This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json) Hash identifier: pnp1cccHb1fhBHV8DypcYfiv3KQ1U+W76Gfxa7M6Tsc= Subject key identifier: D9:74:E2:90:F7:2F:08:2C:54:6C:14:2D:E2:0E:9E:3E:1A:4A:66:7B Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c Certificate serial: 019AF23FF7C2D4E728A55E5DF8379BDDAE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft Manifest number: 02F7 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: 6oRhrZTT9ybL3cD2K4odCjdMtoI/2F6DnYVUcY9RQuQ=) 2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f7:c2:d4:e7:28:a5:5e:5d:f8:37:9b:dd:ae:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=d974e290f72f082c546c142de20e9e3e1a4a667b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:bc:c5:c9:8b:76:99:49:38:8c:4c:93:61: 90:5f:ef:b0:7a:8f:ef:82:59:b8:c4:30:ef:2d:a3: 95:b8:e2:f3:b6:54:c9:78:61:4a:0a:a2:35:e6:28: db:27:13:66:07:90:5c:00:66:46:ec:02:fd:b6:f2: 96:2d:b5:dd:4e:ce:fc:28:6f:56:f6:d3:c6:b0:27: e8:81:07:ea:4a:0c:fc:63:67:b7:5c:c5:5f:96:9a: 85:3e:e9:1c:90:c0:f8:3a:18:30:8e:5c:12:a9:dc: 95:45:38:28:7e:b4:d2:79:35:c2:cd:b7:08:23:03: 22:b2:43:d6:fc:69:cb:ca:a4:99:9f:0f:5e:72:c6: 62:41:04:15:ba:3a:92:30:5f:d4:72:89:ad:51:24: 37:8c:22:cf:0b:84:a5:27:b5:3b:01:63:49:d5:68: 97:5d:72:8b:24:04:4c:d6:e7:a1:0d:fb:b0:d3:c4: 91:94:ba:41:33:30:e1:85:fd:42:00:a7:03:9a:7b: b3:27:87:c6:4a:f4:3f:13:7c:24:54:80:82:42:99: 5d:11:2d:f2:1c:df:48:b3:ec:ef:72:97:6e:a3:d8: 8d:07:17:87:de:ca:20:e4:d6:b5:a1:dc:36:7b:8e: 43:33:6e:f9:d5:35:b0:f7:44:6a:e8:62:b6:84:65: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:74:E2:90:F7:2F:08:2C:54:6C:14:2D:E2:0E:9E:3E:1A:4A:66:7B X509v3 Authority Key Identifier: keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:dc:62:ae:20:90:36:fa:98:05:89:7f:02:dc:6e:b6:32:81: ae:87:c9:46:58:cb:5c:d5:6d:07:c0:4f:bd:3a:42:17:c0:48: 70:01:8b:f7:40:d4:61:c5:e4:4e:a8:a5:af:c0:fa:07:bb:fe: b8:98:44:af:d0:2d:a8:c9:ae:45:0b:d4:43:7e:ab:19:ef:97: 2d:38:39:1e:fe:06:06:4a:34:0c:23:b2:53:5d:54:4f:b5:fe: 3f:6d:ec:22:45:3b:6e:c7:ea:78:43:5b:45:ea:73:4a:16:df: d6:2f:57:99:b9:d5:d3:f6:31:2d:61:88:0d:b9:eb:a6:20:e1: b5:af:28:4b:55:32:84:7d:35:1e:83:70:d7:f2:4d:56:a8:ff: 23:95:97:8b:20:94:0f:40:52:b2:b3:9e:3b:5a:f9:7d:dd:6e: 5e:80:86:8d:06:f5:fe:ec:87:e7:9b:1e:2e:fa:4a:4f:d7:af: a7:59:da:60:05:16:37:bd:80:c6:2b:5e:f0:89:74:19:b5:c1: 67:40:4e:da:47:3c:f3:cd:97:c2:99:f7:b5:ac:88:f7:70:32: 8e:13:6b:de:fa:57:c7:6c:60:52:ee:1a:da:32:41:4d:2f:2f: a8:c8:c0:cb:62:92:26:71:23:3f:40:32:15:58:09:70:a1:64: ad:2f:31:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/fC1OcopV5d+Deb3a6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz MDkwOGMwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EyhkOTc0ZTI5MGY3MmYwODJjNTQ2YzE0MmRlMjBlOWUzZTFhNGE2NjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvq8xcmLdplJOIxMk2GQX++weo/v glm4xDDvLaOVuOLztlTJeGFKCqI15ijbJxNmB5BcAGZG7AL9tvKWLbXdTs78KG9W 9tPGsCfogQfqSgz8Y2e3XMVflpqFPukckMD4OhgwjlwSqdyVRTgofrTSeTXCzbcI IwMiskPW/GnLyqSZnw9ecsZiQQQVujqSMF/UcomtUSQ3jCLPC4SlJ7U7AWNJ1WiX XXKLJARM1uehDfuw08SRlLpBMzDhhf1CAKcDmnuzJ4fGSvQ/E3wkVICCQpldES3y HN9Is+zvcpduo9iNBxeH3sog5Na1odw2e45DM2751TWw90Rq6GK2hGWkjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl04pD3LwgsVGwULeIOnj4aSmZ7MB8GA1UdIwQY MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdxiriCQ NvqYBYl/AtxutjKBrofJRljLXNVtB8BPvTpCF8BIcAGL90DUYcXkTqilr8D6B7v+ uJhEr9AtqMmuRQvUQ36rGe+XLTg5Hv4GBko0DCOyU11UT7X+P23sIkU7bsfqeENb RepzShbf1i9XmbnV0/YxLWGIDbnrpiDhta8oS1UyhH01HoNw1/JNVqj/I5WXiyCU D0BSsrOeO1r5fd1uXoCGjQb1/uyH55seLvpKT9evp1naYAUWN72Axite8Il0GbXB Z0BO2kc8882Xwpn3tayI93AyjhNr3vpXx2xgUu4a2jJBTS8vqMjAy2KSJnEjP0Ay FVgJcKFkrS8xbg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:34 2025 by rpki-client