This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json) Hash identifier: i0bBMpj8W/FybCVl81dvRBkLLvXyTY0JDy9X87dB1WA= Subject key identifier: D4:02:2D:71:67:F4:55:26:4A:F8:A1:C4:CE:E2:06:B2:9A:8E:F8:41 Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e Certificate serial: 019AF31C633B079E34FD9ABB9C2FF26B6AFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft Manifest number: 0A94 Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: EdpLlBxPyOLcuZII4pk6jCEeOFZKB/73QmldocB7EfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:63:3b:07:9e:34:fd:9a:bb:9c:2f:f2:6b:6a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=d4022d7167f455264af8a1c4cee206b29a8ef841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:ee:a6:f7:be:a7:f7:5b:27:7b:eb:b0:96: 72:ca:0d:23:7b:c4:68:3d:99:e0:ed:d7:85:a9:a2: 9f:04:ac:92:65:96:9a:b2:c2:11:7c:7a:79:d1:84: 03:8a:69:52:bc:fc:cf:5e:50:21:d7:3d:bd:da:09: 81:ea:1a:28:55:8a:3a:8b:95:f9:11:d6:a7:aa:44: 13:68:27:ba:e7:67:ad:93:b2:70:2a:68:48:dd:fd: 60:86:69:99:7b:27:43:69:88:93:26:99:2e:04:5b: 1e:61:2e:82:71:31:e3:80:53:98:fe:8c:d6:25:e6: 9d:73:ed:8f:bb:a3:8e:f0:35:e9:56:aa:4e:d5:54: d4:cb:88:ef:8c:91:75:a9:f0:94:65:4c:4d:e1:d6: 77:c3:36:8a:1b:06:7f:b1:f0:fa:a0:7f:8e:43:02: 05:5e:3b:ff:b8:eb:93:d9:8a:3d:2b:ce:8b:01:e2: a2:ff:9a:cb:42:e9:1c:31:fc:2b:6d:cb:e9:b2:2f: 34:fa:fb:f7:9a:e0:b7:de:6d:63:ab:29:1e:6b:4c: e6:f7:a3:5d:35:41:c7:3a:db:99:47:e0:06:69:5a: 8f:c7:4b:f5:20:8a:5e:38:3a:89:f3:41:f7:ae:40: fe:14:51:2d:22:3b:80:0c:6e:e6:fb:f0:33:4a:1d: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:02:2D:71:67:F4:55:26:4A:F8:A1:C4:CE:E2:06:B2:9A:8E:F8:41 X509v3 Authority Key Identifier: keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8c:36:fe:c7:c5:6a:fa:63:76:cb:b8:9c:2f:b3:b2:38:66: e4:4b:73:a1:f6:10:65:3e:57:ac:a0:cd:fa:a0:89:45:b9:5f: 41:72:98:53:c2:19:ac:eb:e9:51:12:91:24:ea:b1:d0:01:0d: b0:cf:ef:27:fe:b1:46:8b:58:c0:7c:b5:ae:ac:46:c0:33:a8: 28:3b:9c:72:b9:ac:ea:20:43:99:a9:38:f0:b9:ba:ec:94:10: 72:7e:42:58:29:5b:8a:18:39:12:84:a0:4e:f7:55:67:fc:08: bc:c5:33:ad:02:bd:77:94:4b:9e:e0:61:40:80:4b:2b:ee:56: b2:2f:54:64:22:fb:db:a6:32:93:c5:55:4a:68:c5:90:a9:30: b9:da:46:66:5a:58:4f:53:d4:fa:68:b5:3d:13:fc:70:20:67: 5e:ca:30:b7:ff:52:bf:d9:db:78:03:f1:b8:0f:97:5e:bc:65: 34:23:d1:08:01:3a:20:a8:7c:a3:7e:d5:7d:3a:43:fb:18:b8: fa:7d:ab:b0:d9:5f:f4:63:b7:d4:cf:bc:e3:4c:3b:81:d3:8e: 84:87:c4:70:eb:c4:3d:e9:1f:27:fa:17:16:c5:de:a9:fb:44: e1:3a:89:ac:63:10:69:23:4a:a0:78:4b:69:f7:4c:46:97:9a: 91:a6:16:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGM7B540/Zq7nC/ya2r7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODBhOTE2NTFlMzc4ZWViZDg3MWQwYWRkNjk1ZTY3N2Jm NTBkMmUwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD EyhkNDAyMmQ3MTY3ZjQ1NTI2NGFmOGExYzRjZWUyMDZiMjlhOGVmODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcLupve+p/dbJ3vrsJZyyg0je8Ro PZng7deFqaKfBKySZZaassIRfHp50YQDimlSvPzPXlAh1z292gmB6hooVYo6i5X5 EdanqkQTaCe652etk7JwKmhI3f1ghmmZeydDaYiTJpkuBFseYS6CcTHjgFOY/ozW Jeadc+2Pu6OO8DXpVqpO1VTUy4jvjJF1qfCUZUxN4dZ3wzaKGwZ/sfD6oH+OQwIF Xjv/uOuT2Yo9K86LAeKi/5rLQukcMfwrbcvpsi80+vv3muC33m1jqykea0zm96Nd NUHHOtuZR+AGaVqPx0v1IIpeODqJ80H3rkD+FFEtIjuADG7m+/AzSh0IqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQCLXFn9FUmSvihxM7iBrKajvhBMB8GA1UdIwQY MBaAFFSAqRZR43juvYcdCt1pXmd79Q0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQt YzlhNWNkOWMxNDRkLzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQtYzlhNWNkOWMxNDRk LzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4w2/sfF avpjdsu4nC+zsjhm5EtzofYQZT5XrKDN+qCJRblfQXKYU8IZrOvpURKRJOqx0AEN sM/vJ/6xRotYwHy1rqxGwDOoKDuccrms6iBDmak48Lm67JQQcn5CWClbihg5EoSg TvdVZ/wIvMUzrQK9d5RLnuBhQIBLK+5Wsi9UZCL726Yyk8VVSmjFkKkwudpGZlpY T1PU+mi1PRP8cCBnXsowt/9Sv9nbeAPxuA+XXrxlNCPRCAE6IKh8o37VfTpD+xi4 +n2rsNlf9GO31M+840w7gdOOhIfEcOvEPekfJ/oXFsXeqftE4TqJrGMQaSNKoHhL afdMRpeakaYWJg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:53 2025 by rpki-client