This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft File: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft (raw, json) Hash identifier: oV2r3jyCkqS9SYg/oQI3qw9HZgYcDabdJC1U7eysidk= Subject key identifier: 30:93:EE:13:8C:2C:3F:06:F1:D0:33:43:42:B1:D3:45:35:19:C1:88 Authority key identifier: 55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF Certificate issuer: /CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef Certificate serial: 019AF12E3949D85D26BE638770406304D1FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft Manifest number: 171C Signing time: Sat 06 Dec 2025 01:02:09 +0000 Manifest this update: Sat 06 Dec 2025 01:02:09 +0000 Manifest next update: Sun 07 Dec 2025 01:02:09 +0000 Files and hashes: 1: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl (hash: WtqlcjnJOh/w+cydo3ybm+GB5yNJTKu4wxryZg9lEwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:39:49:d8:5d:26:be:63:87:70:40:63:04:d1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef Validity Not Before: Dec 6 01:02:09 2025 GMT Not After : Dec 7 01:02:09 2025 GMT Subject: CN=3093ee138c2c3f06f1d0334342b1d3453519c188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ab:2f:06:4b:c0:d7:36:2a:63:59:79:9e:21: 55:b1:a2:d3:ca:0c:2c:96:ac:cf:5a:2f:b3:be:2c: ad:ce:99:11:6a:1e:94:d0:54:a6:b4:a5:42:64:8a: 2a:1b:36:b2:44:31:bf:b3:65:2d:d9:9a:9c:ac:d2: 36:a1:45:87:d9:eb:1d:81:e5:0a:7e:d8:4d:55:11: 05:01:b1:2f:fa:e0:14:be:39:62:29:eb:b0:d3:01: 1b:41:f0:a3:32:66:46:89:e7:de:7c:0c:52:41:f8: b2:c2:86:43:0d:e1:90:6c:f5:1c:57:1f:ee:8c:cd: bf:3b:5a:26:80:4b:50:ea:6e:13:97:7b:9a:94:6d: 4e:e3:a2:55:6a:45:62:1c:13:f5:ae:01:c6:84:63: 38:f1:a7:c5:ea:ba:42:d1:9f:e0:3c:c4:21:0d:d3: b6:45:ff:17:ed:87:21:62:fd:d5:e4:b4:0f:f6:7d: 30:90:d1:09:fa:60:15:4d:d0:da:1c:46:7c:bd:32: 01:52:64:5b:f8:3d:d8:f6:79:89:33:e6:de:c7:d3: 38:d8:f0:6e:9e:b4:01:77:2c:d4:a7:d0:57:9f:1c: fa:e1:81:f6:ed:f7:c3:40:7a:da:04:81:4d:84:5f: 3f:7f:d6:bd:09:87:22:8d:bf:f2:ce:43:b6:ce:5b: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:93:EE:13:8C:2C:3F:06:F1:D0:33:43:42:B1:D3:45:35:19:C1:88 X509v3 Authority Key Identifier: keyid:55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:09:23:d8:b6:ca:af:85:7c:b2:3c:62:f6:6c:54:13:3d:60: 23:a7:39:45:66:91:3b:15:40:69:c1:0e:8f:de:c7:06:de:84: a0:20:61:07:b2:82:e9:78:ad:e2:e8:99:e8:8e:64:42:37:32: b9:d2:af:da:0d:f4:2b:22:80:fd:b5:11:9f:cb:79:4e:36:a1: 0a:94:0c:97:74:8c:54:4b:15:26:47:9b:aa:87:c1:f5:00:54: 6a:94:ec:0a:9a:48:5d:7d:fe:f7:ac:39:c3:b7:c8:bc:f6:a0: cb:c7:8b:3f:27:05:0a:30:e7:88:75:30:d6:b5:73:a2:b2:04: 2f:41:63:00:4f:87:67:f6:42:22:46:2a:22:65:80:d8:89:d5: 11:27:45:73:a9:1f:c0:e0:c5:4d:da:20:30:d8:99:e6:41:77: 92:2d:71:75:b0:08:86:ad:b3:cd:f6:ce:b5:e1:c9:70:0b:12: 97:44:6a:59:5a:69:78:83:84:e3:08:bd:0b:aa:9d:72:ee:71: 2b:d6:87:ed:16:e4:85:12:18:c9:3a:c3:8d:68:5b:16:52:52: 2b:22:3a:66:15:6b:b8:93:a8:bc:9f:50:82:64:16:4e:44:bf: cc:82:5a:fd:3e:14:48:e4:f3:46:0c:1e:fd:eb:1b:f4:c5:7f: 66:c8:ca:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjlJ2F0mvmOHcEBjBNH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZGVkOWQwMmU3ZjYxNjE5MDUzYTM3MjJhN2E1YTM5ZjNl Yjg2ZWYwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD EygzMDkzZWUxMzhjMmMzZjA2ZjFkMDMzNDM0MmIxZDM0NTM1MTljMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46svBkvA1zYqY1l5niFVsaLTygws lqzPWi+zviytzpkRah6U0FSmtKVCZIoqGzayRDG/s2Ut2ZqcrNI2oUWH2esdgeUK fthNVREFAbEv+uAUvjliKeuw0wEbQfCjMmZGiefefAxSQfiywoZDDeGQbPUcVx/u jM2/O1omgEtQ6m4Tl3ualG1O46JVakViHBP1rgHGhGM48afF6rpC0Z/gPMQhDdO2 Rf8X7YchYv3V5LQP9n0wkNEJ+mAVTdDaHEZ8vTIBUmRb+D3Y9nmJM+bex9M42PBu nrQBdyzUp9BXnxz64YH27ffDQHraBIFNhF8/f9a9CYcijb/yzkO2zls2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCT7hOMLD8G8dAzQ0Kx00U1GcGIMB8GA1UdIwQY MBaAFFXe2dAuf2FhkFOjcip6Wjnz64bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85MDM0MTAtOGY3Ny00MDIwLWFmNTct MTUzMzljMzk3NTUwLzEvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85MDM0MTAtOGY3Ny00MDIwLWFmNTctMTUzMzljMzk3NTUw LzEvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyAkj2LbK r4V8sjxi9mxUEz1gI6c5RWaROxVAacEOj97HBt6EoCBhB7KC6Xit4uiZ6I5kQjcy udKv2g30KyKA/bURn8t5TjahCpQMl3SMVEsVJkebqofB9QBUapTsCppIXX3+96w5 w7fIvPagy8eLPycFCjDniHUw1rVzorIEL0FjAE+HZ/ZCIkYqImWA2InVESdFc6kf wODFTdogMNiZ5kF3ki1xdbAIhq2zzfbOteHJcAsSl0RqWVppeIOE4wi9C6qdcu5x K9aH7RbkhRIYyTrDjWhbFlJSKyI6ZhVruJOovJ9QgmQWTkS/zIJa/T4USOTzRgwe /esb9MV/ZsjKMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:25 2025 by rpki-client