This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft File: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft (raw, json) Hash identifier: Gio+ai0T5Z9XB0ufnPMSFi49+FY00dTxdaanGmMcZfs= Subject key identifier: 9C:0D:CD:EA:07:0C:53:93:E2:EC:53:09:40:60:0C:02:D1:E4:2A:6D Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F Certificate issuer: /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f Certificate serial: 019AF12D9A8A01A65E462E83861A33A75223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft Manifest number: 0DB2 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl (hash: J0Y4pNALw6oa1gPJs3U/r+MV5Hr8vdsZC+pMPzI8epY=) 2: aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa (hash: G/7B1VXAASY7QAsDWedOiKdkvLm/fHkdhD3zP6wIl7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9a:8a:01:a6:5e:46:2e:83:86:1a:33:a7:52:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=9c0dcdea070c5393e2ec530940600c02d1e42a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:d7:e4:55:80:c1:2b:8e:17:5c:a0:2f:02: ca:70:7a:aa:a6:3f:b9:46:fc:12:ef:92:40:2c:6f: 1f:a4:66:0b:66:3a:2f:0c:50:15:66:29:66:ba:a9: 69:50:0f:1a:41:ef:04:7a:af:8d:a5:86:3e:3b:21: 27:42:5d:2a:c3:19:15:50:b0:17:df:13:b1:e4:88: 81:b0:c5:6c:e4:6e:e7:a1:a1:f6:d4:63:97:48:f0: e7:2c:06:31:a9:b9:40:7d:21:a7:f4:73:49:a3:39: 45:57:0b:4e:c5:d4:32:d4:fb:84:da:fa:ee:c0:31: 93:1d:1b:96:1f:2b:bd:91:77:97:ae:c0:64:a4:7b: 81:55:71:71:db:e6:1a:1d:e8:f8:da:50:b9:9c:21: 8c:d4:7f:97:ff:46:57:59:98:94:c8:a4:94:5a:cd: f7:8d:f3:53:80:1c:6b:f4:33:58:ab:ed:79:62:0b: bc:86:bc:fb:6e:ba:18:70:5c:40:83:24:53:a3:d9: 67:de:53:14:46:f4:70:23:fd:78:e6:76:e9:c1:ed: 4d:de:b3:ad:e1:b5:44:a3:0f:35:eb:c3:f8:18:99: 8e:07:53:58:e3:e1:79:20:1f:65:a9:75:9b:59:0f: 9d:97:95:93:69:25:7e:20:fe:82:8b:68:8d:a6:8e: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:CD:EA:07:0C:53:93:E2:EC:53:09:40:60:0C:02:D1:E4:2A:6D X509v3 Authority Key Identifier: keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bb:07:7a:67:e6:39:06:59:24:9e:00:0b:be:ec:50:e4:c1: 02:b9:fc:fb:bc:f7:70:18:08:ba:a5:ee:1e:ff:f8:fe:9d:c9: f8:72:5f:be:5b:03:c4:51:c2:50:b9:d2:a3:30:2d:3a:18:df: c7:81:af:26:eb:d4:dc:78:5d:fa:ad:55:59:ce:d2:7c:c6:3f: d5:77:36:0b:07:da:d9:75:be:1d:80:8b:6f:bb:85:1f:3c:af: e2:54:02:41:78:29:0b:79:0f:e9:cc:fd:a5:ce:4a:87:24:e7: b4:18:8b:9a:a8:72:45:41:f4:37:43:ff:e7:07:18:be:ac:d8: d3:7f:d8:14:bc:95:eb:34:20:ce:c7:fa:c9:c6:c4:f6:23:27: 03:36:2d:bd:e0:85:28:94:28:e8:25:c5:af:93:6f:cf:0a:8c: ea:67:1c:69:33:2f:0d:0a:58:c8:94:19:56:d1:ee:db:52:2c: ee:a1:e0:88:de:60:a2:94:ac:48:65:c8:04:0a:0b:92:a4:ce: e4:40:b3:cf:8b:83:9a:05:b3:cd:44:80:4f:ca:e9:8b:82:65: f8:7d:49:a7:f5:99:41:97:f7:5c:79:89:f1:80:3d:80:40:cf: 95:c0:87:35:71:74:29:27:59:89:39:74:f5:6a:7e:4c:b1:b6: 40:09:ac:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZqKAaZeRi6Dhhozp1IjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTczZjIxZmVjZjhmOGM1MDU4OTJmNzA2NGRlMWEwYTRj ZjhlN2YwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg5YzBkY2RlYTA3MGM1MzkzZTJlYzUzMDk0MDYwMGMwMmQxZTQyYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNnX5FWAwSuOF1ygLwLKcHqqpj+5 RvwS75JALG8fpGYLZjovDFAVZilmuqlpUA8aQe8Eeq+NpYY+OyEnQl0qwxkVULAX 3xOx5IiBsMVs5G7noaH21GOXSPDnLAYxqblAfSGn9HNJozlFVwtOxdQy1PuE2vru wDGTHRuWHyu9kXeXrsBkpHuBVXFx2+YaHej42lC5nCGM1H+X/0ZXWZiUyKSUWs33 jfNTgBxr9DNYq+15Ygu8hrz7broYcFxAgyRTo9ln3lMURvRwI/145nbpwe1N3rOt 4bVEow8168P4GJmOB1NY4+F5IB9lqXWbWQ+dl5WTaSV+IP6Ci2iNpo5UdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwNzeoHDFOT4uxTCUBgDALR5CptMB8GA1UdIwQY MBaAFFTnPyH+z4+MUFiS9wZN4aCkz45/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9jX0lmN1BqNHhRV0pMM0JrM2hvS1RQam44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wOTI3NGYtYmFlYi00NjFlLWJjYTct YWIwMWM1ZjJlZDdkLzEvVk9jX0lmN1BqNHhRV0pMM0JrM2hvS1RQam44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wOTI3NGYtYmFlYi00NjFlLWJjYTctYWIwMWM1ZjJlZDdk LzEvVk9jX0lmN1BqNHhRV0pMM0JrM2hvS1RQam44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7sHemfm OQZZJJ4AC77sUOTBArn8+7z3cBgIuqXuHv/4/p3J+HJfvlsDxFHCULnSozAtOhjf x4GvJuvU3Hhd+q1VWc7SfMY/1Xc2Cwfa2XW+HYCLb7uFHzyv4lQCQXgpC3kP6cz9 pc5KhyTntBiLmqhyRUH0N0P/5wcYvqzY03/YFLyV6zQgzsf6ycbE9iMnAzYtveCF KJQo6CXFr5NvzwqM6mccaTMvDQpYyJQZVtHu21Is7qHgiN5gopSsSGXIBAoLkqTO 5ECzz4uDmgWzzUSAT8rpi4Jl+H1Jp/WZQZf3XHmJ8YA9gEDPlcCHNXF0KSdZiTl0 9Wp+TLG2QAmstQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:03 2025 by rpki-client