This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft File: VdODtoo-r7MMJ7oMTGnworlQ3MU.mft (raw, json) Hash identifier: 6rUB+21DEVnFzu1yPnm2/7dVwSO13mN5WL4UbjNkKYw= Subject key identifier: AA:6D:EA:FA:C1:B6:48:B7:1C:5D:88:36:B8:1F:8B:4A:07:70:2E:88 Authority key identifier: 55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5 Certificate issuer: /CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5 Certificate serial: 019AF0BF8D31AFBF8B2E9CA01D184867F5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft Manifest number: E3 Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: VdODtoo-r7MMJ7oMTGnworlQ3MU.crl (hash: kwr4nejd7QGunPKKRBws9k/7bTFCxNjetNlp+0Z+aeg=) 2: _ibmZHaelkcyc4omh-Qm8NJPUxk.roa (hash: 6dSWb0nF2DGjmt5A4wFgvT5vOxkwCq5uvr2uq8+cBaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8d:31:af:bf:8b:2e:9c:a0:1d:18:48:67:f5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5 Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=aa6deafac1b648b71c5d8836b81f8b4a07702e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:ba:2a:63:98:13:53:ce:5c:9c:7f:43:b6: 84:d6:f6:bb:4c:ea:3a:98:cb:b6:e7:6b:61:ab:06: cc:33:1b:b2:83:6b:25:53:f6:04:59:1b:91:4d:e6: a0:6e:06:ce:39:ef:9d:aa:e7:54:10:1d:10:5e:64: 81:5b:1a:c8:ab:11:36:e7:97:94:9f:38:80:eb:f1: 65:a7:14:ff:3b:41:83:03:c5:c8:cc:8a:f4:f0:8d: fd:eb:c1:18:64:74:d4:c9:5d:d3:e1:f1:97:32:a3: 55:da:39:52:65:28:f7:9a:38:2e:42:5e:49:c1:0a: 6f:1f:a5:69:75:6e:c2:eb:26:07:9b:e7:65:97:c4: 26:71:1b:aa:7d:ce:3e:06:c1:8b:ec:f7:4e:c1:b4: 15:36:a0:db:e7:4e:9c:c0:a8:c6:e5:85:77:9a:e2: 31:06:08:0c:c3:01:ea:50:46:5b:ab:84:f9:a4:48: 06:64:ca:3a:ee:70:94:e5:8b:83:2e:46:99:33:13: fa:6a:c2:88:e5:ec:f5:79:09:05:ee:de:ee:50:97: 59:17:1b:db:2f:c1:c7:db:9f:fa:ac:32:5e:17:bb: cf:9b:74:fe:29:63:7e:71:b5:c0:69:71:0f:f2:de: 06:4d:8d:c3:50:88:ad:6e:33:61:d4:c1:92:3a:fb: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6D:EA:FA:C1:B6:48:B7:1C:5D:88:36:B8:1F:8B:4A:07:70:2E:88 X509v3 Authority Key Identifier: keyid:55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:57:d6:28:b3:11:a3:10:df:86:0b:e9:08:32:d1:ac:ba:5f: 94:8b:3b:37:6a:c8:ad:90:cf:cf:45:5f:f2:f4:c1:0e:73:e7: dd:b9:8b:4b:33:f5:f9:d1:58:6e:4b:aa:1f:43:e6:b8:a7:88: b3:26:59:49:19:5d:1e:c7:c5:13:18:60:0a:ae:ab:17:8d:0a: 9e:73:50:6b:a6:75:fc:de:9d:00:25:32:6a:d6:b2:ac:dd:66: a6:05:a6:1c:c2:d6:da:29:54:57:e2:1a:76:37:24:1d:61:27: 0e:63:65:bd:c2:37:47:94:3c:f2:bb:39:d4:5f:a8:90:db:69: ca:58:28:b4:16:6b:76:4f:31:d1:1d:cd:f8:eb:9c:e6:5c:25: d4:b9:f2:5f:87:f5:37:49:73:e5:2d:75:b8:68:f7:77:2c:bc: bd:fa:1a:ce:6b:31:dc:fb:ae:57:0f:b8:a1:ab:bc:5e:ab:2e: c6:f9:a0:ea:ba:3f:2e:54:ee:f7:fe:08:9d:15:97:90:b4:81: 0a:d2:37:6e:8d:70:55:10:58:c3:85:79:cd:cf:9e:0c:ae:c6: 2b:78:72:54:39:a3:c8:13:c5:6d:f2:ea:81:6b:51:fb:42:6a: 69:61:50:80:4f:43:56:be:5c:fa:4d:5a:9c:f7:ce:b4:e1:0a: af:dc:e4:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv40xr7+LLpygHRhIZ/XwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDM4M2I2OGEzZWFmYjMwYzI3YmEwYzRjNjlmMGEyYjk1 MGRjYzUwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EyhhYTZkZWFmYWMxYjY0OGI3MWM1ZDg4MzZiODFmOGI0YTA3NzAyZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7m6KmOYE1POXJx/Q7aE1va7TOo6 mMu252thqwbMMxuyg2slU/YEWRuRTeagbgbOOe+dqudUEB0QXmSBWxrIqxE255eU nziA6/FlpxT/O0GDA8XIzIr08I3968EYZHTUyV3T4fGXMqNV2jlSZSj3mjguQl5J wQpvH6VpdW7C6yYHm+dll8QmcRuqfc4+BsGL7PdOwbQVNqDb506cwKjG5YV3muIx BggMwwHqUEZbq4T5pEgGZMo67nCU5YuDLkaZMxP6asKI5ez1eQkF7t7uUJdZFxvb L8HH25/6rDJeF7vPm3T+KWN+cbXAaXEP8t4GTY3DUIitbjNh1MGSOvvpOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpt6vrBtki3HF2INrgfi0oHcC6IMB8GA1UdIwQY MBaAFFXTg7aKPq+zDCe6DExp8KK5UNzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAt MGYwZmMzNTM0N2ZmLzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jZmQ2MDktOThjNy00NGE3LWI0ODAtMGYwZmMzNTM0N2Zm LzEvVmRPRHRvby1yN01NSjdvTVRHbndvcmxRM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1fWKLMR oxDfhgvpCDLRrLpflIs7N2rIrZDPz0Vf8vTBDnPn3bmLSzP1+dFYbkuqH0PmuKeI syZZSRldHsfFExhgCq6rF40KnnNQa6Z1/N6dACUyatayrN1mpgWmHMLW2ilUV+Ia djckHWEnDmNlvcI3R5Q88rs51F+okNtpylgotBZrdk8x0R3N+Ouc5lwl1LnyX4f1 N0lz5S11uGj3dyy8vfoazmsx3PuuVw+4oau8Xqsuxvmg6ro/LlTu9/4InRWXkLSB CtI3bo1wVRBYw4V5zc+eDK7GK3hyVDmjyBPFbfLqgWtR+0JqaWFQgE9DVr5c+k1a nPfOtOEKr9zkoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:45 2025 by rpki-client