This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft File: vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json) Hash identifier: wuBScyu2FrrDRicJWWp35R0C2LNHc8ighpfKw0xuWMQ= Subject key identifier: AE:BE:04:FB:3B:12:37:20:F2:45:64:BD:77:64:CB:53:F4:CB:EA:31 Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B Certificate issuer: /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b Certificate serial: 019B5117A23E9CDDD844D305F8E29E31D73B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 16:01:01 +0000 Manifest this update: Wed 24 Dec 2025 16:01:01 +0000 Manifest next update: Thu 25 Dec 2025 16:01:01 +0000 Files and hashes: 1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: OiT5t5mq1/RdwHD4pSUXAFmSpHzyIxDnztv6dlOMyf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:a2:3e:9c:dd:d8:44:d3:05:f8:e2:9e:31:d7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b Validity Not Before: Dec 24 16:01:01 2025 GMT Not After : Dec 25 16:01:01 2025 GMT Subject: CN=aebe04fb3b123720f24564bd7764cb53f4cbea31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:13:b6:d3:c2:be:d1:3d:f9:86:47:0a:37: 46:cb:2c:b6:bc:b7:4b:8c:5c:31:a8:0b:6e:bb:16: a7:11:be:30:a4:67:a6:03:78:b1:cf:a2:65:8b:2c: 00:b0:35:d8:56:b2:92:a6:e2:0f:1e:69:aa:9c:de: 10:b8:77:af:d2:63:7b:bb:e5:d7:07:68:d7:ae:75: 4d:2e:ee:c9:20:56:e8:9b:7b:c0:38:e3:6a:3c:86: 04:82:81:bc:31:92:f3:de:ed:d4:55:95:21:26:7e: 72:c8:5f:21:da:da:52:5c:52:0e:54:75:f9:a7:95: 51:8a:66:4d:7a:f0:ee:2c:98:e6:1b:9e:08:cf:4b: f9:ae:5f:7a:c0:df:e2:c4:ec:df:92:55:33:ac:70: f4:2a:17:ba:16:1c:d5:b5:67:19:5c:5d:db:36:e9: d8:8f:ad:b2:70:06:66:87:85:f2:2b:a2:a0:3b:97: 0f:2c:5c:79:e7:43:75:ce:c4:f9:05:79:ba:64:d7: 4d:f8:39:2d:20:52:e7:8b:76:48:de:56:2f:b3:6d: 85:8b:45:7c:42:76:90:f2:79:01:82:56:e9:6d:c6: 99:5c:7a:b3:ec:d6:82:60:10:ef:91:7e:90:a3:7b: 69:1a:40:8f:4f:ad:66:e6:a5:0b:f3:5f:ca:25:43: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BE:04:FB:3B:12:37:20:F2:45:64:BD:77:64:CB:53:F4:CB:EA:31 X509v3 Authority Key Identifier: keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a4:b7:40:7d:70:61:6e:fe:a4:37:d1:63:27:39:fa:34:c7: a7:4e:82:4b:e3:1b:9b:a7:3e:df:1f:7c:a9:6a:9f:c7:67:9a: 0e:5d:f5:09:9e:9b:70:ed:88:ff:d2:4c:bc:78:d4:6e:08:5f: 6c:b5:11:0e:27:39:50:aa:36:a0:9e:92:85:45:2d:5c:cb:92: 21:21:cd:70:c8:b8:90:32:ae:df:3f:96:a5:c8:83:25:43:4c: 54:27:14:a9:13:4c:60:a0:78:be:dc:b6:14:60:3e:26:e5:41: 3a:aa:10:a3:33:18:7d:af:fc:65:b8:db:f0:ae:4a:cc:c2:41: d6:7f:d9:e4:83:1b:b4:c5:74:2b:85:82:9c:d7:ca:8b:af:36: 8c:9e:6b:02:b3:fe:94:8a:45:bd:48:63:7e:6c:00:46:08:d2: 61:91:d1:c2:e4:7a:fc:3f:a4:ec:25:83:d3:f4:f2:ca:15:2f: ee:b7:3d:d4:21:76:51:c6:b1:6c:7d:72:14:87:83:b5:82:99: 13:61:8c:d5:53:33:32:1f:fb:aa:df:a6:6f:2e:6d:b5:60:d7: a6:c5:39:61:e6:c1:44:82:79:4b:4f:7f:f1:9d:69:c4:92:47: 2c:20:af:42:a7:84:de:02:a5:be:25:4a:ab:47:40:94:2d:2b: db:d5:99:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF6I+nN3YRNMF+OKeMdc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjNhOWQzNTIzZjRmMTU2NTg5YmEwYWEyNDlmZDM1MjVj ODVmNmIwHhcNMjUxMjI0MTYwMTAxWhcNMjUxMjI1MTYwMTAxWjAzMTEwLwYDVQQD EyhhZWJlMDRmYjNiMTIzNzIwZjI0NTY0YmQ3NzY0Y2I1M2Y0Y2JlYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKkTttPCvtE9+YZHCjdGyyy2vLdL jFwxqAtuuxanEb4wpGemA3ixz6JliywAsDXYVrKSpuIPHmmqnN4QuHev0mN7u+XX B2jXrnVNLu7JIFbom3vAOONqPIYEgoG8MZLz3u3UVZUhJn5yyF8h2tpSXFIOVHX5 p5VRimZNevDuLJjmG54Iz0v5rl96wN/ixOzfklUzrHD0Khe6FhzVtWcZXF3bNunY j62ycAZmh4XyK6KgO5cPLFx550N1zsT5BXm6ZNdN+DktIFLni3ZI3lYvs22Fi0V8 QnaQ8nkBglbpbcaZXHqz7NaCYBDvkX6Qo3tpGkCPT61m5qUL81/KJUPqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6+BPs7Ejcg8kVkvXdky1P0y+oxMB8GA1UdIwQY MBaAFL7zqdNSP08VZYm6CqJJ/TUlyF9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAt ZGZlYWRlM2Q1NjQxLzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wZGU4YzAtZjJjMy00NjJiLWE4ZDAtZGZlYWRlM2Q1NjQx LzEvdnZPcDAxSV9UeFZsaWJvS29rbjlOU1hJWDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6S3QH1w YW7+pDfRYyc5+jTHp06CS+Mbm6c+3x98qWqfx2eaDl31CZ6bcO2I/9JMvHjUbghf bLURDic5UKo2oJ6ShUUtXMuSISHNcMi4kDKu3z+WpciDJUNMVCcUqRNMYKB4vty2 FGA+JuVBOqoQozMYfa/8Zbjb8K5KzMJB1n/Z5IMbtMV0K4WCnNfKi682jJ5rArP+ lIpFvUhjfmwARgjSYZHRwuR6/D+k7CWD0/TyyhUv7rc91CF2UcaxbH1yFIeDtYKZ E2GM1VMzMh/7qt+mby5ttWDXpsU5YebBRIJ5S09/8Z1pxJJHLCCvQqeE3gKlviVK q0dAlC0r29WZUw== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:41 2025 by rpki-client