This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json) Hash identifier: dEk5fc+cRCtdV853DALpH8N1yOa5q1QP0t5Ip7WHgQo= Subject key identifier: F5:EB:47:23:0B:CA:63:74:59:CB:B1:B6:34:F9:DB:EA:3D:DD:80:26 Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd Certificate serial: 019B50734D78BD725F709CD20B9B56E861B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft Manifest number: 09BC Signing time: Wed 24 Dec 2025 13:01:32 +0000 Manifest this update: Wed 24 Dec 2025 13:01:32 +0000 Manifest next update: Thu 25 Dec 2025 13:01:32 +0000 Files and hashes: 1: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: +39CzSWPGhuyRQ5Ie5opI7svE0gcCYu6tV/K3UulAck=) 2: xKhlmwkhpDMTNKSIizqisLWT3AQ.roa (hash: wyhLYIBDdO6iFhviIArhJTJRsCWrDx4vYq5+pNBPzEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:4d:78:bd:72:5f:70:9c:d2:0b:9b:56:e8:61:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd Validity Not Before: Dec 24 13:01:32 2025 GMT Not After : Dec 25 13:01:32 2025 GMT Subject: CN=f5eb47230bca637459cbb1b634f9dbea3ddd8026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:be:b4:6d:24:0c:99:27:19:40:4c:79:22: ae:3e:f7:88:2e:36:fd:c0:a4:8c:f7:b5:bb:1a:3d: 8d:66:18:59:de:17:7d:ca:c3:de:c0:23:c5:9f:ec: 97:8b:26:f5:98:a4:6b:74:05:e0:72:2f:96:c1:5a: 87:2f:ed:9d:77:3d:39:39:74:57:5a:10:40:37:48: 0a:d6:bd:a6:e8:ac:da:2f:a1:29:6c:d1:4d:fa:46: 62:2c:c5:ba:d2:af:df:1f:89:17:b0:53:3f:a1:79: 53:41:3d:52:51:00:7e:bd:1f:34:fc:63:5c:4f:b3: 6c:e9:aa:ad:03:55:64:4e:03:7c:d7:b4:b2:7b:e4: 7e:0f:93:9a:4c:5d:b4:72:08:68:7e:4b:98:c9:14: f8:8a:fd:b9:a4:12:50:89:d2:2b:a0:d5:fb:c8:2b: 16:b0:5a:6d:24:cb:16:eb:eb:aa:e8:05:f5:9d:8f: ba:1b:34:1c:6a:01:43:2b:6e:7e:15:45:9a:8b:ca: 11:9e:39:22:a1:1a:ff:89:b1:22:64:59:70:b6:8b: 2f:ce:1a:97:d4:39:96:91:50:99:2f:6f:b4:0d:0f: 58:87:d8:3f:46:c9:b6:9d:7e:da:b6:9b:e6:ac:47: e2:0a:9d:79:c3:94:5c:13:89:30:f3:30:1a:c9:06: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EB:47:23:0B:CA:63:74:59:CB:B1:B6:34:F9:DB:EA:3D:DD:80:26 X509v3 Authority Key Identifier: keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:98:78:0c:46:ac:99:0e:0d:f6:18:30:50:56:d7:48:ba:59: e3:f4:20:21:b1:0d:ba:79:d1:c8:51:ac:67:55:a3:32:b8:a0: 67:f2:15:61:0b:9d:75:b8:80:79:c2:99:9e:7d:c3:c5:10:d8: 78:6a:69:00:82:5c:12:a2:60:e5:0a:1a:95:ff:d0:22:99:f6: 5e:a4:9f:aa:06:39:2f:ed:86:78:c8:ba:ba:45:60:5e:c5:99: 54:63:12:ee:0f:63:25:12:1b:99:cb:df:5a:9b:67:a3:54:b7: e5:75:b9:81:64:90:84:b9:6b:04:b9:55:ec:bf:da:ca:42:23: f1:d1:e1:ab:89:9b:0a:ef:5e:eb:4d:bd:5a:b3:e5:61:8c:d3: c8:65:70:b9:1c:47:21:d9:6c:1c:9e:a2:d1:9b:21:f9:fc:85: 3a:b2:f9:12:05:f2:33:f3:37:d6:d7:d6:de:2e:47:bf:b8:37: c1:bb:0f:e7:43:57:c7:c8:05:51:f7:99:ef:9e:fc:ba:a7:0b: 45:cf:f6:ef:b5:bd:48:02:90:ba:08:69:27:95:62:af:03:a2: 86:37:c4:97:26:4c:ed:ba:44:11:3a:02:c3:f0:e6:f1:ee:a9: c7:a4:9d:2d:84:82:a9:b2:3e:46:ec:32:ce:f8:87:8b:d6:6b: 93:23:d8:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQc014vXJfcJzSC5tW6GG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjA0ZmYzNWEyOWM5MTE1NmJlNGJkMjI5YjNiYWY3N2M4 Mzk3YmQwHhcNMjUxMjI0MTMwMTMyWhcNMjUxMjI1MTMwMTMyWjAzMTEwLwYDVQQD EyhmNWViNDcyMzBiY2E2Mzc0NTljYmIxYjYzNGY5ZGJlYTNkZGQ4MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqW+tG0kDJknGUBMeSKuPveILjb9 wKSM97W7Gj2NZhhZ3hd9ysPewCPFn+yXiyb1mKRrdAXgci+WwVqHL+2ddz05OXRX WhBAN0gK1r2m6KzaL6EpbNFN+kZiLMW60q/fH4kXsFM/oXlTQT1SUQB+vR80/GNc T7Ns6aqtA1VkTgN817Sye+R+D5OaTF20cghofkuYyRT4iv25pBJQidIroNX7yCsW sFptJMsW6+uq6AX1nY+6GzQcagFDK25+FUWai8oRnjkioRr/ibEiZFlwtosvzhqX 1DmWkVCZL2+0DQ9Yh9g/Rsm2nX7atpvmrEfiCp15w5RcE4kw8zAayQaigQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXrRyMLymN0WcuxtjT52+o93YAmMB8GA1UdIwQY MBaAFL5gT/NaKckRVr5L0imzuvd8g5e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYt MWEzOWMzZDM0ZjA4LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYtMWEzOWMzZDM0ZjA4 LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5h4DEas mQ4N9hgwUFbXSLpZ4/QgIbENunnRyFGsZ1WjMrigZ/IVYQuddbiAecKZnn3DxRDY eGppAIJcEqJg5Qoalf/QIpn2XqSfqgY5L+2GeMi6ukVgXsWZVGMS7g9jJRIbmcvf Wptno1S35XW5gWSQhLlrBLlV7L/aykIj8dHhq4mbCu9e6029WrPlYYzTyGVwuRxH IdlsHJ6i0Zsh+fyFOrL5EgXyM/M31tfW3i5Hv7g3wbsP50NXx8gFUfeZ7578uqcL Rc/277W9SAKQughpJ5VirwOihjfElyZM7bpEEToCw/Dm8e6px6SdLYSCqbI+Ruwy zviHi9ZrkyPY3A== -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:00 2025 by rpki-client