This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft File: Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json) Hash identifier: w29DsnWCzI80jXh4wgBkGh5+WtOdcrINRtjvuCnZGOE= Subject key identifier: A4:6B:42:B8:7A:04:60:74:53:75:7B:71:8D:CA:00:BF:A2:65:2B:16 Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12 Certificate issuer: /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012 Certificate serial: 019AF208C7599AF28F15C170E37CEC23C3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft Manifest number: 0773 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: yreImr11BHudlnUtfESAT9d+Ugi8JUfdVTFnd7KkdMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c7:59:9a:f2:8f:15:c1:70:e3:7c:ec:23:c3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=a46b42b87a04607453757b718dca00bfa2652b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:7c:56:b4:77:b8:47:b6:d7:af:98:77:b1: 0c:6f:8d:43:aa:ed:92:ab:56:11:c7:ff:77:91:5b: 68:8d:4a:e6:8d:13:24:b0:db:60:67:ee:88:2f:57: fe:70:dc:fe:53:94:62:53:54:de:ab:6f:6a:05:08: dd:86:9c:7e:7a:73:4c:a3:24:a0:8d:03:4d:47:46: 40:3e:36:c3:97:93:85:31:dd:35:e7:54:f4:4b:cd: 40:41:9d:25:98:45:08:de:d4:8b:b0:03:05:d4:27: 9d:ff:bf:60:9c:63:b5:0e:04:74:dc:22:d1:45:c2: f8:f0:a8:a7:79:cf:b9:c5:48:8c:37:a4:73:99:e5: ff:2c:c3:74:d8:78:4b:ed:00:82:44:72:c3:28:81: 1a:17:23:9d:85:91:f1:4a:1d:8f:b0:b3:0a:4b:22: 83:1c:c9:82:31:04:50:84:bd:e8:cf:09:65:8e:f3: 99:c8:9a:3d:e2:99:53:7a:38:87:32:25:08:30:55: 53:af:ce:05:8b:53:40:f2:01:8c:11:bb:e9:96:02: 1f:5b:15:3a:79:9b:13:14:99:45:f2:bd:1e:b3:08: d1:ac:f8:c1:09:ea:77:41:b1:0b:38:bc:7c:d1:78: 60:1d:00:69:a2:1b:03:05:bc:df:44:5d:52:0a:ef: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6B:42:B8:7A:04:60:74:53:75:7B:71:8D:CA:00:BF:A2:65:2B:16 X509v3 Authority Key Identifier: keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d6:3a:b2:08:be:72:bd:1e:e3:00:37:04:43:20:5c:24:1e: 9c:5a:b9:f2:5b:b3:76:0f:47:52:b2:6b:8f:25:bc:54:d9:d6: 0a:f3:c2:8b:78:e2:22:85:dc:53:ba:ae:4c:27:4e:05:57:96: eb:82:64:3e:c0:5a:5a:37:71:80:83:c5:6e:ad:1b:05:5b:91: 2f:03:ff:05:32:00:e5:75:e4:8d:45:93:2d:5d:98:48:0d:cb: ad:ec:6b:83:c1:75:3f:e7:4c:d1:98:0b:d0:5a:b0:97:a5:f5: 39:8e:65:b4:bc:d3:d7:e4:55:46:57:29:54:0d:47:2c:83:ee: 42:dd:8f:74:d0:aa:58:67:5a:4f:d2:4a:84:27:49:f0:af:ac: 18:fa:20:ec:24:51:24:ed:d4:e7:bf:80:df:e7:fc:8a:12:12: 6a:0e:63:bc:86:ec:ae:ad:f6:7e:a4:dd:90:95:eb:39:c5:dc: 2a:61:91:99:68:32:47:98:d1:30:4a:ee:4c:23:1d:61:a3:76: 41:a0:46:de:a7:da:34:ed:ea:fe:83:d2:7b:e3:40:86:2f:4f: ce:04:a1:f5:b0:9c:74:71:f2:a1:6b:5c:46:37:76:38:11:c3: 6b:7e:71:76:1d:fb:e9:73:71:55:e5:69:63:9a:1c:2e:e4:ff: 72:fb:f8:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMdZmvKPFcFw43zsI8PbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTczOTdlNDUzMDYxODUxMDJiZmQ5ZWUwYTFmOTRkMWFj MDEwMTIwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EyhhNDZiNDJiODdhMDQ2MDc0NTM3NTdiNzE4ZGNhMDBiZmEyNjUyYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx18VrR3uEe216+Yd7EMb41Dqu2S q1YRx/93kVtojUrmjRMksNtgZ+6IL1f+cNz+U5RiU1Teq29qBQjdhpx+enNMoySg jQNNR0ZAPjbDl5OFMd0151T0S81AQZ0lmEUI3tSLsAMF1Ced/79gnGO1DgR03CLR RcL48Kinec+5xUiMN6RzmeX/LMN02HhL7QCCRHLDKIEaFyOdhZHxSh2PsLMKSyKD HMmCMQRQhL3ozwlljvOZyJo94plTejiHMiUIMFVTr84Fi1NA8gGMEbvplgIfWxU6 eZsTFJlF8r0eswjRrPjBCep3QbELOLx80XhgHQBpohsDBbzfRF1SCu+kdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRrQrh6BGB0U3V7cY3KAL+iZSsWMB8GA1UdIwQY MBaAFFXnOX5FMGGFECv9nuCh+U0awBASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgt MzEwNTU0NjgyMjIzLzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgtMzEwNTU0NjgyMjIz LzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtY6sgi+ cr0e4wA3BEMgXCQenFq58luzdg9HUrJrjyW8VNnWCvPCi3jiIoXcU7quTCdOBVeW 64JkPsBaWjdxgIPFbq0bBVuRLwP/BTIA5XXkjUWTLV2YSA3Lrexrg8F1P+dM0ZgL 0Fqwl6X1OY5ltLzT1+RVRlcpVA1HLIPuQt2PdNCqWGdaT9JKhCdJ8K+sGPog7CRR JO3U57+A3+f8ihISag5jvIbsrq32fqTdkJXrOcXcKmGRmWgyR5jRMEruTCMdYaN2 QaBG3qfaNO3q/oPSe+NAhi9PzgSh9bCcdHHyoWtcRjd2OBHDa35xdh376XNxVeVp Y5ocLuT/cvv4/g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:17 2025 by rpki-client