This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json) Hash identifier: bcfheUHO0sZn2KT8rjb20lxYMaSLWLgDJCKosa1kKeM= Subject key identifier: 20:7E:5A:2A:31:4B:C7:F8:18:4C:C1:A8:55:B0:58:67:36:0B:B3:F2 Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0 Certificate serial: 019AF2E44F8F8EC5E98AA0ED67B6B01F409C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft Manifest number: 0E0F Signing time: Sat 06 Dec 2025 09:00:39 +0000 Manifest this update: Sat 06 Dec 2025 09:00:39 +0000 Manifest next update: Sun 07 Dec 2025 09:00:39 +0000 Files and hashes: 1: 7lJVxJeG2kQzily5Ys3pzO4Cx3c.roa (hash: 2p7G908u5hNgOkOPybVcD1KwXNRQ1cpOLTMbKHUwi8k=) 2: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: TsKs7dvUh4pMsfsmXWZ7nfeOKpT18TJoXIjUfQRpJz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4f:8f:8e:c5:e9:8a:a0:ed:67:b6:b0:1f:40:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0 Validity Not Before: Dec 6 09:00:39 2025 GMT Not After : Dec 7 09:00:39 2025 GMT Subject: CN=207e5a2a314bc7f8184cc1a855b05867360bb3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:30:b7:02:43:50:4d:47:00:55:2d:f8:4d:00: dc:1e:39:90:88:4e:47:8f:69:5e:2c:1c:0d:7f:ce: f1:2e:45:2b:0f:73:3e:03:14:de:4d:45:5d:14:4f: 48:88:f0:ff:4e:73:7a:b0:b1:de:75:2b:c9:33:d1: b0:9b:4d:e2:a3:ac:c5:1c:74:f8:d3:42:d5:69:8c: f0:89:85:b4:7e:c7:64:97:51:23:51:43:ca:18:09: 16:18:b2:16:31:bc:17:42:48:1c:13:0d:fa:0b:32: 56:4a:14:25:96:24:71:70:0b:0d:dc:09:74:cf:0a: 77:26:18:13:31:8a:92:a9:f4:af:8f:56:25:15:23: 5a:51:4e:47:a4:8f:63:3c:4c:f0:70:62:78:66:70: 9d:13:85:46:18:03:46:2c:c4:94:96:34:4d:cd:1c: 59:dd:58:c4:4f:7a:0d:1c:f6:33:04:b6:ca:51:f1: ea:01:03:b3:ab:32:6f:f6:92:d2:47:13:b1:d9:7c: 43:64:86:ce:6b:f3:92:eb:8a:dc:ab:81:2c:ba:c4: de:1a:65:ab:7c:6d:a1:d3:98:4a:99:33:15:17:82: af:7c:60:d3:31:38:5f:28:61:ff:fb:6b:b8:ec:90: 9d:93:b9:92:1e:78:92:08:cc:11:8b:65:b6:e5:10: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:5A:2A:31:4B:C7:F8:18:4C:C1:A8:55:B0:58:67:36:0B:B3:F2 X509v3 Authority Key Identifier: keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:c7:49:aa:96:51:45:a7:e0:18:96:20:b9:72:20:2b:b3:0e: 3d:49:4f:9c:97:93:5c:f8:92:0e:6b:92:fa:88:c0:29:52:9e: 02:56:95:6f:b4:1c:0f:78:12:ea:af:3b:56:3a:7d:2f:60:3a: 5c:66:9d:76:98:12:5b:70:b2:b6:07:16:4d:54:a4:c9:fe:f7: 27:10:8d:c0:24:e9:fc:09:9e:ed:fe:09:21:8a:e6:a2:e6:28: 06:a3:06:f2:49:92:a3:7d:3a:bb:46:a6:10:24:e2:19:20:a6: fb:d6:3e:14:dc:92:e0:6f:16:df:a2:7a:02:a7:3f:72:a1:cb: 03:7d:01:4c:a5:df:4d:93:cd:eb:38:5b:08:b3:13:31:66:f2: 14:7f:2d:4a:a1:c5:45:97:01:09:b9:fe:5b:20:c2:3e:4a:42: dc:4d:6f:c2:58:56:6e:b4:2d:3a:9a:46:03:a8:bb:c4:76:d9: fa:ae:2b:0d:47:fa:ab:6f:5f:8f:3f:14:d0:c9:4f:97:e8:e2: ed:6b:bc:f8:d9:ab:e0:6d:6b:ef:bd:ce:f1:24:91:0c:77:7e: 27:78:7c:a7:bc:2a:32:3f:ab:c1:6e:25:dc:d7:b0:98:43:1b: e4:ca:0d:df:7f:89:6c:85:dc:c6:27:d7:6d:ba:0f:4a:07:fd: b9:44:53:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5E+PjsXpiqDtZ7awH0CcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjVhZDJiNGU3MzhmNTQyZmEwZTY4MTM4ZjM2MjY2NDQx ZTI5YTAwHhcNMjUxMjA2MDkwMDM5WhcNMjUxMjA3MDkwMDM5WjAzMTEwLwYDVQQD EygyMDdlNWEyYTMxNGJjN2Y4MTg0Y2MxYTg1NWIwNTg2NzM2MGJiM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DC3AkNQTUcAVS34TQDcHjmQiE5H j2leLBwNf87xLkUrD3M+AxTeTUVdFE9IiPD/TnN6sLHedSvJM9Gwm03io6zFHHT4 00LVaYzwiYW0fsdkl1EjUUPKGAkWGLIWMbwXQkgcEw36CzJWShQlliRxcAsN3Al0 zwp3JhgTMYqSqfSvj1YlFSNaUU5HpI9jPEzwcGJ4ZnCdE4VGGANGLMSUljRNzRxZ 3VjET3oNHPYzBLbKUfHqAQOzqzJv9pLSRxOx2XxDZIbOa/OS64rcq4EsusTeGmWr fG2h05hKmTMVF4KvfGDTMThfKGH/+2u47JCdk7mSHniSCMwRi2W25RDFQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB+WioxS8f4GEzBqFWwWGc2C7PyMB8GA1UdIwQY MBaAFFRlrStOc49UL6DmgTjzYmZEHimgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMt MGQzYWQzNmViMTYxLzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMtMGQzYWQzNmViMTYx LzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMdJqpZR RafgGJYguXIgK7MOPUlPnJeTXPiSDmuS+ojAKVKeAlaVb7QcD3gS6q87Vjp9L2A6 XGaddpgSW3CytgcWTVSkyf73JxCNwCTp/Ame7f4JIYrmouYoBqMG8kmSo306u0am ECTiGSCm+9Y+FNyS4G8W36J6Aqc/cqHLA30BTKXfTZPN6zhbCLMTMWbyFH8tSqHF RZcBCbn+WyDCPkpC3E1vwlhWbrQtOppGA6i7xHbZ+q4rDUf6q29fjz8U0MlPl+ji 7Wu8+Nmr4G1r773O8SSRDHd+J3h8p7wqMj+rwW4l3NewmEMb5MoN33+JbIXcxifX bboPSgf9uURTZw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:10 2025 by rpki-client