This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json) Hash identifier: g+ow/ZjfSND5yJe9kalX1uHTT0Coh+zrEqM3qRJm/5c= Subject key identifier: 0E:B7:93:8C:53:2C:FC:A4:99:E9:15:B7:95:B8:CF:E7:C3:E4:8C:07 Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 019B5F40FEADE8E653141E00B7AD6E1E5951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft Manifest number: 0EA3 Signing time: Sat 27 Dec 2025 10:00:53 +0000 Manifest this update: Sat 27 Dec 2025 10:00:53 +0000 Manifest next update: Sun 28 Dec 2025 10:00:53 +0000 Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=) 2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=) 3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=) 4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: OwRxP4zZ8OeNVpijcOFvL2UWQpouLU6mvyHxlmZ0gZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:40:fe:ad:e8:e6:53:14:1e:00:b7:ad:6e:1e:59:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Dec 27 10:00:53 2025 GMT Not After : Dec 28 10:00:53 2025 GMT Subject: CN=0eb7938c532cfca499e915b795b8cfe7c3e48c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:1c:8a:44:8a:6e:11:09:eb:a1:07:97:f7: 2d:72:98:d1:bd:af:90:1d:f4:46:d3:bc:7b:a0:4b: b9:e3:68:ac:38:c8:56:88:0a:c0:6f:72:36:e0:d9: 6b:e4:c2:c7:f8:69:0f:39:3b:69:c0:4b:94:22:10: 6d:73:6d:89:ad:12:79:97:0d:2b:80:15:44:aa:9e: 1b:65:34:4f:61:08:e5:b5:2e:88:6a:b0:9a:da:e1: 5a:f4:2a:19:24:0b:78:54:b8:37:86:5f:bb:35:f4: 70:5a:80:42:25:4d:e5:1b:a9:54:4d:a4:6f:3c:96: 81:4b:7e:a2:eb:65:9b:fb:c8:c2:46:5c:29:20:1d: f7:f6:98:0b:45:34:84:a8:38:7b:f2:80:59:90:76: 74:4b:8e:03:3b:e7:8d:54:4e:a7:0a:1d:94:74:5d: 71:3e:ae:e1:d0:4d:54:63:68:50:e5:30:5f:2a:a0: ab:08:fe:e4:6a:bf:54:19:8e:02:ea:42:24:b5:85: 87:87:4f:27:2d:ea:9c:51:07:34:5a:eb:d0:1f:e3: 85:b3:cb:15:2f:05:f3:30:72:5a:ac:b4:96:c2:e8: 97:02:3f:c8:cb:9c:99:0d:1c:5d:9e:e5:07:15:56: 89:e8:d1:69:65:2e:e7:c0:a6:6c:4f:f9:f0:b2:de: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B7:93:8C:53:2C:FC:A4:99:E9:15:B7:95:B8:CF:E7:C3:E4:8C:07 X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:33:e3:a1:e0:ae:c8:ba:85:de:86:26:bd:b4:b0:eb:ff:aa: 03:4c:62:c0:88:f1:ab:40:2d:e3:b3:0e:2d:86:49:ae:e9:f7: f7:d6:16:58:e9:59:13:b9:c8:52:cb:15:2a:e5:3e:72:ef:dd: a8:c3:e4:5b:e5:1b:3c:0f:c2:17:d7:56:bd:84:4b:91:7f:f3: f5:f9:49:22:9c:a3:5a:9c:f2:a9:3b:db:6a:ed:96:22:08:a2: 76:c5:59:eb:51:86:30:69:fa:93:a2:3b:93:4e:f2:7c:db:36: 30:31:dd:af:ff:43:7f:f4:50:f7:d0:25:eb:4d:21:38:7b:cf: d4:88:fa:41:f2:0f:d4:77:4e:56:45:d1:b7:e6:62:11:21:89: cf:37:f5:9e:fd:3b:0a:47:f9:2a:47:6a:12:f1:3a:5a:9b:d2: c4:6c:ab:0d:6c:9b:b7:f8:9f:18:4d:99:19:7e:fd:78:1f:fe: 68:ec:d3:48:4e:b4:56:92:3c:2f:9b:78:d1:f5:a2:16:24:47: da:fc:f1:82:99:e5:59:a5:74:1b:61:7a:1d:53:08:26:9a:84: 3a:a5:54:fd:cb:fd:2f:80:9d:95:5d:bc:7d:b8:40:44:0f:2e: 98:7b:59:b5:2b:8b:25:0d:65:3d:6a:4a:11:f1:de:fb:47:31: f1:c2:06:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQP6t6OZTFB4At61uHllRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjUxMjI3MTAwMDUzWhcNMjUxMjI4MTAwMDUzWjAzMTEwLwYDVQQD EygwZWI3OTM4YzUzMmNmY2E0OTllOTE1Yjc5NWI4Y2ZlN2MzZTQ4YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQYcikSKbhEJ66EHl/ctcpjRva+Q HfRG07x7oEu542isOMhWiArAb3I24Nlr5MLH+GkPOTtpwEuUIhBtc22JrRJ5lw0r gBVEqp4bZTRPYQjltS6IarCa2uFa9CoZJAt4VLg3hl+7NfRwWoBCJU3lG6lUTaRv PJaBS36i62Wb+8jCRlwpIB339pgLRTSEqDh78oBZkHZ0S44DO+eNVE6nCh2UdF1x Pq7h0E1UY2hQ5TBfKqCrCP7kar9UGY4C6kIktYWHh08nLeqcUQc0WuvQH+OFs8sV LwXzMHJarLSWwuiXAj/Iy5yZDRxdnuUHFVaJ6NFpZS7nwKZsT/nwst4t6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA63k4xTLPykmekVt5W4z+fD5IwHMB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDPjoeCu yLqF3oYmvbSw6/+qA0xiwIjxq0At47MOLYZJrun399YWWOlZE7nIUssVKuU+cu/d qMPkW+UbPA/CF9dWvYRLkX/z9flJIpyjWpzyqTvbau2WIgiidsVZ61GGMGn6k6I7 k07yfNs2MDHdr/9Df/RQ99Al600hOHvP1Ij6QfIP1HdOVkXRt+ZiESGJzzf1nv07 Ckf5KkdqEvE6WpvSxGyrDWybt/ifGE2ZGX79eB/+aOzTSE60VpI8L5t40fWiFiRH 2vzxgpnlWaV0G2F6HVMIJpqEOqVU/cv9L4CdlV28fbhARA8umHtZtSuLJQ1lPWpK EfHe+0cx8cIG0A== -----END CERTIFICATE-----Generated at Sat Dec 27 15:41:18 2025 by rpki-client