This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft File: VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json) Hash identifier: ITfD89f2TvGBpMFAkJNbSGlrHVFwAwu+bXjzEopTV90= Subject key identifier: C8:CF:9B:AD:21:D1:99:AA:DB:81:2C:89:57:2F:5D:49:A0:1F:A2:9F Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 Certificate issuer: /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Certificate serial: 019B341FA56092DA43186C6393F8146E5758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 01:00:47 +0000 Manifest this update: Fri 19 Dec 2025 01:00:47 +0000 Manifest next update: Sat 20 Dec 2025 01:00:47 +0000 Files and hashes: 1: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (hash: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=) 2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: 4OmqKJ9oPHrmwLHPOdQLvdV1MQ6LJUDcnCFvGJpkfZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:a5:60:92:da:43:18:6c:63:93:f8:14:6e:57:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Validity Not Before: Dec 19 01:00:47 2025 GMT Not After : Dec 20 01:00:47 2025 GMT Subject: CN=c8cf9bad21d199aadb812c89572f5d49a01fa29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:78:18:2e:9c:c9:65:3b:a3:5e:e9:b7:26: 7f:01:1c:a2:c0:8e:b2:df:6a:c8:8e:78:ca:6c:1c: 2c:0c:18:65:38:68:bf:72:ab:65:6d:ae:eb:73:01: 42:a5:04:f8:00:13:00:ae:95:40:32:10:7c:6d:e1: 66:71:6b:1a:e5:05:21:b1:d5:40:4a:aa:b8:ce:9e: a6:ca:cc:00:59:0a:75:dd:01:78:9f:ea:54:f4:f5: a9:44:08:e0:59:0e:04:7f:73:b4:04:43:38:07:97: fb:01:b1:96:aa:6c:06:a3:94:32:05:6a:7e:b0:91: 4c:77:e9:a9:ba:5a:bc:34:d7:19:76:9c:cd:5f:fb: f6:8b:4b:e2:66:d3:ee:40:1b:0f:04:7a:7a:c7:d3: 24:cb:7a:19:dc:0c:0a:db:59:17:b2:9b:db:57:1e: 96:9e:fe:78:e6:c2:2a:52:5a:6c:2c:6e:b2:e5:a8: b7:84:2e:96:02:ba:61:6d:a4:73:2b:19:2f:ac:38: dd:10:f4:a3:db:e3:17:34:4b:94:63:e1:aa:a7:f2: 36:9a:be:4b:2e:b8:5c:b8:0c:57:d7:c5:c9:3a:83: 5a:d8:bf:99:c6:0a:f0:2e:79:fd:56:79:8f:0f:8b: 43:5c:78:83:a1:88:64:9b:ae:b2:4b:9f:4e:90:40: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CF:9B:AD:21:D1:99:AA:DB:81:2C:89:57:2F:5D:49:A0:1F:A2:9F X509v3 Authority Key Identifier: keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1e:13:4f:05:1b:3c:65:9c:1c:86:91:b5:b7:d6:23:22:15: 28:c6:49:24:21:55:dc:fb:a7:87:b0:1c:2f:92:c4:1f:c9:3d: fa:9c:98:4a:89:54:3c:9b:6b:e7:78:fd:a1:27:4d:58:bb:ce: dd:ba:a0:04:bd:f1:1f:c9:a4:60:95:a5:d1:6d:53:41:cd:20: fd:01:d8:0c:54:bd:b6:2b:d7:42:6c:75:86:25:c8:e4:7a:75: 81:35:c7:df:88:b0:ef:91:a2:df:c9:6c:c9:a0:f7:26:eb:b3: a6:82:65:64:ee:f2:04:6c:5a:ec:af:34:4d:ac:96:05:0b:60: 9c:3f:b5:69:19:38:e4:1a:59:e4:80:f4:5a:f2:2c:4f:80:da: e7:79:f5:68:70:d4:f1:70:3e:e6:27:e6:27:87:1e:4f:fa:40: 2b:16:f8:5a:0e:59:d9:4e:c4:c9:65:cc:e6:50:aa:08:f0:63: 3b:66:cc:f4:d7:e3:53:59:1b:2b:eb:c4:74:02:64:e9:3f:72: 52:0a:50:32:c7:79:0e:4e:ce:ca:c8:f7:0c:dd:24:69:26:99: e8:54:c8:c2:86:c2:89:e5:41:1c:8a:1a:5c:8b:83:0c:1e:3c: 5a:5d:1e:77:a2:9e:2f:6e:a3:e1:0a:92:ee:f4:68:91:a0:81: 35:d8:4e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H6VgktpDGGxjk/gUbldYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjRiZmNkMDE2NGFkN2M2Njg4YWYyMjI0NmM4MmUxOTk1 ZGQzNTEwHhcNMjUxMjE5MDEwMDQ3WhcNMjUxMjIwMDEwMDQ3WjAzMTEwLwYDVQQD EyhjOGNmOWJhZDIxZDE5OWFhZGI4MTJjODk1NzJmNWQ0OWEwMWZhMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWh4GC6cyWU7o17ptyZ/ARyiwI6y 32rIjnjKbBwsDBhlOGi/cqtlba7rcwFCpQT4ABMArpVAMhB8beFmcWsa5QUhsdVA Sqq4zp6myswAWQp13QF4n+pU9PWpRAjgWQ4Ef3O0BEM4B5f7AbGWqmwGo5QyBWp+ sJFMd+mpulq8NNcZdpzNX/v2i0viZtPuQBsPBHp6x9Mky3oZ3AwK21kXspvbVx6W nv545sIqUlpsLG6y5ai3hC6WArphbaRzKxkvrDjdEPSj2+MXNEuUY+Gqp/I2mr5L LrhcuAxX18XJOoNa2L+ZxgrwLnn9VnmPD4tDXHiDoYhkm66yS59OkEA6CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjPm60h0Zmq24EsiVcvXUmgH6KfMB8GA1UdIwQY MBaAFFa0v80BZK18ZoivIiRsguGZXdNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQt MjQxNjY1ZjQ5ZDI1LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQtMjQxNjY1ZjQ5ZDI1 LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx4TTwUb PGWcHIaRtbfWIyIVKMZJJCFV3Punh7AcL5LEH8k9+pyYSolUPJtr53j9oSdNWLvO 3bqgBL3xH8mkYJWl0W1TQc0g/QHYDFS9tivXQmx1hiXI5Hp1gTXH34iw75Gi38ls yaD3JuuzpoJlZO7yBGxa7K80TayWBQtgnD+1aRk45BpZ5ID0WvIsT4Da53n1aHDU 8XA+5ifmJ4ceT/pAKxb4Wg5Z2U7EyWXM5lCqCPBjO2bM9NfjU1kbK+vEdAJk6T9y UgpQMsd5Dk7Oysj3DN0kaSaZ6FTIwobCieVBHIoaXIuDDB48Wl0ed6KeL26j4QqS 7vRokaCBNdhOsA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:58:32 2025 by rpki-client