This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft File: ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json) Hash identifier: vbMDN8FTdcDBjlABs6/Q/ld2fj1DAUoP+iQw7TDdmQM= Subject key identifier: 36:F7:24:9B:3D:7B:A5:67:D5:84:50:25:F2:A8:3D:69:67:17:01:DF Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA Certificate issuer: /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa Certificate serial: 019B3D59C65D8594D8FC7A60113AE4B34EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 20:00:52 +0000 Manifest this update: Sat 20 Dec 2025 20:00:52 +0000 Manifest next update: Sun 21 Dec 2025 20:00:52 +0000 Files and hashes: 1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: dhZ1zMakAGyfFQf0yZIvwERLJa9QNuvaMT2VfqQML6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:c6:5d:85:94:d8:fc:7a:60:11:3a:e4:b3:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa Validity Not Before: Dec 20 20:00:52 2025 GMT Not After : Dec 21 20:00:52 2025 GMT Subject: CN=36f7249b3d7ba567d5845025f2a83d69671701df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:6e:a0:0d:23:7f:39:87:26:f5:59:85:db: eb:aa:48:71:0e:e5:a2:8d:a7:ed:5b:7d:a7:5a:07: 50:cb:1b:a5:0e:80:3b:6a:4d:a6:e1:2c:53:69:f8: 07:b5:03:4e:7f:76:f2:d3:15:c9:06:76:51:ce:a2: e0:8a:47:6c:95:90:4c:86:68:10:fa:1e:7d:d2:08: 21:f7:a1:28:ee:db:79:6f:79:eb:43:4d:97:ec:63: 0f:28:19:57:fd:b8:34:c8:31:73:02:62:e1:80:12: 00:b5:99:9d:32:d5:3d:8c:00:30:f4:b5:5c:b6:14: eb:6c:6b:29:b3:28:cb:7c:22:8b:29:05:a0:dd:26: 68:6a:dd:42:96:75:5d:95:e2:4d:c3:d4:9c:8c:17: 4b:f0:85:55:04:80:83:c6:d6:3c:09:97:c7:dc:e7: 26:6c:20:fa:de:74:0c:a5:dd:12:a9:56:e8:ba:21: 24:b1:7e:23:6e:68:7d:6a:de:72:e0:2b:07:44:45: bd:bb:4a:0e:78:9e:b8:0b:95:24:42:63:3a:41:a5: 2c:54:71:08:72:b9:ab:65:67:b3:40:7a:3d:c8:b9: 05:5c:c7:a0:e3:d1:07:70:0f:85:cf:e6:82:9b:e9: c7:e2:05:f3:bb:d0:d3:32:b0:63:53:3d:29:4d:e9: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:24:9B:3D:7B:A5:67:D5:84:50:25:F2:A8:3D:69:67:17:01:DF X509v3 Authority Key Identifier: keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0d:64:d2:41:81:b1:22:68:ba:92:e3:ea:95:4e:f3:fa:88: 18:f4:34:a9:b4:bd:3c:9f:38:74:92:7e:f3:31:67:1c:37:3b: cc:43:38:87:97:b5:d7:ae:0c:c1:30:f6:4a:44:1c:d8:99:7e: 76:58:ed:64:7c:8d:76:89:92:3b:84:eb:9d:9e:16:75:d0:bb: 4e:73:96:04:2e:3d:1c:1e:69:67:70:db:42:53:51:e4:54:4f: 9e:0c:ca:75:0e:91:c3:65:10:5a:9d:ca:ef:14:c3:3c:aa:f3: ef:a7:18:74:76:9f:a9:b0:9c:63:eb:db:c7:3d:0a:f8:35:47: 95:52:ec:84:b5:69:4e:27:2a:87:67:81:65:bb:fe:4d:32:76: 98:71:da:4c:4e:ff:01:48:79:a0:e0:d1:e3:18:be:b5:52:50: 36:df:5d:c7:08:13:70:bf:62:08:b5:16:85:32:26:81:1a:4b: 11:e5:0c:70:9d:b0:77:04:1c:8f:e6:5c:24:b4:5d:d0:b2:c6: 67:b8:b3:2f:28:d2:76:cd:7e:a5:e6:29:bb:2c:a2:cb:23:67: 41:b1:1d:e1:0f:50:51:b7:c6:fe:8b:b6:8c:38:68:a0:87:0a: 39:a4:d7:6a:cb:58:ba:db:5d:d1:28:be:7f:0a:70:5c:e2:64: 41:4e:38:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcZdhZTY/HpgETrks07aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MjU2YzZjMGU5ZDQ5NTc2NWFlZTNhMmM2YTc0ZjU4MGFi MzY2YWEwHhcNMjUxMjIwMjAwMDUyWhcNMjUxMjIxMjAwMDUyWjAzMTEwLwYDVQQD EygzNmY3MjQ5YjNkN2JhNTY3ZDU4NDUwMjVmMmE4M2Q2OTY3MTcwMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYRuoA0jfzmHJvVZhdvrqkhxDuWi jaftW32nWgdQyxulDoA7ak2m4SxTafgHtQNOf3by0xXJBnZRzqLgikdslZBMhmgQ +h590ggh96Eo7tt5b3nrQ02X7GMPKBlX/bg0yDFzAmLhgBIAtZmdMtU9jAAw9LVc thTrbGspsyjLfCKLKQWg3SZoat1ClnVdleJNw9ScjBdL8IVVBICDxtY8CZfH3Ocm bCD63nQMpd0SqVbouiEksX4jbmh9at5y4CsHREW9u0oOeJ64C5UkQmM6QaUsVHEI crmrZWezQHo9yLkFXMeg49EHcA+Fz+aCm+nH4gXzu9DTMrBjUz0pTel3awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb3JJs9e6Vn1YRQJfKoPWlnFwHfMB8GA1UdIwQY MBaAFFYlbGwOnUlXZa7josanT1gKs2aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMjkyZDItODRjNi00YjRiLWIzMmIt ZTQ1ZjEzODgzNDM5LzEvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8wMjkyZDItODRjNi00YjRiLWIzMmItZTQ1ZjEzODgzNDM5 LzEvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag1k0kGB sSJoupLj6pVO8/qIGPQ0qbS9PJ84dJJ+8zFnHDc7zEM4h5e1164MwTD2SkQc2Jl+ dljtZHyNdomSO4TrnZ4WddC7TnOWBC49HB5pZ3DbQlNR5FRPngzKdQ6Rw2UQWp3K 7xTDPKrz76cYdHafqbCcY+vbxz0K+DVHlVLshLVpTicqh2eBZbv+TTJ2mHHaTE7/ AUh5oODR4xi+tVJQNt9dxwgTcL9iCLUWhTImgRpLEeUMcJ2wdwQcj+ZcJLRd0LLG Z7izLyjSds1+peYpuyyiyyNnQbEd4Q9QUbfG/ou2jDhooIcKOaTXastYuttd0Si+ fwpwXOJkQU442A== -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:45 2025 by rpki-client