This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json) Hash identifier: hz5i+ls0mFLtHDuZmZHu1G+YZ/t1YbRpmymGRGhXZls= Subject key identifier: A3:A3:88:E5:CD:71:C7:35:AF:DE:03:62:71:7F:80:60:55:08:95:3A Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed Certificate serial: 019AF27685145F54EB278FFE88D183D88EED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: 6uGjAEko5ShjMiEdK5LNlsrtqsPifUXhFvWlrPYdSxU=) 2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:85:14:5f:54:eb:27:8f:fe:88:d1:83:d8:8e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=a3a388e5cd71c735afde0362717f80605508953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:a8:6c:65:16:f3:0b:cb:62:24:55:b3:e4: 25:51:98:3a:e1:98:98:ac:0f:c4:3a:71:0a:77:86: 4f:b0:bb:2d:d1:cd:cc:4d:b2:55:3d:92:1f:7c:70: 74:d0:e9:a2:74:65:e2:6c:5e:25:02:c7:89:b2:b5: 5e:db:ff:ff:d5:f3:31:0d:21:a2:ef:b5:76:7a:cd: 61:66:18:a2:85:56:6e:20:a6:7c:f9:d2:39:8c:44: 44:c7:f4:2a:9b:51:2d:05:da:e6:3b:f7:69:ab:37: 68:d5:cd:bc:a2:7a:a8:f6:3a:1f:ee:e5:ab:57:0c: 9c:ac:e1:a8:60:07:f8:30:e5:8e:f9:62:40:05:cc: 68:a4:d3:a3:7f:95:33:b6:97:2a:35:1e:60:5a:b4: 38:52:e6:5c:3c:b0:4a:df:3d:cb:66:1d:6d:04:5c: 63:c9:d9:83:4c:44:c8:43:a2:5f:a3:35:0a:03:b1: 1e:a1:96:1a:ca:c2:56:32:c7:c0:b7:f0:7d:59:9e: 1a:17:04:f2:05:9e:c7:27:4f:96:fc:a0:8d:16:a0: 7d:fa:bc:cc:e1:f3:54:22:57:8a:25:02:31:b2:d3: fa:4f:90:b8:5b:57:5d:12:ec:dc:ed:f9:8e:7c:6a: ce:2f:42:fc:e2:c3:ae:95:d6:be:97:ad:86:de:d6: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A3:88:E5:CD:71:C7:35:AF:DE:03:62:71:7F:80:60:55:08:95:3A X509v3 Authority Key Identifier: keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7d:07:75:f5:a2:31:cd:8b:39:c4:bd:f2:8c:73:e5:d6:e3: a9:a7:6f:69:22:6c:3f:38:9f:64:1a:b2:9c:c7:53:f1:3c:52: 7a:12:5f:eb:c0:2d:d4:58:2a:76:7a:92:80:5f:bf:d2:fe:a5: 37:e1:26:2d:7b:34:0a:41:b8:ac:21:16:2f:fa:9c:57:7f:0c: d6:96:d8:b3:51:72:42:9e:3d:02:88:87:9b:52:b5:4e:8e:99: ac:7a:50:75:38:7d:02:0e:10:c6:b2:39:9a:b6:26:4b:b1:a3: 7c:de:cc:a9:51:94:ef:6c:df:dc:f3:93:45:cb:9e:c0:bf:33: 49:1c:c8:64:b0:05:b9:fd:dd:7e:dc:44:1c:c8:b8:65:27:f1: 17:71:15:27:97:d8:6b:5e:28:12:3c:2b:a6:39:af:ef:d7:1b: a5:0a:2c:6c:b8:6c:6b:2e:4a:84:f8:35:fd:4d:83:ec:75:0e: 3b:13:d6:a9:66:12:23:14:7c:07:f8:1f:b2:4c:7f:4e:07:40: 31:f7:e8:c0:56:b5:09:9f:f7:3f:1f:40:77:c4:35:7a:9e:c3: a9:ea:1f:dd:1d:f6:bf:21:e1:45:85:9c:f3:57:70:40:e7:67: ad:50:a2:65:1f:00:89:1b:28:e1:9f:7a:dd:2a:23:2c:6b:0c: a8:64:88:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoUUX1TrJ4/+iNGD2I7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTdlM2RiMGQxYzJjZmMyMmI0YmU4NzRlMjU5OGRkMDk5 Mjk0ZWQwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhhM2EzODhlNWNkNzFjNzM1YWZkZTAzNjI3MTdmODA2MDU1MDg5NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XqobGUW8wvLYiRVs+QlUZg64ZiY rA/EOnEKd4ZPsLst0c3MTbJVPZIffHB00OmidGXibF4lAseJsrVe2///1fMxDSGi 77V2es1hZhiihVZuIKZ8+dI5jEREx/Qqm1EtBdrmO/dpqzdo1c28onqo9jof7uWr VwycrOGoYAf4MOWO+WJABcxopNOjf5UztpcqNR5gWrQ4UuZcPLBK3z3LZh1tBFxj ydmDTETIQ6JfozUKA7EeoZYaysJWMsfAt/B9WZ4aFwTyBZ7HJ0+W/KCNFqB9+rzM 4fNUIleKJQIxstP6T5C4W1ddEuzc7fmOfGrOL0L84sOulda+l62G3tZ8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOjiOXNccc1r94DYnF/gGBVCJU6MB8GA1UdIwQY MBaAFFQX49sNHCz8IrS+h04lmN0JkpTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MDI0OGQtODI1Yy00NWUxLWI1ZmYt YjI5YTJjYmMzNTgwLzEvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC81MDI0OGQtODI1Yy00NWUxLWI1ZmYtYjI5YTJjYmMzNTgw LzEvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH0HdfWi Mc2LOcS98oxz5dbjqadvaSJsPzifZBqynMdT8TxSehJf68At1FgqdnqSgF+/0v6l N+EmLXs0CkG4rCEWL/qcV38M1pbYs1FyQp49AoiHm1K1To6ZrHpQdTh9Ag4QxrI5 mrYmS7GjfN7MqVGU72zf3POTRcuewL8zSRzIZLAFuf3dftxEHMi4ZSfxF3EVJ5fY a14oEjwrpjmv79cbpQosbLhsay5KhPg1/U2D7HUOOxPWqWYSIxR8B/gfskx/TgdA MffowFa1CZ/3Px9Ad8Q1ep7Dqeof3R32vyHhRYWc81dwQOdnrVCiZR8AiRso4Z96 3SojLGsMqGSIZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:19 2025 by rpki-client