This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json) Hash identifier: xT668Cuu13fuFR9vI5NznAnah3d1XagvJxV1E7tYrMY= Subject key identifier: B6:51:63:7F:BD:0C:C6:4E:91:15:4C:9D:2C:D5:26:7B:63:E5:6C:C8 Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Certificate serial: 019AF3F7D1CB9773CB5D33742B3F2D195757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 14:01:35 +0000 Manifest this update: Sat 06 Dec 2025 14:01:35 +0000 Manifest next update: Sun 07 Dec 2025 14:01:35 +0000 Files and hashes: 1: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: S2L3fMTnJsGACuufQ26GXnInYkeW+2tBSeLvcTl1n84=) 2: ix-ZSSNlerCaWdEBa65HEpQka7I.roa (hash: 1tb0LpSD1iWi8R1yiZ2FFdKAVxcZDqiaztDvg3PO7k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d1:cb:97:73:cb:5d:33:74:2b:3f:2d:19:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68 Validity Not Before: Dec 6 14:01:35 2025 GMT Not After : Dec 7 14:01:35 2025 GMT Subject: CN=b651637fbd0cc64e91154c9d2cd5267b63e56cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:24:25:35:2c:7d:3c:1b:b1:66:fc:3a:b4: b2:25:2c:34:16:e3:3d:17:c0:3d:cd:4d:a6:e2:38: 81:04:b4:39:7a:45:39:9e:9d:77:fc:c3:cb:e3:12: 26:52:1e:f2:9a:49:6e:06:bf:3c:51:99:8f:82:a4: fb:50:ab:f5:6e:c9:b3:dd:b2:20:ab:a2:59:1c:b1: 42:63:59:b2:f7:39:26:3c:fc:17:bc:00:f2:75:12: 7f:52:09:80:23:bb:03:72:c7:58:4a:00:02:9f:63: 4f:4a:de:98:25:32:ca:11:7a:63:50:14:72:65:5d: 68:fd:7e:40:a4:a2:f9:dc:9b:d8:d0:b1:f2:c1:cc: 53:2e:a7:09:3d:c6:fb:6a:3c:10:a1:05:0b:ef:1c: 9c:26:d7:cf:1d:e7:88:2c:5b:c7:76:01:2c:f2:6d: a8:a9:c6:90:f2:80:10:fe:7f:8c:7e:e3:f9:ad:c7: a3:f0:8b:af:4e:a6:aa:70:06:9b:a3:60:1e:83:58: 7e:e5:30:ac:67:09:18:de:33:b8:85:58:b4:64:ce: df:9a:eb:64:d7:ef:68:69:8b:e1:48:78:11:06:9f: 20:a7:21:68:39:37:e9:f3:16:bc:ed:8f:cc:15:8a: b2:76:8f:12:3a:fe:da:48:6c:e6:dd:b2:b0:87:d3: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:51:63:7F:BD:0C:C6:4E:91:15:4C:9D:2C:D5:26:7B:63:E5:6C:C8 X509v3 Authority Key Identifier: keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:96:d4:df:97:ff:4e:1f:40:c7:ba:5e:07:52:c9:24:35:4d: 45:df:65:d4:27:71:38:cf:35:be:f1:47:e4:d3:20:fb:09:55: 44:b7:55:42:12:19:b3:b5:20:18:24:c4:19:0b:e6:51:dd:03: df:96:4b:05:df:4b:3a:2e:16:61:ed:b9:24:99:34:e0:20:39: 43:8f:3d:75:db:17:8d:16:83:31:b9:24:01:09:8f:51:c7:52: 5e:55:f1:2f:1f:be:dc:07:10:c9:ab:e4:fa:f8:54:d7:c1:61: c5:c3:37:d5:09:82:43:7a:6a:52:87:9a:45:5e:16:70:73:03: 1a:cc:69:9e:fc:6b:fe:68:5d:e0:a2:3f:1f:79:8f:0e:6b:32: 78:eb:13:07:c0:9a:7e:c8:6c:63:8d:bf:71:ad:25:54:ec:1e: 89:f4:b9:c5:af:36:ea:01:2e:85:e1:e3:28:de:d8:a1:b7:38: 11:a8:c2:2e:a1:17:4e:78:67:55:b9:af:48:4b:44:ff:66:40: 2a:46:5e:bc:7e:a1:0d:20:63:c9:eb:23:3a:93:00:55:f0:df: 45:ef:58:7f:20:2c:8e:90:ff:1b:ef:6c:13:38:3b:3c:d5:be: 8d:5c:a8:51:7a:28:19:e2:f7:d5:c9:34:fe:fc:6a:8e:86:6f: 24:fc:ba:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99HLl3PLXTN0Kz8tGVdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWUzNmJiNmZlZjkzMjhmNTE4ZTRiMTA1ZmMyMTJjMTUy YThjNjgwHhcNMjUxMjA2MTQwMTM1WhcNMjUxMjA3MTQwMTM1WjAzMTEwLwYDVQQD EyhiNjUxNjM3ZmJkMGNjNjRlOTExNTRjOWQyY2Q1MjY3YjYzZTU2Y2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNkkJTUsfTwbsWb8OrSyJSw0FuM9 F8A9zU2m4jiBBLQ5ekU5np13/MPL4xImUh7ymkluBr88UZmPgqT7UKv1bsmz3bIg q6JZHLFCY1my9zkmPPwXvADydRJ/UgmAI7sDcsdYSgACn2NPSt6YJTLKEXpjUBRy ZV1o/X5ApKL53JvY0LHywcxTLqcJPcb7ajwQoQUL7xycJtfPHeeILFvHdgEs8m2o qcaQ8oAQ/n+MfuP5rcej8IuvTqaqcAabo2Aeg1h+5TCsZwkY3jO4hVi0ZM7fmutk 1+9oaYvhSHgRBp8gpyFoOTfp8xa87Y/MFYqydo8SOv7aSGzm3bKwh9MmgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZRY3+9DMZOkRVMnSzVJntj5WzIMB8GA1UdIwQY MBaAFIueNrtv75Mo9RjksQX8ISwVKoxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEt MWExMTZhNTM0NDgzLzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80YTBlOGQtMGJiZS00MjEzLTk4YjEtMWExMTZhNTM0NDgz LzEvaTU0MnUyX3ZreWoxR09TeEJmd2hMQlVxakdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5bU35f/ Th9Ax7peB1LJJDVNRd9l1CdxOM81vvFH5NMg+wlVRLdVQhIZs7UgGCTEGQvmUd0D 35ZLBd9LOi4WYe25JJk04CA5Q489ddsXjRaDMbkkAQmPUcdSXlXxLx++3AcQyavk +vhU18FhxcM31QmCQ3pqUoeaRV4WcHMDGsxpnvxr/mhd4KI/H3mPDmsyeOsTB8Ca fshsY42/ca0lVOweifS5xa826gEuheHjKN7Yobc4EajCLqEXTnhnVbmvSEtE/2ZA KkZevH6hDSBjyesjOpMAVfDfRe9YfyAsjpD/G+9sEzg7PNW+jVyoUXooGeL31ck0 /vxqjoZvJPy6hA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:22 2025 by rpki-client