This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json) Hash identifier: VAcAbol5cCQV5CGJ+X7BXBv8sPoH1wt1UXtAqshO1v8= Subject key identifier: A5:D9:04:43:C1:6C:65:20:95:16:74:28:5F:45:81:56:CE:25:3F:65 Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8 Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8 Certificate serial: 019AF3F70922C6E787A64F39D1A8E4B85A9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft Manifest number: 0D63 Signing time: Sat 06 Dec 2025 14:00:44 +0000 Manifest this update: Sat 06 Dec 2025 14:00:44 +0000 Manifest next update: Sun 07 Dec 2025 14:00:44 +0000 Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: zjDH0aDzrqFjRXrt6a4DyxZd+nTxSTvUkZLkMdlt7Bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:09:22:c6:e7:87:a6:4f:39:d1:a8:e4:b8:5a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8 Validity Not Before: Dec 6 14:00:44 2025 GMT Not After : Dec 7 14:00:44 2025 GMT Subject: CN=a5d90443c16c6520951674285f458156ce253f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:85:18:85:f7:2b:17:bc:bf:72:9d:c8:6b: 6d:06:68:ce:c7:a8:52:36:5a:ae:0f:3e:ee:1a:03: 4b:33:80:1b:94:19:5d:0a:0f:e3:c3:1a:cd:7f:84: f1:6c:14:fb:d7:a3:ef:e9:7b:c9:3c:d2:d1:ec:be: 08:42:2a:a9:d1:c6:40:59:9e:0f:a0:a0:51:d5:c8: b9:0b:cc:49:29:94:fd:e8:ae:d7:25:69:92:15:e6: 15:ff:e3:61:10:b8:0e:76:78:b2:7e:89:38:32:34: 88:b3:07:4e:eb:8e:ac:cb:92:1d:53:ed:4f:81:5e: e4:4a:74:63:a9:07:f3:eb:55:d8:a1:46:7f:6e:6f: 1f:4a:c1:62:76:81:13:67:c0:45:0f:bf:a4:4b:d7: cb:4f:7a:55:d5:32:1e:c3:2e:55:db:99:9f:4f:69: bd:ce:b5:6c:2b:2e:4c:3a:40:a4:8b:1c:91:68:d8: e9:f5:3b:a5:7a:a2:51:63:64:c2:01:6b:0f:58:be: d8:e3:a1:d4:36:8e:65:a2:19:d9:88:8e:61:ce:71: b9:45:4c:1f:a2:3b:6f:30:bf:b1:a3:c2:e7:8f:05: cf:7c:1a:d2:ac:0d:4f:25:d5:c7:c2:3b:ea:d7:c7: c7:7b:3a:05:eb:a6:df:5a:e1:89:ef:e7:b1:e5:f9: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:04:43:C1:6C:65:20:95:16:74:28:5F:45:81:56:CE:25:3F:65 X509v3 Authority Key Identifier: keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:22:82:f0:76:37:e9:a3:d0:57:37:66:da:4d:0d:db:38:9d: 30:03:e5:d9:8f:8c:36:2e:ee:d5:e4:ad:ce:8a:8b:ed:fa:8e: 38:04:d0:25:92:0d:88:84:13:30:cd:c2:92:8f:2b:d3:e8:ca: 23:c2:f6:f1:62:aa:ac:e2:e1:b2:01:4a:81:4e:32:e4:fe:b6: de:ff:21:87:19:49:49:63:f5:ef:bb:34:73:24:54:a9:26:cd: 16:1d:f4:57:5f:af:9c:62:f2:33:31:5e:3c:f8:f1:6b:6e:07: b2:00:5a:84:0b:32:c4:41:5e:f9:bc:d4:b4:bb:64:85:46:22: e1:c4:f7:9e:92:48:90:1e:3f:7d:d5:50:4a:7e:71:f5:f4:15: ad:9b:3b:b7:8c:c9:ba:18:91:90:e4:35:fd:b8:14:08:51:06: fd:9f:be:d4:b9:8a:42:e3:0d:30:73:9b:41:dc:0a:ed:20:9c: 96:73:1d:3f:ec:00:ca:69:dc:18:fc:09:d2:0b:ab:e7:65:93: 75:c4:79:c3:eb:97:72:c0:c4:66:8f:2f:06:cc:b4:14:5f:a2: d6:9b:8e:22:f1:f4:bb:eb:6e:35:72:36:58:91:bc:50:9e:22: 75:61:f7:77:7a:82:13:40:40:41:1a:bd:5f:08:ee:ba:45:40: 92:3f:aa:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wkixueHpk850ajkuFqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMTg2ODIwNWIzZDEzNzM1NWFhNzFmMjQ2NzI5NWNkODcx OTUyYzgwHhcNMjUxMjA2MTQwMDQ0WhcNMjUxMjA3MTQwMDQ0WjAzMTEwLwYDVQQD EyhhNWQ5MDQ0M2MxNmM2NTIwOTUxNjc0Mjg1ZjQ1ODE1NmNlMjUzZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5weFGIX3Kxe8v3KdyGttBmjOx6hS NlquDz7uGgNLM4AblBldCg/jwxrNf4TxbBT716Pv6XvJPNLR7L4IQiqp0cZAWZ4P oKBR1ci5C8xJKZT96K7XJWmSFeYV/+NhELgOdniyfok4MjSIswdO646sy5IdU+1P gV7kSnRjqQfz61XYoUZ/bm8fSsFidoETZ8BFD7+kS9fLT3pV1TIewy5V25mfT2m9 zrVsKy5MOkCkixyRaNjp9TuleqJRY2TCAWsPWL7Y46HUNo5lohnZiI5hznG5RUwf ojtvML+xo8LnjwXPfBrSrA1PJdXHwjvq18fHezoF66bfWuGJ7+ex5fmoQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXZBEPBbGUglRZ0KF9FgVbOJT9lMB8GA1UdIwQY MBaAFL4YaCBbPRNzVapx8kZylc2HGVLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWIt NzU3Zjk5OTI3NTcxLzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9kOTgwZDEtOTJjOC00NGI0LWE1YWItNzU3Zjk5OTI3NTcx LzEvdmhob0lGczlFM05WcW5IeVJuS1Z6WWNaVXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyKC8HY3 6aPQVzdm2k0N2zidMAPl2Y+MNi7u1eStzoqL7fqOOATQJZINiIQTMM3Cko8r0+jK I8L28WKqrOLhsgFKgU4y5P623v8hhxlJSWP177s0cyRUqSbNFh30V1+vnGLyMzFe PPjxa24HsgBahAsyxEFe+bzUtLtkhUYi4cT3npJIkB4/fdVQSn5x9fQVrZs7t4zJ uhiRkOQ1/bgUCFEG/Z++1LmKQuMNMHObQdwK7SCclnMdP+wAymncGPwJ0gur52WT dcR5w+uXcsDEZo8vBsy0FF+i1puOIvH0u+tuNXI2WJG8UJ4idWH3d3qCE0BAQRq9 XwjuukVAkj+q6A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:46 2025 by rpki-client