This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft File: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json) Hash identifier: G3zbxJyqaWJEqb7zQ9nZrLuTodJEnCLUDXuo9j2Q/L0= Subject key identifier: EB:79:94:8B:8C:67:9F:4A:FB:05:02:8C:5E:75:94:40:19:36:76:DE Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0 Certificate issuer: /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0 Certificate serial: 019B733530CB37EA02BC94902AFCC7834AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft Manifest number: 17A7 Signing time: Wed 31 Dec 2025 07:00:24 +0000 Manifest this update: Wed 31 Dec 2025 07:00:24 +0000 Manifest next update: Thu 01 Jan 2026 07:00:24 +0000 Files and hashes: 1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=) 2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: 0Bebi3fEJPVAq230KG0OlZYtShLsukMT7jkG6t9GDYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:30:cb:37:ea:02:bc:94:90:2a:fc:c7:83:4a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0 Validity Not Before: Dec 31 07:00:24 2025 GMT Not After : Jan 1 07:00:24 2026 GMT Subject: CN=eb79948b8c679f4afb05028c5e759440193676de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:1c:6c:ac:5f:8e:1d:cb:b2:31:77:07:fb: 8a:09:79:30:30:d5:c8:42:7e:21:51:96:96:bd:5c: c1:7e:7e:e6:17:ca:f5:ca:6a:34:6b:b9:ac:8a:db: 32:bf:7d:26:cd:ff:a3:18:67:7e:d0:2f:b2:8c:81: 57:1f:46:9b:6e:b0:08:fe:54:78:68:af:ec:1b:45: bb:a7:ab:8c:1c:85:11:a2:fe:4e:e2:23:ff:ff:fb: 8d:be:f7:21:fe:6f:24:83:4c:85:89:d2:df:53:2e: 36:05:97:27:4c:01:ed:db:65:8a:88:5c:0c:26:19: 53:51:2a:19:b7:30:d8:89:af:86:19:c8:0a:03:e1: 8b:f1:8e:1f:b3:41:c7:90:ff:93:76:8e:9b:b7:0f: 54:27:59:ab:eb:55:37:6a:2f:1d:fc:fc:57:ce:8f: a5:99:ff:ff:2d:00:43:ba:35:05:b7:67:4c:a1:4e: 82:35:bf:97:aa:5d:95:96:e5:76:dc:fb:e0:38:88: 3a:b7:d2:4f:7c:f7:ac:05:59:50:d6:e2:ef:45:12: 22:9d:d3:61:3d:65:4c:8d:bc:26:0a:01:78:18:6b: 9b:ca:fb:70:d3:f7:94:42:57:ab:26:1a:e4:8c:c4: 30:51:c4:18:c6:75:76:1f:2c:d4:b3:b8:c6:73:b9: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:94:8B:8C:67:9F:4A:FB:05:02:8C:5E:75:94:40:19:36:76:DE X509v3 Authority Key Identifier: keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e4:b3:29:c0:e2:fb:62:c4:e4:3e:9f:25:32:70:61:ba:8d: a5:ff:1e:4f:8f:e2:3f:3e:ac:30:81:36:d4:80:8c:19:bb:a7: b0:59:ff:f5:2e:bb:5f:40:50:81:7e:8f:d0:23:41:41:fb:54: 45:29:5e:48:3b:58:b4:81:92:bc:6e:4d:1c:3a:0b:5d:83:5a: a2:22:04:1c:49:fc:fe:5f:f2:37:1a:2c:85:51:2f:22:2e:d5: 18:96:f6:c7:d7:13:9a:1b:ba:df:9b:dd:a6:25:12:92:9a:34: ba:b8:51:ff:6e:38:f7:fb:bc:21:84:09:3c:dc:a1:ff:8a:eb: bc:c0:6d:85:7c:b5:eb:55:4c:7f:80:9f:3b:c2:ca:57:2e:89: e3:67:a1:43:c2:c1:ae:44:e5:b0:5e:21:d5:07:a0:47:94:f0: 45:17:ce:c7:bf:60:80:c9:d7:d6:f6:b4:20:7e:b9:dc:30:9c: 49:4e:30:a8:4b:bb:4f:7b:04:bb:1d:1a:59:73:e5:df:4b:37: 76:c0:6c:68:65:9b:02:93:99:92:6a:9e:7b:46:37:5d:05:2f: 01:a4:ee:79:2c:93:82:4b:ab:f1:37:04:8c:9f:ba:5d:8c:b3: a4:1f:7b:ce:ac:ca:50:71:a5:19:5b:09:0b:2e:d5:e4:94:f9: e1:b3:94:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNTDLN+oCvJSQKvzHg0qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWExZWVkOTkwZWQwMzFlZTE3YjBiMTNkYThmODNlMGVm YmEyYjAwHhcNMjUxMjMxMDcwMDI0WhcNMjYwMTAxMDcwMDI0WjAzMTEwLwYDVQQD EyhlYjc5OTQ4YjhjNjc5ZjRhZmIwNTAyOGM1ZTc1OTQ0MDE5MzY3NmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgUcbKxfjh3LsjF3B/uKCXkwMNXI Qn4hUZaWvVzBfn7mF8r1ymo0a7msitsyv30mzf+jGGd+0C+yjIFXH0abbrAI/lR4 aK/sG0W7p6uMHIURov5O4iP///uNvvch/m8kg0yFidLfUy42BZcnTAHt22WKiFwM JhlTUSoZtzDYia+GGcgKA+GL8Y4fs0HHkP+Tdo6btw9UJ1mr61U3ai8d/PxXzo+l mf//LQBDujUFt2dMoU6CNb+Xql2VluV23PvgOIg6t9JPfPesBVlQ1uLvRRIindNh PWVMjbwmCgF4GGubyvtw0/eUQlerJhrkjMQwUcQYxnV2HyzUs7jGc7koJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt5lIuMZ59K+wUCjF51lEAZNnbeMB8GA1UdIwQY MBaAFFaqHu2ZDtAx7hewsT2o+D4O+6KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzIt YWM0NTQ5OTc3OTAxLzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzItYWM0NTQ5OTc3OTAx LzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeSzKcDi +2LE5D6fJTJwYbqNpf8eT4/iPz6sMIE21ICMGbunsFn/9S67X0BQgX6P0CNBQftU RSleSDtYtIGSvG5NHDoLXYNaoiIEHEn8/l/yNxoshVEvIi7VGJb2x9cTmhu635vd piUSkpo0urhR/2449/u8IYQJPNyh/4rrvMBthXy161VMf4CfO8LKVy6J42ehQ8LB rkTlsF4h1QegR5TwRRfOx79ggMnX1va0IH653DCcSU4wqEu7T3sEux0aWXPl30s3 dsBsaGWbApOZkmqee0Y3XQUvAaTueSyTgkur8TcEjJ+6XYyzpB97zqzKUHGlGVsJ Cy7V5JT54bOURg== -----END CERTIFICATE-----Generated at Wed Dec 31 13:27:45 2025 by rpki-client