This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft File: vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft (raw, json) Hash identifier: bcsooOjTHHqIIVoehwvFTvmo6sHNw+9xn4qJk/s6bOM= Subject key identifier: 0F:4B:F1:9A:21:6E:E5:BB:1C:F9:76:2C:4D:0D:ED:FF:FA:36:6F:2A Authority key identifier: BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA Certificate issuer: /CN=be3119f4d953e760221acffeed3a4d7827d0e7ca Certificate serial: 019AF16495795A8617D0A168D4A9D1CFEBC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft Manifest number: 7B Signing time: Sat 06 Dec 2025 02:01:32 +0000 Manifest this update: Sat 06 Dec 2025 02:01:32 +0000 Manifest next update: Sun 07 Dec 2025 02:01:32 +0000 Files and hashes: 1: vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl (hash: VqVlhcmB1QTbHRL88RDO6UnjZsYHliW39Id7R1MZaAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:95:79:5a:86:17:d0:a1:68:d4:a9:d1:cf:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3119f4d953e760221acffeed3a4d7827d0e7ca Validity Not Before: Dec 6 02:01:32 2025 GMT Not After : Dec 7 02:01:32 2025 GMT Subject: CN=0f4bf19a216ee5bb1cf9762c4d0dedfffa366f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:93:bf:c1:c3:7e:83:2f:0f:ea:8a:f4:bb: 34:d8:f5:06:72:f0:3a:86:72:91:37:ed:10:39:a3: 36:97:97:8f:f4:f5:9b:4a:22:48:9d:03:12:70:3a: 8e:66:5a:53:c5:22:d1:ab:03:23:00:ae:a2:40:59: 50:e9:0e:99:40:9d:df:49:4c:8e:06:e8:ee:87:d7: 52:87:aa:ae:a9:dc:70:92:e5:55:e4:46:6a:09:cf: f8:83:dc:96:06:e8:3b:06:9a:6d:00:23:12:ab:a0: c2:19:09:dd:83:fd:9f:37:bc:37:27:c9:1a:94:1c: b9:57:e4:ff:04:92:3a:56:e0:b4:03:a1:92:1a:15: 61:6c:d1:a3:45:da:75:88:82:c3:fb:67:1e:c3:af: 00:76:a8:8c:ab:80:be:a1:0b:1c:2a:ba:e6:d8:aa: fb:af:2a:31:04:2c:e2:1b:67:2c:f4:48:60:29:ca: 98:77:8d:32:8b:95:2b:d7:46:52:26:d4:f0:00:de: 13:e2:16:a9:f6:fb:34:f2:4a:f0:3f:a1:55:c6:0c: ca:75:26:47:e4:d8:36:37:18:ce:d5:37:6c:c6:a0: 0d:ca:5d:ff:1a:dd:ce:53:71:90:92:d4:c9:bb:be: 6d:ef:f1:8c:de:3f:59:4f:1f:c7:30:5e:bb:c0:9d: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:F1:9A:21:6E:E5:BB:1C:F9:76:2C:4D:0D:ED:FF:FA:36:6F:2A X509v3 Authority Key Identifier: keyid:BE:31:19:F4:D9:53:E7:60:22:1A:CF:FE:ED:3A:4D:78:27:D0:E7:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjEZ9NlT52AiGs_-7TpNeCfQ58o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3486a8-11f1-4c1f-a695-42513da44ee5/1/vjEZ9NlT52AiGs_-7TpNeCfQ58o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6b:8c:c6:1d:f1:2c:6d:0e:5a:6d:c9:46:44:b7:7d:ed:7c: aa:5d:5d:c4:f0:d5:ae:06:ed:02:c1:40:f3:d8:04:88:3d:27: 73:ca:41:ff:6d:22:1d:9a:4a:ff:62:c6:8d:99:19:46:b8:d7: 5c:ce:37:02:91:9e:f1:6b:ae:90:3b:e3:3e:a8:2f:18:5d:04: e5:ce:a1:64:b4:6d:1d:ef:c8:01:5c:d7:89:98:08:a3:47:9c: 59:f6:6a:98:a7:bc:be:c0:4d:51:2d:1c:c6:40:08:e3:e8:8a: 02:8b:f1:c2:e1:5c:3f:41:67:5b:35:44:93:b0:dc:f7:38:b9: 26:63:bd:97:f3:76:20:b5:f7:c8:98:f3:3a:98:fb:39:78:21: 77:27:d8:40:31:f5:7b:22:4a:3f:9c:d2:44:cc:42:34:e7:f2: 0e:ab:d9:f2:7e:e8:58:61:08:c6:5c:fa:85:eb:8a:01:cf:fd: 5e:59:5e:99:db:0d:24:73:7e:70:e7:52:ce:94:f0:f9:4f:3b: 92:75:02:3c:ef:76:5e:ae:28:6c:d9:69:39:5e:98:b6:40:e5: 27:d0:75:85:c4:d6:e0:6e:3f:87:9f:a6:59:4f:f4:f9:75:f5: 21:f6:aa:00:99:68:e3:4d:80:f5:e3:a9:50:f0:d6:b6:af:e0: 7d:eb:2e:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJV5WoYX0KFo1KnRz+vAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzExOWY0ZDk1M2U3NjAyMjFhY2ZmZWVkM2E0ZDc4Mjdk MGU3Y2EwHhcNMjUxMjA2MDIwMTMyWhcNMjUxMjA3MDIwMTMyWjAzMTEwLwYDVQQD EygwZjRiZjE5YTIxNmVlNWJiMWNmOTc2MmM0ZDBkZWRmZmZhMzY2ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBiTv8HDfoMvD+qK9Ls02PUGcvA6 hnKRN+0QOaM2l5eP9PWbSiJInQMScDqOZlpTxSLRqwMjAK6iQFlQ6Q6ZQJ3fSUyO Bujuh9dSh6quqdxwkuVV5EZqCc/4g9yWBug7BpptACMSq6DCGQndg/2fN7w3J8ka lBy5V+T/BJI6VuC0A6GSGhVhbNGjRdp1iILD+2cew68AdqiMq4C+oQscKrrm2Kr7 ryoxBCziG2cs9EhgKcqYd40yi5Ur10ZSJtTwAN4T4hap9vs08krwP6FVxgzKdSZH 5Ng2NxjO1TdsxqANyl3/Gt3OU3GQktTJu75t7/GM3j9ZTx/HMF67wJ1/ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9L8ZohbuW7HPl2LE0N7f/6Nm8qMB8GA1UdIwQY MBaAFL4xGfTZU+dgIhrP/u06TXgn0OfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpFWjlObFQ1MkFpR3NfLTdUcE5lQ2ZRNThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNDg2YTgtMTFmMS00YzFmLWE2OTUt NDI1MTNkYTQ0ZWU1LzEvdmpFWjlObFQ1MkFpR3NfLTdUcE5lQ2ZRNThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNDg2YTgtMTFmMS00YzFmLWE2OTUtNDI1MTNkYTQ0ZWU1 LzEvdmpFWjlObFQ1MkFpR3NfLTdUcE5lQ2ZRNThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmuMxh3x LG0OWm3JRkS3fe18ql1dxPDVrgbtAsFA89gEiD0nc8pB/20iHZpK/2LGjZkZRrjX XM43ApGe8WuukDvjPqgvGF0E5c6hZLRtHe/IAVzXiZgIo0ecWfZqmKe8vsBNUS0c xkAI4+iKAovxwuFcP0FnWzVEk7Dc9zi5JmO9l/N2ILX3yJjzOpj7OXghdyfYQDH1 eyJKP5zSRMxCNOfyDqvZ8n7oWGEIxlz6heuKAc/9XllemdsNJHN+cOdSzpTw+U87 knUCPO92Xq4obNlpOV6YtkDlJ9B1hcTW4G4/h5+mWU/0+XX1IfaqAJlo402A9eOp UPDWtq/gfesuuw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:36 2025 by rpki-client