This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json) Hash identifier: CAwWWbeIScd/lti2MFMc0Rl685wJLZGEBu9353QPxmM= Subject key identifier: 55:99:EB:55:88:D2:8F:2B:DD:8C:F5:F8:05:BC:66:E4:A0:C1:FE:85 Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Certificate serial: 019AF088D22A8F03F06F44F8C2A600D152F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:01:29 +0000 Manifest this update: Fri 05 Dec 2025 22:01:29 +0000 Manifest next update: Sat 06 Dec 2025 22:01:29 +0000 Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=) 2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: XKqkAKvNEHiKGesrFCpDqQK76L9WzsXz3kwHqylkEPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:d2:2a:8f:03:f0:6f:44:f8:c2:a6:00:d1:52:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Validity Not Before: Dec 5 22:01:29 2025 GMT Not After : Dec 6 22:01:29 2025 GMT Subject: CN=5599eb5588d28f2bdd8cf5f805bc66e4a0c1fe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:12:7d:80:4b:90:d8:2f:13:b6:9b:8d:74: 29:ec:24:4f:8d:84:81:07:46:3f:c1:3b:34:f0:6d: 53:aa:df:e9:d9:6d:45:3e:2f:48:70:ea:c0:99:dc: 47:3f:09:1e:94:a3:c1:9b:e5:f2:21:c3:c9:e8:5d: 80:2f:8d:b5:64:d8:3c:73:64:49:85:15:c7:38:0d: 76:87:90:9a:87:e4:6f:c2:4e:8e:82:c3:b5:74:81: 43:0d:8c:a6:e3:e8:54:0a:e3:b7:bf:a7:9f:69:3d: 75:b1:75:00:88:9d:90:08:c5:cf:e4:a1:9f:c2:e9: 4f:3d:6b:4c:62:54:bd:8a:62:58:9f:3b:bd:60:9d: b6:77:ca:d4:0e:6d:b5:0d:86:1c:b1:c1:ee:ae:0f: 93:b3:33:16:b3:4d:a7:35:55:92:1a:ae:fb:f1:aa: 9c:41:fa:ef:5f:85:d4:f9:d6:68:b0:ea:29:e4:6e: 90:62:95:fc:b3:44:1f:07:c0:1a:6b:6d:84:ed:3a: f0:8b:63:fd:7e:bf:04:e8:7c:2d:86:ef:b7:8b:3d: 02:d7:7f:04:c4:a4:b5:2b:cb:17:c2:15:04:73:33: a4:30:db:f8:49:e1:96:67:1b:2d:ed:5d:65:c7:0d: e2:a1:cf:ce:50:8b:6d:3e:a1:40:81:f5:ef:0f:0d: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:EB:55:88:D2:8F:2B:DD:8C:F5:F8:05:BC:66:E4:A0:C1:FE:85 X509v3 Authority Key Identifier: keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:74:06:fe:14:b2:ee:ec:0d:1d:a7:ab:9c:ba:3c:8b:b1:69: 33:4f:d2:8f:f1:cf:9d:4b:83:cb:a7:ba:ba:0f:57:9f:99:68: 9e:88:50:34:55:1a:00:60:5b:a6:7f:c0:db:94:ed:23:46:c4: bf:4b:e2:59:eb:57:d4:45:33:f5:92:f7:4b:d8:35:d5:a9:ab: c1:28:4f:b7:bf:92:27:37:83:4a:39:ee:18:14:54:7e:91:1a: d4:60:2d:c6:85:45:00:39:b8:54:61:1a:f3:15:93:75:47:76: 74:30:a7:c4:d2:d2:5e:a5:49:c6:8c:b8:01:b2:8f:cc:36:3e: d1:0f:4f:9b:d2:94:ce:fc:93:45:23:c2:9d:c2:79:64:2b:73: a6:06:34:79:21:95:77:16:a2:d7:80:53:67:17:89:9e:8f:72: 31:e0:f3:b9:78:54:04:7a:32:c1:4e:eb:bb:0b:45:35:9c:04: 87:85:7c:80:8e:c3:09:73:15:94:45:5a:64:a3:41:2b:25:1e: a7:7a:a2:ce:ee:d3:e8:ae:26:54:1a:de:cd:13:44:86:76:31: 62:7a:6f:1f:05:6c:2e:1f:19:02:3d:cf:a7:70:06:df:c0:75: 20:a6:ab:58:73:6e:97:47:27:1b:bd:50:d2:d5:b3:ef:50:07: 57:96:7f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiNIqjwPwb0T4wqYA0VL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTlkNTA4NjM2OTA3NmE3OGQ3NjE2MzhiMzJhOGE5Yjhl ZjcwZTcwHhcNMjUxMjA1MjIwMTI5WhcNMjUxMjA2MjIwMTI5WjAzMTEwLwYDVQQD Eyg1NTk5ZWI1NTg4ZDI4ZjJiZGQ4Y2Y1ZjgwNWJjNjZlNGEwYzFmZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx8SfYBLkNgvE7abjXQp7CRPjYSB B0Y/wTs08G1Tqt/p2W1FPi9IcOrAmdxHPwkelKPBm+XyIcPJ6F2AL421ZNg8c2RJ hRXHOA12h5Cah+Rvwk6OgsO1dIFDDYym4+hUCuO3v6efaT11sXUAiJ2QCMXP5KGf wulPPWtMYlS9imJYnzu9YJ22d8rUDm21DYYcscHurg+TszMWs02nNVWSGq778aqc QfrvX4XU+dZosOop5G6QYpX8s0QfB8Aaa22E7Trwi2P9fr8E6Hwthu+3iz0C138E xKS1K8sXwhUEczOkMNv4SeGWZxst7V1lxw3ioc/OUIttPqFAgfXvDw0L0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWZ61WI0o8r3Yz1+AW8ZuSgwf6FMB8GA1UdIwQY MBaAFK7p1QhjaQdqeNdhY4syqKm473DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODct MjAxMzYxOGMwNGZmLzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODctMjAxMzYxOGMwNGZm LzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHQG/hSy 7uwNHaernLo8i7FpM0/Sj/HPnUuDy6e6ug9Xn5lonohQNFUaAGBbpn/A25TtI0bE v0viWetX1EUz9ZL3S9g11amrwShPt7+SJzeDSjnuGBRUfpEa1GAtxoVFADm4VGEa 8xWTdUd2dDCnxNLSXqVJxoy4AbKPzDY+0Q9Pm9KUzvyTRSPCncJ5ZCtzpgY0eSGV dxai14BTZxeJno9yMeDzuXhUBHoywU7ruwtFNZwEh4V8gI7DCXMVlEVaZKNBKyUe p3qizu7T6K4mVBrezRNEhnYxYnpvHwVsLh8ZAj3Pp3AG38B1IKarWHNul0cnG71Q 0tWz71AHV5Z/dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:22 2025 by rpki-client