This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft File: VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json) Hash identifier: Ss/g7Wm2jU0+h6AscoiEypnLqqg5GkOGC6I3hrDiOHM= Subject key identifier: 7B:6E:C9:2D:B2:55:E8:B3:11:EC:8C:30:60:F7:C4:77:A3:62:DB:39 Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E Certificate issuer: /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e Certificate serial: 019B3CB55D99489D7F8C0374C43031EF7BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft Manifest number: 13F8 Signing time: Sat 20 Dec 2025 17:01:17 +0000 Manifest this update: Sat 20 Dec 2025 17:01:17 +0000 Manifest next update: Sun 21 Dec 2025 17:01:17 +0000 Files and hashes: 1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: 9xfYjMddpGjHXorzJAVgjTyw+F1smyAUsm3RIjj2Hs0=) 2: zAJ4z_rLfNTVDiMWL6ncN_yYa24.roa (hash: EtILhqnqDOPzVUQWUC5GlrRe7wnUPr/w8yX9c4PVZr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5d:99:48:9d:7f:8c:03:74:c4:30:31:ef:7b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e Validity Not Before: Dec 20 17:01:17 2025 GMT Not After : Dec 21 17:01:17 2025 GMT Subject: CN=7b6ec92db255e8b311ec8c3060f7c477a362db39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:2d:f6:a2:0d:94:14:cf:a9:15:3f:07:45: 8d:44:da:1d:64:dd:f9:5a:45:2e:7a:0e:ed:1b:77: 1d:0a:5d:3c:e3:0b:86:f6:da:0c:f4:f2:77:94:c5: 22:3b:a3:e1:b0:f5:57:b5:42:1e:25:77:d2:4c:c0: dd:e8:56:e8:85:bc:50:8b:a0:ea:89:33:85:35:82: ce:3c:69:cc:91:01:5c:01:2f:5e:ce:99:d8:92:24: 59:3a:4d:50:e9:b0:95:aa:da:8b:37:b3:ca:dc:f6: 62:73:02:41:86:69:3d:aa:fd:00:aa:f5:58:a8:37: fe:64:f0:9f:53:64:4a:98:99:0a:00:ff:fb:f9:ea: 02:fd:40:e2:80:11:1a:d6:f0:e4:88:a7:9f:f1:5b: 05:e8:fe:72:13:bc:c9:59:ef:a6:10:f3:53:22:d3: 89:2e:79:d3:a9:b2:99:a2:68:af:c4:3e:ac:8a:31: 75:39:dd:1c:4a:bd:55:66:3f:97:46:08:b0:cf:01: 38:bc:3e:7b:cf:fa:ac:b8:c5:d9:2c:7e:e8:b3:b4: 9d:00:f7:7e:f9:2b:2a:1e:e0:7f:b2:b3:d2:df:c8: 4b:46:a5:82:5f:53:6b:38:33:56:b1:8b:f1:f3:82: 61:cf:81:a0:d1:41:ad:9b:c5:11:54:4c:a4:fd:ff: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6E:C9:2D:B2:55:E8:B3:11:EC:8C:30:60:F7:C4:77:A3:62:DB:39 X509v3 Authority Key Identifier: keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:da:fb:d5:0b:11:b7:be:0b:50:2d:a3:f1:6f:55:ce:84:cf: ab:65:a7:bf:26:89:02:d0:86:d6:8d:6c:e2:53:8d:5b:fd:cd: 2b:87:52:77:28:da:bf:19:a9:79:c8:0c:c0:ff:e7:3e:d3:0f: d9:a4:5e:95:01:aa:fd:6c:44:74:e8:ea:7e:a7:5b:9c:27:d4: ad:d8:ef:a8:b8:c8:91:d4:81:15:10:44:71:15:19:42:24:59: 64:6f:7e:ed:18:4f:31:27:6d:3a:b0:ca:59:d2:10:a0:52:05: fa:60:71:39:f5:b9:3a:99:cb:07:88:36:75:7e:c2:8e:ae:4b: b2:68:93:08:ae:3f:49:6f:df:94:09:11:09:11:45:ee:51:0b: dd:38:bf:b3:38:65:09:ec:a3:7b:98:6b:d2:ae:12:e3:fb:b5: a8:f4:51:9e:85:e8:98:6d:67:e0:ad:88:90:c2:14:df:15:8d: 3b:7b:55:65:b0:bf:0f:dc:88:3f:38:b7:f4:13:91:a3:18:ce: 73:47:c6:5e:fc:ce:4e:19:d2:11:5c:ed:58:b9:bf:06:ee:e5: c9:15:ab:18:aa:e3:17:e4:0e:f0:76:d8:2b:8f:e4:f6:71:4d: 14:6c:ed:19:52:9d:08:7b:5c:6a:af:79:5d:d6:14:64:f8:c1: 3f:0a:fe:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tV2ZSJ1/jAN0xDAx73v5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTQzYmVlN2E3Y2NmNDc4MDJmNTVlYWU1NTdiYTVmY2Y5 Zjc5NWUwHhcNMjUxMjIwMTcwMTE3WhcNMjUxMjIxMTcwMTE3WjAzMTEwLwYDVQQD Eyg3YjZlYzkyZGIyNTVlOGIzMTFlYzhjMzA2MGY3YzQ3N2EzNjJkYjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOot9qINlBTPqRU/B0WNRNodZN35 WkUueg7tG3cdCl084wuG9toM9PJ3lMUiO6PhsPVXtUIeJXfSTMDd6FbohbxQi6Dq iTOFNYLOPGnMkQFcAS9ezpnYkiRZOk1Q6bCVqtqLN7PK3PZicwJBhmk9qv0AqvVY qDf+ZPCfU2RKmJkKAP/7+eoC/UDigBEa1vDkiKef8VsF6P5yE7zJWe+mEPNTItOJ LnnTqbKZomivxD6sijF1Od0cSr1VZj+XRgiwzwE4vD57z/qsuMXZLH7os7SdAPd+ +SsqHuB/srPS38hLRqWCX1NrODNWsYvx84Jhz4Gg0UGtm8URVEyk/f9DdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtuyS2yVeizEeyMMGD3xHejYts5MB8GA1UdIwQY MBaAFFQUO+56fM9HgC9V6uVXul/Pn3leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEt Yjc1YjVmMzdkYjA5LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEtYjc1YjVmMzdkYjA5 LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodr71QsR t74LUC2j8W9VzoTPq2WnvyaJAtCG1o1s4lONW/3NK4dSdyjavxmpecgMwP/nPtMP 2aRelQGq/WxEdOjqfqdbnCfUrdjvqLjIkdSBFRBEcRUZQiRZZG9+7RhPMSdtOrDK WdIQoFIF+mBxOfW5OpnLB4g2dX7Cjq5LsmiTCK4/SW/flAkRCRFF7lEL3Ti/szhl Ceyje5hr0q4S4/u1qPRRnoXomG1n4K2IkMIU3xWNO3tVZbC/D9yIPzi39BORoxjO c0fGXvzOThnSEVztWLm/Bu7lyRWrGKrjF+QO8HbYK4/k9nFNFGztGVKdCHtcaq95 XdYUZPjBPwr+fA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:46:44 2025 by rpki-client