This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft File: VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft (raw, json) Hash identifier: s5FeodEB/LZpA2vI47yiW8RFp82uCDgSv/LaK06jRPQ= Subject key identifier: 3C:B3:46:41:94:FD:6D:4C:25:83:60:53:B0:24:80:D5:21:E8:0A:27 Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d Certificate serial: 019AF16468EE8162B0D55332842EAEBAC069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft Manifest number: 0350 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl (hash: bmBCIdWvdMcytb7JWVvTj62rKmCgTuVyCflB9nPxltE=) 2: iWKzGh5m2_oz6qvqBjoyFnizgxw.roa (hash: YVbdlpkB57bicqIuUwT2dIakABg210l0QU3avOsuQbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:68:ee:81:62:b0:d5:53:32:84:2e:ae:ba:c0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=3cb3464194fd6d4c25836053b02480d521e80a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:3b:53:0b:0f:83:a0:2f:af:b1:95:c6:21: 8b:02:01:53:20:d4:3c:2e:ea:ff:f6:b3:6b:9c:69: 56:07:d7:42:e1:3d:67:46:57:26:d0:1f:84:d0:91: 05:48:d9:4a:2a:94:60:7b:90:0b:d6:d1:aa:fa:57: 28:7d:fc:c8:85:ea:0f:fe:28:7b:1e:d9:bf:8d:c2: 7d:99:2e:17:fb:95:5d:f6:e3:b4:c9:8f:19:2c:a9: 68:29:0a:70:4b:59:c6:f4:7a:6f:6e:12:32:be:37: c9:53:30:df:f2:c3:81:5a:59:c5:b0:f2:9d:76:0b: 00:de:29:8f:4c:29:65:c3:8f:f7:70:31:88:a5:a3: 25:1c:1f:a0:a9:71:a5:b0:98:3c:0d:80:a2:9e:8e: 83:0e:22:a1:2b:6b:54:91:2c:c9:b0:ae:1a:e9:62: f5:4b:fa:68:f6:f9:ea:82:4f:d5:45:0f:7b:4b:84: 11:84:1c:e5:72:f4:09:d8:b2:bc:e6:4e:63:d6:1a: bd:f2:9a:d7:fe:75:e0:01:3f:1d:42:3f:1b:10:a1: cf:36:f1:9c:c9:fb:32:b3:30:5c:b2:8d:33:25:16: aa:e0:40:14:c4:bb:8c:5c:1e:90:be:81:6b:0f:e5: 3e:5c:a2:51:c6:55:7e:53:c0:c1:f2:ee:af:f3:b8: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:46:41:94:FD:6D:4C:25:83:60:53:B0:24:80:D5:21:E8:0A:27 X509v3 Authority Key Identifier: keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:76:b6:08:5a:2b:e3:cf:cc:f0:10:ae:f2:7b:b0:d3:88:49: da:73:1a:73:97:e8:6b:4c:54:97:4b:fe:a7:46:df:41:da:11: 0f:c1:e1:69:66:e1:79:9b:82:88:e1:37:8a:a2:48:e0:7b:dc: e5:96:b9:d1:77:3f:7e:9c:f4:4d:86:b8:cc:e9:60:05:34:c3: 9c:38:7e:ca:3c:6e:43:9c:8f:f2:24:7c:e5:81:8a:7d:01:94: 04:f7:d7:69:7c:a6:39:43:2c:d4:f6:53:af:c5:01:5f:46:64: db:a3:66:98:90:3f:0c:ee:4a:65:6d:c4:f6:40:5a:17:df:ff: 24:2f:79:fe:17:e3:b9:ce:e5:a7:8a:6c:e0:7d:53:84:6e:b8: ca:41:6e:04:0c:56:9a:1f:a1:3f:52:46:a7:c9:ad:cc:8f:76: 36:05:ad:1c:86:23:7a:df:46:69:fc:d7:9d:76:4c:6a:28:28: ed:52:96:be:a9:e0:d6:c6:12:07:a8:c9:3e:5c:47:f7:18:1b: 5b:0b:cc:5c:c0:d9:c0:70:86:74:9b:5c:e1:e7:89:4a:10:b4: bd:1d:d3:15:2a:d0:85:83:fe:c6:2e:83:62:66:04:3b:f6:bd: f3:f6:b2:c4:a5:d1:da:76:3c:8d:53:40:5d:e3:8d:58:85:d2: 78:1b:bf:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGjugWKw1VMyhC6uusBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDk1YTJmNDFjZDEwNWFlZjA2ZjI4NzBhNzYzMzk4MDFl ZGI5MGQwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EygzY2IzNDY0MTk0ZmQ2ZDRjMjU4MzYwNTNiMDI0ODBkNTIxZTgwYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLE7UwsPg6Avr7GVxiGLAgFTINQ8 Lur/9rNrnGlWB9dC4T1nRlcm0B+E0JEFSNlKKpRge5AL1tGq+lcoffzIheoP/ih7 Htm/jcJ9mS4X+5Vd9uO0yY8ZLKloKQpwS1nG9HpvbhIyvjfJUzDf8sOBWlnFsPKd dgsA3imPTCllw4/3cDGIpaMlHB+gqXGlsJg8DYCino6DDiKhK2tUkSzJsK4a6WL1 S/po9vnqgk/VRQ97S4QRhBzlcvQJ2LK85k5j1hq98prX/nXgAT8dQj8bEKHPNvGc yfsyszBcso0zJRaq4EAUxLuMXB6QvoFrD+U+XKJRxlV+U8DB8u6v87gQFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyzRkGU/W1MJYNgU7AkgNUh6AonMB8GA1UdIwQY MBaAFFRJWi9BzRBa7wbyhwp2M5gB7bkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEt Zjk5NDBmYTFlMTA4LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEtZjk5NDBmYTFlMTA4 LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXa2CFor 48/M8BCu8nuw04hJ2nMac5foa0xUl0v+p0bfQdoRD8HhaWbheZuCiOE3iqJI4Hvc 5Za50Xc/fpz0TYa4zOlgBTTDnDh+yjxuQ5yP8iR85YGKfQGUBPfXaXymOUMs1PZT r8UBX0Zk26NmmJA/DO5KZW3E9kBaF9//JC95/hfjuc7lp4ps4H1ThG64ykFuBAxW mh+hP1JGp8mtzI92NgWtHIYjet9GafzXnXZMaigo7VKWvqng1sYSB6jJPlxH9xgb WwvMXMDZwHCGdJtc4eeJShC0vR3TFSrQhYP+xi6DYmYEO/a98/ayxKXR2nY8jVNA XeONWIXSeBu/Lw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:53 2025 by rpki-client