This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json) Hash identifier: H5mVOQ0c+MzvqjtwLEoPnKn64HqLO5GUjXFyrI53sTc= Subject key identifier: 00:90:6B:D6:E0:0D:4B:68:2D:96:7C:74:2A:6D:5A:2E:D3:27:0E:2F Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83 Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783 Certificate serial: 019AF2771BA7FC005AED15AF7B238604E5BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: jLE6QI9og6E2HDguIha5JQBctwj+QV/STX/gQU3VPMc=) 2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1b:a7:fc:00:5a:ed:15:af:7b:23:86:04:e5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=00906bd6e00d4b682d967c742a6d5a2ed3270e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:79:bd:97:39:5b:fd:01:08:89:7a:1c:e9: be:ee:2a:fd:af:cf:c6:80:78:41:43:ca:fa:ce:58: 24:af:ba:73:38:7d:ef:5a:56:f0:83:3c:f2:92:bc: 66:88:db:3b:04:74:e6:09:bb:00:fd:3e:44:32:5a: 7f:bc:e8:69:50:d2:b0:8e:17:d7:a9:13:ee:d2:a4: 1f:9b:fa:57:1c:58:27:c9:72:18:b1:ea:99:a3:23: 4b:2e:a1:71:db:71:39:ce:2b:29:9e:1d:52:a8:c1: 91:9f:f7:f4:98:04:7f:2d:54:6d:3e:a1:e0:a9:ba: a8:5d:43:4f:71:32:77:76:08:45:53:bf:5d:bb:ff: 36:a4:2d:76:61:bb:32:12:1a:26:82:13:02:2d:68: d6:c8:f0:18:58:a5:9c:22:c3:67:3a:9c:a8:0e:5d: 12:0e:f3:64:bb:ee:38:f9:25:f0:bb:a2:1f:48:8c: 5f:17:33:1e:36:14:87:18:f2:e0:b6:71:5a:dc:d5: 8d:64:53:66:c2:99:c8:c8:19:4b:5c:fe:42:4d:93: 3f:b1:7b:1b:e4:3f:a1:7a:a3:85:f3:d1:71:55:f0: 93:03:24:79:88:c3:4c:d1:51:07:29:65:b5:6e:c7: 93:e9:e8:a7:0e:5c:4c:67:d8:54:da:be:17:ea:30: 84:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:6B:D6:E0:0D:4B:68:2D:96:7C:74:2A:6D:5A:2E:D3:27:0E:2F X509v3 Authority Key Identifier: keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c4:ff:ac:88:8d:5a:b0:aa:19:b7:31:db:a2:34:dd:35:9e: ca:bd:04:63:b1:34:a0:78:02:d7:0b:9b:58:ad:95:41:51:0a: 07:36:1f:d6:64:42:8a:3f:24:4c:4b:d4:e6:a5:10:20:c0:df: 66:40:ac:17:32:3a:41:78:dc:51:f0:b3:67:b5:a0:9f:56:78: a6:5f:e6:c9:73:f8:c1:c1:95:ba:e8:0a:b6:fd:f2:18:7f:27: b9:f4:61:a4:ba:95:bb:c2:f5:cc:cd:7f:26:c2:8a:b1:80:85: 47:a6:cb:e0:68:80:70:48:f4:6a:36:9e:a4:84:92:e1:18:60: c2:88:25:b9:d1:13:94:94:d4:43:f8:1d:a3:f4:1b:1c:35:b4: 09:64:3f:02:6e:34:ac:2a:bf:f6:54:4d:21:30:c7:ed:02:9c: e0:dd:2d:73:fa:6b:49:90:b0:ab:29:54:59:ed:1a:d6:b5:55: fb:f5:d1:98:b5:bb:88:b8:1d:4a:47:96:55:11:26:c5:f3:9e: 4e:39:d8:29:1d:16:04:0c:e9:fb:90:be:f9:b9:f3:a5:04:fc: 19:1d:cf:58:69:b4:77:82:79:d6:84:7b:78:c0:a1:61:f3:d3: 00:5c:4e:5b:90:f5:ec:6e:0e:4b:27:a4:b6:c9:dc:1d:50:e2: cb:0e:6c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxun/ABa7RWveyOGBOW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjcyZmYzMTcyOTczYzg2OWE1MjIxMmJmN2NlODAxZTFm OGU3ODMwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD EygwMDkwNmJkNmUwMGQ0YjY4MmQ5NjdjNzQyYTZkNWEyZWQzMjcwZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dZ5vZc5W/0BCIl6HOm+7ir9r8/G gHhBQ8r6zlgkr7pzOH3vWlbwgzzykrxmiNs7BHTmCbsA/T5EMlp/vOhpUNKwjhfX qRPu0qQfm/pXHFgnyXIYseqZoyNLLqFx23E5zispnh1SqMGRn/f0mAR/LVRtPqHg qbqoXUNPcTJ3dghFU79du/82pC12YbsyEhomghMCLWjWyPAYWKWcIsNnOpyoDl0S DvNku+44+SXwu6IfSIxfFzMeNhSHGPLgtnFa3NWNZFNmwpnIyBlLXP5CTZM/sXsb 5D+heqOF89FxVfCTAyR5iMNM0VEHKWW1bseT6einDlxMZ9hU2r4X6jCEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACQa9bgDUtoLZZ8dCptWi7TJw4vMB8GA1UdIwQY MBaAFFQnL/MXKXPIaaUiEr986AHh+OeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYt YTFkOWU3NTRjMTJlLzEvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYtYTFkOWU3NTRjMTJl LzEvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8T/rIiN WrCqGbcx26I03TWeyr0EY7E0oHgC1wubWK2VQVEKBzYf1mRCij8kTEvU5qUQIMDf ZkCsFzI6QXjcUfCzZ7Wgn1Z4pl/myXP4wcGVuugKtv3yGH8nufRhpLqVu8L1zM1/ JsKKsYCFR6bL4GiAcEj0ajaepISS4RhgwogludETlJTUQ/gdo/QbHDW0CWQ/Am40 rCq/9lRNITDH7QKc4N0tc/prSZCwqylUWe0a1rVV+/XRmLW7iLgdSkeWVREmxfOe TjnYKR0WBAzp+5C++bnzpQT8GR3PWGm0d4J51oR7eMChYfPTAFxOW5D17G4OSyek tsncHVDiyw5sSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:02 2025 by rpki-client