This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft File: VoF64vtRPl4A1hv9MpOuTve_Im4.mft (raw, json) Hash identifier: CvLcid+qoNJzB4T0+mhTntQc0ijV9YYZwUTHnsk5BeM= Subject key identifier: 78:7B:3C:71:58:99:74:0A:6E:AA:C6:31:32:18:42:6A:9F:77:C7:A3 Authority key identifier: 56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E Certificate issuer: /CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e Certificate serial: 019AF3F73E31FE608FD4CA4E9F490EC1DB64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft Manifest number: 016F Signing time: Sat 06 Dec 2025 14:00:57 +0000 Manifest this update: Sat 06 Dec 2025 14:00:57 +0000 Manifest next update: Sun 07 Dec 2025 14:00:57 +0000 Files and hashes: 1: VoF64vtRPl4A1hv9MpOuTve_Im4.crl (hash: g4bcj4G2e8TOx8YHED21Pkhvfn4WnxHClpExJudIXAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:3e:31:fe:60:8f:d4:ca:4e:9f:49:0e:c1:db:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e Validity Not Before: Dec 6 14:00:57 2025 GMT Not After : Dec 7 14:00:57 2025 GMT Subject: CN=787b3c715899740a6eaac6313218426a9f77c7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:63:cb:4d:af:dc:98:1b:13:a0:c0:1c:40: 51:0b:f2:83:a3:8f:23:25:18:d5:2e:bb:6d:a6:44: 90:7c:66:4a:fe:0e:91:bb:6d:4b:52:48:52:a5:02: c7:8d:55:50:b2:10:c3:0a:16:bf:67:b5:54:c7:fc: 05:07:bb:53:7f:81:a3:e3:e8:a8:13:74:a0:0c:c0: fd:bf:5b:0b:04:c3:22:6c:ae:7a:cf:18:f2:02:80: 88:f8:ad:8a:15:55:2d:a4:3c:a6:9e:0d:5a:64:5b: 50:12:f3:7b:96:24:d6:db:8c:d6:25:33:2d:2a:4c: 45:ed:8d:25:82:d0:3f:7e:9f:3e:27:28:2b:99:4b: df:10:08:32:6f:9c:2a:1e:44:6a:d3:b8:36:a0:26: 9d:0e:80:10:ef:59:c5:9c:f5:10:d4:ae:f0:2f:06: 08:a3:15:de:f7:be:7e:d0:e2:00:f3:78:de:99:ab: 8f:0f:6b:10:7b:02:1c:b0:33:54:5e:30:12:7f:5a: 64:cb:81:50:34:8b:ed:ee:24:67:84:10:84:77:33: 14:02:2c:c7:c5:b9:37:31:c4:62:04:d9:b1:e0:3a: 13:4d:8b:dc:51:09:85:54:73:4f:b0:9f:3b:e7:b3: 2c:e5:67:0c:6e:0c:53:42:f5:9a:bb:8d:0a:74:be: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7B:3C:71:58:99:74:0A:6E:AA:C6:31:32:18:42:6A:9F:77:C7:A3 X509v3 Authority Key Identifier: keyid:56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:9d:ad:a3:84:f4:80:ec:6a:77:72:80:46:d0:28:c6:60: 5c:54:01:fc:e6:05:82:e1:d4:cf:ad:9d:f6:d7:a5:7d:c5:32: cb:2d:50:3a:d1:36:06:5e:b6:e9:1e:e7:8f:29:ab:11:10:5b: 6f:0a:c2:db:19:c5:ee:49:64:a4:d2:56:75:56:5a:03:55:10: 38:ee:1b:4d:e3:29:b0:89:bb:41:97:6a:97:a6:91:66:82:b3: 1d:0b:3c:1f:b4:1e:9e:54:be:73:c1:f8:b6:54:02:d6:0e:4f: 24:18:27:70:e6:ce:4f:33:17:a2:fd:1e:e9:42:28:9f:d5:86: 06:8c:18:40:f2:44:05:d2:b4:90:8d:e0:66:05:92:8d:48:ed: 48:1f:63:a3:3a:0b:f5:f5:39:b6:71:f6:a2:95:6c:38:cc:3f: 6b:5c:70:79:a0:92:d0:66:44:9c:67:f9:68:15:1a:c0:0f:8e: 55:97:17:c9:6f:25:0a:16:0a:8b:0f:bf:4d:cd:0a:f8:9c:13: 38:3f:58:99:42:25:17:cf:9a:bf:4d:42:26:41:35:a6:c1:0e: 52:3c:53:7a:56:be:22:ab:c7:e5:d6:9b:76:e7:de:9e:b3:8f: d3:4b:a8:68:d5:4d:4a:10:fb:f0:9e:44:ba:87:dd:7e:d1:1d: 90:ba:99:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9z4x/mCP1MpOn0kOwdtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ODE3YWUyZmI1MTNlNWUwMGQ2MWJmZDMyOTNhZTRlZjdi ZjIyNmUwHhcNMjUxMjA2MTQwMDU3WhcNMjUxMjA3MTQwMDU3WjAzMTEwLwYDVQQD Eyg3ODdiM2M3MTU4OTk3NDBhNmVhYWM2MzEzMjE4NDI2YTlmNzdjN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg1jy02v3JgbE6DAHEBRC/KDo48j JRjVLrttpkSQfGZK/g6Ru21LUkhSpQLHjVVQshDDCha/Z7VUx/wFB7tTf4Gj4+io E3SgDMD9v1sLBMMibK56zxjyAoCI+K2KFVUtpDymng1aZFtQEvN7liTW24zWJTMt KkxF7Y0lgtA/fp8+JygrmUvfEAgyb5wqHkRq07g2oCadDoAQ71nFnPUQ1K7wLwYI oxXe975+0OIA83jemauPD2sQewIcsDNUXjASf1pky4FQNIvt7iRnhBCEdzMUAizH xbk3McRiBNmx4DoTTYvcUQmFVHNPsJ8757Ms5WcMbgxTQvWau40KdL6KqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh7PHFYmXQKbqrGMTIYQmqfd8ejMB8GA1UdIwQY MBaAFFaBeuL7UT5eANYb/TKTrk73vyJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYt Mzg2MmI3MjQwODk1LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYtMzg2MmI3MjQwODk1 LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2KdraOE 9IDsandygEbQKMZgXFQB/OYFguHUz62d9telfcUyyy1QOtE2Bl626R7njymrERBb bwrC2xnF7klkpNJWdVZaA1UQOO4bTeMpsIm7QZdql6aRZoKzHQs8H7QenlS+c8H4 tlQC1g5PJBgncObOTzMXov0e6UIon9WGBowYQPJEBdK0kI3gZgWSjUjtSB9jozoL 9fU5tnH2opVsOMw/a1xweaCS0GZEnGf5aBUawA+OVZcXyW8lChYKiw+/Tc0K+JwT OD9YmUIlF8+av01CJkE1psEOUjxTela+IqvH5dabdufenrOP00uoaNVNShD78J5E uofdftEdkLqZpA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:41 2025 by rpki-client