This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json) Hash identifier: cPcH/1eDRWq1br6ZmUx6buGWoVixP5jSemfx4jJcSXA= Subject key identifier: 23:B5:3A:B9:F5:20:93:FB:A8:74:CC:EB:03:9A:69:7D:43:CD:17:A3 Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af Certificate serial: 019AF50B234995DE922D46245FF6F882DDBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft Manifest number: 084C Signing time: Sat 06 Dec 2025 19:02:19 +0000 Manifest this update: Sat 06 Dec 2025 19:02:19 +0000 Manifest next update: Sun 07 Dec 2025 19:02:19 +0000 Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: r6IAogFnu4h/HqqTxWGKbvVIRkq2RLKfzFnkRZLBTd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:23:49:95:de:92:2d:46:24:5f:f6:f8:82:dd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af Validity Not Before: Dec 6 19:02:19 2025 GMT Not After : Dec 7 19:02:19 2025 GMT Subject: CN=23b53ab9f52093fba874cceb039a697d43cd17a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:82:04:3d:e5:ce:b1:5c:37:d7:66:20:f7: da:32:1f:84:b8:5d:a3:0b:6e:fc:9c:ec:22:aa:ef: df:39:7c:2a:92:59:d5:cc:67:89:5a:73:54:c7:6c: 09:2e:1e:d9:00:d5:64:20:c2:ed:61:6c:a2:7e:76: 9b:31:8c:1c:49:03:ea:dd:d7:c5:64:1d:3d:46:23: 07:32:16:48:a7:41:87:a4:26:91:f1:35:1c:d5:87: 92:04:23:35:4b:03:5d:42:e3:59:c6:b1:fe:93:e0: 02:7b:87:8c:28:75:33:60:92:f0:2c:7e:31:a1:64: e7:c7:89:7b:b8:cc:07:79:e2:da:e8:08:ad:11:87: 1c:0e:81:97:a5:dc:2e:ef:d3:95:68:70:2f:ef:03: 85:76:ac:f2:bd:d1:cb:80:66:74:9d:0e:13:2c:e7: dd:45:6f:65:b0:d3:a1:83:a1:75:b8:4f:2d:07:7a: 53:00:f4:ae:2b:70:89:6d:93:b9:ff:73:b5:ff:45: 7f:8e:05:6f:bf:80:17:f6:0d:86:1b:d6:e0:1d:dd: d9:a8:5d:5a:85:64:06:34:60:82:b3:4e:b2:13:a1: 45:b0:e7:30:d4:8f:e6:3d:8e:22:77:68:00:e9:66: c4:c4:78:f1:e2:ad:d2:2f:44:10:c7:10:c0:f5:03: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B5:3A:B9:F5:20:93:FB:A8:74:CC:EB:03:9A:69:7D:43:CD:17:A3 X509v3 Authority Key Identifier: keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8c:98:1a:f1:a1:b5:2e:e6:b4:a7:6e:1c:e5:d5:d8:79:dd: 84:3b:51:89:7e:f0:8c:8b:80:8c:84:29:62:e8:67:a7:b2:e8: d5:b5:79:2d:48:17:14:1a:2d:ce:c7:30:58:47:bb:b3:c6:f3: 0c:70:3f:aa:9b:a1:c1:b5:72:c8:22:39:80:68:d0:60:6c:d1: 5a:c0:2f:d5:bf:07:15:31:75:67:e9:a9:60:e3:ca:05:d1:0a: f7:60:38:87:d3:26:81:68:65:28:00:75:8a:6c:a5:24:f5:c7: d9:db:a4:6e:51:0f:b0:13:3c:d0:90:44:cd:06:ed:23:27:02: df:4f:8e:a9:f1:32:9a:07:5f:4b:c3:cf:e7:62:22:7c:f2:22: d2:3c:77:3e:97:96:5b:de:4c:b1:dc:61:b6:90:b9:50:c3:59: 43:89:db:a3:66:ff:2b:65:64:05:9e:d3:07:be:bd:ef:7d:11: 84:b9:54:9b:f5:3f:89:df:73:39:03:2c:6f:b8:3a:44:33:7e: 2e:75:69:f2:9b:8f:b9:ee:6b:02:fb:c8:e6:4c:82:14:21:d6: 1e:97:d4:ad:95:da:ab:54:b6:61:24:a8:d1:4f:4e:e0:8d:c8: 26:06:33:22:4f:6c:ec:fa:86:57:c0:77:24:32:63:f6:80:6b: e7:05:5c:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CyNJld6SLUYkX/b4gt27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTU4MzZlY2Q2NTUzMTNkZWExOTcxNmZmNmI5NmJkMGU2 OTkxYWYwHhcNMjUxMjA2MTkwMjE5WhcNMjUxMjA3MTkwMjE5WjAzMTEwLwYDVQQD EygyM2I1M2FiOWY1MjA5M2ZiYTg3NGNjZWIwMzlhNjk3ZDQzY2QxN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJuCBD3lzrFcN9dmIPfaMh+EuF2j C278nOwiqu/fOXwqklnVzGeJWnNUx2wJLh7ZANVkIMLtYWyifnabMYwcSQPq3dfF ZB09RiMHMhZIp0GHpCaR8TUc1YeSBCM1SwNdQuNZxrH+k+ACe4eMKHUzYJLwLH4x oWTnx4l7uMwHeeLa6AitEYccDoGXpdwu79OVaHAv7wOFdqzyvdHLgGZ0nQ4TLOfd RW9lsNOhg6F1uE8tB3pTAPSuK3CJbZO5/3O1/0V/jgVvv4AX9g2GG9bgHd3ZqF1a hWQGNGCCs06yE6FFsOcw1I/mPY4id2gA6WbExHjx4q3SL0QQxxDA9QPsNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO1Orn1IJP7qHTM6wOaaX1DzRejMB8GA1UdIwQY MBaAFLxVg27NZVMT3qGXFv9rlr0OaZGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNzI1ZjgtOWQwYS00OWFkLWIzMmYt ZjMwMmUyYWU5ZDNjLzEvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kNzI1ZjgtOWQwYS00OWFkLWIzMmYtZjMwMmUyYWU5ZDNj LzEvdkZXRGJzMWxVeFBlb1pjV18ydVd2UTVwa2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoyYGvGh tS7mtKduHOXV2HndhDtRiX7wjIuAjIQpYuhnp7Lo1bV5LUgXFBotzscwWEe7s8bz DHA/qpuhwbVyyCI5gGjQYGzRWsAv1b8HFTF1Z+mpYOPKBdEK92A4h9MmgWhlKAB1 imylJPXH2dukblEPsBM80JBEzQbtIycC30+OqfEymgdfS8PP52IifPIi0jx3PpeW W95MsdxhtpC5UMNZQ4nbo2b/K2VkBZ7TB769730RhLlUm/U/id9zOQMsb7g6RDN+ LnVp8puPue5rAvvI5kyCFCHWHpfUrZXaq1S2YSSo0U9O4I3IJgYzIk9s7PqGV8B3 JDJj9oBr5wVcdg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:43 2025 by rpki-client