This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft File: _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json) Hash identifier: 0pUKiCZvRMMUaO4OMo9ypZQCtVkJe11y0Vh/qeJp2S4= Subject key identifier: B8:FF:35:A9:0F:31:F7:2A:6D:5A:46:09:97:AC:2B:C5:B3:1E:FB:AB Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15 Certificate issuer: /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515 Certificate serial: 019AF1D23FFF5ECBEAC8FEDA190AE42A39D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft Manifest number: 0C44 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: n7aqlZQP4vduFXTEucOlOlFqjKbWmK11pCNnxZk/rF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3f:ff:5e:cb:ea:c8:fe:da:19:0a:e4:2a:39:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=b8ff35a90f31f72a6d5a460997ac2bc5b31efbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:e5:b2:df:c2:aa:04:fd:0a:2a:fb:fd:7c: cc:0d:2d:50:45:fd:bc:8d:96:39:43:33:c3:1f:28: a6:db:4d:b3:e5:43:6f:cb:61:9c:89:51:9b:08:fb: e0:a2:b2:ae:28:32:8e:eb:b0:62:e0:39:5f:46:e1: f3:62:55:b7:95:0f:bf:68:e5:39:c7:b5:c2:9c:f9: 43:18:ca:f6:88:06:53:89:1f:21:a0:64:74:f6:12: 4a:81:2a:90:63:19:a1:8b:8d:69:8a:19:ee:1a:c5: 88:38:3e:a9:ba:5b:bf:44:cf:3a:d5:1f:c4:40:35: 15:1f:51:4a:7e:97:f6:d3:c9:da:12:57:c0:c1:ac: 16:f2:dc:99:b5:a7:ab:30:3c:f3:79:5b:7c:c4:39: f5:1e:3c:b5:1e:f0:77:a4:12:19:40:fc:8b:a4:52: 91:0d:7b:31:ca:fe:87:77:6c:55:a6:30:aa:f2:50: d7:04:4e:3e:9f:7d:b3:1b:f4:4c:b7:f8:cd:9a:af: 2a:4a:23:28:2f:79:3a:38:6f:63:4b:14:27:42:32: 0e:53:38:b5:27:f9:40:10:d0:f1:10:43:0a:23:3e: e2:9e:34:06:ee:1e:4f:63:78:eb:c7:0b:91:61:5d: 24:a9:82:7d:be:9d:78:59:c0:8d:4b:c5:02:34:5d: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:35:A9:0F:31:F7:2A:6D:5A:46:09:97:AC:2B:C5:B3:1E:FB:AB X509v3 Authority Key Identifier: keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6c:70:ba:df:2d:76:ca:c3:b2:a0:ef:7e:aa:ed:58:d9:9a: 42:83:33:0a:5b:b5:39:73:e6:d9:7c:04:87:b0:d1:49:fa:e5: ca:d2:f9:2f:e4:09:41:57:66:1a:00:2e:28:ea:1c:89:46:b5: 4a:91:68:90:71:05:2d:3d:19:5d:85:92:cf:fb:dc:75:65:0c: b4:2e:33:d5:27:c9:48:dc:f2:c8:21:0b:91:6c:98:a1:a2:88: 51:dd:b1:c1:45:69:4f:d3:73:2a:46:50:33:5e:8b:75:75:af: 54:cb:d3:d5:57:fe:a2:bb:68:3a:ae:f2:04:ef:49:2b:63:45: ed:bc:ea:81:4e:6a:ac:56:a8:2f:9d:1c:38:c4:f7:61:5c:48: 2d:9c:b5:58:e3:4e:49:d1:a3:3a:69:89:6a:7e:2f:07:1e:2c: 28:91:59:29:c3:c3:5b:b8:02:9e:9c:1b:50:4e:70:d5:00:89: 72:6d:43:d1:49:7d:06:5d:e1:4e:43:65:7e:e2:07:53:77:7a: 9c:ec:ce:05:1f:39:b9:2e:d3:8c:0c:f7:99:2e:35:a1:db:21: f3:11:4a:31:8f:27:25:98:7f:4e:a3:c4:e5:b2:1f:7a:99:9f: 00:aa:98:5b:49:b3:87:f5:c5:28:23:51:f3:6c:d0:30:14:28: 4a:e0:aa:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j//XsvqyP7aGQrkKjnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNTlkMzU2MWZmOGFkZGI1ZjFiMGMzNmEzZGQyNTY4Yjc0 Y2E1MTUwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EyhiOGZmMzVhOTBmMzFmNzJhNmQ1YTQ2MDk5N2FjMmJjNWIzMWVmYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQLlst/CqgT9Cir7/XzMDS1QRf28 jZY5QzPDHyim202z5UNvy2GciVGbCPvgorKuKDKO67Bi4DlfRuHzYlW3lQ+/aOU5 x7XCnPlDGMr2iAZTiR8hoGR09hJKgSqQYxmhi41pihnuGsWIOD6pulu/RM861R/E QDUVH1FKfpf208naElfAwawW8tyZtaerMDzzeVt8xDn1Hjy1HvB3pBIZQPyLpFKR DXsxyv6Hd2xVpjCq8lDXBE4+n32zG/RMt/jNmq8qSiMoL3k6OG9jSxQnQjIOUzi1 J/lAENDxEEMKIz7injQG7h5PY3jrxwuRYV0kqYJ9vp14WcCNS8UCNF3CXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj/NakPMfcqbVpGCZesK8WzHvurMB8GA1UdIwQY MBaAFP1Z01Yf+K3bXxsMNqPdJWi3TKUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZjJiMzYtNmU4Yi00NjAxLWIwNzQt ZDYxMmEyMWViZWFlLzEvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9hZjJiMzYtNmU4Yi00NjAxLWIwNzQtZDYxMmEyMWViZWFl LzEvX1ZuVFZoXzRyZHRmR3d3Mm85MGxhTGRNcFJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmxwut8t dsrDsqDvfqrtWNmaQoMzClu1OXPm2XwEh7DRSfrlytL5L+QJQVdmGgAuKOociUa1 SpFokHEFLT0ZXYWSz/vcdWUMtC4z1SfJSNzyyCELkWyYoaKIUd2xwUVpT9NzKkZQ M16LdXWvVMvT1Vf+ortoOq7yBO9JK2NF7bzqgU5qrFaoL50cOMT3YVxILZy1WONO SdGjOmmJan4vBx4sKJFZKcPDW7gCnpwbUE5w1QCJcm1D0Ul9Bl3hTkNlfuIHU3d6 nOzOBR85uS7TjAz3mS41odsh8xFKMY8nJZh/TqPE5bIfepmfAKqYW0mzh/XFKCNR 82zQMBQoSuCqcg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:53 2025 by rpki-client