This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft File: VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json) Hash identifier: QM8AC/+oJKLfwMYEIZujIDDcNmx3uhl78dXYx0xY1WA= Subject key identifier: 08:CA:AC:C3:5F:77:E2:8F:EC:C8:4B:D8:6E:14:EE:74:81:32:BD:DB Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C Certificate issuer: /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c Certificate serial: 019AF1D1C060F1A4E7B0387068727639AE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: megdOoQtbfN5SxJoQp9Vrq0sQLlh3fwsiefFYN8kcsw=) 2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c0:60:f1:a4:e7:b0:38:70:68:72:76:39:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=08caacc35f77e28fecc84bd86e14ee748132bddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:1c:01:97:09:46:ee:7e:c2:ad:0e:23:6e: 53:b9:b7:09:04:ba:6a:14:b3:e9:1d:42:5e:08:6c: 5b:9d:5d:36:67:c7:f4:e9:0f:cf:de:fa:9f:d2:ef: 08:9d:2d:56:ce:a5:ab:c1:3c:93:18:6c:29:4d:e6: 45:37:01:37:7e:cc:ff:b1:03:3a:92:7c:0f:b7:1a: 82:fe:09:d4:49:0b:22:50:25:9e:72:81:f7:d1:25: 20:5f:2c:09:ba:09:dd:bd:60:f8:60:ee:7d:cb:a7: b4:f8:c4:0a:e9:42:5d:b4:61:78:c3:3a:d0:ea:6f: 66:e0:3e:d5:fc:44:7c:1d:4c:9b:ae:84:31:88:07: 9b:65:f1:ee:81:4d:35:9a:0a:d3:25:a6:30:20:db: 99:5d:70:1a:7d:2e:01:6c:30:5d:b4:a3:30:20:57: 53:3e:3d:d9:3b:10:7b:4a:2f:dc:d7:98:35:40:cd: 70:0e:af:88:1c:af:39:ee:a6:b6:8e:fc:65:3b:cb: 34:77:40:05:28:af:e5:4a:26:76:88:18:a4:3b:41: e5:d9:4f:6b:eb:23:b6:66:2e:fd:1a:e3:2c:d0:78: f1:ef:db:c8:f7:bf:9a:c2:6e:41:1f:58:64:61:a9: e3:48:cb:5f:fa:83:3c:fe:0a:8a:b4:74:9a:44:19: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CA:AC:C3:5F:77:E2:8F:EC:C8:4B:D8:6E:14:EE:74:81:32:BD:DB X509v3 Authority Key Identifier: keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:31:00:db:2b:7e:9d:bc:57:40:45:89:9a:de:7c:7f:1b:a2: 22:f7:d3:f5:51:f1:1e:c3:9b:ab:92:e5:cd:68:55:91:51:39: 2b:b3:5a:90:5c:13:90:c7:52:35:8b:52:36:a3:36:95:09:e7: 0b:ea:9f:7e:f9:6f:8b:b4:2b:c7:21:73:3b:6f:de:d5:24:10: a0:99:94:27:66:6f:3d:b5:e5:f0:0d:7b:69:dd:aa:be:20:23: 9f:1b:22:fc:5c:9a:5f:f1:d2:0d:41:a5:b6:b3:cd:ab:97:5c: c7:d8:fb:8a:62:b2:20:71:a7:8f:20:2f:d8:5b:2b:e8:17:54: b6:24:b7:b0:5b:57:fd:59:49:48:2e:2f:26:5b:28:21:07:f7: 0f:58:b4:0a:0a:e0:94:cf:45:b6:65:9e:a3:03:01:11:6f:ea: 14:41:d3:d7:cb:f5:6d:cd:a8:b9:43:e8:27:5b:b2:74:b4:7e: fb:18:39:0f:fd:69:c4:c2:fb:92:a2:3c:af:cf:78:2b:86:6a: f5:96:90:a7:0b:35:3e:cb:9e:2a:47:5f:83:06:a0:73:0e:1d: cc:39:36:fe:cb:1b:e6:65:4e:41:a7:1c:29:8a:de:9f:f3:ec: 28:be:0d:1c:e0:25:88:65:4e:db:c2:5f:46:c1:3c:29:16:81: a8:f6:8d:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cBg8aTnsDhwaHJ2Oa6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODgyYjE0MTMyMjFlOWI1ZDNiYzhhNzMyOWI3NjQ5Zjli MWVjMmMwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EygwOGNhYWNjMzVmNzdlMjhmZWNjODRiZDg2ZTE0ZWU3NDgxMzJiZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVgcAZcJRu5+wq0OI25TubcJBLpq FLPpHUJeCGxbnV02Z8f06Q/P3vqf0u8InS1WzqWrwTyTGGwpTeZFNwE3fsz/sQM6 knwPtxqC/gnUSQsiUCWecoH30SUgXywJugndvWD4YO59y6e0+MQK6UJdtGF4wzrQ 6m9m4D7V/ER8HUybroQxiAebZfHugU01mgrTJaYwINuZXXAafS4BbDBdtKMwIFdT Pj3ZOxB7Si/c15g1QM1wDq+IHK857qa2jvxlO8s0d0AFKK/lSiZ2iBikO0Hl2U9r 6yO2Zi79GuMs0Hjx79vI97+awm5BH1hkYanjSMtf+oM8/gqKtHSaRBnMlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjKrMNfd+KP7MhL2G4U7nSBMr3bMB8GA1UdIwQY MBaAFFSIKxQTIh6bXTvIpzKbdkn5sewsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTIt NGJkNThkYjEwZWQyLzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTItNGJkNThkYjEwZWQy LzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjEA2yt+ nbxXQEWJmt58fxuiIvfT9VHxHsObq5LlzWhVkVE5K7NakFwTkMdSNYtSNqM2lQnn C+qffvlvi7QrxyFzO2/e1SQQoJmUJ2ZvPbXl8A17ad2qviAjnxsi/FyaX/HSDUGl trPNq5dcx9j7imKyIHGnjyAv2Fsr6BdUtiS3sFtX/VlJSC4vJlsoIQf3D1i0Cgrg lM9FtmWeowMBEW/qFEHT18v1bc2ouUPoJ1uydLR++xg5D/1pxML7kqI8r894K4Zq 9ZaQpws1PsueKkdfgwagcw4dzDk2/ssb5mVOQaccKYren/PsKL4NHOAliGVO28Jf RsE8KRaBqPaNBA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:10 2025 by rpki-client