This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json) Hash identifier: 9D0qBAYX+wkEt+0rfNCf7+KkR+d+E+xrfMIYS9FFvV8= Subject key identifier: F9:CA:F7:D6:4C:97:35:2E:BC:B8:EA:7C:C4:8C:58:F1:EF:0F:58:63 Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0 Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0 Certificate serial: 019AF50A93B1101C10366C93B60A7FDE6FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=) 2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: cTwpV3XANGAzz5kHp9K7QvVffOrF1AFZwf7aSccOGT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:93:b1:10:1c:10:36:6c:93:b6:0a:7f:de:6f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0 Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=f9caf7d64c97352ebcb8ea7cc48c58f1ef0f5863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:39:ce:0a:a1:f3:9f:bb:0a:8f:57:c7:6f: 9c:50:67:2f:ef:10:01:74:ac:0d:02:cc:dc:09:be: ab:c7:df:aa:0f:db:44:0e:6b:43:82:58:9b:0e:aa: e5:78:d1:9a:8a:33:56:7d:35:da:60:f0:55:12:cd: f5:9b:6a:5a:3a:9f:a1:01:9a:3a:4e:39:6b:7a:0f: 25:eb:4b:8e:c7:75:d8:8c:a9:e5:8f:d9:f3:37:2e: 33:dd:7b:a9:ae:6c:ef:f7:b7:10:24:db:9f:67:21: a9:a9:e6:a1:19:f3:28:ff:97:1c:87:94:b9:ee:b7: 31:c6:00:e4:ea:37:62:db:aa:ba:1d:0e:98:fa:1d: 7f:b2:3f:74:a0:03:d7:15:8f:44:dc:85:7a:4e:42: bf:cf:1e:1b:05:6c:0e:5e:a6:2c:4e:e7:3a:2f:88: 50:f8:db:9b:20:76:38:9a:88:62:cc:38:09:e7:9c: 42:c7:41:0a:2a:c5:49:55:11:1d:31:77:d6:ba:13: 3a:28:24:35:2b:4e:09:77:b6:de:60:ed:ca:15:e4: 3a:47:75:c6:ab:6e:1d:72:9c:2a:ff:0e:26:2e:a5: b2:08:2b:e5:fe:f1:14:79:4d:28:e7:9d:f6:ba:a0: de:6c:24:34:97:fb:3d:d7:44:09:8e:a7:6b:ac:1b: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CA:F7:D6:4C:97:35:2E:BC:B8:EA:7C:C4:8C:58:F1:EF:0F:58:63 X509v3 Authority Key Identifier: keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d1:93:85:53:90:7b:59:7a:61:9b:10:5d:e0:fa:f8:14:f8: 3a:6e:a6:7e:bd:e0:39:12:fa:b3:9a:e3:ca:c2:f3:55:c7:a7: 16:2e:3e:4c:80:56:dd:a5:0d:17:de:09:05:bb:94:73:db:39: ed:c0:37:6a:80:14:55:d7:d2:fe:87:66:33:2b:1a:94:9f:7a: 1a:f9:10:6f:d0:63:f0:d7:cc:9f:29:04:e6:44:73:9d:f6:0f: 12:f6:d1:a1:43:3b:dc:e2:27:90:a3:0b:8f:71:9f:d9:d0:82: d0:b7:74:e4:39:18:ac:bf:23:42:e2:aa:43:20:7d:d6:5f:fa: ab:d1:81:59:e9:67:fb:d4:64:1b:90:20:4b:56:eb:4d:f1:83: 2d:4f:a6:5d:83:e2:41:c6:5a:19:da:2c:8a:c3:b2:34:69:61: ce:e6:25:3c:55:0a:1a:01:6e:75:87:ae:93:9b:b0:58:cb:05: ec:ea:75:ee:e5:cc:5a:2a:ca:61:b7:db:e8:8f:19:ad:ca:6f: 49:6e:50:3b:08:1b:84:81:f4:a0:e0:c7:a5:ff:eb:35:e8:ab: 83:9f:d4:b3:5d:1a:ed:9e:7c:f6:1e:c9:b2:4f:cf:1e:b5:35: 1e:22:21:68:a8:5e:22:64:76:58:37:56:d0:61:7f:1b:e6:ca: dc:33:1b:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpOxEBwQNmyTtgp/3m+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmQ5NzFhZDNjMmU0MzhkNGEzMTJkMWExZGU3NTE4MTBh Y2E0ZTAwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD EyhmOWNhZjdkNjRjOTczNTJlYmNiOGVhN2NjNDhjNThmMWVmMGY1ODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRQ5zgqh85+7Co9Xx2+cUGcv7xAB dKwNAszcCb6rx9+qD9tEDmtDglibDqrleNGaijNWfTXaYPBVEs31m2paOp+hAZo6 Tjlreg8l60uOx3XYjKnlj9nzNy4z3Xuprmzv97cQJNufZyGpqeahGfMo/5cch5S5 7rcxxgDk6jdi26q6HQ6Y+h1/sj90oAPXFY9E3IV6TkK/zx4bBWwOXqYsTuc6L4hQ +NubIHY4mohizDgJ55xCx0EKKsVJVREdMXfWuhM6KCQ1K04Jd7beYO3KFeQ6R3XG q24dcpwq/w4mLqWyCCvl/vEUeU0o5532uqDebCQ0l/s910QJjqdrrBvroQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnK99ZMlzUuvLjqfMSMWPHvD1hjMB8GA1UdIwQY MBaAFFQtlxrTwuQ41KMS0aHedRgQrKTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85ZGRjOWQtNjBjNy00YmNiLTkxOWEt MzQwODA4OWVkYzQ1LzEvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85ZGRjOWQtNjBjNy00YmNiLTkxOWEtMzQwODA4OWVkYzQ1 LzEvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9GThVOQ e1l6YZsQXeD6+BT4Om6mfr3gORL6s5rjysLzVcenFi4+TIBW3aUNF94JBbuUc9s5 7cA3aoAUVdfS/odmMysalJ96GvkQb9Bj8NfMnykE5kRznfYPEvbRoUM73OInkKML j3Gf2dCC0Ld05DkYrL8jQuKqQyB91l/6q9GBWeln+9RkG5AgS1brTfGDLU+mXYPi QcZaGdosisOyNGlhzuYlPFUKGgFudYeuk5uwWMsF7Op17uXMWirKYbfb6I8Zrcpv SW5QOwgbhIH0oODHpf/rNeirg5/Us10a7Z589h7Jsk/PHrU1HiIhaKheImR2WDdW 0GF/G+bK3DMbBQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:53 2025 by rpki-client