This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json) Hash identifier: szr1yax9NzeqYB1jbWi7l31OuDtUdhRAaWWWCF7UYTU= Subject key identifier: E7:69:F2:C1:D4:55:15:35:B7:AC:4A:11:7D:82:ED:CC:E3:C3:A4:B3 Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d Certificate serial: 019AF31C558B025210965502A2379F9629A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft Manifest number: 12A4 Signing time: Sat 06 Dec 2025 10:01:51 +0000 Manifest this update: Sat 06 Dec 2025 10:01:51 +0000 Manifest next update: Sun 07 Dec 2025 10:01:51 +0000 Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=) 2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: DfucbqouxokYPVSkXKblrldVi8H8g19B4DxHTmBzGJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:55:8b:02:52:10:96:55:02:a2:37:9f:96:29:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d Validity Not Before: Dec 6 10:01:51 2025 GMT Not After : Dec 7 10:01:51 2025 GMT Subject: CN=e769f2c1d4551535b7ac4a117d82edcce3c3a4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:7e:af:37:e7:0c:fc:f2:a5:0b:2d:6f:6c: 86:6b:b4:95:7e:c1:67:94:76:82:b4:9b:80:17:dc: 89:59:51:d5:99:73:09:fe:e4:08:50:b2:fd:65:8f: ad:77:21:b6:13:b3:a0:8a:f5:f3:a1:5f:5e:9e:25: c6:92:47:40:97:13:6d:f5:d9:33:fd:75:0e:38:b0: 00:cd:91:59:f8:56:f9:4e:fa:e3:b8:12:66:ef:20: d7:42:73:cb:c6:a2:5e:be:82:5e:70:11:40:f1:73: a4:03:74:93:ef:fe:b5:84:9e:20:6b:19:f6:7a:35: 11:61:72:82:b7:ae:ca:9e:a7:17:35:bc:7e:e7:2b: f5:74:e9:63:b1:70:8f:82:a1:19:96:a3:5e:dd:f1: 22:52:8b:27:1c:07:30:42:43:61:f3:44:c1:f2:4e: f9:79:0a:51:50:ff:d5:5b:38:ef:57:72:63:4b:78: 4f:c5:94:96:f1:74:ef:f1:4f:d0:20:37:54:49:a6: 89:2a:a4:d6:ef:cc:ab:48:ed:ea:eb:ec:1f:27:8c: 63:a7:12:9e:b8:9a:5a:c8:a8:bb:11:0c:38:5f:54: 1a:67:00:65:4d:46:07:08:90:ce:a5:9d:07:a4:99: 92:6c:ba:c9:45:98:95:77:c0:db:23:43:90:97:96: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:69:F2:C1:D4:55:15:35:B7:AC:4A:11:7D:82:ED:CC:E3:C3:A4:B3 X509v3 Authority Key Identifier: keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e8:20:4b:16:61:2f:a6:27:48:dd:81:c2:72:cc:6f:cf:57: 5e:29:4b:ad:db:16:f4:bc:80:a4:9a:cd:cf:11:46:82:6c:28: fe:4a:14:33:e9:a2:70:42:41:d1:5f:ad:5f:69:16:30:15:e6: b0:9e:45:95:86:01:b2:ab:e9:fc:c4:72:9d:6f:a3:13:15:e3: f7:8f:23:d3:c1:3c:d1:1e:72:e7:d3:61:38:bb:59:7a:8f:11: 8b:24:32:43:3f:b9:75:87:63:59:16:27:f0:ba:6a:29:88:0f: f7:16:bb:54:73:b6:64:b7:d1:ab:c0:91:f0:95:86:4e:c0:83: 90:7c:aa:07:91:27:b9:35:43:9d:da:dd:ec:46:b0:5a:c7:e4: e7:2f:0a:ac:32:ce:f9:70:38:4a:16:67:f7:91:f8:7e:64:0d: 57:21:89:da:a0:47:77:7e:51:2d:e3:59:b7:60:bd:ca:33:63: 92:51:d1:00:2d:94:4e:04:8d:37:54:28:22:73:53:ad:26:fb: 81:97:97:5f:e2:65:25:9f:79:99:96:5d:fa:45:12:74:c0:3e: 77:a5:3a:4c:07:cb:43:76:22:3e:21:1a:13:99:95:33:3f:d7: 4b:61:fd:0a:b8:d4:ec:88:81:29:64:da:47:57:62:1f:91:0d: c1:a1:8a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFWLAlIQllUCojeflimhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMmYyY2NmMWJhYTM5MDMzZWM3NmE1ODZmODQ2YTM2MjE4 ZjIwOWQwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD EyhlNzY5ZjJjMWQ0NTUxNTM1YjdhYzRhMTE3ZDgyZWRjY2UzYzNhNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm9+rzfnDPzypQstb2yGa7SVfsFn lHaCtJuAF9yJWVHVmXMJ/uQIULL9ZY+tdyG2E7OgivXzoV9eniXGkkdAlxNt9dkz /XUOOLAAzZFZ+Fb5TvrjuBJm7yDXQnPLxqJevoJecBFA8XOkA3ST7/61hJ4gaxn2 ejURYXKCt67KnqcXNbx+5yv1dOljsXCPgqEZlqNe3fEiUosnHAcwQkNh80TB8k75 eQpRUP/VWzjvV3JjS3hPxZSW8XTv8U/QIDdUSaaJKqTW78yrSO3q6+wfJ4xjpxKe uJpayKi7EQw4X1QaZwBlTUYHCJDOpZ0HpJmSbLrJRZiVd8DbI0OQl5Zl4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdp8sHUVRU1t6xKEX2C7czjw6SzMB8GA1UdIwQY MBaAFL4vLM8bqjkDPsdqWG+EajYhjyCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEt NjQxODdlMzA0MzViLzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85Nzc0NGQtNTk4OC00NmFlLTgyZjEtNjQxODdlMzA0MzVi LzEvdmk4c3p4dXFPUU0teDJwWWI0UnFOaUdQSUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOggSxZh L6YnSN2BwnLMb89XXilLrdsW9LyApJrNzxFGgmwo/koUM+micEJB0V+tX2kWMBXm sJ5FlYYBsqvp/MRynW+jExXj948j08E80R5y59NhOLtZeo8RiyQyQz+5dYdjWRYn 8LpqKYgP9xa7VHO2ZLfRq8CR8JWGTsCDkHyqB5EnuTVDndrd7EawWsfk5y8KrDLO +XA4ShZn95H4fmQNVyGJ2qBHd35RLeNZt2C9yjNjklHRAC2UTgSNN1QoInNTrSb7 gZeXX+JlJZ95mZZd+kUSdMA+d6U6TAfLQ3YiPiEaE5mVMz/XS2H9CrjU7IiBKWTa R1diH5ENwaGKfw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:56 2025 by rpki-client