This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json) Hash identifier: tbdquyp84lBDTc7U23AX2W5KmvDiMPqQq4WJ1XQzReo= Subject key identifier: 5D:1F:DD:D5:B1:CC:E7:7D:89:9C:6B:A1:DD:FF:B7:28:B0:AC:F7:CD Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd Certificate serial: 019AF5AEB6B0832C2EE2248C141299CB3D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft Manifest number: 14C8 Signing time: Sat 06 Dec 2025 22:00:59 +0000 Manifest this update: Sat 06 Dec 2025 22:00:59 +0000 Manifest next update: Sun 07 Dec 2025 22:00:59 +0000 Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: adRXLO7Mcz/wkw+TrHhJycEIv73jZx5d1HDNNDEvuH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:b6:b0:83:2c:2e:e2:24:8c:14:12:99:cb:3d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd Validity Not Before: Dec 6 22:00:59 2025 GMT Not After : Dec 7 22:00:59 2025 GMT Subject: CN=5d1fddd5b1cce77d899c6ba1ddffb728b0acf7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:6b:ef:87:29:24:f2:8a:00:51:40:02:d4: 81:bf:63:34:83:07:12:82:7d:8c:ed:12:79:bc:a2: 4a:10:3c:4a:21:04:e5:4a:06:8b:10:c4:d0:3f:c8: 0c:02:d7:89:b2:e0:c4:b1:55:85:cf:61:8f:38:86: de:33:3b:55:b5:86:22:1c:be:f6:ee:ec:3f:f8:4d: 99:3d:a1:51:2e:ca:5d:52:7e:f5:d8:1c:cc:16:38: a9:cd:26:3e:05:eb:80:b9:be:c2:b8:da:33:03:50: 3d:5b:6c:dd:c9:6a:c6:ec:0d:48:41:ab:3a:a8:62: 4e:dd:c9:50:75:e2:50:a1:fd:dc:09:52:47:fc:48: 41:5c:6a:25:46:cd:0e:b5:7b:b8:1e:e9:86:88:b1: e5:9c:a6:4e:eb:ec:fd:c8:c2:48:8e:b0:9b:b5:30: 56:c9:49:fd:71:86:4c:74:e2:ab:b8:35:83:cf:53: 8a:23:24:83:a4:88:1d:03:eb:23:76:09:eb:45:eb: 9a:dc:1a:e0:78:b8:fd:cd:5d:fe:b0:75:4b:2f:45: 55:44:ba:68:89:c8:1c:e1:13:e9:e4:8f:ae:d1:06: f9:00:ee:f6:13:35:9e:b7:b8:b6:bf:d2:72:5e:31: 78:8d:3c:7d:c7:20:ff:80:30:c5:35:ba:ed:af:fe: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1F:DD:D5:B1:CC:E7:7D:89:9C:6B:A1:DD:FF:B7:28:B0:AC:F7:CD X509v3 Authority Key Identifier: keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:48:3f:ca:4f:c6:15:b7:71:10:5c:25:48:cb:25:f1:4c:2d: 86:5e:4c:e5:73:a4:ed:3a:ad:a3:fe:a3:46:17:9c:96:65:df: 1c:81:f8:e8:37:65:98:65:69:ab:6c:14:62:6c:4c:5c:a7:28: 38:e5:1f:28:6b:dd:e2:1a:4f:a2:d1:04:19:a5:96:37:c2:d6: fd:93:cf:bc:2e:5b:6c:ee:e4:45:d7:de:8d:8c:1b:cd:f4:0c: bc:bd:a7:fa:e8:1c:f2:6b:04:9c:ed:ce:35:81:80:c8:c8:cb: 8a:7d:72:c5:9e:ee:6c:01:90:7f:60:20:52:d5:79:5b:0b:fd: 13:56:0b:32:07:a4:28:06:69:27:d2:f2:9e:0a:81:d7:32:66: d3:b1:1a:d8:30:ec:dd:ed:12:8c:25:54:b1:c0:97:a9:61:e6: e4:9e:fe:e1:2f:55:a5:32:be:ea:b9:df:ab:22:e6:fd:b5:a5: 1f:10:fc:b7:a0:68:f5:5b:71:6d:ae:d4:18:95:fc:83:89:69: 01:c3:71:2b:91:81:63:96:44:f8:39:6a:80:e0:bc:04:28:d2: 24:62:31:20:63:72:e0:e5:11:9e:89:c9:c0:e0:dc:81:bb:71: 93:9c:26:9b:50:c0:ca:7d:99:26:71:38:c8:5c:e0:b1:2b:cc: b1:0a:08:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rrawgywu4iSMFBKZyz1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDYwMTA2YjQxNjc5MmIyYTJlOWE3ZWI0MDJhMjM4NTcw MTY4YmQwHhcNMjUxMjA2MjIwMDU5WhcNMjUxMjA3MjIwMDU5WjAzMTEwLwYDVQQD Eyg1ZDFmZGRkNWIxY2NlNzdkODk5YzZiYTFkZGZmYjcyOGIwYWNmN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i9r74cpJPKKAFFAAtSBv2M0gwcS gn2M7RJ5vKJKEDxKIQTlSgaLEMTQP8gMAteJsuDEsVWFz2GPOIbeMztVtYYiHL72 7uw/+E2ZPaFRLspdUn712BzMFjipzSY+BeuAub7CuNozA1A9W2zdyWrG7A1IQas6 qGJO3clQdeJQof3cCVJH/EhBXGolRs0OtXu4HumGiLHlnKZO6+z9yMJIjrCbtTBW yUn9cYZMdOKruDWDz1OKIySDpIgdA+sjdgnrReua3BrgeLj9zV3+sHVLL0VVRLpo icgc4RPp5I+u0Qb5AO72EzWet7i2v9JyXjF4jTx9xyD/gDDFNbrtr/6crwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0f3dWxzOd9iZxrod3/tyiwrPfNMB8GA1UdIwQY MBaAFFcGAQa0FnkrKi6afrQCojhXAWi9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAt OWJmY2ZkZDc5NjliLzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAtOWJmY2ZkZDc5Njli LzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEg/yk/G FbdxEFwlSMsl8Uwthl5M5XOk7Tqto/6jRheclmXfHIH46DdlmGVpq2wUYmxMXKco OOUfKGvd4hpPotEEGaWWN8LW/ZPPvC5bbO7kRdfejYwbzfQMvL2n+ugc8msEnO3O NYGAyMjLin1yxZ7ubAGQf2AgUtV5Wwv9E1YLMgekKAZpJ9LyngqB1zJm07Ea2DDs 3e0SjCVUscCXqWHm5J7+4S9VpTK+6rnfqyLm/bWlHxD8t6Bo9Vtxba7UGJX8g4lp AcNxK5GBY5ZE+DlqgOC8BCjSJGIxIGNy4OURnonJwODcgbtxk5wmm1DAyn2ZJnE4 yFzgsSvMsQoIow== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:34 2025 by rpki-client