) Hash identifier: eOn39Q0p1FY0SpFbWelG/tR6U04ME1MpbbkN4DAKhWY= Subject key identifier: 45:E8:F0:BA:20:6B:C6:11:80:89:55:81:A6:67:AF:20:DB:01:8A:71 Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Certificate serial: 019B38A143B77B403548790629D62C8DFC16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft Manifest number: 05C7 Signing time: Fri 19 Dec 2025 22:00:51 +0000 Manifest this update: Fri 19 Dec 2025 22:00:51 +0000 Manifest next update: Sat 20 Dec 2025 22:00:51 +0000 Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=) 2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: uB6lS0T6AnZnoyj8imDKOYmBRAw2Mgj9wMTW6j/S3Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:43:b7:7b:40:35:48:79:06:29:d6:2c:8d:fc:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e Validity Not Before: Dec 19 22:00:51 2025 GMT Not After : Dec 20 22:00:51 2025 GMT Subject: CN=45e8f0ba206bc61180895581a667af20db018a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:f5:54:85:1e:45:f5:9e:08:f2:f8:11:c6: fb:8c:48:c3:16:85:16:c0:72:54:33:a0:ed:4a:05: 7b:87:fb:cd:d1:50:79:e2:e2:c0:68:f2:df:a5:32: 77:80:96:5b:ed:da:5c:f3:6e:f8:4c:ba:ba:5c:a5: cc:c4:31:0f:d9:19:66:4e:6c:3f:3f:4a:99:ee:bb: 83:ba:5a:e4:57:06:10:fb:7a:5d:3c:cd:e9:5c:c3: 17:90:ab:e8:37:81:3f:fd:67:ed:df:cf:64:84:e5: 0b:d5:91:90:ec:a2:f3:0e:10:df:5c:82:65:c6:31: 5e:7b:54:25:e1:ea:1d:de:04:92:7e:09:9b:5c:db: d5:42:4b:76:78:93:c2:5b:6f:c8:2f:78:87:37:fb: a4:d0:4f:03:66:8e:e4:86:ec:89:46:6a:f1:38:71: 92:74:5a:e4:8b:85:59:cc:57:e6:0f:4a:0b:93:cd: de:d1:85:ae:01:81:e2:9b:43:c7:e2:c1:2f:68:6a: 95:54:19:3b:4e:71:15:ce:91:eb:c0:86:da:fe:15: d2:1f:87:79:e4:51:b8:f0:bd:94:a4:68:1c:c4:a5: 51:25:bb:18:b4:4c:7f:dc:29:80:5f:f2:f6:df:63: c2:0a:fd:69:4b:4c:fa:cf:ee:e6:eb:62:f1:75:d0: 9c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E8:F0:BA:20:6B:C6:11:80:89:55:81:A6:67:AF:20:DB:01:8A:71 X509v3 Authority Key Identifier: keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3f:9f:76:e4:4a:c6:30:a3:53:3b:91:96:12:b7:7a:56:03: 8b:fd:ef:30:fd:d2:5d:d1:75:1a:5d:f9:aa:4b:ab:8e:df:d3: 13:f8:fa:06:07:dd:cb:71:95:95:3b:ff:be:bc:e8:0e:5e:7b: be:01:11:47:51:f8:18:2f:a1:fb:19:68:6d:fe:f4:4d:74:33: 0c:ca:ca:7b:6d:2c:ed:7c:62:79:0c:f8:e3:e5:6d:50:08:5b: 3f:08:e9:3e:56:57:aa:f5:d3:3b:95:fb:de:ea:56:0d:fb:9f: 76:31:00:29:67:c7:dc:09:1b:4e:c4:b3:00:43:91:54:57:d0: 54:19:c8:95:4a:32:68:50:18:8c:9a:4d:5c:79:0d:ac:45:62: d4:27:b9:77:fa:54:85:de:d4:c8:35:08:80:12:c0:2f:63:3b: c4:f9:4c:59:10:ab:11:99:1f:f4:45:ef:d3:e8:04:cc:64:a2: 9d:f9:f0:44:a5:51:16:70:13:94:86:de:e8:17:b6:e1:5f:4a: 95:bc:42:87:72:b1:5f:31:05:ae:13:38:61:69:36:2e:0c:01: 17:aa:2b:92:de:59:43:f7:fe:ab:bc:a3:2e:1f:1e:15:d1:2c: df:a9:d0:c6:2d:d8:1b:37:54:d7:f2:d1:d2:8e:a2:b3:ef:dd: 55:72:56:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oUO3e0A1SHkGKdYsjfwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTIxZTViOTJmZGU2NDg4OWY2YWFiMmNjNWNlODZmYzBl NWEwN2UwHhcNMjUxMjE5MjIwMDUxWhcNMjUxMjIwMjIwMDUxWjAzMTEwLwYDVQQD Eyg0NWU4ZjBiYTIwNmJjNjExODA4OTU1ODFhNjY3YWYyMGRiMDE4YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQH1VIUeRfWeCPL4Ecb7jEjDFoUW wHJUM6DtSgV7h/vN0VB54uLAaPLfpTJ3gJZb7dpc8274TLq6XKXMxDEP2RlmTmw/ P0qZ7ruDulrkVwYQ+3pdPM3pXMMXkKvoN4E//Wft389khOUL1ZGQ7KLzDhDfXIJl xjFee1Ql4eod3gSSfgmbXNvVQkt2eJPCW2/IL3iHN/uk0E8DZo7khuyJRmrxOHGS dFrki4VZzFfmD0oLk83e0YWuAYHim0PH4sEvaGqVVBk7TnEVzpHrwIba/hXSH4d5 5FG48L2UpGgcxKVRJbsYtEx/3CmAX/L232PCCv1pS0z6z+7m62LxddCcUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXo8Loga8YRgIlVgaZnryDbAYpxMB8GA1UdIwQY MBaAFFUSHluS/eZIifaqssxc6G/A5aB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMt YzNiNjM0NWEwZDA1LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMtYzNiNjM0NWEwZDA1 LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnj+fduRK xjCjUzuRlhK3elYDi/3vMP3SXdF1Gl35qkurjt/TE/j6Bgfdy3GVlTv/vrzoDl57 vgERR1H4GC+h+xlobf70TXQzDMrKe20s7XxieQz44+VtUAhbPwjpPlZXqvXTO5X7 3upWDfufdjEAKWfH3AkbTsSzAEORVFfQVBnIlUoyaFAYjJpNXHkNrEVi1Ce5d/pU hd7UyDUIgBLAL2M7xPlMWRCrEZkf9EXv0+gEzGSinfnwRKVRFnATlIbe6Be24V9K lbxCh3KxXzEFrhM4YWk2LgwBF6orkt5ZQ/f+q7yjLh8eFdEs36nQxi3YGzdU1/LR 0o6is+/dVXJWqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:12 2025 by rpki-client