This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json) Hash identifier: rWDM+C5xWlkQ5x4A5Lk+knvv+J32/PFh8RK5kH4Y70I= Subject key identifier: 80:F4:3E:0E:55:23:8B:09:4E:A3:7D:40:FD:64:58:88:52:E3:DC:36 Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6 Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6 Certificate serial: 019AF31C3DFE2CB269F3C31D246EC3B3D538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft Manifest number: 0F29 Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: D7DbaeeGuc/UVuKH+gfWQMzRWiSPnSmIA5lmm+Pl1Os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3d:fe:2c:b2:69:f3:c3:1d:24:6e:c3:b3:d5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6 Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=80f43e0e55238b094ea37d40fd64588852e3dc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:82:7c:87:a5:7f:f1:7a:5c:c4:8c:c3:48:29: 4a:92:ee:e6:ec:4f:09:1c:a1:df:c7:c1:81:4d:06: 6b:88:15:f4:99:91:02:4d:6a:4b:60:0b:e5:0a:55: 2c:33:1f:fb:14:9f:42:66:ae:48:e7:1f:c1:ab:fc: 27:81:75:f6:40:7e:17:f2:f9:df:0c:f9:f1:b6:a8: e4:c6:a4:1a:aa:5b:bb:f7:18:a1:f8:80:19:88:3a: de:f6:24:f0:1e:5c:4c:78:11:3d:32:78:4c:53:43: 03:78:a7:2b:06:32:c9:c8:d2:0e:ab:1b:e3:6d:32: 7f:26:78:b8:9f:bc:ce:ec:b1:e4:68:01:6f:ca:1c: 07:c2:cd:bd:11:dd:de:7b:e2:fb:86:85:4b:c2:e5: 6d:9a:bd:ba:2c:e1:65:24:09:42:30:f5:0c:dc:a1: fe:ed:2b:dd:0e:81:4e:5f:dd:e8:a2:93:10:dd:e3: 70:2e:7f:27:0f:bd:6b:9b:15:f5:c4:28:e8:8c:7e: 07:35:53:30:7b:63:66:1b:8a:12:f5:d9:23:9a:c8: 71:9c:5e:4b:38:8a:4c:94:21:7f:f0:7d:a3:1d:ce: d0:09:a2:f9:ea:03:f9:97:a7:5d:25:8a:ef:dc:17: 7d:95:8d:55:aa:c0:dc:c3:c1:e4:1b:45:96:0a:fd: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F4:3E:0E:55:23:8B:09:4E:A3:7D:40:FD:64:58:88:52:E3:DC:36 X509v3 Authority Key Identifier: keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a3:f2:45:dd:fa:45:ad:9c:15:f5:bb:e3:63:fa:b4:1c:10: ef:1a:87:cd:13:8e:b7:22:59:af:cd:a9:1a:28:1f:9a:53:da: 66:06:92:c3:3b:f1:e1:6c:c1:6e:29:2e:6b:23:12:7f:d2:a5: 9e:7c:68:e3:01:14:0d:1b:32:61:81:64:2b:5a:32:f2:d8:b7: 99:fc:95:80:d8:c9:b7:ad:c8:c5:ce:e4:3a:41:60:47:74:2a: 90:02:b6:b7:d4:12:36:61:49:b1:48:42:7e:2a:b9:54:66:5d: 60:7a:d9:2b:eb:ca:f8:c1:62:b2:24:72:5f:57:bb:ed:65:7b: 6d:88:2c:5b:b5:0e:1b:e2:60:d8:75:92:1f:9d:ed:9a:8a:22: 08:e1:dd:69:86:b5:32:6a:2d:08:ab:61:b8:d5:5b:03:8b:fa: 87:71:cf:9e:56:b5:e9:58:d4:f6:de:a7:c3:33:81:44:4e:e1: bd:6c:f8:31:c6:8f:fa:2b:db:36:d0:4a:8e:39:61:ff:14:2a: 29:9f:9d:22:ad:a6:fd:a5:88:dc:63:eb:8e:7e:d8:65:28:ec: 65:53:aa:a9:3f:d9:21:e2:14:01:40:bd:81:e8:f3:ba:57:44: 2b:5a:d0:f1:cb:89:d2:3b:06:bb:54:c5:c4:51:ac:b4:89:52: 95:ba:54:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHD3+LLJp88MdJG7Ds9U4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OTZmMmU5MGRiMmJkMzVkNTRjNmQyM2VlZDliMGY5OWY5 NjYzYTYwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD Eyg4MGY0M2UwZTU1MjM4YjA5NGVhMzdkNDBmZDY0NTg4ODUyZTNkYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IJ8h6V/8XpcxIzDSClKku7m7E8J HKHfx8GBTQZriBX0mZECTWpLYAvlClUsMx/7FJ9CZq5I5x/Bq/wngXX2QH4X8vnf DPnxtqjkxqQaqlu79xih+IAZiDre9iTwHlxMeBE9MnhMU0MDeKcrBjLJyNIOqxvj bTJ/Jni4n7zO7LHkaAFvyhwHws29Ed3ee+L7hoVLwuVtmr26LOFlJAlCMPUM3KH+ 7SvdDoFOX93oopMQ3eNwLn8nD71rmxX1xCjojH4HNVMwe2NmG4oS9dkjmshxnF5L OIpMlCF/8H2jHc7QCaL56gP5l6ddJYrv3Bd9lY1VqsDcw8HkG0WWCv1jAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID0Pg5VI4sJTqN9QP1kWIhS49w2MB8GA1UdIwQY MBaAFFSW8ukNsr011UxtI+7ZsPmflmOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYt M2JiZmUyYmU2MmFiLzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYtM2JiZmUyYmU2MmFi LzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKPyRd36 Ra2cFfW742P6tBwQ7xqHzROOtyJZr82pGigfmlPaZgaSwzvx4WzBbikuayMSf9Kl nnxo4wEUDRsyYYFkK1oy8ti3mfyVgNjJt63Ixc7kOkFgR3QqkAK2t9QSNmFJsUhC fiq5VGZdYHrZK+vK+MFisiRyX1e77WV7bYgsW7UOG+Jg2HWSH53tmooiCOHdaYa1 MmotCKthuNVbA4v6h3HPnla16VjU9t6nwzOBRE7hvWz4McaP+ivbNtBKjjlh/xQq KZ+dIq2m/aWI3GPrjn7YZSjsZVOqqT/ZIeIUAUC9gejzuldEK1rQ8cuJ0jsGu1TF xFGstIlSlbpUxg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:13 2025 by rpki-client