This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft File: vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft (raw, json) Hash identifier: 2V6/fRh4R0w9+2Lu+5O+TukZlysz0NvyZABaF0Jcr88= Subject key identifier: 51:72:FC:AE:7D:A7:8E:13:3E:5A:20:D3:F9:75:DE:72:DC:B0:8C:E3 Authority key identifier: BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08 Certificate issuer: /CN=beffadb46a30360bb84f80701bcafb470f064208 Certificate serial: 019AF540D56282B708073866A180C1CD0FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft Manifest number: 04F2 Signing time: Sat 06 Dec 2025 20:00:58 +0000 Manifest this update: Sat 06 Dec 2025 20:00:58 +0000 Manifest next update: Sun 07 Dec 2025 20:00:58 +0000 Files and hashes: 1: vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl (hash: IZ/U9Pacn640PRINbRudMqm0xAIGCTKK9jf6kICJy+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d5:62:82:b7:08:07:38:66:a1:80:c1:cd:0f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beffadb46a30360bb84f80701bcafb470f064208 Validity Not Before: Dec 6 20:00:58 2025 GMT Not After : Dec 7 20:00:58 2025 GMT Subject: CN=5172fcae7da78e133e5a20d3f975de72dcb08ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1d:02:dc:6c:04:52:e7:47:1e:3c:cd:82:8e: e1:c9:a0:6e:00:55:1f:40:ea:32:aa:d2:00:69:89: ae:1e:92:73:a3:ad:f1:0e:60:cd:25:ce:9e:17:f4: 2b:e5:b8:b6:20:92:57:17:d7:4c:ae:6b:37:00:83: 16:a4:48:fb:45:63:84:af:2c:67:2c:af:2e:96:6b: d1:81:06:4f:92:84:c7:37:91:42:2b:50:a5:41:8a: 07:22:9d:d5:5b:22:9c:92:12:ee:22:39:a0:c5:a1: 00:9d:3a:a2:7f:f2:d7:a3:75:0c:8b:90:d5:4e:3f: ee:6a:ab:94:07:16:7e:d4:59:aa:c1:68:cb:8a:b5: 24:f7:20:b1:09:ab:f0:24:26:26:43:3b:41:1d:d8: ec:21:48:97:0f:18:b1:3f:f3:cf:46:e9:5a:73:13: b1:4e:43:8e:ee:dd:47:c5:fc:9c:a2:f7:fb:21:b4: 35:5e:c8:e3:6d:4b:9a:81:27:47:63:01:e1:4a:2c: 54:84:06:ed:4a:88:11:a1:8d:9f:9b:6c:a3:12:d4: 4a:f9:ef:9f:8c:0c:cd:c5:1f:5e:0b:c8:eb:f7:40: 2d:79:42:6e:66:c6:d6:fa:cf:8c:dc:35:99:48:14: a3:e7:3e:7e:41:bb:e9:29:e9:11:bb:7f:83:4b:7b: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:72:FC:AE:7D:A7:8E:13:3E:5A:20:D3:F9:75:DE:72:DC:B0:8C:E3 X509v3 Authority Key Identifier: keyid:BE:FF:AD:B4:6A:30:36:0B:B8:4F:80:70:1B:CA:FB:47:0F:06:42:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vv-ttGowNgu4T4BwG8r7Rw8GQgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3444d9-3dc8-4729-abd7-865d0cd23a1a/1/vv-ttGowNgu4T4BwG8r7Rw8GQgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ec:55:00:4e:a2:1d:8d:77:59:19:70:7d:92:e0:ca:61:8b: d2:70:ed:7b:72:e9:02:1b:75:d2:4c:75:dd:9a:37:23:30:37: 88:42:f0:df:be:96:9d:f9:19:5e:e3:e3:d0:e9:f0:5b:8d:04: fa:30:d0:42:9c:b0:7b:c4:e9:b7:8a:c2:95:b8:0f:54:b0:49: 38:cd:88:d9:cf:94:3d:9f:9f:e4:3e:78:29:73:93:5e:54:a3: 2d:71:98:af:d5:64:66:20:45:6c:22:d6:04:89:7a:15:7e:85: a3:16:d6:e8:5d:be:ca:0a:7d:20:5f:25:b2:53:4e:06:a3:9e: 57:a3:9e:7a:19:56:d9:4a:18:7e:9c:e8:ec:92:b1:44:ad:70: b2:67:83:5e:47:0c:ee:a2:ff:7a:0f:df:dd:d0:c4:ac:16:63: 99:84:9b:f0:ea:08:f4:1c:13:ce:a6:2d:3b:a5:48:86:fd:0d: c6:01:d0:bf:27:90:31:81:47:ec:2b:7b:77:4a:50:a9:57:e4: 6a:56:a4:85:ee:2e:86:93:b8:11:e6:b5:99:71:2e:10:29:f8: df:7c:18:4c:cf:60:ec:53:a9:8c:af:16:dc:51:ad:a6:58:c7: 5e:3c:a6:f6:b3:77:4e:c4:29:97:f0:44:f2:72:48:58:09:10: 96:74:92:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNVigrcIBzhmoYDBzQ+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZmZhZGI0NmEzMDM2MGJiODRmODA3MDFiY2FmYjQ3MGYw NjQyMDgwHhcNMjUxMjA2MjAwMDU4WhcNMjUxMjA3MjAwMDU4WjAzMTEwLwYDVQQD Eyg1MTcyZmNhZTdkYTc4ZTEzM2U1YTIwZDNmOTc1ZGU3MmRjYjA4Y2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B0C3GwEUudHHjzNgo7hyaBuAFUf QOoyqtIAaYmuHpJzo63xDmDNJc6eF/Qr5bi2IJJXF9dMrms3AIMWpEj7RWOEryxn LK8ulmvRgQZPkoTHN5FCK1ClQYoHIp3VWyKckhLuIjmgxaEAnTqif/LXo3UMi5DV Tj/uaquUBxZ+1FmqwWjLirUk9yCxCavwJCYmQztBHdjsIUiXDxixP/PPRulacxOx TkOO7t1Hxfycovf7IbQ1XsjjbUuagSdHYwHhSixUhAbtSogRoY2fm2yjEtRK+e+f jAzNxR9eC8jr90AteUJuZsbW+s+M3DWZSBSj5z5+QbvpKekRu3+DS3tIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFy/K59p44TPlog0/l13nLcsIzjMB8GA1UdIwQY MBaAFL7/rbRqMDYLuE+AcBvK+0cPBkIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnYtdHRHb3dOZ3U0VDRCd0c4cjdSdzhHUWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zNDQ0ZDktM2RjOC00NzI5LWFiZDct ODY1ZDBjZDIzYTFhLzEvdnYtdHRHb3dOZ3U0VDRCd0c4cjdSdzhHUWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zNDQ0ZDktM2RjOC00NzI5LWFiZDctODY1ZDBjZDIzYTFh LzEvdnYtdHRHb3dOZ3U0VDRCd0c4cjdSdzhHUWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHexVAE6i HY13WRlwfZLgymGL0nDte3LpAht10kx13Zo3IzA3iELw376WnfkZXuPj0OnwW40E +jDQQpywe8Tpt4rClbgPVLBJOM2I2c+UPZ+f5D54KXOTXlSjLXGYr9VkZiBFbCLW BIl6FX6FoxbW6F2+ygp9IF8lslNOBqOeV6OeehlW2UoYfpzo7JKxRK1wsmeDXkcM 7qL/eg/f3dDErBZjmYSb8OoI9BwTzqYtO6VIhv0NxgHQvyeQMYFH7Ct7d0pQqVfk alakhe4uhpO4Eea1mXEuECn433wYTM9g7FOpjK8W3FGtpljHXjym9rN3TsQpl/BE 8nJIWAkQlnSSWw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:57 2025 by rpki-client