This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json) Hash identifier: iX6g6zo7QkbhaN3X+5qJy8ntMMWICHkhUMmA6w+f6/A= Subject key identifier: 91:DD:23:D8:7E:BB:AA:5C:0C:3D:5D:C1:38:0A:A8:AA:7D:A3:3D:CC Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Certificate serial: 019B35A01ED161ED8E18FA2B3DEA21310D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft Manifest number: 178C Signing time: Fri 19 Dec 2025 08:00:44 +0000 Manifest this update: Fri 19 Dec 2025 08:00:44 +0000 Manifest next update: Sat 20 Dec 2025 08:00:44 +0000 Files and hashes: 1: 4DbDI_EnOkcmLXrBG5jeHwTwt2c.roa (hash: mJ/2UVoGEpFQIaST8cEuCkebUiYaaorOEoL9AoSGYIQ=) 2: Ss9eeiCVuWCNJmImGff-1n45lWA.roa (hash: zlpeAvdqJBpxOyHRcrVmcRB4NLd3aJqqYyX9zP43hIU=) 3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: 7YbKzhrl4coMqgsEyyhVI5UDrerTqiO7H17VmsW4IPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:1e:d1:61:ed:8e:18:fa:2b:3d:ea:21:31:0d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Validity Not Before: Dec 19 08:00:44 2025 GMT Not After : Dec 20 08:00:44 2025 GMT Subject: CN=91dd23d87ebbaa5c0c3d5dc1380aa8aa7da33dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f7:72:ad:8d:56:c4:fa:db:46:8d:b0:c7:b1: 90:17:8f:6a:79:53:73:5a:76:42:17:6a:85:fb:05: 48:1a:71:76:08:03:1b:d9:13:43:ad:c7:df:99:bf: e8:e6:b1:10:31:27:f8:01:d4:27:3d:b3:3f:e0:9d: f0:fa:00:b7:90:cf:c1:4a:6b:00:06:98:2f:ee:36: c1:ba:6c:a6:7f:ab:fc:2b:cc:78:05:ce:ec:cb:d3: e8:c0:67:a4:dd:32:02:67:6f:58:69:0a:5e:ad:79: d0:be:fc:d8:54:ec:17:5e:05:af:82:9a:45:32:9b: cd:f9:14:6e:c1:51:66:1a:53:af:62:6c:98:8d:7a: 8b:74:4b:b4:cc:10:81:be:6f:98:e1:25:59:65:7c: 46:19:75:e0:7b:98:fe:98:f6:c5:20:c6:e9:39:a5: fb:d1:c5:bd:1f:e4:aa:3f:e5:84:26:db:15:72:65: 01:39:50:b7:68:82:fe:4c:8c:ac:ff:06:62:5d:28: 37:64:3e:3b:1f:76:c6:a7:f2:b2:3b:7d:7d:c8:cd: 90:8e:48:ec:1f:89:a3:3c:e0:b9:92:80:10:5b:91: 9a:13:c5:18:9c:d1:e4:b8:c2:79:f7:85:84:b4:c9: 94:9a:bd:1c:eb:24:07:ef:78:6c:7a:ea:68:fc:de: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:23:D8:7E:BB:AA:5C:0C:3D:5D:C1:38:0A:A8:AA:7D:A3:3D:CC X509v3 Authority Key Identifier: keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:47:48:68:e7:08:a3:22:70:53:1c:5a:67:26:97:77:78:51: 73:ff:5d:89:ce:01:cf:9b:92:37:94:18:a1:1a:93:2e:9f:cd: 63:03:8e:ec:89:df:ce:7b:7e:f7:a2:1c:0b:34:34:fc:b6:f5: 6c:25:9c:5c:dc:58:b1:c1:9e:03:b4:e4:e8:6d:e9:d8:6b:1c: fa:19:6b:12:7c:29:b1:b3:23:8a:03:f9:3f:3d:da:0b:97:39: e0:c6:3e:1b:a4:8d:0d:91:9b:42:03:16:9b:bf:f3:ab:09:63: 90:21:d6:9a:f4:70:18:09:bf:86:39:91:af:e9:43:45:33:27: df:c5:af:63:51:2d:d9:ad:3c:14:70:79:25:6b:ca:b7:4d:82: cb:4c:43:da:1b:e3:97:af:c2:ae:50:6f:ec:b2:f1:12:be:11: c7:f4:65:15:47:ea:46:04:04:2c:72:ad:8d:62:ef:94:75:ac: de:b5:9c:0d:54:bc:18:e1:2f:5b:a5:87:03:a1:9b:9e:f9:2b: a5:02:45:48:60:57:09:c7:87:4d:7e:91:21:a1:50:cc:7d:d8: 6d:a8:fc:27:8e:d8:ec:a2:f8:28:ce:81:fe:db:23:af:f3:d7: 09:0e:b4:ee:73:7a:d2:06:47:76:ee:c1:12:6a:36:be:8f:5b: 93:0c:ec:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oB7RYe2OGPorPeohMQ05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDNlNWY4NDA1ZDYwODViOGRmNGJmY2UxZGQ5YmIzZTc4 YzIxOTkwHhcNMjUxMjE5MDgwMDQ0WhcNMjUxMjIwMDgwMDQ0WjAzMTEwLwYDVQQD Eyg5MWRkMjNkODdlYmJhYTVjMGMzZDVkYzEzODBhYThhYTdkYTMzZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/dyrY1WxPrbRo2wx7GQF49qeVNz WnZCF2qF+wVIGnF2CAMb2RNDrcffmb/o5rEQMSf4AdQnPbM/4J3w+gC3kM/BSmsA Bpgv7jbBumymf6v8K8x4Bc7sy9PowGek3TICZ29YaQperXnQvvzYVOwXXgWvgppF MpvN+RRuwVFmGlOvYmyYjXqLdEu0zBCBvm+Y4SVZZXxGGXXge5j+mPbFIMbpOaX7 0cW9H+SqP+WEJtsVcmUBOVC3aIL+TIys/wZiXSg3ZD47H3bGp/KyO319yM2Qjkjs H4mjPOC5koAQW5GaE8UYnNHkuMJ594WEtMmUmr0c6yQH73hseupo/N4xBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHdI9h+u6pcDD1dwTgKqKp9oz3MMB8GA1UdIwQY MBaAFFQD5fhAXWCFuN9L/OHdm7PnjCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAt MTVhNDJhYzllZmE4LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAtMTVhNDJhYzllZmE4 LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEdIaOcI oyJwUxxaZyaXd3hRc/9dic4Bz5uSN5QYoRqTLp/NYwOO7Infznt+96IcCzQ0/Lb1 bCWcXNxYscGeA7Tk6G3p2Gsc+hlrEnwpsbMjigP5Pz3aC5c54MY+G6SNDZGbQgMW m7/zqwljkCHWmvRwGAm/hjmRr+lDRTMn38WvY1Et2a08FHB5JWvKt02Cy0xD2hvj l6/CrlBv7LLxEr4Rx/RlFUfqRgQELHKtjWLvlHWs3rWcDVS8GOEvW6WHA6Gbnvkr pQJFSGBXCceHTX6RIaFQzH3Ybaj8J47Y7KL4KM6B/tsjr/PXCQ607nN60gZHdu7B Emo2vo9bkwzsXw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:48:41 2025 by rpki-client