This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json) Hash identifier: In5+QWeu9lXwx97lKuLiIOfiGZtgfXRUNHq90iHR2bw= Subject key identifier: BB:98:EE:1D:25:38:9A:CC:93:B8:91:A6:4D:00:F8:3B:35:88:A2:BE Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Certificate serial: 019B3CB4E11976030225CD0C25DB43735CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft Manifest number: 1322 Signing time: Sat 20 Dec 2025 17:00:45 +0000 Manifest this update: Sat 20 Dec 2025 17:00:45 +0000 Manifest next update: Sun 21 Dec 2025 17:00:45 +0000 Files and hashes: 1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=) 2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: L8sFzUUisyIwLmbDsMZBC2PGbdAv0tFUX/zpMCYyRU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:e1:19:76:03:02:25:cd:0c:25:db:43:73:5c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Validity Not Before: Dec 20 17:00:45 2025 GMT Not After : Dec 21 17:00:45 2025 GMT Subject: CN=bb98ee1d25389acc93b891a64d00f83b3588a2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:ca:0a:c7:0d:c8:34:8a:dc:2a:c8:53:58: 19:62:5f:98:9d:5b:68:dd:b7:00:e9:93:d3:1a:ab: 2c:07:be:f1:73:cb:d7:9f:e4:fd:1a:a2:6e:68:4e: f8:bc:90:af:7a:33:6e:0c:db:fb:2b:62:0b:b2:e4: 70:2f:ab:dc:cf:d0:96:cf:8c:b3:f0:95:16:9d:a6: 37:f2:38:e7:d1:8e:9c:1a:8e:8f:e5:38:34:be:58: 7a:36:2d:f5:7c:5c:74:07:5a:17:5c:98:42:64:f3: 37:e8:75:12:f3:43:de:8d:b8:8a:f6:6f:28:5c:aa: da:f6:99:48:de:25:83:59:62:34:11:3a:e3:f1:0d: 74:54:51:22:8d:4e:4f:83:2d:6e:ce:93:32:7a:c5: 6f:4f:44:cc:a9:b1:7f:ca:a4:eb:56:03:e6:f8:1e: b6:9e:05:54:51:38:ec:55:82:5f:3b:89:87:8d:45: 99:f2:17:aa:74:89:10:7e:70:67:73:e9:5b:a0:39: fa:e3:89:79:5e:a8:71:63:64:68:4f:0e:60:bb:00: 98:dd:48:9a:d9:5d:f0:2f:b5:45:7c:89:99:22:b3: e4:20:ea:2a:70:17:ef:36:32:0f:e3:bd:ec:04:33: b7:8d:42:5b:9d:e9:1e:25:a3:b9:e5:fa:1d:7d:7d: 26:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:98:EE:1D:25:38:9A:CC:93:B8:91:A6:4D:00:F8:3B:35:88:A2:BE X509v3 Authority Key Identifier: keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e1:4b:9a:9e:f7:8e:c2:5d:c6:00:f7:58:94:c2:44:d9:80: 12:2c:33:ee:68:9d:87:5e:13:24:17:4d:70:b2:00:40:4e:56: d0:13:12:37:b6:bb:aa:10:31:83:48:fb:8f:5a:52:60:c1:89: 9b:dc:a1:8e:e5:4f:7b:cf:c1:d0:73:27:dd:05:66:99:2b:aa: 42:63:7a:5e:bc:60:63:36:ff:06:33:cc:2f:d7:aa:cb:12:cd: 79:b0:e5:66:7a:b5:b1:77:a4:b2:b8:cf:9d:8d:12:3f:72:c6: ab:a6:1e:da:40:4a:a6:8e:dd:3d:27:2e:ae:5a:bb:a7:97:07: a8:bb:dc:53:1a:c8:ed:2d:8a:52:b7:9e:2b:a8:85:95:9f:96: 94:3f:d6:8e:59:0e:36:2a:34:3a:3d:ed:7a:a4:55:ec:84:c9: 8a:eb:e5:f1:69:91:0d:92:69:8c:9c:bd:1f:7d:a6:d2:f3:5d: d2:32:18:f7:df:e2:f9:89:ce:36:1c:76:49:9f:00:2e:60:42: 1a:34:77:7c:ca:b9:13:66:50:93:02:8f:d4:d2:c3:71:ee:80: bd:b4:52:42:03:c9:ee:c2:f8:c1:b1:52:2d:e2:46:52:08:08: 54:99:d0:3e:b9:ef:10:12:d0:9b:70:77:08:2f:dd:b2:8b:a8: 40:07:71:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tOEZdgMCJc0MJdtDc1ylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm Y2IzYTYwHhcNMjUxMjIwMTcwMDQ1WhcNMjUxMjIxMTcwMDQ1WjAzMTEwLwYDVQQD EyhiYjk4ZWUxZDI1Mzg5YWNjOTNiODkxYTY0ZDAwZjgzYjM1ODhhMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKLKCscNyDSK3CrIU1gZYl+YnVto 3bcA6ZPTGqssB77xc8vXn+T9GqJuaE74vJCvejNuDNv7K2ILsuRwL6vcz9CWz4yz 8JUWnaY38jjn0Y6cGo6P5Tg0vlh6Ni31fFx0B1oXXJhCZPM36HUS80PejbiK9m8o XKra9plI3iWDWWI0ETrj8Q10VFEijU5Pgy1uzpMyesVvT0TMqbF/yqTrVgPm+B62 ngVUUTjsVYJfO4mHjUWZ8heqdIkQfnBnc+lboDn644l5XqhxY2RoTw5guwCY3Uia 2V3wL7VFfImZIrPkIOoqcBfvNjIP473sBDO3jUJbnekeJaO55fodfX0mYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuY7h0lOJrMk7iRpk0A+Ds1iKK+MB8GA1UdIwQY MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduFLmp73 jsJdxgD3WJTCRNmAEiwz7midh14TJBdNcLIAQE5W0BMSN7a7qhAxg0j7j1pSYMGJ m9yhjuVPe8/B0HMn3QVmmSuqQmN6XrxgYzb/BjPML9eqyxLNebDlZnq1sXeksrjP nY0SP3LGq6Ye2kBKpo7dPScurlq7p5cHqLvcUxrI7S2KUreeK6iFlZ+WlD/WjlkO Nio0Oj3teqRV7ITJiuvl8WmRDZJpjJy9H32m0vNd0jIY99/i+YnONhx2SZ8ALmBC GjR3fMq5E2ZQkwKP1NLDce6AvbRSQgPJ7sL4wbFSLeJGUggIVJnQPrnvEBLQm3B3 CC/dsouoQAdxzQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:57:02 2025 by rpki-client