This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft File: VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json) Hash identifier: B4dI9grOWK6jw5nufga7HNnSTrzbZDaLLCWh3vQQFUA= Subject key identifier: B6:01:C6:46:E3:51:31:98:61:66:8A:D2:0F:59:7B:42:F2:E3:6B:58 Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6 Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6 Certificate serial: 019AF3F7E36E46AAD821A7B35A601517548B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft Manifest number: 093C Signing time: Sat 06 Dec 2025 14:01:40 +0000 Manifest this update: Sat 06 Dec 2025 14:01:40 +0000 Manifest next update: Sun 07 Dec 2025 14:01:40 +0000 Files and hashes: 1: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: pFECnwOHTm4S673iOPq8bbXbgF+1Xhhe9DHwzUPSsio=) 2: b9l5sinWdqskbev4cuOxwSEYd68.roa (hash: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e3:6e:46:aa:d8:21:a7:b3:5a:60:15:17:54:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6 Validity Not Before: Dec 6 14:01:40 2025 GMT Not After : Dec 7 14:01:40 2025 GMT Subject: CN=b601c646e351319861668ad20f597b42f2e36b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:db:3e:79:7d:98:51:40:4f:de:15:17:ff: 28:82:c9:23:00:58:22:a4:6e:4f:e8:dd:23:4d:ed: be:b7:da:51:1d:e7:8a:4d:df:5c:17:95:24:14:e9: d3:4b:66:db:0c:c2:c0:bb:96:65:5b:8f:81:93:b1: a7:cf:ab:bb:e9:78:20:6d:25:c4:5f:09:62:25:c4: f8:93:02:48:c5:73:33:13:12:b5:c5:2a:7a:9c:12: 95:d9:ed:be:c4:f0:d3:ef:7d:35:bd:1e:d3:d9:1c: ed:11:a1:bd:d1:44:b0:6d:58:34:1e:8f:57:a7:f4: 61:7a:b2:ab:30:3d:7f:d5:76:2f:9d:a6:bd:24:fe: 74:59:7d:62:6b:0d:a2:6b:cc:14:10:f0:80:1b:9d: 9b:b5:5d:16:f1:43:a5:18:7b:3f:09:35:7b:2e:8e: 0a:4e:14:5f:a6:12:d4:d7:1a:72:9d:4b:23:53:c6: e1:a1:85:a4:60:54:dd:d4:80:96:a0:9b:ad:e8:57: c6:fc:20:07:87:93:a0:22:ef:ea:91:73:f3:e6:45: 49:36:cf:70:1e:a5:4a:b9:c5:a5:ea:a8:31:8c:a4: 82:c7:8c:16:eb:da:16:4a:7a:86:f5:c3:fa:91:7c: c7:60:a1:ed:b7:ac:6b:c1:40:50:92:0a:0c:71:43: 86:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:01:C6:46:E3:51:31:98:61:66:8A:D2:0F:59:7B:42:F2:E3:6B:58 X509v3 Authority Key Identifier: keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d4:e6:72:53:33:24:b4:16:e9:57:2c:fc:fa:ff:69:71:bb: e1:44:17:dd:38:f9:9e:de:48:b8:35:b5:c8:dc:20:49:aa:7a: dd:90:56:f9:ce:e8:d3:11:12:50:0a:8e:8d:54:0d:d9:87:7f: d6:11:a4:f2:9c:e0:e3:66:6f:60:74:54:59:5c:b6:8a:5f:5f: d3:1e:e4:9b:87:27:bf:0e:a2:49:ba:1a:63:b4:ce:51:21:5c: 50:28:e5:ba:a7:01:79:77:56:3e:0b:f4:f9:ea:3a:f0:29:02: d7:54:f9:9e:f8:43:7c:f7:bb:39:25:84:3d:50:34:5d:6d:6a: 82:2a:84:09:35:e2:9b:0f:44:44:95:ec:29:1c:b8:a0:b7:a9: b9:cb:2a:19:ec:4f:99:67:12:b9:22:71:11:62:28:32:b8:38: af:7e:c1:36:59:bd:b7:fa:ee:74:64:8b:4b:18:8b:71:34:77: c0:89:65:03:56:92:88:a2:a5:47:99:b4:f5:35:d8:3b:58:d2: d3:7c:9e:02:d8:cb:75:b2:d7:21:98:49:fc:18:b3:57:06:87: c3:3b:6a:91:98:a6:68:f0:b8:f2:ca:4a:70:ee:10:f7:e3:ca: 19:e1:55:a5:ec:7d:28:aa:4f:f1:28:be:77:f7:1d:e7:19:a5: 56:e7:40:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+NuRqrYIaezWmAVF1SLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0N2NlNDgzYzgyNDFkN2E0ZTY2MjU5Nzc3OTgwMzViNjM4 NTg2YzYwHhcNMjUxMjA2MTQwMTQwWhcNMjUxMjA3MTQwMTQwWjAzMTEwLwYDVQQD EyhiNjAxYzY0NmUzNTEzMTk4NjE2NjhhZDIwZjU5N2I0MmYyZTM2YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XTbPnl9mFFAT94VF/8ogskjAFgi pG5P6N0jTe2+t9pRHeeKTd9cF5UkFOnTS2bbDMLAu5ZlW4+Bk7Gnz6u76XggbSXE XwliJcT4kwJIxXMzExK1xSp6nBKV2e2+xPDT7301vR7T2RztEaG90USwbVg0Ho9X p/RherKrMD1/1XYvnaa9JP50WX1iaw2ia8wUEPCAG52btV0W8UOlGHs/CTV7Lo4K ThRfphLU1xpynUsjU8bhoYWkYFTd1ICWoJut6FfG/CAHh5OgIu/qkXPz5kVJNs9w HqVKucWl6qgxjKSCx4wW69oWSnqG9cP6kXzHYKHtt6xrwUBQkgoMcUOGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYBxkbjUTGYYWaK0g9Ze0Ly42tYMB8GA1UdIwQY MBaAFFR85IPIJB16TmYll3eYA1tjhYbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkh6a2c4Z2tIWHBPWmlXWGQ1Z0RXMk9GaHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yY2JlMzktNGZhYy00NWFmLTk5ZmQt NTJlYzYxYmM2YzAwLzEvVkh6a2c4Z2tIWHBPWmlXWGQ1Z0RXMk9GaHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yY2JlMzktNGZhYy00NWFmLTk5ZmQtNTJlYzYxYmM2YzAw LzEvVkh6a2c4Z2tIWHBPWmlXWGQ1Z0RXMk9GaHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9TmclMz JLQW6Vcs/Pr/aXG74UQX3Tj5nt5IuDW1yNwgSap63ZBW+c7o0xESUAqOjVQN2Yd/ 1hGk8pzg42ZvYHRUWVy2il9f0x7km4cnvw6iSboaY7TOUSFcUCjluqcBeXdWPgv0 +eo68CkC11T5nvhDfPe7OSWEPVA0XW1qgiqECTXimw9ERJXsKRy4oLepucsqGexP mWcSuSJxEWIoMrg4r37BNlm9t/rudGSLSxiLcTR3wIllA1aSiKKlR5m09TXYO1jS 03yeAtjLdbLXIZhJ/BizVwaHwztqkZimaPC48spKcO4Q9+PKGeFVpex9KKpP8Si+ d/cd5xmlVudA4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:22 2025 by rpki-client