This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json) Hash identifier: 7bvRNNxrm62Hi2ObJz3QdK+9a6Ud6Pm03/5VWiH34e8= Subject key identifier: BD:A8:A6:E9:71:38:6E:A6:50:34:DB:DC:C0:02:5E:2B:2A:C2:44:41 Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54 Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54 Certificate serial: 019AF208D9AAE846254D132F9C96154269E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft Manifest number: 1562 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: gvGF4Py/f6KUUx574lXtmZNoOkqKt3e0lShIcmO8lkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d9:aa:e8:46:25:4d:13:2f:9c:96:15:42:69:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=bda8a6e971386ea65034dbdcc0025e2b2ac24441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:89:02:48:cd:f8:1f:0a:93:a9:47:13:d6: 73:4e:bf:f7:01:d0:a2:7a:37:86:de:83:e9:2d:3a: 91:15:50:b4:1f:76:50:b1:35:0f:90:e2:ad:3a:3d: a6:30:13:fc:b8:8a:30:67:9a:cc:79:a9:9f:98:fb: 56:7e:d8:f5:1a:39:c9:f9:9b:8f:18:ce:a8:f8:7b: 3b:b0:6e:2a:e4:8a:0c:8e:fe:87:2e:fb:33:f6:dc: bd:07:56:86:9f:07:16:1f:53:db:b7:87:91:d3:ed: 91:b5:2f:f8:04:36:62:c8:b2:4d:ca:2b:ea:74:0d: 64:1c:34:aa:64:de:06:ed:7f:30:d3:cd:65:28:ac: 67:64:41:95:78:6e:ec:ad:07:54:ec:fb:1e:0b:55: a1:c0:2d:24:5b:67:7b:f4:31:a8:69:00:91:33:3a: cb:a5:c7:03:5b:e8:50:d1:d8:06:68:7d:f2:06:0c: 89:e3:06:d2:00:fd:4e:be:d8:a9:3c:e3:f6:0c:7e: 7c:35:42:7e:81:96:2c:a8:ac:3c:75:3b:51:f3:7b: 94:bb:d5:cc:08:31:9e:ad:b1:c8:cb:fd:40:6c:00: cc:11:bd:45:48:e9:99:a6:13:8b:e0:d7:64:f4:d1: a8:c8:5b:95:c1:5a:1a:42:7d:df:b3:e7:c6:99:03: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A8:A6:E9:71:38:6E:A6:50:34:DB:DC:C0:02:5E:2B:2A:C2:44:41 X509v3 Authority Key Identifier: keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:be:0c:00:26:fe:f6:09:e6:76:bb:b7:53:1a:30:de:08:41: f2:16:5a:fa:36:a4:09:d9:59:5c:64:28:af:cb:97:5c:1f:9d: cd:32:35:a1:60:ea:d2:8d:04:59:8a:3f:db:c2:f3:4c:68:3d: 4e:04:74:1c:b0:3b:57:b6:fb:52:da:d5:d7:4f:ef:d7:f5:ad: fc:71:1d:72:fc:cb:2c:5a:bb:9e:f5:86:84:31:6a:aa:d7:19: 13:7e:48:43:b9:a3:09:2d:4f:09:3f:b1:41:4a:1b:ac:19:e9: d7:03:c9:1d:e1:74:59:10:28:f3:b1:6c:5e:b0:49:8f:be:8d: b5:ac:a5:4e:a3:bf:17:ef:58:7e:70:44:83:b6:15:fe:2e:1b: e3:15:a9:f1:00:6f:e3:7b:15:ae:90:c4:32:bf:56:a0:03:09: c3:8f:11:cc:a3:a9:f4:1d:b2:01:ba:7f:b4:a7:bb:91:8b:69: 3a:4c:f3:1c:ce:99:bd:88:f8:8d:9d:5a:68:90:07:b5:6a:bc: 0d:d2:c4:e3:f7:fc:17:c9:da:68:4b:2c:10:48:20:7b:18:77: 84:21:2d:65:bd:54:f2:34:3f:9a:2b:36:e9:8f:5f:f6:46:d3: 31:c5:ff:f5:01:b9:2e:db:10:55:62:a0:0e:f2:e1:94:fa:f4: f8:dc:18:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNmq6EYlTRMvnJYVQmnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDc4Y2JmZjRmZDc4ZjdkMDRkY2Y3OWM3YjkyNDA1MTRk MDRiNTQwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EyhiZGE4YTZlOTcxMzg2ZWE2NTAzNGRiZGNjMDAyNWUyYjJhYzI0NDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC+JAkjN+B8Kk6lHE9ZzTr/3AdCi ejeG3oPpLTqRFVC0H3ZQsTUPkOKtOj2mMBP8uIowZ5rMeamfmPtWftj1GjnJ+ZuP GM6o+Hs7sG4q5IoMjv6HLvsz9ty9B1aGnwcWH1Pbt4eR0+2RtS/4BDZiyLJNyivq dA1kHDSqZN4G7X8w081lKKxnZEGVeG7srQdU7PseC1WhwC0kW2d79DGoaQCRMzrL pccDW+hQ0dgGaH3yBgyJ4wbSAP1OvtipPOP2DH58NUJ+gZYsqKw8dTtR83uUu9XM CDGerbHIy/1AbADMEb1FSOmZphOL4Ndk9NGoyFuVwVoaQn3fs+fGmQNSJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2opulxOG6mUDTb3MACXisqwkRBMB8GA1UdIwQY MBaAFFQHjL/0/Xj30E3Pece5JAUU0EtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYt ZmI2YTJiZmU5OTk3LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYtZmI2YTJiZmU5OTk3 LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb4MACb+ 9gnmdru3Uxow3ghB8hZa+jakCdlZXGQor8uXXB+dzTI1oWDq0o0EWYo/28LzTGg9 TgR0HLA7V7b7UtrV10/v1/Wt/HEdcvzLLFq7nvWGhDFqqtcZE35IQ7mjCS1PCT+x QUobrBnp1wPJHeF0WRAo87FsXrBJj76NtaylTqO/F+9YfnBEg7YV/i4b4xWp8QBv 43sVrpDEMr9WoAMJw48RzKOp9B2yAbp/tKe7kYtpOkzzHM6ZvYj4jZ1aaJAHtWq8 DdLE4/f8F8naaEssEEggexh3hCEtZb1U8jQ/mis26Y9f9kbTMcX/9QG5LtsQVWKg DvLhlPr0+NwYPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:22 2025 by rpki-client