This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json) Hash identifier: c28VsApoEJUWkL9He6ayY7HbBSzT9jIXqR0ayMEOBqk= Subject key identifier: 63:75:7B:28:C0:2D:F2:96:B0:AC:55:38:ED:38:A2:A5:0B:B2:05:8D Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439 Certificate serial: 019B337AE11EC8F28A74925F9DF47D5FFF48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft Manifest number: 10AE Signing time: Thu 18 Dec 2025 22:00:49 +0000 Manifest this update: Thu 18 Dec 2025 22:00:49 +0000 Manifest next update: Fri 19 Dec 2025 22:00:49 +0000 Files and hashes: 1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=) 2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: Q5yRbmPglp0NXbjILyfdPGR/7dcFOu1YhBj+xVUgRQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:e1:1e:c8:f2:8a:74:92:5f:9d:f4:7d:5f:ff:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439 Validity Not Before: Dec 18 22:00:49 2025 GMT Not After : Dec 19 22:00:49 2025 GMT Subject: CN=63757b28c02df296b0ac5538ed38a2a50bb2058d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:0d:32:a7:f3:f0:e4:2e:96:4f:3c:ae:e7: d5:4c:49:80:23:fa:84:ad:32:d7:43:6e:bb:8c:91: e7:ae:da:8e:62:2a:6e:f4:c1:71:28:c4:16:84:4e: b8:d1:4a:43:d7:2f:62:b6:6f:03:6b:46:ce:d3:5f: 9c:89:22:8b:d7:67:c0:25:a7:53:6a:68:40:2c:cb: 6a:a4:1f:7b:82:76:86:e3:b6:e2:de:8e:55:05:99: 4c:00:95:81:a6:f7:dd:0e:6b:33:5a:a3:56:a7:6e: a3:9e:af:2f:3e:b3:01:b5:cc:47:45:55:03:5a:8e: ca:88:38:36:b7:98:6f:f3:e4:66:a5:5c:ac:c6:ac: d7:9b:ad:94:e5:d7:0a:39:ee:ce:de:dd:c0:78:65: 5a:a5:10:f4:ef:ac:6f:f1:a7:32:2c:21:74:af:39: e4:50:b1:07:c6:db:0e:fe:56:be:ee:6b:fe:01:1d: f7:8b:5e:99:81:49:b6:35:cf:b8:d7:c4:23:43:54: 17:9c:1e:73:fc:84:f5:4f:ca:e2:1e:bb:bd:d0:5d: 40:be:a2:0c:cc:ba:a1:c8:7c:50:45:16:48:42:42: 87:10:d8:08:7e:cf:96:7c:87:ab:e8:6d:2d:42:2a: f1:b0:4f:f7:c2:bd:37:e3:f9:d4:12:26:1d:35:0a: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:75:7B:28:C0:2D:F2:96:B0:AC:55:38:ED:38:A2:A5:0B:B2:05:8D X509v3 Authority Key Identifier: keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4d:f0:4a:33:09:17:c5:12:f6:4d:0b:d9:06:5a:77:3d:80: 9d:10:64:f9:b7:f6:ef:14:1b:8f:c2:72:bd:9a:ac:3e:0f:98: 39:55:0e:31:47:29:c2:90:28:c9:6b:a1:7f:5d:20:36:61:b6: f2:05:77:24:b7:86:4e:50:ec:1c:9a:e8:91:bf:51:72:f5:1e: 1f:1e:1e:f2:4d:13:b1:c3:cf:a8:9c:19:d4:ed:98:fe:2d:6b: 6c:01:d8:81:be:02:95:8d:36:22:57:ca:ea:e3:2a:5a:02:8c: 7e:05:be:2a:5b:c6:d2:6c:12:c7:90:0c:61:42:84:a1:56:c4: fd:b1:80:ed:2e:1e:08:a1:fd:d6:10:62:40:21:ac:5f:ba:85: fa:77:5b:7c:a1:e7:02:31:f0:dd:68:91:8c:1e:fc:b6:ec:6f: 3e:7b:02:23:1f:50:e4:b5:7a:58:9a:06:cb:1e:fe:e1:77:18: 19:45:e3:e9:c5:ab:95:46:4e:8b:5b:3d:8c:c7:15:34:e4:dc: 15:99:c1:a8:41:75:68:a3:b4:d3:29:f5:44:f9:27:98:d4:ea: 9f:4c:b1:f3:64:d5:30:6b:0d:c6:45:b1:d5:42:80:37:b1:ed: 2c:40:45:1c:8e:d7:75:56:b4:3c:61:1d:2e:f3:31:de:2d:c2: f4:7e:c6:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeuEeyPKKdJJfnfR9X/9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDg2NjFjNmFlZWNhY2Q5YjcxMTc2YTcyZGU5NmM5YjQ1 MDk0MzkwHhcNMjUxMjE4MjIwMDQ5WhcNMjUxMjE5MjIwMDQ5WjAzMTEwLwYDVQQD Eyg2Mzc1N2IyOGMwMmRmMjk2YjBhYzU1MzhlZDM4YTJhNTBiYjIwNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8oNMqfz8OQulk88rufVTEmAI/qE rTLXQ267jJHnrtqOYipu9MFxKMQWhE640UpD1y9itm8Da0bO01+ciSKL12fAJadT amhALMtqpB97gnaG47bi3o5VBZlMAJWBpvfdDmszWqNWp26jnq8vPrMBtcxHRVUD Wo7KiDg2t5hv8+RmpVysxqzXm62U5dcKOe7O3t3AeGVapRD076xv8acyLCF0rznk ULEHxtsO/la+7mv+AR33i16ZgUm2Nc+418QjQ1QXnB5z/IT1T8riHru90F1AvqIM zLqhyHxQRRZIQkKHENgIfs+WfIer6G0tQirxsE/3wr034/nUEiYdNQo10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN1eyjALfKWsKxVOO04oqULsgWNMB8GA1UdIwQY MBaAFFcIZhxq7srNm3EXanLelsm0UJQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2It NDQxMDgxNjJlNDkyLzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2ItNDQxMDgxNjJlNDky LzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg03wSjMJ F8US9k0L2QZadz2AnRBk+bf27xQbj8JyvZqsPg+YOVUOMUcpwpAoyWuhf10gNmG2 8gV3JLeGTlDsHJrokb9RcvUeHx4e8k0TscPPqJwZ1O2Y/i1rbAHYgb4ClY02IlfK 6uMqWgKMfgW+KlvG0mwSx5AMYUKEoVbE/bGA7S4eCKH91hBiQCGsX7qF+ndbfKHn AjHw3WiRjB78tuxvPnsCIx9Q5LV6WJoGyx7+4XcYGUXj6cWrlUZOi1s9jMcVNOTc FZnBqEF1aKO00yn1RPknmNTqn0yx82TVMGsNxkWx1UKAN7HtLEBFHI7XdVa0PGEd LvMx3i3C9H7GNw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:42 2025 by rpki-client