This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft File: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json) Hash identifier: 3tYo2wtNogzcbmyeMbOwNaTWQYykM5QdBL791hHuE6w= Subject key identifier: 76:63:49:1C:33:D0:BF:8D:F8:B0:5B:8C:84:84:58:DA:DA:E1:59:D7 Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83 Certificate issuer: /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583 Certificate serial: 019AF1D1A2623323175BE7359F047AB7BB17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft Manifest number: 0ACA Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: nkP/LKAe6Vgy6uKpg3DzHVzMqfdwIPeZ6HAwrgO0bK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a2:62:33:23:17:5b:e7:35:9f:04:7a:b7:bb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583 Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=7663491c33d0bf8df8b05b8c848458dadae159d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:c2:a6:84:01:08:eb:61:86:38:9f:91:d0: fd:c2:50:d7:5f:c1:b1:6b:93:7a:7d:a8:09:73:f7: 60:ac:01:5b:51:f1:79:bc:80:76:46:95:65:8d:42: 57:c0:86:c9:d3:70:9c:db:93:97:d5:90:ca:3a:47: 4c:5e:1b:1a:4d:a6:f1:c5:8c:87:a6:37:35:c4:95: d6:50:ee:89:5c:b6:52:8d:80:d0:e5:0f:97:cc:a3: 2d:8f:5a:bf:7d:82:b3:49:ba:f8:be:bf:1b:b0:75: 39:7b:1d:6f:fa:08:42:fb:02:99:2f:61:66:49:d5: a6:d2:84:92:81:e3:73:2f:93:ef:d2:7d:b3:f6:32: 5f:28:96:9b:d3:6a:90:60:47:f2:d0:42:25:7c:d6: e9:b2:37:48:47:e7:b5:f8:b6:58:61:b6:62:e2:6d: 6d:70:4a:d0:bd:ca:0f:e6:a2:e3:f5:cc:f3:7a:39: 61:86:4f:0e:8c:9b:eb:de:34:6a:a7:fe:06:c8:c0: 82:67:86:01:d4:0c:eb:29:ff:80:1a:7b:76:3e:6c: d8:d8:b5:0a:43:ff:a5:5b:92:ea:af:cf:42:25:da: 7b:42:a0:21:b9:c6:ad:35:2e:c9:b4:33:bc:6d:28: af:9c:86:71:56:e9:0a:9d:fa:29:e8:bc:4c:6d:59: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:63:49:1C:33:D0:BF:8D:F8:B0:5B:8C:84:84:58:DA:DA:E1:59:D7 X509v3 Authority Key Identifier: keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4a:db:f3:d3:00:41:ba:d0:40:fe:12:c0:e9:f4:30:d5:b5: 7f:a7:63:f1:15:01:5a:9f:0f:b6:40:3f:21:1d:21:2b:2e:d0: d4:f2:f7:c9:8f:0a:b8:8b:bb:47:93:11:68:dc:51:b9:26:e9: 63:4d:7b:ba:e7:38:5b:47:e0:aa:e4:40:79:dd:12:98:5e:36: e3:c3:8b:1d:34:8e:74:84:09:b1:b1:85:d2:e8:e9:61:ef:f3: bf:50:0c:ec:00:5a:77:37:69:68:59:c9:9f:73:34:62:66:67: 09:4d:8b:d6:67:b0:39:09:09:e5:a9:66:43:3c:63:65:e0:c6: 5c:95:80:82:69:aa:b5:bf:21:72:9b:b0:f9:24:3b:b9:6c:46: 9d:de:a1:1f:07:5d:a8:3b:b0:d4:70:78:ba:97:98:c9:75:0e: 41:0c:11:6a:e9:60:51:23:06:43:af:b3:df:58:fa:8c:d0:0e: 10:22:81:22:33:c4:83:dd:af:c6:d3:dc:ef:0e:d5:c4:4e:75: 57:6f:77:ff:b0:68:db:13:6b:9a:bd:1a:bd:77:4d:b4:f2:3f: 62:47:51:14:82:d0:49:2f:8e:0e:cf:d7:9d:fb:58:c3:35:0b: 89:33:7e:c0:75:2a:73:4b:16:b8:b4:72:ca:10:99:1e:d4:02: 9e:88:e1:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aJiMyMXW+c1nwR6t7sXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzlhMTgzZWUzZmMwYTM1NzZjMWYwY2EzY2M5OTc3MzA5 ZTQ1ODMwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD Eyg3NjYzNDkxYzMzZDBiZjhkZjhiMDViOGM4NDg0NThkYWRhZTE1OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA7CpoQBCOthhjifkdD9wlDXX8Gx a5N6fagJc/dgrAFbUfF5vIB2RpVljUJXwIbJ03Cc25OX1ZDKOkdMXhsaTabxxYyH pjc1xJXWUO6JXLZSjYDQ5Q+XzKMtj1q/fYKzSbr4vr8bsHU5ex1v+ghC+wKZL2Fm SdWm0oSSgeNzL5Pv0n2z9jJfKJab02qQYEfy0EIlfNbpsjdIR+e1+LZYYbZi4m1t cErQvcoP5qLj9czzejlhhk8OjJvr3jRqp/4GyMCCZ4YB1AzrKf+AGnt2PmzY2LUK Q/+lW5Lqr89CJdp7QqAhucatNS7JtDO8bSivnIZxVukKnfop6LxMbVl3pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZjSRwz0L+N+LBbjISEWNra4VnXMB8GA1UdIwQY MBaAFFXJoYPuP8CjV2wfDKPMmXcwnkWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNtaGctNF93S05YYkI4TW84eVpkekNlUllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82OGMwNmEtNjkzYy00OTM4LTg3Njct ZDI2ODdkNGM5ZWZhLzEvVmNtaGctNF93S05YYkI4TW84eVpkekNlUllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82OGMwNmEtNjkzYy00OTM4LTg3NjctZDI2ODdkNGM5ZWZh LzEvVmNtaGctNF93S05YYkI4TW84eVpkekNlUllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUrb89MA QbrQQP4SwOn0MNW1f6dj8RUBWp8PtkA/IR0hKy7Q1PL3yY8KuIu7R5MRaNxRuSbp Y017uuc4W0fgquRAed0SmF4248OLHTSOdIQJsbGF0ujpYe/zv1AM7ABadzdpaFnJ n3M0YmZnCU2L1mewOQkJ5almQzxjZeDGXJWAgmmqtb8hcpuw+SQ7uWxGnd6hHwdd qDuw1HB4upeYyXUOQQwRaulgUSMGQ6+z31j6jNAOECKBIjPEg92vxtPc7w7VxE51 V293/7Bo2xNrmr0avXdNtPI/YkdRFILQSS+ODs/XnftYwzULiTN+wHUqc0sWuLRy yhCZHtQCnojhbA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:07 2025 by rpki-client