This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft File: VB_cei8RpXZtOte99iXOXhGaj98.mft (raw, json) Hash identifier: +RanWXjHcE8UTTQ/MInwN8pErF7q3iJEG+TjIOwRhAQ= Subject key identifier: 43:9C:27:B7:21:5A:AA:17:88:2D:50:E3:4A:CE:87:83:21:27:28:D5 Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf Certificate serial: 019B3C46E889C2EC4CA591A00EFAFAD4A208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft Manifest number: 1584 Signing time: Sat 20 Dec 2025 15:00:38 +0000 Manifest this update: Sat 20 Dec 2025 15:00:38 +0000 Manifest next update: Sun 21 Dec 2025 15:00:38 +0000 Files and hashes: 1: RpRK_j5n7yjqTReYLx6JjLzhSB8.roa (hash: 7v0e6lCpAjSML4qRoW95hJfvj3fJQjpnRY2hXicjkYU=) 2: VB_cei8RpXZtOte99iXOXhGaj98.crl (hash: 8FFRiH3DtXgAPYMQnwzs6QON9agJsP7XMeGG3FXDo+0=) 3: _O08NAMTRYiI66s3j5CAN1Tnfbs.roa (hash: tT0fH123IaRd9D3zuV26RbVwu75ai0sfSAd21oMJcLM=) 4: zZPuHWJDy83KhJHPetdS190Sc9A.roa (hash: p0Sn4R1w3W9WwTjzDtRCal/zanta/wz6d1ex1M+TJKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:e8:89:c2:ec:4c:a5:91:a0:0e:fa:fa:d4:a2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf Validity Not Before: Dec 20 15:00:38 2025 GMT Not After : Dec 21 15:00:38 2025 GMT Subject: CN=439c27b7215aaa17882d50e34ace8783212728d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:e8:68:7a:86:d5:57:80:77:0c:40:3d:d3: 9f:aa:4d:35:db:23:ca:24:ab:8d:c6:d1:0a:20:a0: c5:36:69:d2:d0:5c:75:a0:4e:ec:58:c4:1f:54:de: dd:78:bd:74:69:6c:67:de:61:6b:5c:e8:6c:06:07: a5:15:01:9e:8f:6c:8b:fe:e4:ca:64:35:f1:95:0a: a0:61:75:4c:fb:04:49:b6:b1:a0:a5:25:a1:0a:b9: 86:06:73:84:df:8d:41:49:c2:ea:2e:42:33:3a:46: 33:ab:29:69:b5:64:19:16:a5:60:18:f8:f6:c0:9a: 33:e6:09:d0:6b:71:74:b1:1e:92:59:04:2c:90:95: 8d:72:f2:21:84:94:8c:37:48:e7:b2:2c:42:35:20: 57:bd:3b:53:c0:d3:8e:3f:2b:b0:ac:ca:35:d7:43: 29:47:25:d9:03:de:94:ec:ff:06:bc:34:06:89:cd: 44:4c:58:4a:bb:fa:c8:50:5a:b8:d0:be:d1:ea:d2: 7c:a0:95:11:a7:05:f8:78:db:16:9e:fa:1b:e4:4b: 00:3f:d1:40:22:da:2f:89:6b:09:2d:ba:f8:1c:42: 79:65:ae:65:ae:16:71:fe:1d:35:69:ab:42:70:1b: 66:e7:dd:33:32:e3:1b:be:25:c1:98:ce:23:f0:e9: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9C:27:B7:21:5A:AA:17:88:2D:50:E3:4A:CE:87:83:21:27:28:D5 X509v3 Authority Key Identifier: keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e7:a8:5e:50:b8:29:cf:cb:18:67:37:cc:a3:be:ec:0d:e1: a1:13:1b:21:07:ce:6a:32:38:06:a5:dd:d1:fd:57:5f:1c:e8: 75:83:cf:88:b5:fb:14:d2:46:e1:28:4b:72:91:79:8f:b6:c4: f1:ab:9c:89:6c:e7:15:6c:e5:d8:9d:05:e0:a5:d3:eb:49:37: d7:de:ba:c2:05:62:b1:0b:eb:a5:52:ac:f3:a3:0b:91:ea:21: b7:0e:63:a1:e1:71:bb:08:e4:bc:07:8a:ad:44:14:0b:95:84: 34:74:01:66:ef:1c:60:ff:45:f1:7e:50:4c:0d:bb:4e:79:af: 78:a1:29:e2:ef:ff:dd:dc:0e:77:a3:3d:74:c7:86:47:bb:26: e0:54:15:d6:62:0b:07:fb:65:fe:89:59:17:34:e8:b4:84:db: d9:28:76:ab:ac:2c:e7:dc:0e:1a:e7:74:86:46:11:ff:30:45: d7:5e:3a:61:7d:bb:d0:67:62:ea:63:fd:c5:3f:61:ee:bf:45: a6:d4:35:79:27:8b:75:12:c6:57:61:a0:51:e5:6c:ba:48:de: 94:c2:87:7f:38:92:8d:da:4e:94:52:17:12:25:8f:17:9f:2c: f7:de:91:c0:cd:b2:22:59:0a:a0:57:7a:57:b6:f0:09:6e:5d: db:a5:50:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RuiJwuxMpZGgDvr61KIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MWZkYzdhMmYxMWE1NzY2ZDNhZDdiZGY2MjVjZTVlMTE5 YThmZGYwHhcNMjUxMjIwMTUwMDM4WhcNMjUxMjIxMTUwMDM4WjAzMTEwLwYDVQQD Eyg0MzljMjdiNzIxNWFhYTE3ODgyZDUwZTM0YWNlODc4MzIxMjcyOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tToaHqG1VeAdwxAPdOfqk012yPK JKuNxtEKIKDFNmnS0Fx1oE7sWMQfVN7deL10aWxn3mFrXOhsBgelFQGej2yL/uTK ZDXxlQqgYXVM+wRJtrGgpSWhCrmGBnOE341BScLqLkIzOkYzqylptWQZFqVgGPj2 wJoz5gnQa3F0sR6SWQQskJWNcvIhhJSMN0jnsixCNSBXvTtTwNOOPyuwrMo110Mp RyXZA96U7P8GvDQGic1ETFhKu/rIUFq40L7R6tJ8oJURpwX4eNsWnvob5EsAP9FA ItoviWsJLbr4HEJ5Za5lrhZx/h01aatCcBtm590zMuMbviXBmM4j8OlkUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOcJ7chWqoXiC1Q40rOh4MhJyjVMB8GA1UdIwQY MBaAFFQf3HovEaV2bTrXvfYlzl4Rmo/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUt YzkwMGE4OWYyMGYxLzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUtYzkwMGE4OWYyMGYx LzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOeoXlC4 Kc/LGGc3zKO+7A3hoRMbIQfOajI4BqXd0f1XXxzodYPPiLX7FNJG4ShLcpF5j7bE 8auciWznFWzl2J0F4KXT60k31966wgVisQvrpVKs86MLkeohtw5joeFxuwjkvAeK rUQUC5WENHQBZu8cYP9F8X5QTA27TnmveKEp4u//3dwOd6M9dMeGR7sm4FQV1mIL B/tl/olZFzTotITb2Sh2q6ws59wOGud0hkYR/zBF1146YX270Gdi6mP9xT9h7r9F ptQ1eSeLdRLGV2GgUeVsukjelMKHfziSjdpOlFIXEiWPF58s996RwM2yIlkKoFd6 V7bwCW5d26VQtg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:42:41 2025 by rpki-client