This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json) Hash identifier: PbzgUbCYJYurpJZEUBgyPQZCwtn/7+XWrfQX9LVaRx8= Subject key identifier: 35:14:A8:99:97:FA:32:31:86:B5:87:8B:6A:27:D0:A3:71:DA:8C:31 Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8 Certificate issuer: /CN=5682c32795f04a43209c68cd70ead248945992f8 Certificate serial: 019AF50A36525D736C094E457343AE4BFE06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft Manifest number: 14F4 Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: aL7Vq4F9I50kpmIb9arlIRusBqOqspgU8iwloiR5yY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:36:52:5d:73:6c:09:4e:45:73:43:ae:4b:fe:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8 Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=3514a89997fa323186b5878b6a27d0a371da8c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:cd:61:94:5f:64:1f:ad:d0:82:9d:c1:9b: 61:40:79:40:96:b8:77:d9:c9:c3:95:4c:de:ac:1b: a3:cc:c2:de:b5:07:06:0c:21:4b:f9:0b:01:bc:07: 2f:95:8f:95:0e:dd:74:03:78:58:5c:2c:e5:b2:07: b8:c7:69:96:a2:a0:0a:04:82:06:97:e1:05:d0:54: 0f:41:17:06:7a:1e:2f:3a:d1:b1:ab:5e:51:01:13: 7b:64:e9:a1:f8:f8:98:a8:ea:72:1a:95:1c:84:74: bf:35:0d:a0:e1:9d:1d:df:d1:bd:92:df:dd:01:7b: 2e:4d:65:0f:3a:ac:0e:de:b3:16:e7:73:78:b0:40: e2:c5:e7:4a:73:cd:5e:e2:1f:df:81:42:e8:22:22: 67:28:8f:fd:00:02:ff:0f:e3:cf:6b:5b:2d:e1:57: 24:34:1d:52:29:25:70:cb:87:f9:f8:30:0d:63:19: f8:eb:6a:98:2c:1e:5c:50:8f:83:01:39:01:be:55: 7f:58:6e:75:19:22:30:1f:21:4e:71:0c:76:63:4f: 70:53:92:fc:16:9d:0d:be:a9:1b:bb:1f:9d:8c:b0: 5e:7c:95:aa:a9:80:25:a4:0d:18:95:67:02:09:c2: 2c:5d:c7:ab:c6:74:a2:68:0a:d0:83:d7:39:4b:da: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:14:A8:99:97:FA:32:31:86:B5:87:8B:6A:27:D0:A3:71:DA:8C:31 X509v3 Authority Key Identifier: keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8d:33:d7:51:25:a4:86:15:0c:e8:2d:a8:14:50:9e:49:32: 0d:0b:e2:89:c6:ea:79:c8:25:ce:f6:a5:51:27:21:8b:07:70: 9d:f0:32:7b:77:93:9f:c4:d3:7f:6d:c6:1c:2d:cb:29:95:a3: 65:21:d6:2a:87:6c:02:90:d6:0b:10:c2:73:b9:39:ac:5b:4b: 46:be:10:b3:a7:6e:c6:17:51:f5:11:cf:91:a4:fb:e6:0b:fa: d3:32:8f:93:33:ea:8e:12:b8:78:b5:c6:d2:2b:b3:2c:6a:5e: 46:a2:f2:0b:9a:39:a9:43:2f:be:27:4a:90:9e:d5:15:c9:e7: 31:4e:4d:33:4d:dd:9b:ef:e3:09:f6:c1:39:8a:73:e8:c3:c0: 64:9d:6b:df:21:fb:b6:6c:16:ef:bf:88:30:3d:d1:8e:98:16: 73:81:e9:f2:45:d3:75:b8:f7:e8:1e:4f:0e:d4:c5:f8:49:b5: 0a:08:5f:ef:79:20:5f:e7:6b:e5:c8:3d:48:81:7f:f5:2d:24: ea:67:4d:77:fa:ec:f7:94:1e:e8:d8:0d:e7:5e:86:77:2e:48: 6d:73:c1:d6:f6:05:90:bf:ae:d3:40:ec:39:dc:5d:55:cd:a7: fb:88:09:b5:c6:e0:91:96:41:57:5d:f3:aa:e0:a7:4f:6e:e7: f2:38:ea:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjZSXXNsCU5Fc0OuS/4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ODJjMzI3OTVmMDRhNDMyMDljNjhjZDcwZWFkMjQ4OTQ1 OTkyZjgwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD EygzNTE0YTg5OTk3ZmEzMjMxODZiNTg3OGI2YTI3ZDBhMzcxZGE4YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrnNYZRfZB+t0IKdwZthQHlAlrh3 2cnDlUzerBujzMLetQcGDCFL+QsBvAcvlY+VDt10A3hYXCzlsge4x2mWoqAKBIIG l+EF0FQPQRcGeh4vOtGxq15RARN7ZOmh+PiYqOpyGpUchHS/NQ2g4Z0d39G9kt/d AXsuTWUPOqwO3rMW53N4sEDixedKc81e4h/fgULoIiJnKI/9AAL/D+PPa1st4Vck NB1SKSVwy4f5+DANYxn462qYLB5cUI+DATkBvlV/WG51GSIwHyFOcQx2Y09wU5L8 Fp0Nvqkbux+djLBefJWqqYAlpA0YlWcCCcIsXcerxnSiaArQg9c5S9pnJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUUqJmX+jIxhrWHi2on0KNx2owxMB8GA1UdIwQY MBaAFFaCwyeV8EpDIJxozXDq0kiUWZL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYt OWVhYTc2OWU1YzYyLzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYtOWVhYTc2OWU1YzYy LzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY40z11El pIYVDOgtqBRQnkkyDQviicbqecglzvalUSchiwdwnfAye3eTn8TTf23GHC3LKZWj ZSHWKodsApDWCxDCc7k5rFtLRr4Qs6duxhdR9RHPkaT75gv60zKPkzPqjhK4eLXG 0iuzLGpeRqLyC5o5qUMvvidKkJ7VFcnnMU5NM03dm+/jCfbBOYpz6MPAZJ1r3yH7 tmwW77+IMD3RjpgWc4Hp8kXTdbj36B5PDtTF+Em1Cghf73kgX+dr5cg9SIF/9S0k 6mdNd/rs95Qe6NgN516Gdy5IbXPB1vYFkL+u00DsOdxdVc2n+4gJtcbgkZZBV13z quCnT27n8jjqMQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:17 2025 by rpki-client