This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft File: VhxILbWscM1l8s5s5ffiW4929Gk.mft (raw, json) Hash identifier: T0KS6+YTneRrHbHolLlVgkXGxFisCey7C3RO65D6xP8= Subject key identifier: 29:8A:8D:14:AE:84:7B:88:34:33:45:96:8E:08:99:2C:BD:88:9F:FA Authority key identifier: 56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69 Certificate issuer: /CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469 Certificate serial: 019AF31BCFAF74D31BE8F15B6757823DBC06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft Manifest number: 0B37 Signing time: Sat 06 Dec 2025 10:01:17 +0000 Manifest this update: Sat 06 Dec 2025 10:01:17 +0000 Manifest next update: Sun 07 Dec 2025 10:01:17 +0000 Files and hashes: 1: VhxILbWscM1l8s5s5ffiW4929Gk.crl (hash: 2u/68I1jb4ihIxOjOXQ3ps91o6OaA3pKbK8JX+dLfjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:cf:af:74:d3:1b:e8:f1:5b:67:57:82:3d:bc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=561c482db5ac70cd65f2ce6ce5f7e25b8f76f469 Validity Not Before: Dec 6 10:01:17 2025 GMT Not After : Dec 7 10:01:17 2025 GMT Subject: CN=298a8d14ae847b88343345968e08992cbd889ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:3d:9e:96:95:6d:88:2f:65:4c:a0:29:18: ad:5e:96:61:fb:78:7b:c2:5d:69:d1:a6:fe:b2:a1: cf:3a:d2:79:d3:95:63:f2:5d:6d:7e:fb:43:a9:dd: b1:07:ee:24:4d:66:d6:1a:e6:0d:28:cd:d5:af:38: 7d:b0:22:c7:7f:80:a2:c2:9f:8b:04:8b:b0:67:87: e5:7e:7a:08:f9:b0:bb:d5:53:04:92:c9:de:26:ed: 28:ba:25:76:a1:a4:05:0a:79:27:54:96:27:18:cb: 0f:3e:34:62:4b:78:8f:2a:70:2b:f1:40:99:ef:9d: 00:c6:2a:ba:76:ed:cf:db:ff:c8:fb:a1:31:37:96: 6a:e1:75:54:06:30:65:29:ec:73:8d:77:9e:58:d5: ab:05:cc:82:f9:a5:c7:d4:97:23:a8:bc:d8:b8:7d: 6c:0d:64:8f:1f:4a:51:c1:70:b2:2e:c5:82:75:64: 2b:2c:d8:0b:13:ca:af:e6:b4:63:02:f9:17:dc:9a: 01:3b:48:65:86:81:2e:7a:1e:b7:5d:7c:b8:c6:ce: 0c:fb:4b:75:70:62:6d:2c:b1:60:ec:5f:2f:54:eb: 08:10:d6:03:94:26:96:ca:35:99:59:57:ab:bd:7e: e3:88:25:df:d5:53:e2:13:dd:a1:a0:b7:fc:11:6f: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:8D:14:AE:84:7B:88:34:33:45:96:8E:08:99:2C:BD:88:9F:FA X509v3 Authority Key Identifier: keyid:56:1C:48:2D:B5:AC:70:CD:65:F2:CE:6C:E5:F7:E2:5B:8F:76:F4:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VhxILbWscM1l8s5s5ffiW4929Gk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/edaf99-6f94-4e2c-8654-0dfb84718edf/1/VhxILbWscM1l8s5s5ffiW4929Gk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:16:74:b3:34:ce:8f:65:79:08:cc:c6:c0:28:0c:5c:c5:90: 05:6b:54:a3:39:cb:03:8c:01:8c:93:2c:42:f1:85:70:3c:ad: 4b:20:25:c7:8b:97:4a:b3:d2:af:2a:be:89:6b:94:78:e1:b4: ea:79:24:60:1a:fb:d6:bd:6b:03:8e:48:f2:ca:09:32:cb:1b: ac:74:2f:b3:d7:8e:05:4f:e1:76:53:7b:c8:ba:b9:80:bc:11: 39:e6:93:d2:bf:97:b8:cb:7f:4f:76:b0:35:6d:be:7e:4b:39: cd:be:f9:18:26:ac:87:11:9f:d2:dd:35:76:ea:23:a6:62:fe: 86:09:e0:ab:e8:56:ed:d5:a8:1b:44:45:fb:3a:24:e1:fc:a8: a8:ad:8d:91:ab:b3:da:c2:16:ed:c6:59:10:1d:a4:f0:c3:23: 46:f4:37:c9:ac:fb:61:21:20:95:42:40:a9:a8:8b:31:1f:68: 82:ca:11:22:74:f6:b1:04:66:c1:0a:4b:65:df:8f:a0:db:4f: f7:d0:cc:e6:3a:4f:0d:68:82:b4:25:f5:50:7e:ae:de:3f:64: 55:18:a1:56:13:46:48:e7:cb:73:b5:f2:97:ad:10:4d:e8:c1: 79:35:82:e9:0f:e3:36:4c:82:ab:f2:59:71:44:c2:8b:a1:30: 28:7b:38:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8+vdNMb6PFbZ1eCPbwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MWM0ODJkYjVhYzcwY2Q2NWYyY2U2Y2U1ZjdlMjViOGY3 NmY0NjkwHhcNMjUxMjA2MTAwMTE3WhcNMjUxMjA3MTAwMTE3WjAzMTEwLwYDVQQD EygyOThhOGQxNGFlODQ3Yjg4MzQzMzQ1OTY4ZTA4OTkyY2JkODg5ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZE9npaVbYgvZUygKRitXpZh+3h7 wl1p0ab+sqHPOtJ505Vj8l1tfvtDqd2xB+4kTWbWGuYNKM3Vrzh9sCLHf4Ciwp+L BIuwZ4flfnoI+bC71VMEksneJu0ouiV2oaQFCnknVJYnGMsPPjRiS3iPKnAr8UCZ 750Axiq6du3P2//I+6ExN5Zq4XVUBjBlKexzjXeeWNWrBcyC+aXH1JcjqLzYuH1s DWSPH0pRwXCyLsWCdWQrLNgLE8qv5rRjAvkX3JoBO0hlhoEueh63XXy4xs4M+0t1 cGJtLLFg7F8vVOsIENYDlCaWyjWZWVervX7jiCXf1VPiE92hoLf8EW+v+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmKjRSuhHuINDNFlo4ImSy9iJ/6MB8GA1UdIwQY MBaAFFYcSC21rHDNZfLObOX34luPdvRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lZGFmOTktNmY5NC00ZTJjLTg2NTQt MGRmYjg0NzE4ZWRmLzEvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lZGFmOTktNmY5NC00ZTJjLTg2NTQtMGRmYjg0NzE4ZWRm LzEvVmh4SUxiV3NjTTFsOHM1czVmZmlXNDkyOUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRZ0szTO j2V5CMzGwCgMXMWQBWtUoznLA4wBjJMsQvGFcDytSyAlx4uXSrPSryq+iWuUeOG0 6nkkYBr71r1rA45I8soJMssbrHQvs9eOBU/hdlN7yLq5gLwROeaT0r+XuMt/T3aw NW2+fks5zb75GCashxGf0t01duojpmL+hgngq+hW7dWoG0RF+zok4fyoqK2Nkauz 2sIW7cZZEB2k8MMjRvQ3yaz7YSEglUJAqaiLMR9ogsoRInT2sQRmwQpLZd+PoNtP 99DM5jpPDWiCtCX1UH6u3j9kVRihVhNGSOfLc7Xyl60QTejBeTWC6Q/jNkyCq/JZ cUTCi6EwKHs4Uw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:46 2025 by rpki-client