This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json) Hash identifier: vJFhPg7TT3L0dee+J/vS71TNhdJsbrD2n1TnDNgM8sw= Subject key identifier: 57:B1:47:01:AC:BB:4A:E7:E8:AA:5A:43:3F:4C:65:73:B7:8E:E9:57 Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Certificate serial: 019AF465212765F00AE3E61EAD0CAC30A928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 16:00:59 +0000 Manifest this update: Sat 06 Dec 2025 16:00:59 +0000 Manifest next update: Sun 07 Dec 2025 16:00:59 +0000 Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=) 2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: nekgoGKyTFNi3x7cdKR8PQrkSv8dtt9ZOKUFcqqRYng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:21:27:65:f0:0a:e3:e6:1e:ad:0c:ac:30:a9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Validity Not Before: Dec 6 16:00:59 2025 GMT Not After : Dec 7 16:00:59 2025 GMT Subject: CN=57b14701acbb4ae7e8aa5a433f4c6573b78ee957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:68:c8:99:ba:85:bd:4a:7a:a2:98:d6:3d: a7:a8:5d:5e:0b:8c:27:ad:72:0e:63:0e:cb:6a:de: bb:91:d9:2f:69:88:3a:e3:6e:23:8f:38:b0:2c:6c: c3:d4:e8:da:1f:f0:db:ea:67:d1:24:5f:52:94:d6: 37:e2:2c:06:be:ed:aa:4a:fe:8c:97:31:3c:fa:06: 11:1d:92:38:63:3d:b0:c1:19:e3:7c:1b:b3:63:ed: 69:ae:fe:ad:94:1d:e5:de:95:e1:d9:62:45:fb:a8: 28:e2:06:ed:69:6d:15:0c:03:9d:e0:47:ea:8e:73: fa:83:d4:1d:3d:2f:89:ee:27:63:11:8c:c0:73:92: 47:68:6a:d6:0e:20:b9:e3:71:23:6a:5f:09:cc:7d: 4b:d3:eb:9a:83:06:47:d2:58:39:b1:f3:72:7b:a6: 58:c8:35:8a:43:5f:6b:8b:12:c0:fb:10:ff:42:bd: 93:9c:36:86:98:e2:f2:b9:73:64:88:0f:4e:a3:16: 56:de:74:03:07:84:11:dd:b5:d9:91:91:f8:f7:a1: 15:53:70:ca:10:1b:e0:ca:0a:63:6b:23:8c:ec:b0: 41:be:b7:4b:3c:a5:00:8e:da:26:6d:00:d4:62:c4: c8:92:04:a3:f0:34:b0:49:9a:cd:88:cf:74:ea:33: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B1:47:01:AC:BB:4A:E7:E8:AA:5A:43:3F:4C:65:73:B7:8E:E9:57 X509v3 Authority Key Identifier: keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:81:31:ce:4a:31:65:93:a9:98:98:3c:34:64:c6:bd:52:4e: bb:f0:0e:07:ea:13:0a:07:3d:32:6b:f0:68:65:52:b4:a0:f3: 4a:ee:b0:cd:ac:ba:93:b7:ad:b7:4e:01:eb:e0:6f:b1:bc:73: c7:6c:7e:42:d0:33:d9:75:ec:8f:7a:f1:24:4a:21:3d:cc:6f: 3c:32:aa:fd:29:6a:71:cb:ff:cf:01:3d:ad:a9:00:a2:7b:b4: e2:5d:90:34:62:ff:41:31:a2:98:3f:62:51:db:ae:06:3a:eb: f3:53:03:67:d4:84:c4:95:ec:dd:88:3f:e7:4e:a5:e2:89:89: 60:42:4e:e6:3a:66:48:8b:91:33:6e:8d:3e:80:98:33:ef:47: 0d:b2:c1:59:16:f4:d8:d0:7f:ea:92:c2:80:a3:a9:c0:cd:0b: 7f:6c:e4:da:ff:82:be:84:bd:d2:05:37:9e:db:39:ec:23:2e: 0a:b6:fd:e3:66:dd:d3:d8:e2:ff:02:0e:b7:49:9a:a9:52:99: 29:3d:ba:eb:ce:df:07:96:83:b5:26:7c:72:c7:b9:d2:49:5c: 32:99:39:3c:68:6a:fc:8e:80:30:df:6a:85:09:dd:bd:7c:a0: 76:0b:c9:6d:e1:19:02:8a:98:bc:38:46:16:62:28:93:92:ed: 22:80:50:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSEnZfAK4+YerQysMKkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy Y2UzYTkwHhcNMjUxMjA2MTYwMDU5WhcNMjUxMjA3MTYwMDU5WjAzMTEwLwYDVQQD Eyg1N2IxNDcwMWFjYmI0YWU3ZThhYTVhNDMzZjRjNjU3M2I3OGVlOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT5oyJm6hb1KeqKY1j2nqF1eC4wn rXIOYw7Lat67kdkvaYg6424jjziwLGzD1OjaH/Db6mfRJF9SlNY34iwGvu2qSv6M lzE8+gYRHZI4Yz2wwRnjfBuzY+1prv6tlB3l3pXh2WJF+6go4gbtaW0VDAOd4Efq jnP6g9QdPS+J7idjEYzAc5JHaGrWDiC543Ejal8JzH1L0+uagwZH0lg5sfNye6ZY yDWKQ19rixLA+xD/Qr2TnDaGmOLyuXNkiA9OoxZW3nQDB4QR3bXZkZH496EVU3DK EBvgygpjayOM7LBBvrdLPKUAjtombQDUYsTIkgSj8DSwSZrNiM906jOJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFexRwGsu0rn6KpaQz9MZXO3julXMB8GA1UdIwQY MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4Exzkox ZZOpmJg8NGTGvVJOu/AOB+oTCgc9MmvwaGVStKDzSu6wzay6k7ett04B6+Bvsbxz x2x+QtAz2XXsj3rxJEohPcxvPDKq/Slqccv/zwE9rakAonu04l2QNGL/QTGimD9i UduuBjrr81MDZ9SExJXs3Yg/506l4omJYEJO5jpmSIuRM26NPoCYM+9HDbLBWRb0 2NB/6pLCgKOpwM0Lf2zk2v+CvoS90gU3nts57CMuCrb942bd09ji/wIOt0maqVKZ KT26687fB5aDtSZ8cse50klcMpk5PGhq/I6AMN9qhQndvXygdgvJbeEZAoqYvDhG FmIok5LtIoBQxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:51 2025 by rpki-client