This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json) Hash identifier: 9vmCvnvS4bEEc/BoTDt1YDeBeCusGYtXQ2lRoOoz5ec= Subject key identifier: A7:40:93:FA:7B:D7:F4:51:8D:A4:4E:B1:31:2C:8D:29:38:40:83:34 Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89 Certificate serial: 019AF164538FE8F07B7DFD35FB11FC3C8C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: 1f3AyBN8ki6choqy1BoF/sQzoanRiF3ow6JHAMpX2XQ=) 2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:53:8f:e8:f0:7b:7d:fd:35:fb:11:fc:3c:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c54067385a765b1d5617c43331956fb208e89 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=a74093fa7bd7f4518da44eb1312c8d2938408334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:d9:0a:7d:a1:13:24:95:bc:8e:19:e9:c6: 08:06:73:08:fe:b5:b3:23:f8:49:07:ef:b1:e7:2d: 34:20:bb:17:60:19:de:7c:66:b8:ea:0e:c0:c1:0b: b8:0f:40:40:58:05:9a:ed:77:a3:d8:67:f4:bb:d3: d0:78:04:3f:cc:a6:99:56:c2:45:7c:04:e0:47:b2: a1:25:68:9b:f2:b0:25:05:15:aa:b2:96:1b:8f:4e: 90:80:57:b1:cc:cb:30:d1:f5:c2:b5:7b:4f:14:03: 52:db:60:9e:de:81:b2:70:bf:e1:50:f8:a7:f4:59: 78:6b:15:12:d2:79:6d:d3:14:08:63:1b:03:06:18: 3c:b6:2c:c5:fe:a1:e1:d3:de:09:e7:40:d8:51:98: 02:fe:9f:15:76:e9:60:d2:89:d3:e8:57:f4:51:0f: b7:b2:6b:51:75:56:53:bd:2c:29:0d:c5:e5:cd:02: 8e:1c:67:ba:07:5a:58:2c:66:a4:17:ea:81:03:68: ca:8b:71:11:05:8c:01:e3:d1:a3:ee:36:9f:67:0b: 4b:a9:9e:6c:eb:15:aa:cb:e2:f6:72:d6:68:35:3a: e7:6d:ca:60:45:1e:7b:72:4d:a1:18:cf:0a:ac:ee: db:33:90:55:48:28:13:a8:4e:13:e9:87:87:a3:7f: 8c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:40:93:FA:7B:D7:F4:51:8D:A4:4E:B1:31:2C:8D:29:38:40:83:34 X509v3 Authority Key Identifier: keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b9:6c:40:6f:de:43:78:11:f4:6f:f8:70:79:25:9d:ee:57: aa:1f:b6:88:b4:fc:e0:36:0b:f4:98:83:7a:06:8f:67:f5:6d: dd:ba:b7:d9:21:d5:83:10:68:e4:e7:b3:04:68:d2:7f:24:84: f3:ea:aa:4d:5c:34:f1:94:3f:1e:a5:e9:3a:d4:6b:a9:e7:26: 3a:e3:b8:c9:9b:ac:1e:7f:10:d6:3f:c6:a3:af:ab:ff:5a:74: 02:77:b5:17:41:ac:49:a9:24:78:13:15:4c:aa:11:73:78:d8: 9d:f1:03:57:48:5a:0b:89:13:f3:0b:1e:98:41:c9:0a:7d:b0: d7:83:67:bb:c0:52:e8:2c:66:44:b7:d9:a5:64:cd:41:42:85: fa:2f:c1:81:9d:b1:af:21:8a:b2:80:d1:e9:71:c1:78:4e:0b: 02:08:db:63:75:65:d2:c9:70:db:bb:68:b2:eb:36:a2:40:b8: ca:cf:ac:5b:b5:6a:89:29:27:c0:e3:17:cf:fb:84:2f:84:bd: bd:78:e9:6b:cb:c5:07:18:a9:df:0d:bc:d9:59:4d:b1:a9:f3: fc:6a:52:2c:42:c6:10:1b:51:f6:b7:4c:77:e8:63:49:af:23: 14:08:b2:47:36:da:d2:21:ca:1f:3a:e6:54:8c:d3:e5:d4:96: 1a:47:a0:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFOP6PB7ff01+xH8PIwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy MDhlODkwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EyhhNzQwOTNmYTdiZDdmNDUxOGRhNDRlYjEzMTJjOGQyOTM4NDA4MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSHZCn2hEySVvI4Z6cYIBnMI/rWz I/hJB++x5y00ILsXYBnefGa46g7AwQu4D0BAWAWa7Xej2Gf0u9PQeAQ/zKaZVsJF fATgR7KhJWib8rAlBRWqspYbj06QgFexzMsw0fXCtXtPFANS22Ce3oGycL/hUPin 9Fl4axUS0nlt0xQIYxsDBhg8tizF/qHh094J50DYUZgC/p8Vdulg0onT6Ff0UQ+3 smtRdVZTvSwpDcXlzQKOHGe6B1pYLGakF+qBA2jKi3ERBYwB49Gj7jafZwtLqZ5s 6xWqy+L2ctZoNTrnbcpgRR57ck2hGM8KrO7bM5BVSCgTqE4T6YeHo3+MhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdAk/p71/RRjaROsTEsjSk4QIM0MB8GA1UdIwQY MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct YTQxYTQ4MzRlY2FhLzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrlsQG/e Q3gR9G/4cHklne5Xqh+2iLT84DYL9JiDegaPZ/Vt3bq32SHVgxBo5OezBGjSfySE 8+qqTVw08ZQ/HqXpOtRrqecmOuO4yZusHn8Q1j/Go6+r/1p0Ane1F0GsSakkeBMV TKoRc3jYnfEDV0haC4kT8wsemEHJCn2w14Nnu8BS6CxmRLfZpWTNQUKF+i/BgZ2x ryGKsoDR6XHBeE4LAgjbY3Vl0slw27tosus2okC4ys+sW7VqiSknwOMXz/uEL4S9 vXjpa8vFBxip3w282VlNsanz/GpSLELGEBtR9rdMd+hjSa8jFAiyRzba0iHKHzrm VIzT5dSWGkegYg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:23 2025 by rpki-client