This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft File: Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json) Hash identifier: QKF7jzRdu46jDTThi4JChntFDk9SO8VS8WZa3lr4S8o= Subject key identifier: D0:9A:31:6A:57:6D:1C:AD:DB:36:B7:6D:38:B8:AE:7B:31:C1:50:E3 Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF Certificate issuer: /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af Certificate serial: 019AF540E50929111F6044126F0B32B24C6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft Manifest number: 0553 Signing time: Sat 06 Dec 2025 20:01:02 +0000 Manifest this update: Sat 06 Dec 2025 20:01:02 +0000 Manifest next update: Sun 07 Dec 2025 20:01:02 +0000 Files and hashes: 1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=) 2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: PavZASJStm8MJrcPcdv3NCg+WxLLKrslp7nDNebzaFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:e5:09:29:11:1f:60:44:12:6f:0b:32:b2:4c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af Validity Not Before: Dec 6 20:01:02 2025 GMT Not After : Dec 7 20:01:02 2025 GMT Subject: CN=d09a316a576d1caddb36b76d38b8ae7b31c150e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:00:18:42:91:99:88:50:91:eb:27:94:46: 5c:c5:cb:b5:eb:50:1e:6b:1b:66:ff:48:4a:7e:21: 66:ec:2c:c2:0f:3a:45:3b:bf:04:55:71:f4:70:bb: a9:c2:d3:e6:d1:eb:c8:6f:1b:80:db:b8:48:a4:c8: 6b:f1:31:18:17:82:93:50:4f:78:1e:a6:ce:4f:6b: 83:31:93:b4:d5:57:30:e7:fa:df:f4:1d:da:a5:5f: 30:b0:82:14:11:55:31:71:d8:36:f6:3b:48:03:7a: 6b:b1:ff:f0:6c:c7:83:2f:ab:63:ec:61:02:0e:1a: f2:a9:a3:5e:de:21:91:52:a9:5b:26:95:71:03:89: 19:57:e6:73:55:2f:98:f6:d8:e7:a6:01:11:2e:27: 2e:f1:cb:22:ea:1e:c9:25:5d:df:e4:1b:77:72:73: e5:9a:e4:87:d5:86:df:89:0b:8f:51:f8:c6:c5:88: f3:17:c4:e9:a5:7d:f0:3b:65:6a:73:03:c4:a3:31: fa:a9:55:48:9e:55:70:1a:62:6f:52:a1:e6:40:7e: 26:d3:4f:de:16:57:87:7a:9a:48:0b:4c:47:2e:9d: f0:76:8f:16:82:34:2d:ec:c6:72:aa:c2:9c:25:e2: d6:c5:80:7f:d1:4a:74:11:4e:68:69:8f:95:60:16: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:31:6A:57:6D:1C:AD:DB:36:B7:6D:38:B8:AE:7B:31:C1:50:E3 X509v3 Authority Key Identifier: keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:1e:bf:03:0b:7c:96:ee:ef:fc:8a:83:4a:7f:fd:bb:83: ec:d4:13:e6:d4:9d:0e:9f:52:e3:0b:5b:a7:33:71:88:57:a5: d6:cd:29:c8:d1:b9:cb:d8:26:a4:d2:bb:f7:f8:62:52:46:30: dd:f2:1d:b6:d9:26:e8:11:d7:0b:ca:25:d3:6f:cb:e7:d5:71: 1f:40:9e:b7:0d:e2:c9:3c:33:13:a4:5b:53:f6:08:1c:be:c6: 50:59:aa:ab:70:ee:dd:db:e8:ab:84:11:02:21:59:40:80:e4: aa:b1:7c:6b:2a:a8:b2:84:c0:93:d0:73:eb:a3:8f:b0:ef:17: 3e:0a:4a:e3:19:f3:54:c7:d4:45:fb:5a:c5:85:35:24:3a:87: f3:a0:c8:3a:6d:8d:95:36:12:98:23:fe:ec:5e:3b:e0:19:53: 99:5a:02:58:7f:73:e5:72:1f:53:79:84:fd:2f:51:a1:72:de: 04:fc:98:1d:53:f5:d3:84:3e:35:01:bc:0e:ae:0b:29:a3:7a: 5c:85:d0:95:eb:54:be:74:f3:af:ee:b8:6a:1d:b8:0d:82:2e: 2f:f1:8e:97:93:ed:95:52:80:83:0a:6c:d9:8f:de:7b:ad:0a: 10:95:81:7a:47:27:f5:e4:42:26:1b:95:a3:76:4c:c8:87:cb: 2b:a2:e4:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QOUJKREfYEQSbwsyskxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmU1MGNjZmNlZjBlODdjYzE5ZjgyY2MwOTJiYjliNzlh M2UzYWYwHhcNMjUxMjA2MjAwMTAyWhcNMjUxMjA3MjAwMTAyWjAzMTEwLwYDVQQD EyhkMDlhMzE2YTU3NmQxY2FkZGIzNmI3NmQzOGI4YWU3YjMxYzE1MGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMUAGEKRmYhQkesnlEZcxcu161Ae axtm/0hKfiFm7CzCDzpFO78EVXH0cLupwtPm0evIbxuA27hIpMhr8TEYF4KTUE94 HqbOT2uDMZO01Vcw5/rf9B3apV8wsIIUEVUxcdg29jtIA3prsf/wbMeDL6tj7GEC DhryqaNe3iGRUqlbJpVxA4kZV+ZzVS+Y9tjnpgERLicu8csi6h7JJV3f5Bt3cnPl muSH1YbfiQuPUfjGxYjzF8TppX3wO2VqcwPEozH6qVVInlVwGmJvUqHmQH4m00/e FleHeppIC0xHLp3wdo8WgjQt7MZyqsKcJeLWxYB/0Up0EU5oaY+VYBa5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCaMWpXbRyt2za3bTi4rnsxwVDjMB8GA1UdIwQY MBaAFFX+UMz87w6HzBn4LMCSu5t5o+OvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNjdlM2QtMjg1OC00ODJlLTk5ZGMt YzA3ZTcxNWM4MWM5LzEvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wNjdlM2QtMjg1OC00ODJlLTk5ZGMtYzA3ZTcxNWM4MWM5 LzEvVmY1UXpQenZEb2ZNR2Znc3dKSzdtM21qNDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7IevwML fJbu7/yKg0p//buD7NQT5tSdDp9S4wtbpzNxiFel1s0pyNG5y9gmpNK79/hiUkYw 3fIdttkm6BHXC8ol02/L59VxH0Cetw3iyTwzE6RbU/YIHL7GUFmqq3Du3dvoq4QR AiFZQIDkqrF8ayqosoTAk9Bz66OPsO8XPgpK4xnzVMfURftaxYU1JDqH86DIOm2N lTYSmCP+7F474BlTmVoCWH9z5XIfU3mE/S9RoXLeBPyYHVP104Q+NQG8Dq4LKaN6 XIXQletUvnTzr+64ah24DYIuL/GOl5PtlVKAgwps2Y/ee60KEJWBekcn9eRCJhuV o3ZMyIfLK6Lk6w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:59 2025 by rpki-client