This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft File: VmczL0gJQe01gDssBLhPNyjTkpc.mft (raw, json) Hash identifier: qEYfq8OJz7Ej/AvdWE63isfw5HOULjKAjENuW40sIlQ= Subject key identifier: 79:47:E7:EC:A0:96:06:1B:79:D8:76:69:E0:8B:3E:5C:C7:2B:8B:1E Authority key identifier: 56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97 Certificate issuer: /CN=5667332f480941ed35803b2c04b84f3728d39297 Certificate serial: 019AF1D2605A3BA20232853FA360AE8A269A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft Manifest number: 0152 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: VmczL0gJQe01gDssBLhPNyjTkpc.crl (hash: GT9zgvAF95trMbcLvRXhAarAtlrq0UGXeV1kLIW3O0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:60:5a:3b:a2:02:32:85:3f:a3:60:ae:8a:26:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5667332f480941ed35803b2c04b84f3728d39297 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=7947e7eca096061b79d87669e08b3e5cc72b8b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:d7:3f:e3:f0:2d:36:72:3d:3f:bf:67:28: 1e:76:35:a8:af:c2:72:58:40:03:70:a4:6e:a7:7b: 8d:8b:83:1e:b0:2c:3c:bd:74:02:7f:be:a3:c6:2c: d6:67:3f:f3:7a:28:00:54:00:d6:08:44:38:61:ef: ad:4a:2d:59:d2:19:68:3c:fd:5f:b6:76:0c:b2:68: 27:ed:c4:37:83:d8:1d:dd:af:90:a9:af:97:37:12: 63:c4:37:4f:38:c8:9e:0f:b8:71:00:ab:fe:a7:1e: 6b:c4:e7:01:ae:ce:68:c7:22:17:8a:f7:f8:f2:0b: f0:f9:92:63:a5:4e:69:eb:e6:71:c3:87:14:f1:5c: c4:f4:f6:0f:e0:4a:80:45:95:94:a2:90:9e:d5:a4: 9d:a9:5b:95:e9:ac:7e:95:04:8c:95:39:8e:40:02: b4:8f:5d:77:f7:7f:25:09:ba:24:7c:98:85:5d:f5: 4d:36:1a:cc:d8:12:0b:1b:59:04:31:d4:1a:19:ff: 83:2a:b7:2e:85:8d:83:1b:2c:3c:bf:47:f9:8b:35: 15:a3:c4:cf:1c:22:96:48:74:00:58:d1:67:08:a5: 62:5e:ef:44:ee:55:8f:c9:8e:fc:76:02:d5:07:57: ac:5c:e0:90:e4:fa:92:0b:f9:5e:50:aa:1c:8c:ae: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:47:E7:EC:A0:96:06:1B:79:D8:76:69:E0:8B:3E:5C:C7:2B:8B:1E X509v3 Authority Key Identifier: keyid:56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a3:9a:b5:45:0a:5c:36:57:21:c9:42:ff:92:44:ea:f1:a3: 2f:9d:c5:68:29:3d:db:34:42:b8:8d:2d:e7:77:29:41:b5:8e: b8:cf:01:e4:8d:18:30:15:02:72:08:37:24:48:66:94:03:31: a5:db:3d:15:28:22:49:8c:7e:fc:ca:49:34:8d:41:d5:37:96: 6f:3e:98:f0:92:7c:51:93:9f:eb:4a:6d:03:01:3a:89:ad:8f: be:e7:9c:62:19:0b:4a:48:5b:6b:a3:51:6b:82:3e:a4:a0:c6: 38:d1:a5:bc:8a:df:0c:dc:61:75:c2:53:26:1d:2f:89:fb:fe: c3:19:55:23:84:8c:34:6b:1f:8e:5b:5c:e4:f7:7d:3a:ca:d5: be:a4:90:6e:12:6a:23:35:41:41:2d:ff:05:7b:93:9e:c5:ad: 99:28:98:68:3d:84:c3:53:c5:45:23:09:ab:b6:8b:32:79:4e: e1:0f:52:6c:96:ba:2f:6d:7d:09:54:1e:fe:f9:cc:53:98:66: 98:c5:3a:ff:ca:68:92:69:0b:58:4a:6b:78:3d:cf:ea:70:1c: 7e:86:b1:4f:97:07:54:17:1f:b5:88:e8:c3:e8:ef:b3:f9:87: 37:e5:9e:4b:3f:8c:8b:42:e6:20:fd:87:25:d4:23:67:f9:e5: 1b:ee:86:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mBaO6ICMoU/o2CuiiaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NjczMzJmNDgwOTQxZWQzNTgwM2IyYzA0Yjg0ZjM3Mjhk MzkyOTcwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD Eyg3OTQ3ZTdlY2EwOTYwNjFiNzlkODc2NjllMDhiM2U1Y2M3MmI4YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHfXP+PwLTZyPT+/ZygedjWor8Jy WEADcKRup3uNi4MesCw8vXQCf76jxizWZz/zeigAVADWCEQ4Ye+tSi1Z0hloPP1f tnYMsmgn7cQ3g9gd3a+Qqa+XNxJjxDdPOMieD7hxAKv+px5rxOcBrs5oxyIXivf4 8gvw+ZJjpU5p6+Zxw4cU8VzE9PYP4EqARZWUopCe1aSdqVuV6ax+lQSMlTmOQAK0 j113938lCbokfJiFXfVNNhrM2BILG1kEMdQaGf+DKrcuhY2DGyw8v0f5izUVo8TP HCKWSHQAWNFnCKViXu9E7lWPyY78dgLVB1esXOCQ5PqSC/leUKocjK5AhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlH5+yglgYbedh2aeCLPlzHK4seMB8GA1UdIwQY MBaAFFZnMy9ICUHtNYA7LAS4Tzco05KXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yZjkwZjEtZTI1Ny00ZTU0LWIyNWQt MjU5NGMyZmY2Y2I3LzEvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yZjkwZjEtZTI1Ny00ZTU0LWIyNWQtMjU5NGMyZmY2Y2I3 LzEvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaOatUUK XDZXIclC/5JE6vGjL53FaCk92zRCuI0t53cpQbWOuM8B5I0YMBUCcgg3JEhmlAMx pds9FSgiSYx+/MpJNI1B1TeWbz6Y8JJ8UZOf60ptAwE6ia2PvuecYhkLSkhba6NR a4I+pKDGONGlvIrfDNxhdcJTJh0vifv+wxlVI4SMNGsfjltc5Pd9OsrVvqSQbhJq IzVBQS3/BXuTnsWtmSiYaD2Ew1PFRSMJq7aLMnlO4Q9SbJa6L219CVQe/vnMU5hm mMU6/8pokmkLWEpreD3P6nAcfoaxT5cHVBcftYjow+jvs/mHN+WeSz+Mi0LmIP2H JdQjZ/nlG+6GOg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:30 2025 by rpki-client