This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft File: VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json) Hash identifier: MPSb3E5sqBtLHTIqHQeEPsOABjX9CQ7GRtXUz2Ehyt0= Subject key identifier: 6C:88:F7:0F:DF:F1:B1:F1:2C:96:7D:BB:58:0E:06:79:47:BE:CF:B9 Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Certificate serial: 019B50A9691AC13280EC3360E214796752AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft Manifest number: 0750 Signing time: Wed 24 Dec 2025 14:00:38 +0000 Manifest this update: Wed 24 Dec 2025 14:00:38 +0000 Manifest next update: Thu 25 Dec 2025 14:00:38 +0000 Files and hashes: 1: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: guJb6Df7F15N3od0fhVQYKwN+NSoEkEe0xjNprhLwnU=) 2: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (hash: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:69:1a:c1:32:80:ec:33:60:e2:14:79:67:52:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442 Validity Not Before: Dec 24 14:00:38 2025 GMT Not After : Dec 25 14:00:38 2025 GMT Subject: CN=6c88f70fdff1b1f12c967dbb580e067947becfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:6f:ef:59:4f:45:e0:30:35:c4:e0:63:db: 67:0c:b5:ce:12:86:6e:ff:1d:5f:ac:c9:3d:f7:b7: be:1f:fc:9b:75:7c:c0:0e:58:6c:9b:99:63:d8:76: 44:76:01:83:e9:00:07:21:53:b1:e0:33:13:54:6b: 83:de:52:98:dc:6d:e7:ee:a9:89:25:c0:ac:57:74: bf:2c:5a:8b:2d:7c:a8:f1:c5:0e:cf:33:cb:bc:99: 82:02:31:81:e2:03:b0:7c:c0:17:e9:44:da:09:0b: 12:44:05:27:aa:b6:8b:8b:ea:6a:c6:b9:42:91:10: 99:05:34:4e:41:e8:32:df:5c:16:31:02:f0:09:ae: d2:fe:cd:9b:63:64:2b:90:73:73:3a:93:ca:b3:73: 30:55:fc:c0:64:fd:c4:fd:44:01:f0:d9:52:61:58: 1b:67:ea:50:5f:ca:6a:05:92:35:25:80:f5:89:bb: b4:7d:24:c6:c0:1d:b2:50:ac:2f:27:16:43:f7:ed: fc:08:7b:e0:19:45:a4:a5:4e:97:db:76:25:90:34: c3:f9:0f:d9:23:c7:83:a4:36:9a:bb:c7:e5:39:bc: 85:6d:4a:db:13:4c:e1:91:5f:cf:64:fd:08:5e:5d: b1:50:7a:ed:97:76:26:61:9b:76:3c:12:f1:01:19: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:88:F7:0F:DF:F1:B1:F1:2C:96:7D:BB:58:0E:06:79:47:BE:CF:B9 X509v3 Authority Key Identifier: keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:29:0c:c0:4a:9b:b8:d4:b1:e3:51:d3:9e:b6:1f:e6:6d:d5: 7a:d6:4a:c6:64:6e:04:e7:21:e5:27:b2:94:23:c9:82:f6:8f: 51:f1:5f:0b:50:fa:26:63:a4:42:63:02:f8:f5:4e:78:39:32: 2e:18:e2:ab:a2:fd:3e:76:85:05:8c:b4:63:bd:d6:3b:87:fa: d2:e2:a5:0e:e6:00:04:7e:27:99:56:0e:28:5a:93:58:58:e9: 19:ae:c1:10:59:a3:d3:84:90:f7:81:e1:4b:ef:8a:3e:35:8b: 65:89:22:8a:b4:bc:69:33:48:c8:e6:3f:ff:b7:54:41:7d:6d: 6c:3d:57:77:f5:31:fc:dc:fa:4c:17:43:47:eb:6d:4a:7b:69: be:38:6d:99:36:bb:62:43:60:b5:d0:64:98:da:5f:4d:da:bc: 77:96:d5:4e:d6:99:02:64:79:35:9d:3a:5c:91:b3:a2:65:31: de:fc:38:17:71:f3:c1:af:35:7d:9f:33:ac:a5:a2:71:2c:06: 92:7b:ee:31:0f:62:b8:3e:61:5f:ab:fa:2a:b8:96:bc:ec:b5: 6a:5e:ad:0c:4e:84:55:26:1d:fe:8e:22:89:59:56:d6:42:86: 8d:78:96:62:80:d2:bf:b5:ef:c9:69:c9:63:a5:9e:47:11:fa: 15:7b:a9:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqWkawTKA7DNg4hR5Z1KqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjIwNTliNzQ4ZDZkZGQ1YzVhMGMxZDM1ZTk3NWVmN2Jh ODg0NDIwHhcNMjUxMjI0MTQwMDM4WhcNMjUxMjI1MTQwMDM4WjAzMTEwLwYDVQQD Eyg2Yzg4ZjcwZmRmZjFiMWYxMmM5NjdkYmI1ODBlMDY3OTQ3YmVjZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xBv71lPReAwNcTgY9tnDLXOEoZu /x1frMk997e+H/ybdXzADlhsm5lj2HZEdgGD6QAHIVOx4DMTVGuD3lKY3G3n7qmJ JcCsV3S/LFqLLXyo8cUOzzPLvJmCAjGB4gOwfMAX6UTaCQsSRAUnqraLi+pqxrlC kRCZBTROQegy31wWMQLwCa7S/s2bY2QrkHNzOpPKs3MwVfzAZP3E/UQB8NlSYVgb Z+pQX8pqBZI1JYD1ibu0fSTGwB2yUKwvJxZD9+38CHvgGUWkpU6X23YlkDTD+Q/Z I8eDpDaau8flObyFbUrbE0zhkV/PZP0IXl2xUHrtl3YmYZt2PBLxARk7jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyI9w/f8bHxLJZ9u1gOBnlHvs+5MB8GA1UdIwQY MBaAFFWyBZt0jW3dXFoMHTXpde97qIRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTkt MjMwNjRlMjFkMTRkLzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTktMjMwNjRlMjFkMTRk LzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCkMwEqb uNSx41HTnrYf5m3VetZKxmRuBOch5SeylCPJgvaPUfFfC1D6JmOkQmMC+PVOeDky Lhjiq6L9PnaFBYy0Y73WO4f60uKlDuYABH4nmVYOKFqTWFjpGa7BEFmj04SQ94Hh S++KPjWLZYkiirS8aTNIyOY//7dUQX1tbD1Xd/Ux/Nz6TBdDR+ttSntpvjhtmTa7 YkNgtdBkmNpfTdq8d5bVTtaZAmR5NZ06XJGzomUx3vw4F3Hzwa81fZ8zrKWicSwG knvuMQ9iuD5hX6v6KriWvOy1al6tDE6EVSYd/o4iiVlW1kKGjXiWYoDSv7XvyWnJ Y6WeRxH6FXupYg== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:26 2025 by rpki-client