This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft File: VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json) Hash identifier: 5EIIZHT8W4VG7kx4bFvSmXGkcKpC6WfsrW6Pr29vhVA= Subject key identifier: 87:1E:7C:26:D6:C3:64:5C:2B:BF:55:15:F4:A7:64:E1:C0:40:DD:4E Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f Certificate serial: 019B3A9063B2574716653123E3F282C4E464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft Manifest number: 0FB1 Signing time: Sat 20 Dec 2025 07:01:39 +0000 Manifest this update: Sat 20 Dec 2025 07:01:39 +0000 Manifest next update: Sun 21 Dec 2025 07:01:39 +0000 Files and hashes: 1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: dZLjwq3AaCe4/qc4XYsgawOB6EP7qlA0SSG9WN5E1FU=) 2: hLQXaatH7tOfK30W86b9zuTHKXk.roa (hash: fye8nCK2BKeEhZ/L6aDq++jY2Ctv+chp1+aFAXyDnu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:63:b2:57:47:16:65:31:23:e3:f2:82:c4:e4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f Validity Not Before: Dec 20 07:01:39 2025 GMT Not After : Dec 21 07:01:39 2025 GMT Subject: CN=871e7c26d6c3645c2bbf5515f4a764e1c040dd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:a0:c5:67:79:0f:b2:85:5f:ea:f6:ef:98: 37:c1:96:af:3c:21:d8:71:14:9d:0e:92:15:dc:8d: 45:01:24:39:1e:c3:fd:d7:94:9d:e4:c0:cc:3d:90: 95:1f:7a:db:1e:57:bd:eb:f2:3b:c3:51:aa:99:54: 95:bc:8a:05:82:c3:15:ee:c7:46:61:8a:59:0f:fc: c5:19:3e:3d:de:b9:e2:99:7c:4f:e8:1b:aa:24:fc: 4f:eb:5e:ee:c9:f6:85:49:be:82:f7:e4:39:34:1f: cc:61:29:a4:5e:93:9d:ad:fa:8f:a8:0e:14:f4:bf: 4e:07:c2:b9:e4:5e:16:1b:9a:28:68:82:69:ac:76: bf:f9:d3:a3:d8:1b:2f:5a:25:bb:b2:8e:38:81:2c: 7c:1b:2b:ea:90:cc:9f:eb:17:71:1d:82:22:53:eb: f7:44:0d:df:a2:e4:58:4c:2a:69:ef:b4:e5:7c:06: ae:d3:05:33:25:ab:34:4c:f1:19:ca:45:16:ff:da: 75:94:f4:32:b5:1d:47:0d:31:7b:4d:0b:18:92:57: f2:6c:13:ea:27:a1:c6:ee:4e:35:0f:25:df:90:89: 6c:d7:09:25:df:08:9f:00:1a:d7:61:f7:a6:bc:68: ef:20:18:6d:db:e3:8c:42:28:00:de:78:6b:e0:cb: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1E:7C:26:D6:C3:64:5C:2B:BF:55:15:F4:A7:64:E1:C0:40:DD:4E X509v3 Authority Key Identifier: keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:1e:10:77:a1:26:81:70:5f:22:50:d5:c0:45:1b:0f:f9:49: c2:41:6f:59:17:6b:e2:af:58:72:ed:0d:a2:67:5f:b8:44:4d: f2:57:47:3a:1b:a7:8b:3e:db:3d:e1:16:2b:6b:5f:36:76:ca: 09:71:44:08:24:71:a3:c3:d1:20:85:b9:9e:14:8c:aa:32:72: d5:89:40:ef:b6:f7:13:5e:44:76:e4:e8:1e:15:79:7c:ab:0b: 7d:f5:94:b1:5e:09:cd:b8:66:bf:f9:c1:d6:e7:52:de:88:3d: 3b:7e:42:89:d0:98:9e:c8:db:c5:26:58:b2:3e:d2:03:b3:af: aa:5c:21:98:93:87:1e:45:42:99:d6:1e:ce:2c:8b:30:5d:58: 69:c1:a4:4d:7b:4b:2e:cd:57:9b:dd:7c:af:d9:2e:65:e9:22: 3d:51:d5:50:d2:d8:e7:38:ef:38:9a:bf:20:3b:4a:64:f9:28: cf:cf:5c:4f:f1:21:8c:93:80:e4:cb:9d:26:c1:dd:ad:92:97: ef:de:a8:ee:87:2a:63:c8:a8:92:a6:4a:7b:8e:00:88:85:cc: 3e:49:23:26:af:9c:f4:44:09:f6:b7:55:07:c5:48:8b:84:93: f6:40:71:69:8b:e1:48:0e:ce:90:59:6a:1d:b6:27:21:dc:56: ab:e2:9e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kGOyV0cWZTEj4/KCxORkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YzEwN2ExM2Q1ODA3Yjc5MmY3YTU1N2IyZmJhZDU4Zjk0 NGExOWYwHhcNMjUxMjIwMDcwMTM5WhcNMjUxMjIxMDcwMTM5WjAzMTEwLwYDVQQD Eyg4NzFlN2MyNmQ2YzM2NDVjMmJiZjU1MTVmNGE3NjRlMWMwNDBkZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nqgxWd5D7KFX+r275g3wZavPCHY cRSdDpIV3I1FASQ5HsP915Sd5MDMPZCVH3rbHle96/I7w1GqmVSVvIoFgsMV7sdG YYpZD/zFGT493rnimXxP6BuqJPxP617uyfaFSb6C9+Q5NB/MYSmkXpOdrfqPqA4U 9L9OB8K55F4WG5ooaIJprHa/+dOj2BsvWiW7so44gSx8GyvqkMyf6xdxHYIiU+v3 RA3fouRYTCpp77TlfAau0wUzJas0TPEZykUW/9p1lPQytR1HDTF7TQsYklfybBPq J6HG7k41DyXfkIls1wkl3wifABrXYfemvGjvIBht2+OMQigA3nhr4MseLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcefCbWw2RcK79VFfSnZOHAQN1OMB8GA1UdIwQY MBaAFFbBB6E9WAe3kvelV7L7rVj5RKGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUt ZjMwZTE3NDU0ZTRiLzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUtZjMwZTE3NDU0ZTRi LzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAth4Qd6Em gXBfIlDVwEUbD/lJwkFvWRdr4q9Ycu0NomdfuERN8ldHOhuniz7bPeEWK2tfNnbK CXFECCRxo8PRIIW5nhSMqjJy1YlA77b3E15EduToHhV5fKsLffWUsV4Jzbhmv/nB 1udS3og9O35CidCYnsjbxSZYsj7SA7OvqlwhmJOHHkVCmdYeziyLMF1YacGkTXtL Ls1Xm918r9kuZekiPVHVUNLY5zjvOJq/IDtKZPkoz89cT/EhjJOA5MudJsHdrZKX 796o7ocqY8iokqZKe44AiIXMPkkjJq+c9EQJ9rdVB8VIi4ST9kBxaYvhSA7OkFlq HbYnIdxWq+KePA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:05 2025 by rpki-client