This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json) Hash identifier: yrhTr/etBiSrbZ9BVa0fX7ehmSg9/YYOdx7kav9eQMY= Subject key identifier: EE:C5:4A:B9:84:61:EC:EA:E5:E0:1C:5C:26:83:62:75:FA:3B:2D:35 Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44 Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44 Certificate serial: 019AF464BA715EF6D7FEC20795BCFC7C5EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft Manifest number: 0293 Signing time: Sat 06 Dec 2025 16:00:33 +0000 Manifest this update: Sat 06 Dec 2025 16:00:33 +0000 Manifest next update: Sun 07 Dec 2025 16:00:33 +0000 Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: 4Sp7RU2oyHqiG+8nrWYlVzzntfR/v9Vrj9tmA7Xgpp4=) 2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ba:71:5e:f6:d7:fe:c2:07:95:bc:fc:7c:5e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44 Validity Not Before: Dec 6 16:00:33 2025 GMT Not After : Dec 7 16:00:33 2025 GMT Subject: CN=eec54ab98461eceae5e01c5c26836275fa3b2d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f2:8f:47:61:22:80:cc:1b:ec:2d:e7:c3:f6: 49:28:bc:3b:32:fa:04:4d:de:a3:cd:aa:c1:23:45: a1:3a:95:2d:a7:a1:e4:c5:90:ac:e8:c0:55:1a:7c: 37:34:3a:ab:84:e5:b7:30:6f:96:25:71:bc:32:fb: 5b:32:05:86:7c:cb:22:c2:ab:5e:36:b2:8b:75:e2: cf:ca:77:65:38:aa:96:c5:bc:db:2d:3f:5b:dd:ff: ae:be:73:9d:8a:07:ed:65:b1:6d:d5:e2:de:47:23: 5a:9e:88:d4:79:e6:de:f0:2c:0e:07:fb:5b:0b:0b: 85:b0:9c:9c:95:02:9b:cd:9d:f9:80:5a:cb:87:90: 19:4f:f3:ec:2d:ec:1f:cc:4a:c7:3a:7c:de:81:62: f6:fc:e2:16:01:b6:10:76:21:45:80:7f:6b:7a:00: 7e:2b:7a:7e:76:ec:28:97:a6:6a:e1:e9:db:ba:b3: 3b:bd:8a:49:99:23:62:d4:f8:df:96:dd:c7:df:16: dc:a9:c6:5b:54:78:d2:d0:fc:8a:87:52:cb:a2:16: 46:09:aa:12:dd:e7:1a:e3:38:ae:b5:40:ac:cc:ca: 52:53:23:10:e6:44:1f:8d:0e:4c:46:5f:12:51:bb: ad:d0:5f:86:02:fd:7c:d1:85:fa:fa:c8:f3:7b:c4: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C5:4A:B9:84:61:EC:EA:E5:E0:1C:5C:26:83:62:75:FA:3B:2D:35 X509v3 Authority Key Identifier: keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:97:d6:2c:04:43:87:6a:08:58:39:5b:19:31:56:35:fe:a9: 0b:9e:2e:e5:6d:b2:21:f7:b8:f5:37:50:60:72:9f:5c:7c:2b: 64:b3:ba:db:a9:68:d8:d6:8e:44:b3:31:e0:0b:76:fc:c4:91: b5:8a:ca:3c:c5:78:a3:e0:22:ea:0d:8e:55:e1:65:85:8b:dc: a2:14:18:02:e1:02:19:43:c0:d7:e2:1c:28:7c:73:bf:90:0f: a1:9e:47:81:44:62:3d:2a:2d:7b:1d:3c:77:3f:df:65:9f:38: 52:5c:42:97:58:23:ea:1f:ec:69:8d:64:60:9d:eb:80:aa:1b: cf:07:fe:3f:ba:3a:65:48:41:f8:db:8a:56:2f:14:81:48:79: ee:b3:46:82:2d:ed:1e:be:ab:a7:cf:e9:8f:4f:66:4f:9c:0e: c3:d9:e4:e0:19:f9:f4:fa:b7:2e:f1:ec:3c:52:06:93:ef:1d: e9:dc:58:58:19:1c:a3:48:41:28:0f:ed:0f:c5:35:3d:8d:85: 2d:bc:5f:9b:d8:78:ca:96:fd:f3:c0:be:c4:bd:d6:4a:f5:62: 9b:21:e5:df:1b:44:65:0e:2d:b0:d4:3e:a8:b6:fb:fb:c8:f7: 56:ec:ea:1f:d9:3a:17:db:78:31:a8:11:dc:2a:78:f6:df:7f: ab:7c:65:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZLpxXvbX/sIHlbz8fF76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MTU4MjAzZGEzYTFlOTYzMThlODUwNDM0MTFlN2Q0ZDAz ZDRjNDQwHhcNMjUxMjA2MTYwMDMzWhcNMjUxMjA3MTYwMDMzWjAzMTEwLwYDVQQD EyhlZWM1NGFiOTg0NjFlY2VhZTVlMDFjNWMyNjgzNjI3NWZhM2IyZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPKPR2EigMwb7C3nw/ZJKLw7MvoE Td6jzarBI0WhOpUtp6HkxZCs6MBVGnw3NDqrhOW3MG+WJXG8MvtbMgWGfMsiwqte NrKLdeLPyndlOKqWxbzbLT9b3f+uvnOdigftZbFt1eLeRyNanojUeebe8CwOB/tb CwuFsJyclQKbzZ35gFrLh5AZT/PsLewfzErHOnzegWL2/OIWAbYQdiFFgH9regB+ K3p+duwol6Zq4enburM7vYpJmSNi1Pjflt3H3xbcqcZbVHjS0PyKh1LLohZGCaoS 3eca4ziutUCszMpSUyMQ5kQfjQ5MRl8SUbut0F+GAv180YX6+sjze8SuNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7FSrmEYezq5eAcXCaDYnX6Oy01MB8GA1UdIwQY MBaAFFQVggPaOh6WMY6FBDQR59TQPUxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMt MWE1NWQxZTRjMjFjLzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMtMWE1NWQxZTRjMjFj LzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5fWLARD h2oIWDlbGTFWNf6pC54u5W2yIfe49TdQYHKfXHwrZLO626lo2NaORLMx4At2/MSR tYrKPMV4o+Ai6g2OVeFlhYvcohQYAuECGUPA1+IcKHxzv5APoZ5HgURiPSotex08 dz/fZZ84UlxCl1gj6h/saY1kYJ3rgKobzwf+P7o6ZUhB+NuKVi8UgUh57rNGgi3t Hr6rp8/pj09mT5wOw9nk4Bn59Pq3LvHsPFIGk+8d6dxYWBkco0hBKA/tD8U1PY2F Lbxfm9h4ypb988C+xL3WSvVimyHl3xtEZQ4tsNQ+qLb7+8j3VuzqH9k6F9t4MagR 3Cp49t9/q3xlAA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:07 2025 by rpki-client