This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft File: vdAX3W18v-gmYVTBrkNMTPi2ilc.mft (raw, json) Hash identifier: ubJF61D+0JPqjkAq+pFJr3IGBgJkO+6OxQqRtJ3vZn0= Subject key identifier: AF:69:77:B9:1C:D9:1E:16:9D:E3:61:50:37:61:CC:2C:AA:84:9C:54 Authority key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57 Certificate issuer: /CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57 Certificate serial: 019AF19B46A55E7BB1815E0AEE732F61C599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft Manifest number: 48 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: N_enHggO1OB_E1bZ0nCsrIa0QZw.roa (hash: cakCBPgoTe537Hz5MCSOibL50nmNuX01F6XNnO52ezk=) 2: vdAX3W18v-gmYVTBrkNMTPi2ilc.crl (hash: gLS1dmnvlJlOaCn18zYuDbjYhihfyckCOMo3DdMH8yM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:46:a5:5e:7b:b1:81:5e:0a:ee:73:2f:61:c5:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=af6977b91cd91e169de361503761cc2caa849c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:a9:2e:24:59:6d:76:4b:c9:2f:d0:5a:1c: 94:57:e0:e3:29:d4:57:62:37:bf:95:60:5c:06:be: 96:d6:d7:03:74:c7:1f:9e:6c:e3:88:0a:14:6c:02: 48:3f:a8:c4:1c:78:a7:5f:cd:ce:4d:ef:b3:fb:78: 0b:33:bb:ea:82:a3:36:9d:33:d4:1d:8a:26:b3:c3: f0:cf:ec:fc:bb:73:83:52:3e:1e:54:12:e3:3a:35: dc:ea:e8:3a:f5:bc:9e:60:2f:bd:ed:f3:82:02:29: 6a:4e:c0:f9:03:b1:40:11:52:31:5a:90:ba:59:58: cf:b8:65:14:f4:8f:58:7c:d1:02:ee:6b:92:a5:35: 4d:9a:8f:c6:c4:2b:35:15:9c:9c:6a:a4:6c:27:c9: af:37:db:c8:36:ad:3f:07:af:83:5f:d0:e8:30:a5: 2a:e6:db:b8:6f:18:eb:08:ef:d3:85:81:9d:30:51: 24:13:a3:15:7a:28:19:39:5d:b7:a6:55:b3:59:c4: 2c:5b:fc:d9:9b:07:90:08:2b:ec:ad:2f:d7:88:b2: 7a:e4:85:aa:72:5a:9d:bb:56:07:f1:16:0a:74:bd: bc:38:73:7c:0f:6d:1e:7f:ca:c6:57:4f:db:69:d3: 8e:53:c9:fa:1a:6f:66:57:57:5d:d5:6a:67:31:2b: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:69:77:B9:1C:D9:1E:16:9D:E3:61:50:37:61:CC:2C:AA:84:9C:54 X509v3 Authority Key Identifier: keyid:BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d5:66:48:32:f5:ac:45:d7:a0:a2:84:ad:38:e5:38:17:88: 50:08:0e:2a:81:5d:cb:22:19:06:64:38:db:1c:8e:b3:1e:cf: 1a:dd:68:74:b5:b2:f8:ba:8b:bc:93:8e:6c:80:7d:3c:50:a2: 81:8f:61:15:f4:0e:20:bc:c8:52:2b:07:35:3f:5b:07:af:c5: be:25:b3:00:78:17:2a:4e:c6:72:de:53:80:d4:2e:28:0d:05: 88:7f:ef:28:fe:cc:fa:3c:ad:cf:dc:55:e2:6a:32:af:05:64: 99:8b:32:70:52:35:de:21:6d:ce:c7:86:62:33:37:e8:b0:42: 92:f4:b0:43:f1:f6:97:b4:40:a4:78:69:79:4c:d6:52:ce:84: ab:30:03:68:c1:53:d0:bf:7d:ca:3b:38:f9:9f:93:e7:e2:ad: 4f:0a:57:c0:c9:73:82:81:26:1a:db:4b:cd:ff:24:f7:91:19: 94:29:95:5f:85:68:75:b8:6e:8f:c8:19:0a:fe:dd:74:9f:e5: fb:4b:a8:93:d9:31:82:64:80:e1:61:97:4f:73:dd:b0:0c:15: cb:ca:d1:6a:f7:fb:68:6b:63:e1:e0:28:70:ee:5b:12:1a:78: dd:a7:7a:46:f2:bc:7b:6a:5c:55:dd:24:08:8a:a5:d2:3c:e7: 82:b6:fe:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0alXnuxgV4K7nMvYcWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDAxN2RkNmQ3Y2JmZTgyNjYxNTRjMWFlNDM0YzRjZjhi NjhhNTcwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EyhhZjY5NzdiOTFjZDkxZTE2OWRlMzYxNTAzNzYxY2MyY2FhODQ5YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WSpLiRZbXZLyS/QWhyUV+DjKdRX Yje/lWBcBr6W1tcDdMcfnmzjiAoUbAJIP6jEHHinX83OTe+z+3gLM7vqgqM2nTPU HYoms8Pwz+z8u3ODUj4eVBLjOjXc6ug69byeYC+97fOCAilqTsD5A7FAEVIxWpC6 WVjPuGUU9I9YfNEC7muSpTVNmo/GxCs1FZycaqRsJ8mvN9vINq0/B6+DX9DoMKUq 5tu4bxjrCO/ThYGdMFEkE6MVeigZOV23plWzWcQsW/zZmweQCCvsrS/XiLJ65IWq clqdu1YH8RYKdL28OHN8D20ef8rGV0/badOOU8n6Gm9mV1dd1WpnMSupZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9pd7kc2R4WneNhUDdhzCyqhJxUMB8GA1UdIwQY MBaAFL3QF91tfL/oJmFUwa5DTEz4topXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUt MzM2MjM4YWI2ZGJhLzEvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUtMzM2MjM4YWI2ZGJh LzEvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNVmSDL1 rEXXoKKErTjlOBeIUAgOKoFdyyIZBmQ42xyOsx7PGt1odLWy+LqLvJOObIB9PFCi gY9hFfQOILzIUisHNT9bB6/FviWzAHgXKk7Gct5TgNQuKA0FiH/vKP7M+jytz9xV 4moyrwVkmYsycFI13iFtzseGYjM36LBCkvSwQ/H2l7RApHhpeUzWUs6EqzADaMFT 0L99yjs4+Z+T5+KtTwpXwMlzgoEmGttLzf8k95EZlCmVX4Vodbhuj8gZCv7ddJ/l +0uok9kxgmSA4WGXT3PdsAwVy8rRavf7aGtj4eAocO5bEhp43ad6RvK8e2pcVd0k CIql0jzngrb+jA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:41 2025 by rpki-client