This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json) Hash identifier: iWDWGLEtA5EhBd2D8q/2vp7TMVAeH5wQMkSWr5mNT7U= Subject key identifier: F7:CA:44:7C:8C:E4:EB:BE:D8:57:15:E7:F2:2A:C7:DE:3B:02:A6:23 Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Certificate serial: 019B3DFE8B4774DE6C7B0D2F44FA699E23C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft Manifest number: 13B7 Signing time: Sat 20 Dec 2025 23:00:50 +0000 Manifest this update: Sat 20 Dec 2025 23:00:50 +0000 Manifest next update: Sun 21 Dec 2025 23:00:50 +0000 Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=) 2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: s+br3+HRZlN39ZjqJOPnpdkcHbaP7UHXGdyxfZ32IRs=) 3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:8b:47:74:de:6c:7b:0d:2f:44:fa:69:9e:23:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c Validity Not Before: Dec 20 23:00:50 2025 GMT Not After : Dec 21 23:00:50 2025 GMT Subject: CN=f7ca447c8ce4ebbed85715e7f22ac7de3b02a623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:16:04:05:ef:22:6d:6e:9c:17:f3:51:48: 7f:64:39:3d:91:87:76:ec:4a:99:fd:5f:e1:a0:e4: 4b:00:0b:81:05:32:c7:94:6e:d5:3b:7e:9a:cc:36: 04:6b:b2:0e:17:63:1f:a2:28:fb:a5:6d:c8:e6:a8: 1f:a5:05:42:2f:ad:81:dc:39:f1:2d:5f:c6:a7:94: 30:9f:a4:47:73:57:e5:67:46:43:0c:b2:45:2b:91: e9:93:b1:81:c8:17:c7:25:58:9b:0d:f6:80:2c:b3: 3d:40:5a:5f:85:e7:f8:fd:20:08:50:cf:9f:88:f1: 47:f6:5a:8a:27:96:f6:38:f0:b7:d3:1b:36:40:39: c1:3b:55:cc:91:b4:6e:a7:da:7a:0a:14:99:fd:ad: 37:c0:2b:11:e4:4c:d3:1f:10:70:96:c5:28:f5:df: ea:d6:14:7b:3c:01:f9:66:fa:d4:f0:e6:73:26:e3: 32:6d:3a:53:80:c3:ff:b4:00:d9:80:37:1e:b9:04: 83:53:63:90:99:00:58:b4:ae:99:ad:72:d9:96:1e: 76:e8:ab:90:4b:07:6d:b2:95:c7:ff:2e:b5:0d:f9: 97:2f:10:e0:65:eb:01:44:0e:3f:e0:ab:fb:d4:a4: c8:a9:3d:1e:09:d7:76:af:3f:a3:f6:31:bc:94:4f: 7c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CA:44:7C:8C:E4:EB:BE:D8:57:15:E7:F2:2A:C7:DE:3B:02:A6:23 X509v3 Authority Key Identifier: keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:af:ce:81:87:50:37:e7:45:8b:50:88:7c:17:8f:2b:dc:77: 7b:f8:b8:57:99:e4:d6:74:7b:28:84:6d:12:c8:4a:50:ae:63: 1b:85:c5:f6:16:a6:94:d8:94:87:c6:df:52:95:20:0a:f7:b4: 44:ce:a9:d4:c8:d3:69:8c:54:7b:de:26:8b:3f:d3:9b:31:ac: d1:e3:8c:84:9e:54:a7:0e:9b:c2:f5:a0:bb:94:4c:05:8a:a9: 34:a5:9d:ef:cb:d6:e5:96:8c:80:c5:c1:89:13:19:15:f7:c1: 90:8e:d1:a6:e3:e9:d8:04:39:81:3c:89:22:6d:99:0d:66:2b: 96:00:e3:17:e3:37:64:80:9a:85:7f:97:2d:61:b3:21:2c:d1: b9:6a:fb:90:9a:55:23:57:10:a5:58:dc:0a:f2:90:cd:c6:22: 9f:fb:2d:87:d0:a3:cf:13:ea:70:65:08:e6:b6:53:78:38:2d: 9d:d3:7e:2f:11:62:e1:22:ab:54:20:89:4e:5c:48:7c:cc:74: 69:da:5f:69:80:b7:08:6e:40:db:2f:1e:dc:92:de:a9:bb:81: 39:70:1f:b6:93:89:f6:97:c0:7d:fd:08:05:04:eb:16:a6:22: 05:25:ce:ce:08:e2:52:52:16:e8:a9:a2:fc:09:b8:f8:57:d4: 70:b5:b3:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/otHdN5sew0vRPppniPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi NjlhMmMwHhcNMjUxMjIwMjMwMDUwWhcNMjUxMjIxMjMwMDUwWjAzMTEwLwYDVQQD EyhmN2NhNDQ3YzhjZTRlYmJlZDg1NzE1ZTdmMjJhYzdkZTNiMDJhNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA374WBAXvIm1unBfzUUh/ZDk9kYd2 7EqZ/V/hoORLAAuBBTLHlG7VO36azDYEa7IOF2Mfoij7pW3I5qgfpQVCL62B3Dnx LV/Gp5Qwn6RHc1flZ0ZDDLJFK5Hpk7GByBfHJVibDfaALLM9QFpfhef4/SAIUM+f iPFH9lqKJ5b2OPC30xs2QDnBO1XMkbRup9p6ChSZ/a03wCsR5EzTHxBwlsUo9d/q 1hR7PAH5ZvrU8OZzJuMybTpTgMP/tADZgDceuQSDU2OQmQBYtK6ZrXLZlh526KuQ SwdtspXH/y61DfmXLxDgZesBRA4/4Kv71KTIqT0eCdd2rz+j9jG8lE98HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfKRHyM5Ou+2FcV5/Iqx947AqYjMB8GA1UdIwQY MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt NjQyNzhjMGQ4ZWJmLzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6/OgYdQ N+dFi1CIfBePK9x3e/i4V5nk1nR7KIRtEshKUK5jG4XF9hamlNiUh8bfUpUgCve0 RM6p1MjTaYxUe94miz/TmzGs0eOMhJ5Upw6bwvWgu5RMBYqpNKWd78vW5ZaMgMXB iRMZFffBkI7RpuPp2AQ5gTyJIm2ZDWYrlgDjF+M3ZICahX+XLWGzISzRuWr7kJpV I1cQpVjcCvKQzcYin/sth9CjzxPqcGUI5rZTeDgtndN+LxFi4SKrVCCJTlxIfMx0 adpfaYC3CG5A2y8e3JLeqbuBOXAftpOJ9pfAff0IBQTrFqYiBSXOzgjiUlIW6Kmi /Am4+FfUcLWzZA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:06 2025 by rpki-client