This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json) Hash identifier: prAaB37VGusZgy1Vc0RIurh5VUyLvd+jbeq8UpbcXKs= Subject key identifier: 32:FA:A5:F1:C2:75:75:FD:41:9B:D4:CD:49:EF:FC:AE:36:D3:18:34 Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Certificate serial: 019B514EAB5CD799193C393E52FBF9C0C033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft Manifest number: 0290 Signing time: Wed 24 Dec 2025 17:01:08 +0000 Manifest this update: Wed 24 Dec 2025 17:01:08 +0000 Manifest next update: Thu 25 Dec 2025 17:01:08 +0000 Files and hashes: 1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=) 2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: CZUjDcG9xVfL5NDyxdztjpgOHV8bPYD0nvucNzfZ+8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:ab:5c:d7:99:19:3c:39:3e:52:fb:f9:c0:c0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Validity Not Before: Dec 24 17:01:08 2025 GMT Not After : Dec 25 17:01:08 2025 GMT Subject: CN=32faa5f1c27575fd419bd4cd49effcae36d31834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:c4:04:c0:68:cc:2d:ff:b6:a8:32:1a:9a: 1f:bd:3a:54:cf:a2:8f:2e:fc:86:eb:29:8f:15:da: 15:03:1d:d1:f2:7c:2e:fe:20:b7:5d:ff:1d:b9:1a: a3:45:ae:37:e9:ef:52:7a:bf:cf:62:80:99:c2:83: 92:a3:7a:8b:cc:e0:15:5f:55:7f:05:87:4b:ca:04: aa:de:62:14:2f:81:59:0e:f8:2b:2b:97:22:16:2f: 9d:59:10:6c:f6:6a:e5:dc:7f:c2:95:48:73:70:69: f1:b7:be:0b:e6:a6:80:28:63:30:88:f5:de:b7:9f: ee:eb:6d:ba:bb:fa:a0:d8:e0:80:f4:e2:ca:e8:02: 6c:12:15:6d:13:53:18:19:b6:d0:5b:38:30:d5:20: 9d:e5:cb:04:32:7e:67:2f:70:93:59:95:38:98:4d: 9f:3f:89:bc:91:08:78:7d:2d:92:f0:7f:b4:d2:02: 9c:c9:cf:ce:54:55:98:9d:83:76:55:d1:dc:9f:fb: 0b:ff:01:d5:b7:44:3b:0a:d1:83:1a:5f:35:c1:cf: 29:e1:c8:89:94:69:7c:d3:60:dc:aa:67:9a:99:c4: 8e:3a:43:7c:3c:36:bb:37:60:42:6b:06:f2:db:f0: ef:53:de:bb:45:b5:d9:48:30:28:92:76:41:fa:58: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FA:A5:F1:C2:75:75:FD:41:9B:D4:CD:49:EF:FC:AE:36:D3:18:34 X509v3 Authority Key Identifier: keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:24:01:12:a6:58:91:34:ea:77:18:0b:cb:f5:68:26:9d:20: af:be:37:b3:ed:85:5b:78:cf:e7:5e:71:d9:6c:ad:42:93:35: 4f:ab:54:d2:9a:37:a9:1f:ed:92:b6:68:a3:87:ed:9c:d5:73: 61:20:b9:40:12:1f:ae:b6:7c:a3:01:29:39:5c:72:a2:8b:a5: 22:83:1d:15:f8:5f:82:c1:49:e1:61:e9:d2:00:10:ab:8d:e3: e3:f5:cd:0a:e3:e2:f5:2c:25:4b:4a:e6:78:b1:fe:89:7f:b1: 39:84:25:bc:51:41:36:84:b0:6a:07:7a:85:88:f5:80:89:3a: ab:f8:64:ac:ca:13:32:1c:61:ee:ba:45:0d:a1:e8:8a:8e:28: 0f:b6:03:3e:9d:55:b6:3d:c7:93:f0:78:f9:82:2b:79:d8:28: c5:38:16:80:6d:4b:df:84:c8:93:29:6d:55:79:fc:62:ab:d9: 69:ff:9a:90:b0:11:bc:94:89:34:ca:df:c7:21:a3:dc:57:3f: 23:13:df:d0:b3:62:d9:9a:16:5e:62:cb:f3:44:bb:87:e4:ca: a4:3e:f3:a8:f4:14:bc:2c:6b:44:c2:b3:4a:33:98:a1:30:e4: 97:d2:36:ec:c3:fd:86:5b:36:73:29:61:cb:6a:9c:d5:bd:9a: 7b:02:31:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTqtc15kZPDk+Uvv5wMAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZjlkNTgxOWQ0NDBhZGNlY2RhMWVlZWI3Yzk4YWU5OWM0 ZDA3MDcwHhcNMjUxMjI0MTcwMTA4WhcNMjUxMjI1MTcwMTA4WjAzMTEwLwYDVQQD EygzMmZhYTVmMWMyNzU3NWZkNDE5YmQ0Y2Q0OWVmZmNhZTM2ZDMxODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOLEBMBozC3/tqgyGpofvTpUz6KP LvyG6ymPFdoVAx3R8nwu/iC3Xf8duRqjRa436e9Ser/PYoCZwoOSo3qLzOAVX1V/ BYdLygSq3mIUL4FZDvgrK5ciFi+dWRBs9mrl3H/ClUhzcGnxt74L5qaAKGMwiPXe t5/u6226u/qg2OCA9OLK6AJsEhVtE1MYGbbQWzgw1SCd5csEMn5nL3CTWZU4mE2f P4m8kQh4fS2S8H+00gKcyc/OVFWYnYN2VdHcn/sL/wHVt0Q7CtGDGl81wc8p4ciJ lGl802DcqmeamcSOOkN8PDa7N2BCawby2/DvU967RbXZSDAoknZB+lgFoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL6pfHCdXX9QZvUzUnv/K420xg0MB8GA1UdIwQY MBaAFFT51YGdRArc7Noe7rfJiumcTQcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTIt OWQzMTVkMTE1Y2JiLzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTItOWQzMTVkMTE1Y2Ji LzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCQBEqZY kTTqdxgLy/VoJp0gr743s+2FW3jP515x2WytQpM1T6tU0po3qR/tkrZoo4ftnNVz YSC5QBIfrrZ8owEpOVxyooulIoMdFfhfgsFJ4WHp0gAQq43j4/XNCuPi9SwlS0rm eLH+iX+xOYQlvFFBNoSwagd6hYj1gIk6q/hkrMoTMhxh7rpFDaHoio4oD7YDPp1V tj3Hk/B4+YIredgoxTgWgG1L34TIkyltVXn8YqvZaf+akLARvJSJNMrfxyGj3Fc/ IxPf0LNi2ZoWXmLL80S7h+TKpD7zqPQUvCxrRMKzSjOYoTDkl9I27MP9hls2cylh y2qc1b2aewIxpQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:43:06 2025 by rpki-client