This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json) Hash identifier: Ao0FB8J36n+XkmMXJsjrS1XI/sDhV2qlKB2ubQLww6s= Subject key identifier: CA:61:2F:9C:51:40:F4:7C:3D:5F:BC:5A:B9:00:2B:FA:8E:DC:06:46 Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Certificate serial: 019AF2ADBB97D4DCF78A8041DEDBA9E4FC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft Manifest number: 0138 Signing time: Sat 06 Dec 2025 08:01:03 +0000 Manifest this update: Sat 06 Dec 2025 08:01:03 +0000 Manifest next update: Sun 07 Dec 2025 08:01:03 +0000 Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: oMjAzXvqPMut67RO4sqshfvIfuM4z5j31mvb9U5tiqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bb:97:d4:dc:f7:8a:80:41:de:db:a9:e4:fc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Validity Not Before: Dec 6 08:01:03 2025 GMT Not After : Dec 7 08:01:03 2025 GMT Subject: CN=ca612f9c5140f47c3d5fbc5ab9002bfa8edc0646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:95:5d:bf:00:54:69:11:2e:44:bd:25:c3: 1b:5f:11:3e:82:1d:f7:e1:40:9c:fb:2f:c8:02:2c: b0:62:a4:3a:a7:14:d5:50:9f:cb:20:fa:83:bf:86: e2:9c:d2:23:c9:4d:6c:7d:6e:42:bd:2d:2a:43:c0: 43:a1:05:e3:2b:8c:2e:d0:fa:bc:dc:d4:b5:91:ea: 39:34:10:4e:9b:2a:f1:12:48:78:30:5c:28:88:c4: 93:0f:fa:7a:97:bf:31:47:b9:db:e3:61:12:01:be: 1a:cb:f9:0e:e8:c9:55:82:fe:2d:d7:85:7b:0d:e3: 85:6e:16:41:eb:cd:24:cf:34:2c:1c:61:08:b2:37: 1f:48:23:51:a2:0c:54:2e:55:04:9c:ac:08:e6:3d: 48:bb:e4:87:20:2e:7b:7e:af:09:d7:07:f7:69:1f: 3d:75:32:50:e6:fc:d8:7c:aa:8c:f7:b1:fa:e0:e4: cb:d0:05:bd:9d:0b:3a:c6:eb:14:f6:c1:5f:2d:ff: f9:0b:d1:5d:0b:14:ab:da:9a:2a:e8:3d:01:2e:f2: ce:8e:be:a2:96:5b:ce:b7:59:52:53:3a:ac:bc:86: 73:4c:c8:b4:b8:aa:b1:04:a3:8b:62:69:d3:91:43: 58:8f:c7:b1:8d:43:4c:fc:f6:0b:4c:45:10:92:55: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:2F:9C:51:40:F4:7C:3D:5F:BC:5A:B9:00:2B:FA:8E:DC:06:46 X509v3 Authority Key Identifier: keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5c:6a:4e:0d:1c:75:64:31:2f:1d:05:34:83:44:8d:f0:59: 5e:cb:d3:96:bc:e6:34:1d:94:13:84:5e:f2:34:f0:5a:e3:32: f0:90:48:bc:e0:49:e9:8b:e6:6b:53:a6:96:4d:de:aa:54:75: ae:92:e1:f7:b2:e6:61:7b:4c:57:4c:b1:1a:92:13:c0:e7:e9: 92:94:ad:a3:f4:b3:a4:a0:a0:2e:0e:d2:7f:2f:b2:5b:b0:e0: 2a:80:0a:16:e3:cc:dd:63:36:8d:ec:f6:60:cc:5c:6e:9b:00: a6:85:df:cf:5a:db:f7:3d:3a:2a:e4:6f:a0:e1:12:f6:87:2a: 79:ec:6b:d5:cf:7e:9a:35:a1:38:f3:6c:5f:04:a2:d8:b4:55: da:f8:2b:98:82:71:fd:1a:7a:b3:fe:95:3a:04:a7:cc:df:46: fd:c2:7d:28:38:d2:75:6e:7e:99:f4:cc:ac:4e:de:3a:1f:f5: 3e:b1:83:c8:e1:0b:73:6e:c9:5c:68:85:34:70:15:bb:32:70: d6:34:9b:e8:e5:03:62:b3:9d:13:cb:fd:e7:cb:62:ac:11:f6: 92:58:24:21:c0:24:5b:00:c1:ab:85:bb:50:c8:1a:5d:8c:06: 8f:2c:dd:33:fc:e5:e2:fb:ae:bf:52:2e:70:0b:c6:04:c9:6c: bd:e5:2e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbuX1Nz3ioBB3tup5PyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjg5MmU5OWM4NGExYzVkYzliMTJlMTE0ZDY3YWYxNmMy NGE5ZDYwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD EyhjYTYxMmY5YzUxNDBmNDdjM2Q1ZmJjNWFiOTAwMmJmYThlZGMwNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW+VXb8AVGkRLkS9JcMbXxE+gh33 4UCc+y/IAiywYqQ6pxTVUJ/LIPqDv4binNIjyU1sfW5CvS0qQ8BDoQXjK4wu0Pq8 3NS1keo5NBBOmyrxEkh4MFwoiMSTD/p6l78xR7nb42ESAb4ay/kO6MlVgv4t14V7 DeOFbhZB680kzzQsHGEIsjcfSCNRogxULlUEnKwI5j1Iu+SHIC57fq8J1wf3aR89 dTJQ5vzYfKqM97H64OTL0AW9nQs6xusU9sFfLf/5C9FdCxSr2poq6D0BLvLOjr6i llvOt1lSUzqsvIZzTMi0uKqxBKOLYmnTkUNYj8exjUNM/PYLTEUQklUd7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMphL5xRQPR8PV+8WrkAK/qO3AZGMB8GA1UdIwQY MBaAFLxokumchKHF3JsS4RTWevFsJKnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODIt YjY0ZTBmNmEwOWNhLzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODItYjY0ZTBmNmEwOWNh LzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1xqTg0c dWQxLx0FNINEjfBZXsvTlrzmNB2UE4Re8jTwWuMy8JBIvOBJ6Yvma1Omlk3eqlR1 rpLh97LmYXtMV0yxGpITwOfpkpSto/SzpKCgLg7Sfy+yW7DgKoAKFuPM3WM2jez2 YMxcbpsApoXfz1rb9z06KuRvoOES9ocqeexr1c9+mjWhOPNsXwSi2LRV2vgrmIJx /Rp6s/6VOgSnzN9G/cJ9KDjSdW5+mfTMrE7eOh/1PrGDyOELc27JXGiFNHAVuzJw 1jSb6OUDYrOdE8v958tirBH2klgkIcAkWwDBq4W7UMgaXYwGjyzdM/zl4vuuv1Iu cAvGBMlsveUuEw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:24 2025 by rpki-client