This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json) Hash identifier: IfP+whSeyTMb3Gh1yBT130/WyenQS4bNxQv38q3iSjs= Subject key identifier: B9:1D:D4:29:6A:CF:0D:B9:4F:C8:33:5D:69:49:26:0F:3F:33:6B:E3 Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Certificate serial: 019AF1D212977786B4D332B48F4EEDE1397B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft Manifest number: 1155 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=) 2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: gMsZWTbmEm5WY+I+dJEaHne6Wt8KI7Mkhr7qoTGyEIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:12:97:77:86:b4:d3:32:b4:8f:4e:ed:e1:39:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=b91dd4296acf0db94fc8335d6949260f3f336be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:cb:aa:c2:18:58:4a:14:67:63:ca:8c:d0: 9f:55:0d:bb:22:ea:28:d4:69:87:cd:bc:a1:5c:31: 19:90:56:07:6c:20:b7:3b:d5:69:b8:10:4c:71:f7: de:22:01:2b:eb:55:8a:a3:02:cb:bb:c2:28:a0:1e: b9:14:59:90:d0:2b:c0:e3:03:df:00:a2:a8:06:a1: b7:98:34:a9:bc:fc:d8:f3:5a:15:8a:52:6d:6d:91: df:99:cf:fc:ea:9b:c1:b8:73:be:da:74:4e:34:a9: 04:d4:e3:2d:b1:8f:5b:bd:a3:a1:83:ab:11:64:a8: 3e:6b:60:38:20:4f:90:3c:29:b9:39:6f:84:c0:4a: 98:04:59:46:69:60:39:16:a2:bf:23:95:0b:55:65: 11:31:2a:a4:3b:d6:bb:78:18:7f:e1:d8:67:7c:02: 25:5c:8c:ab:6b:0f:ae:94:68:fc:34:c7:1e:4d:63: d0:d9:8e:5f:2d:2d:df:a0:ef:6a:f3:9a:d0:cb:3d: 68:c3:8d:93:e6:c7:d2:e0:02:03:bf:f1:96:d7:fd: e5:b7:6c:67:a5:8c:92:83:38:e3:d0:a1:b4:91:d7: 00:33:0c:07:9b:74:32:62:5f:09:a4:3d:d2:38:02: 49:f1:4a:fb:4f:55:d7:ef:05:79:a9:55:f1:c6:cc: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:D4:29:6A:CF:0D:B9:4F:C8:33:5D:69:49:26:0F:3F:33:6B:E3 X509v3 Authority Key Identifier: keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8a:1b:33:4b:69:8a:07:32:67:3b:2b:48:e6:e6:86:f1:ab: b6:eb:e6:98:ba:6c:96:32:4b:07:4c:0d:bb:20:6d:c2:28:12: 3e:fe:71:2b:24:43:c0:97:97:61:d1:05:00:34:c9:b1:80:38: c7:a6:e0:81:68:9c:87:71:7b:8d:65:e3:d6:74:37:b2:2d:29: ba:ee:0d:f5:ab:4a:ec:87:ec:a2:01:ab:d6:c3:20:10:88:da: 96:34:74:55:ed:02:ae:4d:9b:1c:46:6a:dc:fc:b8:72:41:a2: 15:89:81:44:0c:25:98:39:e1:3a:57:d6:18:45:68:c8:cb:83: 92:24:f5:66:b7:27:b4:21:f8:d8:25:a9:62:91:2d:56:31:4f: f6:6c:7d:dd:a7:b1:9b:7f:1e:f6:1e:b8:c1:51:47:f0:d0:00: 9c:69:7e:18:65:1f:e4:ce:c3:f0:bf:3f:64:f8:96:39:da:cf: 1e:ee:50:e0:89:2b:e1:3b:81:80:b4:a7:fe:70:73:6b:89:6b: d2:b5:f2:74:c0:af:4d:0a:f4:28:c0:88:c3:95:2b:5d:4f:e9: a7:b7:01:42:40:af:5e:d0:37:9d:ca:0c:c6:59:bb:13:f8:04: ae:f3:dc:93:97:54:ce:09:5f:b2:95:8b:dd:bc:c4:46:8b:7c: 10:f4:a3:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hKXd4a00zK0j07t4Tl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1 MTVkOTkwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EyhiOTFkZDQyOTZhY2YwZGI5NGZjODMzNWQ2OTQ5MjYwZjNmMzM2YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyzLqsIYWEoUZ2PKjNCfVQ27Iuoo 1GmHzbyhXDEZkFYHbCC3O9VpuBBMcffeIgEr61WKowLLu8IooB65FFmQ0CvA4wPf AKKoBqG3mDSpvPzY81oVilJtbZHfmc/86pvBuHO+2nRONKkE1OMtsY9bvaOhg6sR ZKg+a2A4IE+QPCm5OW+EwEqYBFlGaWA5FqK/I5ULVWURMSqkO9a7eBh/4dhnfAIl XIyraw+ulGj8NMceTWPQ2Y5fLS3foO9q85rQyz1ow42T5sfS4AIDv/GW1/3lt2xn pYySgzjj0KG0kdcAMwwHm3QyYl8JpD3SOAJJ8Ur7T1XX7wV5qVXxxsxFPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkd1Clqzw25T8gzXWlJJg8/M2vjMB8GA1UdIwQY MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYobM0tp igcyZzsrSObmhvGrtuvmmLpsljJLB0wNuyBtwigSPv5xKyRDwJeXYdEFADTJsYA4 x6bggWich3F7jWXj1nQ3si0puu4N9atK7IfsogGr1sMgEIjaljR0Ve0Crk2bHEZq 3Py4ckGiFYmBRAwlmDnhOlfWGEVoyMuDkiT1ZrcntCH42CWpYpEtVjFP9mx93aex m38e9h64wVFH8NAAnGl+GGUf5M7D8L8/ZPiWOdrPHu5Q4Ikr4TuBgLSn/nBza4lr 0rXydMCvTQr0KMCIw5UrXU/pp7cBQkCvXtA3ncoMxlm7E/gErvPck5dUzglfspWL 3bzERot8EPSjWg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:53 2025 by rpki-client