This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft File: vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json) Hash identifier: BoH8PwiLYVLr91m7/Hou7loAvV5mfBkNxFX4O3Plyy0= Subject key identifier: 9C:95:5F:40:5C:C9:BD:4A:5D:50:F8:7C:9E:21:9D:FE:F3:AB:1E:4A Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65 Certificate issuer: /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165 Certificate serial: 019AF61D0E221DE61F95E7B8AA24AB2D6A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft Manifest number: 149D Signing time: Sun 07 Dec 2025 00:01:30 +0000 Manifest this update: Sun 07 Dec 2025 00:01:30 +0000 Manifest next update: Mon 08 Dec 2025 00:01:30 +0000 Files and hashes: 1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: onNuEy6uCLhILSb+BhFWhb1IN1NsezoQWqBG7n/QW/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1d:0e:22:1d:e6:1f:95:e7:b8:aa:24:ab:2d:6a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165 Validity Not Before: Dec 7 00:01:30 2025 GMT Not After : Dec 8 00:01:30 2025 GMT Subject: CN=9c955f405cc9bd4a5d50f87c9e219dfef3ab1e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:15:3f:0d:a4:b7:7e:60:37:a9:a4:7e:37: 62:e1:f0:90:49:58:27:df:b6:30:31:54:1f:06:14: 0e:d5:db:12:e8:85:14:de:a1:9a:54:3b:73:16:58: ec:a6:1e:95:75:58:dc:79:3f:e7:69:a7:e9:c6:db: 6d:0c:14:68:84:45:f6:20:b7:d9:af:96:12:6e:dc: 1b:92:93:2a:d8:6d:b9:21:ab:51:b1:c5:54:02:86: 5c:f7:97:db:4d:20:fc:38:27:0f:ed:ed:e9:09:4a: 8c:90:c2:80:99:70:31:af:bf:4c:32:5f:a7:42:ae: 41:4c:03:14:12:17:67:2f:ea:9e:07:f3:cd:0a:d4: 47:dc:4d:b8:1b:7a:d1:13:f0:91:88:11:39:ab:9c: ba:87:ae:a8:e2:2e:a5:37:aa:3b:1a:29:81:c5:cf: 21:e9:4e:11:7a:89:ee:d8:58:32:11:f3:9a:ab:95: 46:b4:f5:25:b1:61:f7:2d:a2:78:4e:02:f1:fe:0c: a4:e3:22:18:3b:a4:99:91:be:f9:3c:e7:ab:14:9c: a5:f5:1d:63:3d:b0:ca:53:4f:91:bd:a5:ba:30:1c: 0e:d7:65:c1:ae:81:1c:b0:71:70:ac:ed:37:7f:13: 94:9d:3b:1d:c6:41:0b:a8:fc:bc:16:ba:5d:f8:27: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:95:5F:40:5C:C9:BD:4A:5D:50:F8:7C:9E:21:9D:FE:F3:AB:1E:4A X509v3 Authority Key Identifier: keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:64:87:ed:3d:56:c8:14:85:40:8e:8b:c4:7f:b0:1e:bf:f6: 1a:84:dc:84:89:0f:0d:2e:20:5a:14:cc:2c:df:81:62:d4:47: bc:d1:d6:70:2a:43:fb:b8:41:62:af:8d:84:31:ef:4c:ae:92: cf:6e:e1:54:bc:d1:b4:81:4f:0b:5d:dd:f4:d4:2c:b1:5c:ed: 1c:ee:27:f3:60:bf:f8:1e:33:74:0a:60:65:c9:8d:00:d8:1d: 1b:6b:92:45:2c:78:a0:78:2c:4b:9c:38:46:4a:78:b1:42:5e: f3:fc:c7:48:4e:07:88:fb:8a:8f:c7:28:cd:37:62:75:3d:17: 48:35:3f:cb:ba:df:46:48:bf:44:20:5c:19:fd:ff:28:e5:35: 53:5d:1c:bb:ac:38:ec:d8:4c:22:96:f8:5c:78:34:dd:d5:1e: e3:c4:60:89:42:69:8e:24:76:0a:a9:18:be:6f:78:40:2b:53: 7d:17:f1:39:bd:c8:cf:79:6c:eb:ab:b5:7f:94:a5:9d:dc:a1: ff:64:a9:65:d5:59:bf:52:3b:af:50:f9:8e:f1:af:2c:fe:87: b7:90:22:1d:8b:63:6c:74:89:84:e2:38:3e:43:48:05:d5:2e: 3d:bd:09:4f:54:f1:63:9f:cb:84:f6:bb:6d:e3:13:97:48:0f: 98:9b:8a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HQ4iHeYflee4qiSrLWqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNmQyZGY1NzQwYjU3ZDQ5ZWQzZDJkZTI5YTk4Y2JjNjdm MjAxNjUwHhcNMjUxMjA3MDAwMTMwWhcNMjUxMjA4MDAwMTMwWjAzMTEwLwYDVQQD Eyg5Yzk1NWY0MDVjYzliZDRhNWQ1MGY4N2M5ZTIxOWRmZWYzYWIxZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvYVPw2kt35gN6mkfjdi4fCQSVgn 37YwMVQfBhQO1dsS6IUU3qGaVDtzFljsph6VdVjceT/naafpxtttDBRohEX2ILfZ r5YSbtwbkpMq2G25IatRscVUAoZc95fbTSD8OCcP7e3pCUqMkMKAmXAxr79MMl+n Qq5BTAMUEhdnL+qeB/PNCtRH3E24G3rRE/CRiBE5q5y6h66o4i6lN6o7GimBxc8h 6U4Reonu2FgyEfOaq5VGtPUlsWH3LaJ4TgLx/gyk4yIYO6SZkb75POerFJyl9R1j PbDKU0+RvaW6MBwO12XBroEcsHFwrO03fxOUnTsdxkELqPy8Frpd+CfPNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyVX0Bcyb1KXVD4fJ4hnf7zqx5KMB8GA1UdIwQY MBaAFL5tLfV0C1fUntPS3impjLxn8gFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTkt YmE5MTc4Yzc5ZmM2LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTktYmE5MTc4Yzc5ZmM2 LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWSH7T1W yBSFQI6LxH+wHr/2GoTchIkPDS4gWhTMLN+BYtRHvNHWcCpD+7hBYq+NhDHvTK6S z27hVLzRtIFPC13d9NQssVztHO4n82C/+B4zdApgZcmNANgdG2uSRSx4oHgsS5w4 Rkp4sUJe8/zHSE4HiPuKj8cozTdidT0XSDU/y7rfRki/RCBcGf3/KOU1U10cu6w4 7NhMIpb4XHg03dUe48RgiUJpjiR2CqkYvm94QCtTfRfxOb3Iz3ls66u1f5Slndyh /2SpZdVZv1I7r1D5jvGvLP6Ht5AiHYtjbHSJhOI4PkNIBdUuPb0JT1TxY5/LhPa7 beMTl0gPmJuKew== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:20 2025 by rpki-client