This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft File: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json) Hash identifier: 4i1jqkbymNSAsFljpB2XijTwxsWhZPVLISosXcaevYI= Subject key identifier: 6B:77:AB:D7:93:98:A5:2E:CD:DD:3A:68:00:C5:FB:05:A2:7C:04:02 Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4 Certificate issuer: /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4 Certificate serial: 019AF50A58400441A39F9BDFE1F5549FEECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:27 +0000 Manifest this update: Sat 06 Dec 2025 19:01:27 +0000 Manifest next update: Sun 07 Dec 2025 19:01:27 +0000 Files and hashes: 1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: cjLpo8fTWFUJZgzRn7qP7iysaB6o8A6RFycMmnJPJCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:58:40:04:41:a3:9f:9b:df:e1:f5:54:9f:ee:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4 Validity Not Before: Dec 6 19:01:27 2025 GMT Not After : Dec 7 19:01:27 2025 GMT Subject: CN=6b77abd79398a52ecddd3a6800c5fb05a27c0402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:11:68:84:71:ce:83:34:63:2c:74:a0:b8: cd:29:ee:a1:d1:a8:d7:34:96:86:6a:2e:ad:f5:e7: d8:26:35:5d:ad:c4:20:f5:8d:3a:f1:2b:d1:9b:db: a2:46:18:e1:9d:5a:bc:e8:25:ab:8c:75:9e:aa:c7: 0d:2f:2f:76:1b:1a:d5:f5:75:ba:5f:04:63:84:bd: f9:75:b3:c3:68:1d:c9:35:27:c2:1d:0a:ee:ac:1f: ab:97:44:68:15:52:cb:3b:4e:c9:1e:40:dd:15:b8: f6:20:8e:60:68:29:13:85:44:73:81:ea:f6:63:b7: 0e:5b:c4:a5:eb:a0:6e:2e:5b:79:5c:92:f4:90:8b: f9:d9:c5:c4:db:4d:d7:ee:2d:23:d3:84:8b:6a:80: 2a:6d:cf:2f:53:30:a8:29:5a:a2:f9:da:47:d9:21: 0b:60:8c:14:d9:12:7f:64:fe:fb:41:9d:5b:45:49: 5d:24:65:f2:ee:86:02:5c:86:b5:d3:44:81:e4:e4: 6b:1d:a2:a1:da:4f:5b:2a:8d:d2:56:be:ea:bf:0d: b3:72:98:c6:f1:59:7f:b9:37:76:98:80:b8:88:b4: 02:a6:ee:ff:d1:84:c2:cb:e1:b0:9c:21:c0:1d:32: 91:b7:dd:00:c8:39:ee:ca:c7:61:f5:d6:ad:95:83: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:77:AB:D7:93:98:A5:2E:CD:DD:3A:68:00:C5:FB:05:A2:7C:04:02 X509v3 Authority Key Identifier: keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b3:6f:17:5b:5b:00:d1:a2:73:a7:fb:c2:a1:8d:d4:6d:d8: bc:e6:63:01:c6:6d:09:00:2f:38:c3:d1:04:a4:81:f4:0f:b9: 2c:85:0f:77:aa:23:04:a1:3c:f6:0d:e6:01:a7:26:37:86:ef: 63:84:5e:fe:14:50:c5:03:29:c5:d5:77:13:55:84:20:70:78: 25:2a:48:46:3b:82:73:98:e3:70:e0:e1:d4:94:9b:18:ac:b2: 6d:2a:76:5a:c5:8d:db:57:94:d3:16:62:f1:7c:2f:68:c4:24: a9:40:53:6a:a7:c0:06:62:c6:1b:42:78:23:c4:f2:36:6a:c1: 5c:00:d3:a3:12:51:a1:dd:12:36:40:a2:21:f9:21:4f:f3:47: ed:99:8d:00:c9:f7:e6:e5:76:6c:66:7b:56:01:9e:e2:72:a5: 49:9d:40:8b:d9:e1:99:03:0d:88:e2:a2:d9:2f:03:80:d0:ee: 63:e5:28:e2:42:4e:6b:a3:ad:f6:6a:40:48:19:10:b3:00:de: be:d5:a3:17:77:5f:52:23:3c:ec:34:c7:b0:b8:5c:a1:7b:57: af:ec:46:01:12:9c:38:cb:bc:e0:ec:b8:3d:fa:fe:61:38:06: 63:61:8f:1e:76:e6:c9:7d:2b:62:d6:68:76:24:b7:e1:8f:d0: df:4b:ee:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClhABEGjn5vf4fVUn+7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNzdjYjg5NjRjNGVkNjAxNDQ4YTQzNjg2ODViZjA4ZGNi NWUxZjQwHhcNMjUxMjA2MTkwMTI3WhcNMjUxMjA3MTkwMTI3WjAzMTEwLwYDVQQD Eyg2Yjc3YWJkNzkzOThhNTJlY2RkZDNhNjgwMGM1ZmIwNWEyN2MwNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0URaIRxzoM0Yyx0oLjNKe6h0ajX NJaGai6t9efYJjVdrcQg9Y068SvRm9uiRhjhnVq86CWrjHWeqscNLy92GxrV9XW6 XwRjhL35dbPDaB3JNSfCHQrurB+rl0RoFVLLO07JHkDdFbj2II5gaCkThURzger2 Y7cOW8Sl66BuLlt5XJL0kIv52cXE203X7i0j04SLaoAqbc8vUzCoKVqi+dpH2SEL YIwU2RJ/ZP77QZ1bRUldJGXy7oYCXIa100SB5ORrHaKh2k9bKo3SVr7qvw2zcpjG 8Vl/uTd2mIC4iLQCpu7/0YTCy+GwnCHAHTKRt90AyDnuysdh9datlYNiJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt3q9eTmKUuzd06aADF+wWifAQCMB8GA1UdIwQY MBaAFLx3y4lkxO1gFEikNoaFvwjcteH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNzVlMTYtNjY0Ny00MDdhLWEyMDEt ZDAzMjdkZjAyNjI4LzEvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNzVlMTYtNjY0Ny00MDdhLWEyMDEtZDAzMjdkZjAyNjI4 LzEvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7NvF1tb ANGic6f7wqGN1G3YvOZjAcZtCQAvOMPRBKSB9A+5LIUPd6ojBKE89g3mAacmN4bv Y4Re/hRQxQMpxdV3E1WEIHB4JSpIRjuCc5jjcODh1JSbGKyybSp2WsWN21eU0xZi 8XwvaMQkqUBTaqfABmLGG0J4I8TyNmrBXADToxJRod0SNkCiIfkhT/NH7ZmNAMn3 5uV2bGZ7VgGe4nKlSZ1Ai9nhmQMNiOKi2S8DgNDuY+Uo4kJOa6Ot9mpASBkQswDe vtWjF3dfUiM87DTHsLhcoXtXr+xGARKcOMu84Oy4Pfr+YTgGY2GPHnbmyX0rYtZo diS34Y/Q30vuSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:24 2025 by rpki-client