This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft File: VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json) Hash identifier: eBfiIQX69bG1BMHatqhRah1qf9CcVZn+prSNMPIL+6E= Subject key identifier: AF:C6:1B:CF:18:08:57:ED:E0:A2:63:3F:F5:C8:D5:C8:83:37:A8:DD Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48 Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548 Certificate serial: 019AF50A54C83E2948DDE9F26E7D40EB153D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft Manifest number: 0C59 Signing time: Sat 06 Dec 2025 19:01:26 +0000 Manifest this update: Sat 06 Dec 2025 19:01:26 +0000 Manifest next update: Sun 07 Dec 2025 19:01:26 +0000 Files and hashes: 1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: Om6CcNKpa2rXS1y7Hl4zbXSamjRqzTUwC7YE/c1c084=) 2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:54:c8:3e:29:48:dd:e9:f2:6e:7d:40:eb:15:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548 Validity Not Before: Dec 6 19:01:26 2025 GMT Not After : Dec 7 19:01:26 2025 GMT Subject: CN=afc61bcf180857ede0a2633ff5c8d5c88337a8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:2a:31:17:5e:6b:83:fd:dd:f8:ee:63:d7: a4:af:18:77:ff:47:e9:9a:2e:4f:a0:e9:a4:2d:8f: 6d:d4:09:3e:22:38:23:66:70:56:83:5a:7d:82:45: 82:20:f6:e4:33:3d:e9:5c:8b:1b:ba:5b:c9:2e:ed: 8b:b8:0c:34:84:db:38:52:52:bd:4e:ca:36:97:6c: c6:3c:3d:eb:92:4f:ef:ac:60:ca:ea:47:34:4e:a3: f2:37:8b:25:c4:3a:ef:ca:2e:40:aa:f2:3b:f9:33: 51:66:9a:a3:16:d8:57:85:42:56:cf:e5:01:b3:d4: 77:c3:f0:17:8b:10:70:6e:22:ae:64:81:56:bd:b8: ce:31:65:70:7b:57:56:84:ab:aa:68:f5:7c:03:8d: 62:36:c1:40:c0:54:03:42:9f:09:2b:3f:28:44:43: 9e:a3:06:e1:af:3d:75:be:fd:0f:5d:ff:a2:3a:98: 3f:8a:c1:ce:e7:35:f3:c2:55:ac:02:16:21:0c:a1: eb:7a:b1:77:33:56:56:f4:b8:d7:93:97:f9:8e:11: a9:0b:9c:af:be:1c:39:80:7a:31:ef:38:48:36:5d: 14:fa:90:74:1e:85:0c:71:07:2c:b8:ad:cf:6d:e5: 6a:04:a9:3a:71:f3:2d:b1:80:d7:21:37:a1:42:82: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C6:1B:CF:18:08:57:ED:E0:A2:63:3F:F5:C8:D5:C8:83:37:A8:DD X509v3 Authority Key Identifier: keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:38:1d:e6:23:60:08:48:4c:6b:92:ca:aa:89:6d:fc:c1:e8: 3d:7f:97:39:c9:23:a9:12:2c:9c:3a:b7:be:e6:e3:f8:ac:6e: ba:b4:43:49:86:54:72:3f:15:d2:53:73:73:32:5c:2b:f4:a2: 6f:35:3f:b4:2a:22:38:91:6b:2c:4b:3b:0a:51:1f:5b:76:d0: a6:30:6b:df:ed:ef:db:42:64:2d:c9:fb:93:5b:f2:74:0f:66: 1a:30:ed:7c:fa:7b:0f:2a:01:48:16:76:68:0e:02:f6:01:3a: 42:6c:53:21:0d:d7:38:e5:21:2f:52:be:a5:91:7a:07:5f:5e: 74:ff:62:2f:48:7c:26:61:2a:3a:ae:96:b4:15:01:56:26:44: b2:92:57:8e:05:40:68:50:25:05:72:8b:99:40:1b:fe:48:88: 67:c2:a5:8f:0e:a3:25:6f:b3:54:84:96:bf:eb:ab:9a:a2:ba: ca:7e:d3:b0:eb:d3:11:bb:23:61:ff:d6:88:04:48:e2:e2:c1: ec:96:97:fe:ea:ba:40:16:ec:1b:45:70:d3:93:18:2e:91:27: 4f:be:8d:0b:6f:c4:d0:ca:29:4b:8f:ec:6a:dc:e1:47:0e:29: 4f:bc:ef:98:59:04:66:ac:45:24:16:0f:2d:87:50:fb:82:c6: b0:07:7c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClTIPilI3enybn1A6xU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGNkZDE3MzJlNTY0M2ExNWVlZDllZTc3ZTEzOTRiODAy NDI1NDgwHhcNMjUxMjA2MTkwMTI2WhcNMjUxMjA3MTkwMTI2WjAzMTEwLwYDVQQD EyhhZmM2MWJjZjE4MDg1N2VkZTBhMjYzM2ZmNWM4ZDVjODgzMzdhOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3cqMRdea4P93fjuY9ekrxh3/0fp mi5PoOmkLY9t1Ak+IjgjZnBWg1p9gkWCIPbkMz3pXIsbulvJLu2LuAw0hNs4UlK9 Tso2l2zGPD3rkk/vrGDK6kc0TqPyN4slxDrvyi5AqvI7+TNRZpqjFthXhUJWz+UB s9R3w/AXixBwbiKuZIFWvbjOMWVwe1dWhKuqaPV8A41iNsFAwFQDQp8JKz8oREOe owbhrz11vv0PXf+iOpg/isHO5zXzwlWsAhYhDKHrerF3M1ZW9LjXk5f5jhGpC5yv vhw5gHox7zhINl0U+pB0HoUMcQcsuK3PbeVqBKk6cfMtsYDXITehQoLv3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/GG88YCFft4KJjP/XI1ciDN6jdMB8GA1UdIwQY MBaAFFcM3Rcy5WQ6Fe7Z7nfhOUuAJCVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEt MzhhNWM5MTA1Y2M1LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEtMzhhNWM5MTA1Y2M1 LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDgd5iNg CEhMa5LKqolt/MHoPX+XOckjqRIsnDq3vubj+KxuurRDSYZUcj8V0lNzczJcK/Si bzU/tCoiOJFrLEs7ClEfW3bQpjBr3+3v20JkLcn7k1vydA9mGjDtfPp7DyoBSBZ2 aA4C9gE6QmxTIQ3XOOUhL1K+pZF6B19edP9iL0h8JmEqOq6WtBUBViZEspJXjgVA aFAlBXKLmUAb/kiIZ8Kljw6jJW+zVISWv+urmqK6yn7TsOvTEbsjYf/WiARI4uLB 7JaX/uq6QBbsG0Vw05MYLpEnT76NC2/E0MopS4/satzhRw4pT7zvmFkEZqxFJBYP LYdQ+4LGsAd8VA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:39:17 2025 by rpki-client