This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft File: VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json) Hash identifier: p3gbnizgSNurQtyypgp96kn6rPGgIjmylPXZcafhoSw= Subject key identifier: 4E:E0:A1:36:46:90:83:14:E6:0F:C0:71:F3:37:1A:4C:99:26:05:73 Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e Certificate serial: 019AF0F5DC1EB6DD34292CFB87E7B775EDC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft Manifest number: DD Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: 1QnOxejfk5XuuYbYlllCBsBaG9c.roa (hash: P2RSq1ow6j3BlPvu76+kMbIlFbKzSTT3UqfFarTiLBQ=) 2: D6r05J6D3sA79ZZwq1eEGmeTVdE.roa (hash: 4BzqyVO9j3Co5UPBfledlmasXeXWcyyXJrp3dBPxaTE=) 3: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: 8oDxewTsG9LL2y7GWFa9JmuRKPxGWbFzGucM6Bxp4xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dc:1e:b6:dd:34:29:2c:fb:87:e7:b7:75:ed:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=4ee0a13646908314e60fc071f3371a4c99260573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:dc:cd:fd:2d:49:bb:da:cf:39:e2:df:39: 18:fb:20:94:3c:a0:b9:e4:21:b1:7c:6f:b1:3f:8a: 68:85:15:83:b2:72:b0:2c:f2:c8:79:cb:87:fc:e3: dd:31:86:4a:01:0d:6c:11:13:f3:89:db:b4:e7:15: d9:09:41:19:85:1b:fd:3c:73:be:c3:4d:8d:35:bb: 52:62:7c:d9:62:7d:5a:66:6d:46:70:7e:b2:24:d4: 5c:f4:80:5f:36:d9:a2:6d:0d:7d:22:b7:7c:d4:31: 7d:85:92:ff:fc:ea:a8:d8:5b:74:92:08:d2:9d:72: 80:2c:6a:83:16:9b:c3:25:b5:43:24:76:25:e4:75: ac:e4:6e:3f:27:c0:6e:78:69:72:f7:ee:49:9f:78: 99:7b:30:49:a4:2a:03:d1:51:03:66:e6:36:6d:df: 53:6b:bb:62:09:18:4f:81:10:72:50:9b:7f:53:a0: 1c:c6:9b:5e:12:32:cc:16:9f:5c:37:0a:ad:6d:8e: c1:c6:2e:f2:ea:2d:94:e0:54:28:9c:f3:bb:cf:bb: 24:d6:9a:43:43:92:a0:23:30:28:6b:b9:9f:02:3c: 71:03:9a:25:d5:83:5f:c5:e3:83:61:4d:6d:fb:fa: 81:88:9e:4c:6c:e8:d5:30:09:a4:0a:d9:5a:8b:cd: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E0:A1:36:46:90:83:14:E6:0F:C0:71:F3:37:1A:4C:99:26:05:73 X509v3 Authority Key Identifier: keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:83:58:88:1a:d4:aa:07:a0:43:2d:75:4c:07:75:42:f1:d3: 66:6a:f2:a0:2d:24:31:b0:be:f4:96:4f:97:6b:5f:6e:f7:28: c8:b4:f4:eb:29:19:b9:31:93:c0:5d:a4:1f:48:d4:3f:16:2a: ad:44:04:6f:41:05:68:36:cb:a4:9d:49:29:85:f3:62:06:2f: 62:78:56:74:b7:e3:33:86:81:32:f2:86:c5:e7:45:3c:88:94: 48:61:9b:1b:3c:4d:10:f3:c9:19:cd:a4:2b:de:91:cc:26:9a: de:26:47:c2:e2:47:63:29:21:4d:cf:be:f7:f0:b8:11:34:b5: 87:d2:fa:a2:36:69:54:99:7f:61:12:a5:f8:10:14:a3:85:7a: c8:f7:e4:79:1b:1f:76:2e:fb:9c:74:fe:59:22:6b:df:39:78: ef:34:d6:32:0b:b9:44:d8:d3:3d:f5:b9:2d:a5:3c:be:f0:ae: bf:b3:d8:f3:3e:3e:c9:ba:75:15:24:1d:85:4a:9d:65:2c:18: 65:41:bd:ff:e7:76:93:a3:ca:dd:5f:d5:c6:06:b9:54:9b:62: c0:1a:2b:c7:a4:0e:a4:81:6b:99:15:04:52:77:f7:d0:55:15: 3c:78:62:fe:2e:dd:7b:29:56:54:d2:60:0e:cc:5b:c2:91:d7: 9c:a1:1b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dwett00KSz7h+e3de3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1 NDQ5N2UwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD Eyg0ZWUwYTEzNjQ2OTA4MzE0ZTYwZmMwNzFmMzM3MWE0Yzk5MjYwNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f/czf0tSbvazzni3zkY+yCUPKC5 5CGxfG+xP4pohRWDsnKwLPLIecuH/OPdMYZKAQ1sERPzidu05xXZCUEZhRv9PHO+ w02NNbtSYnzZYn1aZm1GcH6yJNRc9IBfNtmibQ19Ird81DF9hZL//Oqo2Ft0kgjS nXKALGqDFpvDJbVDJHYl5HWs5G4/J8BueGly9+5Jn3iZezBJpCoD0VEDZuY2bd9T a7tiCRhPgRByUJt/U6AcxpteEjLMFp9cNwqtbY7Bxi7y6i2U4FQonPO7z7sk1ppD Q5KgIzAoa7mfAjxxA5ol1YNfxeODYU1t+/qBiJ5MbOjVMAmkCtlai81XMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7goTZGkIMU5g/AcfM3GkyZJgVzMB8GA1UdIwQY MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt MDJkZTAxMjQyMjhlLzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoNYiBrU qgegQy11TAd1QvHTZmryoC0kMbC+9JZPl2tfbvcoyLT06ykZuTGTwF2kH0jUPxYq rUQEb0EFaDbLpJ1JKYXzYgYvYnhWdLfjM4aBMvKGxedFPIiUSGGbGzxNEPPJGc2k K96RzCaa3iZHwuJHYykhTc++9/C4ETS1h9L6ojZpVJl/YRKl+BAUo4V6yPfkeRsf di77nHT+WSJr3zl47zTWMgu5RNjTPfW5LaU8vvCuv7PY8z4+ybp1FSQdhUqdZSwY ZUG9/+d2k6PK3V/Vxga5VJtiwBorx6QOpIFrmRUEUnf30FUVPHhi/i7deylWVNJg DsxbwpHXnKEbxg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:11 2025 by rpki-client