This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json) Hash identifier: RjCtZIt9Ao0antGYrG3wk5FB6OB/yLb7aGbZ17X0eFg= Subject key identifier: A9:9D:72:10:07:20:33:38:1F:4A:6C:C1:AA:C6:00:A2:DD:B8:86:13 Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6 Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6 Certificate serial: 019B3F7F415A81FA37852E3AEADD58446F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft Manifest number: 1525 Signing time: Sun 21 Dec 2025 06:01:02 +0000 Manifest this update: Sun 21 Dec 2025 06:01:02 +0000 Manifest next update: Mon 22 Dec 2025 06:01:02 +0000 Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=) 2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: QtwnUEqnwmf+tRbMdmAVERolPT1chkZKADOuqMDR/jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:41:5a:81:fa:37:85:2e:3a:ea:dd:58:44:6f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6 Validity Not Before: Dec 21 06:01:02 2025 GMT Not After : Dec 22 06:01:02 2025 GMT Subject: CN=a99d7210072033381f4a6cc1aac600a2ddb88613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:e1:37:46:9d:b9:6e:02:87:86:1c:96:6e: c7:e9:65:09:9e:55:4b:83:9b:90:a0:c3:64:25:e2: 74:b0:a5:b0:70:a1:f6:55:ff:a0:93:4a:32:ef:14: ec:e2:bd:71:12:82:37:b0:61:de:87:42:27:a5:a2: 4f:91:ad:e2:f2:44:8a:d3:1e:a5:9e:5c:e0:5d:99: 53:69:ec:9a:b1:95:5b:ba:72:91:b4:2b:03:aa:f3: f2:28:25:d4:66:6b:f7:06:f5:b9:db:b0:8f:49:4d: ee:c7:03:a8:a8:0a:bc:29:06:43:f8:00:a9:2f:1e: 54:69:0b:5e:6b:6b:b2:fb:0f:71:24:c9:3f:8c:90: 35:84:35:c1:54:64:85:fa:08:8c:c7:5f:da:75:09: 06:b2:2d:c7:77:c8:33:05:cf:67:eb:b1:4b:f6:ac: 16:cb:17:66:c9:d3:93:1f:95:29:11:fe:69:d3:a7: fd:1e:44:a4:37:b8:22:74:f7:24:19:5f:c3:f6:f3: 1b:f6:f6:8a:a2:03:24:6e:96:82:b3:96:79:0f:d0: 50:4f:64:c2:29:3a:fc:89:90:1a:7a:ad:f1:45:d9: 11:15:27:57:bd:f6:55:11:11:d1:23:7c:a4:f7:a2: 47:d2:70:4d:07:7b:37:fd:39:30:3e:47:de:35:2c: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:72:10:07:20:33:38:1F:4A:6C:C1:AA:C6:00:A2:DD:B8:86:13 X509v3 Authority Key Identifier: keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:20:27:55:50:74:33:64:54:a5:dd:03:23:00:99:43:49:fd: 5e:82:6e:91:8d:8a:48:9a:42:97:61:4e:20:de:4c:1b:f7:f2: c1:dc:54:ac:24:cc:26:b9:9a:6e:16:e2:55:4a:06:cf:c9:8e: 92:22:8b:1d:b5:09:36:19:9b:7a:bf:29:71:ee:6a:e7:71:31: 8b:9b:85:d1:2d:7f:ce:69:82:39:83:3d:a3:d9:75:64:e4:20: 24:89:37:69:d0:aa:6e:47:7e:67:29:21:2e:2b:f4:ee:14:56: ef:02:34:ee:c4:3d:fb:ad:c9:b3:2f:a8:2c:bf:8f:66:8c:16: 8d:46:42:c8:a5:40:59:61:6c:ee:c0:84:0e:4c:da:78:b2:dd: 77:b3:55:7b:bd:d7:aa:70:b0:ad:95:c7:27:d6:83:75:2e:0f: 02:12:6a:33:63:0c:93:af:8c:10:2a:33:58:4a:23:c5:03:45: fb:75:9f:07:e8:52:14:3c:1f:fa:11:2a:ca:8b:44:6b:c0:a5: ee:0d:df:a4:ba:5f:ad:83:be:26:59:8b:96:ef:76:2d:d1:f1: b0:be:81:b8:27:42:0f:5c:f5:26:8f:2f:e4:80:bc:6c:8e:9f: 9f:c5:4a:63:9e:d9:21:b9:ae:b4:11:f1:d8:7e:d7:a0:03:4a: bc:6b:90:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0Fagfo3hS466t1YRG+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YjljZGY4YjdlNTNlZmNkOTc5OWIxMWU3NDBmNTU1ZmQ1 M2Y0YzYwHhcNMjUxMjIxMDYwMTAyWhcNMjUxMjIyMDYwMTAyWjAzMTEwLwYDVQQD EyhhOTlkNzIxMDA3MjAzMzM4MWY0YTZjYzFhYWM2MDBhMmRkYjg4NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8nhN0aduW4Ch4Yclm7H6WUJnlVL g5uQoMNkJeJ0sKWwcKH2Vf+gk0oy7xTs4r1xEoI3sGHeh0InpaJPka3i8kSK0x6l nlzgXZlTaeyasZVbunKRtCsDqvPyKCXUZmv3BvW527CPSU3uxwOoqAq8KQZD+ACp Lx5UaQtea2uy+w9xJMk/jJA1hDXBVGSF+giMx1/adQkGsi3Hd8gzBc9n67FL9qwW yxdmydOTH5UpEf5p06f9HkSkN7gidPckGV/D9vMb9vaKogMkbpaCs5Z5D9BQT2TC KTr8iZAaeq3xRdkRFSdXvfZVERHRI3yk96JH0nBNB3s3/TkwPkfeNSy6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmdchAHIDM4H0pswarGAKLduIYTMB8GA1UdIwQY MBaAFFW5zfi35T782XmbEedA9VX9U/TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMt NmZjNGNkY2IzZjE3LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMtNmZjNGNkY2IzZjE3 LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyAnVVB0 M2RUpd0DIwCZQ0n9XoJukY2KSJpCl2FOIN5MG/fywdxUrCTMJrmabhbiVUoGz8mO kiKLHbUJNhmber8pce5q53Exi5uF0S1/zmmCOYM9o9l1ZOQgJIk3adCqbkd+Zykh Liv07hRW7wI07sQ9+63Jsy+oLL+PZowWjUZCyKVAWWFs7sCEDkzaeLLdd7NVe73X qnCwrZXHJ9aDdS4PAhJqM2MMk6+MECozWEojxQNF+3WfB+hSFDwf+hEqyotEa8Cl 7g3fpLpfrYO+JlmLlu92LdHxsL6BuCdCD1z1Jo8v5IC8bI6fn8VKY57ZIbmutBHx 2H7XoANKvGuQGg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:54:04 2025 by rpki-client