This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft File: VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json) Hash identifier: fm5CzlvFnSGaW7U1u/k+yi7n9hGrbcfd+Xfxt+8gzMY= Subject key identifier: C8:E9:75:66:88:D4:C7:10:5B:67:52:07:9A:9E:F5:D5:26:D9:01:21 Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 Certificate issuer: /CN=571456649692e60566de008e126bbdd1d2ebed45 Certificate serial: 019AF12DF03093B7F827C5EAEC56B92C7286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft Manifest number: 0FDC Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: 8lef1f5crvRreGDSYUxrSYR1Kd4SaMVjIDDVIlWFsNs=) 2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f0:30:93:b7:f8:27:c5:ea:ec:56:b9:2c:72:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45 Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=c8e9756688d4c7105b6752079a9ef5d526d90121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:b9:93:28:58:a7:2e:ce:ca:83:59:d9:e7: 46:82:66:e2:f4:6d:0e:ad:70:69:6d:2b:e0:3c:b2: 93:28:84:d3:3a:90:3c:1b:c9:9f:db:e6:bc:c1:ac: 11:69:54:ee:bc:d0:3d:4e:b2:bf:19:85:21:93:b3: 70:5e:c8:7c:cd:d3:0d:ed:f3:cc:3a:6d:18:fe:cc: 35:3a:e2:b8:3b:c1:57:59:ed:d2:9d:ff:e8:f7:da: c3:0c:71:48:d4:43:30:44:9d:d1:91:7b:5e:a7:47: 05:b5:6d:fc:bc:1f:55:34:ce:d1:68:ab:5d:97:4e: 02:07:5d:76:5b:65:5e:67:a8:ac:3e:d4:21:26:70: fd:02:d9:fe:8e:6f:fc:0c:05:cc:d5:d6:cc:22:ff: 84:90:5c:1a:4d:22:76:60:b4:f5:e7:5d:97:e4:48: b0:2a:05:82:d5:7e:5f:69:e4:80:1b:1a:d1:ad:09: d7:49:c0:55:e6:6b:c8:94:f6:3a:ca:68:82:28:cf: 24:3b:73:44:f8:3e:c7:9c:c2:13:00:7c:39:09:79: 68:7e:1d:0d:4a:2f:28:8e:81:d7:06:0d:d2:af:75: 06:f7:e0:b5:2c:c2:17:84:f5:98:53:b4:be:09:1d: ba:b4:5f:34:59:f0:02:fe:9f:97:a3:99:01:c1:dc: a6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:75:66:88:D4:C7:10:5B:67:52:07:9A:9E:F5:D5:26:D9:01:21 X509v3 Authority Key Identifier: keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:68:da:34:35:d8:f8:61:53:ed:a9:c1:f4:60:1e:56:44:95: 2f:24:6c:34:b0:4c:96:b3:84:86:da:e9:a7:77:3e:9e:70:21: 81:89:b0:92:db:b6:57:ab:f6:8c:0c:17:c2:13:03:92:87:e1: aa:dd:86:88:31:d2:ab:a6:4f:1c:e4:5c:d9:c0:95:13:8b:31: 1d:ee:13:46:d9:fa:e9:07:9d:a1:c2:69:ea:00:41:02:6c:25: af:17:44:38:15:0e:1b:50:bb:f4:9a:07:d3:fd:1a:18:d0:5b: c4:60:97:91:0a:df:99:46:ea:a7:a8:e8:3d:3f:7f:58:02:8f: b8:ed:0e:87:a7:bc:f2:b3:f6:d8:0c:b7:56:ad:20:10:85:93: 77:d8:54:98:de:f6:c0:60:28:93:8f:19:4e:a3:25:94:93:d0: b4:2f:b7:de:b1:02:dc:66:56:40:06:42:ed:90:6a:30:3c:ea: ac:a1:8f:44:de:20:e4:d7:ba:f7:e6:a6:3b:e8:88:64:5a:a9: 27:82:26:20:53:0c:ef:af:39:4f:53:f6:f4:0d:e4:04:dd:7d: 5a:45:6c:23:6b:f9:90:7a:51:6f:8a:70:97:53:61:47:e0:9d: 57:44:8a:7d:c9:e3:fa:3e:01:f3:3f:1c:fe:d3:77:d8:27:eb: 39:3b:82:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfAwk7f4J8Xq7Fa5LHKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTQ1NjY0OTY5MmU2MDU2NmRlMDA4ZTEyNmJiZGQxZDJl YmVkNDUwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD EyhjOGU5NzU2Njg4ZDRjNzEwNWI2NzUyMDc5YTllZjVkNTI2ZDkwMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5u5kyhYpy7OyoNZ2edGgmbi9G0O rXBpbSvgPLKTKITTOpA8G8mf2+a8wawRaVTuvNA9TrK/GYUhk7NwXsh8zdMN7fPM Om0Y/sw1OuK4O8FXWe3Snf/o99rDDHFI1EMwRJ3RkXtep0cFtW38vB9VNM7RaKtd l04CB112W2VeZ6isPtQhJnD9Atn+jm/8DAXM1dbMIv+EkFwaTSJ2YLT1512X5Eiw KgWC1X5faeSAGxrRrQnXScBV5mvIlPY6ymiCKM8kO3NE+D7HnMITAHw5CXlofh0N Si8ojoHXBg3Sr3UG9+C1LMIXhPWYU7S+CR26tF80WfAC/p+Xo5kBwdymcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjpdWaI1McQW2dSB5qe9dUm2QEhMB8GA1UdIwQY MBaAFFcUVmSWkuYFZt4AjhJrvdHS6+1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgt MDRjOGYzZWVjZWViLzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wOGE3ZmYtMmNlZi00MjQ4LTlmZTgtMDRjOGYzZWVjZWVi LzEvVnhSV1pKYVM1Z1ZtM2dDT0VtdTkwZExyN1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGjaNDXY +GFT7anB9GAeVkSVLyRsNLBMlrOEhtrpp3c+nnAhgYmwktu2V6v2jAwXwhMDkofh qt2GiDHSq6ZPHORc2cCVE4sxHe4TRtn66QedocJp6gBBAmwlrxdEOBUOG1C79JoH 0/0aGNBbxGCXkQrfmUbqp6joPT9/WAKPuO0Oh6e88rP22Ay3Vq0gEIWTd9hUmN72 wGAok48ZTqMllJPQtC+33rEC3GZWQAZC7ZBqMDzqrKGPRN4g5Ne69+amO+iIZFqp J4ImIFMM7685T1P29A3kBN19WkVsI2v5kHpRb4pwl1NhR+CdV0SKfcnj+j4B8z8c /tN32CfrOTuC+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:36 2025 by rpki-client