This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json) Hash identifier: U+WzUxFXdrykGgk6jlRkIMAZktV8rpUFtetqViLZNaw= Subject key identifier: 6B:12:39:2C:C9:7F:F8:95:9D:78:F4:F5:CC:9A:86:03:AB:F8:00:84 Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0 Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0 Certificate serial: 019B4BF2130621D79CE4C760585861AE1C10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft Manifest number: 14BB Signing time: Tue 23 Dec 2025 16:01:54 +0000 Manifest this update: Tue 23 Dec 2025 16:01:54 +0000 Manifest next update: Wed 24 Dec 2025 16:01:54 +0000 Files and hashes: 1: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (hash: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=) 2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: loJhfTcCOX9tatqvsHSpb8U7gPsPP0tL71G2Qe4HTrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:13:06:21:d7:9c:e4:c7:60:58:58:61:ae:1c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0 Validity Not Before: Dec 23 16:01:54 2025 GMT Not After : Dec 24 16:01:54 2025 GMT Subject: CN=6b12392cc97ff8959d78f4f5cc9a8603abf80084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:75:17:84:93:bf:db:ce:37:e3:d5:43:5b:b1: a7:3a:ce:aa:3a:c9:43:97:af:ef:87:79:2b:ec:08: d7:e3:15:f4:01:20:13:56:c9:cd:03:db:ca:a3:03: 82:85:ca:7d:9f:e2:d6:7e:49:3e:d1:c3:54:51:9e: 52:46:a0:41:5c:a5:46:48:c2:26:1f:2d:38:9d:8d: f3:e1:ba:d1:ba:52:26:f1:71:fc:63:4d:7e:eb:4e: e6:08:d8:cc:08:e5:c2:5c:cb:6e:60:da:b3:38:6d: 28:81:6a:11:61:3c:4c:4b:23:15:81:c5:d1:45:45: 7c:52:10:2e:8e:fe:71:cb:f7:3b:51:04:6c:6c:d1: 1d:4f:f6:eb:a6:93:48:e6:60:be:05:0c:18:6b:8f: 5c:0b:2c:54:8a:eb:9f:94:16:fa:d2:eb:00:82:7c: 5b:88:90:0f:a9:2a:1e:ea:60:0d:25:c0:1f:e5:30: cd:9f:a2:71:81:31:94:df:0e:87:c8:ad:20:6c:6c: e6:58:ca:f8:63:0a:ed:fa:71:75:41:e3:29:31:18: bc:8c:98:d2:36:67:43:d6:14:1f:7e:98:fd:f3:11: 5d:04:e8:12:3d:42:53:76:2e:0d:45:e7:b0:be:0d: 60:10:14:0f:50:d0:64:e4:07:06:01:d7:1b:95:43: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:12:39:2C:C9:7F:F8:95:9D:78:F4:F5:CC:9A:86:03:AB:F8:00:84 X509v3 Authority Key Identifier: keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dc:fb:e1:0e:3e:71:57:9f:37:ed:de:28:c4:e6:93:fe:23: 79:fb:f1:9d:9c:5c:7f:0f:3d:91:ce:91:e2:98:d6:43:e4:18: 4e:5a:e4:06:47:05:1b:6e:01:57:5f:42:34:79:2b:16:3b:40: 42:f3:57:4e:68:44:3b:07:c8:47:d3:9d:f5:62:12:05:27:32: 4d:ac:b2:a2:f0:e5:b9:76:d0:f5:1a:4d:fa:10:11:12:2e:5f: 7b:46:3f:29:43:81:44:e2:72:63:93:cb:48:ef:20:33:c4:1b: 79:2f:e5:0a:ee:40:47:82:43:82:c6:a1:6b:79:c3:07:71:b5: 2a:28:1a:81:dd:78:12:ca:ff:c9:14:ff:5d:2f:24:f7:49:f9: ec:4f:b9:e3:44:7a:51:1b:0f:76:e6:48:1e:1d:1c:1d:c0:e3: c0:1d:59:67:47:49:41:1d:da:89:d1:d3:09:d3:42:6c:38:39: 33:71:22:eb:37:76:f0:3c:e4:52:80:35:71:5c:2b:93:7f:cd: 65:4c:f5:b1:af:6f:f7:e2:6d:1f:75:79:e3:1e:84:00:9e:e8: 83:ee:15:10:e1:54:ec:5b:5a:5d:6d:a4:86:ec:23:26:44:e1: 0f:ba:72:bb:1b:03:29:1a:31:d7:f9:59:c9:52:6b:87:e0:6e: f6:e8:8d:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8hMGIdec5MdgWFhhrhwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTM3MzNmNTBhNmE0NGE5MTRiOWY4ZjhlYmY3OGQ3ZmE0 ZWE5YTAwHhcNMjUxMjIzMTYwMTU0WhcNMjUxMjI0MTYwMTU0WjAzMTEwLwYDVQQD Eyg2YjEyMzkyY2M5N2ZmODk1OWQ3OGY0ZjVjYzlhODYwM2FiZjgwMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XUXhJO/284349VDW7GnOs6qOslD l6/vh3kr7AjX4xX0ASATVsnNA9vKowOChcp9n+LWfkk+0cNUUZ5SRqBBXKVGSMIm Hy04nY3z4brRulIm8XH8Y01+607mCNjMCOXCXMtuYNqzOG0ogWoRYTxMSyMVgcXR RUV8UhAujv5xy/c7UQRsbNEdT/brppNI5mC+BQwYa49cCyxUiuuflBb60usAgnxb iJAPqSoe6mANJcAf5TDNn6JxgTGU3w6HyK0gbGzmWMr4Ywrt+nF1QeMpMRi8jJjS NmdD1hQffpj98xFdBOgSPUJTdi4NReewvg1gEBQPUNBk5AcGAdcblUNmhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsSOSzJf/iVnXj09cyahgOr+ACEMB8GA1UdIwQY MBaAFFUTcz9QpqRKkUufj46/eNf6TqmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYjZiYTAtYjg3My00ODA4LWEyMmYt MTQxYjM5YTE5OWQ0LzEvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYjZiYTAtYjg3My00ODA4LWEyMmYtMTQxYjM5YTE5OWQ0 LzEvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtz74Q4+ cVefN+3eKMTmk/4jefvxnZxcfw89kc6R4pjWQ+QYTlrkBkcFG24BV19CNHkrFjtA QvNXTmhEOwfIR9Od9WISBScyTayyovDluXbQ9RpN+hAREi5fe0Y/KUOBROJyY5PL SO8gM8QbeS/lCu5AR4JDgsaha3nDB3G1Kigagd14Esr/yRT/XS8k90n57E+540R6 URsPduZIHh0cHcDjwB1ZZ0dJQR3aidHTCdNCbDg5M3Ei6zd28DzkUoA1cVwrk3/N ZUz1sa9v9+JtH3V54x6EAJ7og+4VEOFU7FtaXW2khuwjJkThD7pyuxsDKRox1/lZ yVJrh+Bu9uiNXg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:07:11 2025 by rpki-client