This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft File: VJcl8CZ02ckanUftGdAHkoBiO1U.mft (raw, json) Hash identifier: q9Sn5URNh/j82ARnIfcKhQTUkQJ5Accf+EONOI33QAc= Subject key identifier: C7:D1:38:85:07:E2:E5:FB:F5:B5:DD:E4:B1:B2:3E:8D:4B:7A:B9:0F Authority key identifier: 54:97:25:F0:26:74:D9:C9:1A:9D:47:ED:19:D0:07:92:80:62:3B:55 Certificate issuer: /CN=549725f02674d9c91a9d47ed19d0079280623b55 Certificate serial: 019AF1D2341FCFB6C72B7B868DA338782232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJcl8CZ02ckanUftGdAHkoBiO1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft Manifest number: 31 Signing time: Sat 06 Dec 2025 04:01:16 +0000 Manifest this update: Sat 06 Dec 2025 04:01:16 +0000 Manifest next update: Sun 07 Dec 2025 04:01:16 +0000 Files and hashes: 1: VJcl8CZ02ckanUftGdAHkoBiO1U.crl (hash: EAFeWKwiQxjLj2OAQJxJB1//Ur2F/ZepoplrLYuRbaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.crl rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft rsync://rpki.ripe.net/repository/DEFAULT/VJcl8CZ02ckanUftGdAHkoBiO1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:34:1f:cf:b6:c7:2b:7b:86:8d:a3:38:78:22:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=549725f02674d9c91a9d47ed19d0079280623b55 Validity Not Before: Dec 6 04:01:16 2025 GMT Not After : Dec 7 04:01:16 2025 GMT Subject: CN=c7d1388507e2e5fbf5b5dde4b1b23e8d4b7ab90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:1f:69:4d:c3:28:2a:a0:37:e2:82:3c:d0: d2:f0:8c:80:ac:41:5a:56:29:0a:01:7b:df:a2:90: a6:d8:07:63:49:a3:da:14:c6:d1:7d:0d:b5:aa:61: 2d:1b:a7:3a:69:89:b8:d9:ff:22:30:c6:23:6e:ff: b6:37:5d:2a:2d:70:26:fd:ef:00:76:b4:cc:ec:5d: 2b:3a:35:99:65:5e:36:82:bc:32:e9:d4:bb:6a:41: b4:df:83:bf:fb:bd:83:26:cb:3c:e9:51:e9:f9:95: 39:6a:95:cd:86:18:d3:0b:22:aa:6c:da:be:a8:e1: 05:61:88:fc:d1:53:70:bf:9e:39:7c:cd:a8:cd:14: 6e:ed:67:d6:30:dc:98:78:d8:f8:10:86:c5:39:af: 21:fa:52:8d:92:c1:03:fd:59:ab:47:ca:5f:ae:02: 89:bd:79:6f:29:bf:76:c5:c6:73:f0:8a:d1:2d:0d: c8:33:9c:f8:32:6d:42:f2:b6:e9:1c:c7:1b:c4:a5: 25:fa:90:1f:08:b8:bc:45:47:28:fc:46:f2:52:57: 15:02:a5:af:40:ff:09:d1:bd:1e:07:c6:e1:31:e6: 9e:5e:27:c8:28:40:61:bc:d2:af:3d:af:be:48:bf: fd:97:6a:29:40:7b:4f:5d:de:d7:24:85:b1:c0:37: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D1:38:85:07:E2:E5:FB:F5:B5:DD:E4:B1:B2:3E:8D:4B:7A:B9:0F X509v3 Authority Key Identifier: keyid:54:97:25:F0:26:74:D9:C9:1A:9D:47:ED:19:D0:07:92:80:62:3B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJcl8CZ02ckanUftGdAHkoBiO1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e15754-1266-4395-b279-a188b132000a/1/VJcl8CZ02ckanUftGdAHkoBiO1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:50:9e:6c:d1:5c:95:23:0f:c9:94:2b:7d:66:31:da:b9:50: 29:91:91:8d:59:d2:75:4c:75:be:53:cd:6d:dc:8e:ca:f6:0e: a9:74:51:d4:de:51:ed:99:b7:4d:d7:4c:26:66:f7:39:0f:a1: d1:29:e6:23:51:35:de:9a:1c:bb:ef:9a:85:21:3c:ef:e6:37: a6:94:e8:18:00:58:fb:59:90:be:88:0a:89:d8:8d:0f:32:c1: 55:41:03:64:5f:42:15:6e:a9:42:f0:16:50:25:e9:ac:b9:3e: ec:e5:d4:84:c5:7f:1b:f4:9c:9c:da:1b:d2:35:59:df:e5:aa: b6:b4:a6:d8:22:c3:37:5a:ee:ab:ab:74:71:e9:2e:5a:d4:8d: 03:03:67:ba:00:f5:4e:89:50:ec:12:a4:69:02:54:36:aa:2a: 5e:6e:e8:06:00:ce:a8:10:ac:85:c3:ca:0f:f5:7b:b3:1d:e8: 57:57:4f:b9:c6:20:d9:70:3f:b5:80:f8:0c:5e:ac:2d:9d:52: 6c:85:b9:06:9e:e4:43:59:d2:50:f2:d5:67:7d:f0:17:83:ac: 32:5d:65:6f:08:d4:dc:12:60:52:3e:86:bc:40:6f:cd:4a:34: 23:21:64:1c:eb:b1:4d:66:4d:b5:8d:36:51:80:65:98:64:72: d2:8a:85:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jQfz7bHK3uGjaM4eCIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OTcyNWYwMjY3NGQ5YzkxYTlkNDdlZDE5ZDAwNzkyODA2 MjNiNTUwHhcNMjUxMjA2MDQwMTE2WhcNMjUxMjA3MDQwMTE2WjAzMTEwLwYDVQQD EyhjN2QxMzg4NTA3ZTJlNWZiZjViNWRkZTRiMWIyM2U4ZDRiN2FiOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdwfaU3DKCqgN+KCPNDS8IyArEFa VikKAXvfopCm2AdjSaPaFMbRfQ21qmEtG6c6aYm42f8iMMYjbv+2N10qLXAm/e8A drTM7F0rOjWZZV42grwy6dS7akG034O/+72DJss86VHp+ZU5apXNhhjTCyKqbNq+ qOEFYYj80VNwv545fM2ozRRu7WfWMNyYeNj4EIbFOa8h+lKNksED/VmrR8pfrgKJ vXlvKb92xcZz8IrRLQ3IM5z4Mm1C8rbpHMcbxKUl+pAfCLi8RUco/EbyUlcVAqWv QP8J0b0eB8bhMeaeXifIKEBhvNKvPa++SL/9l2opQHtPXd7XJIWxwDfTjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfROIUH4uX79bXd5LGyPo1LerkPMB8GA1UdIwQY MBaAFFSXJfAmdNnJGp1H7RnQB5KAYjtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkpjbDhDWjAyY2thblVmdEdkQUhrb0JpTzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lMTU3NTQtMTI2Ni00Mzk1LWIyNzkt YTE4OGIxMzIwMDBhLzEvVkpjbDhDWjAyY2thblVmdEdkQUhrb0JpTzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lMTU3NTQtMTI2Ni00Mzk1LWIyNzktYTE4OGIxMzIwMDBh LzEvVkpjbDhDWjAyY2thblVmdEdkQUhrb0JpTzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVCebNFc lSMPyZQrfWYx2rlQKZGRjVnSdUx1vlPNbdyOyvYOqXRR1N5R7Zm3TddMJmb3OQ+h 0SnmI1E13pocu++ahSE87+Y3ppToGABY+1mQvogKidiNDzLBVUEDZF9CFW6pQvAW UCXprLk+7OXUhMV/G/ScnNob0jVZ3+WqtrSm2CLDN1ruq6t0cekuWtSNAwNnugD1 TolQ7BKkaQJUNqoqXm7oBgDOqBCshcPKD/V7sx3oV1dPucYg2XA/tYD4DF6sLZ1S bIW5Bp7kQ1nSUPLVZ33wF4OsMl1lbwjU3BJgUj6GvEBvzUo0IyFkHOuxTWZNtY02 UYBlmGRy0oqFAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:10 2025 by rpki-client