This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft File: vwsqDaqOVGfNM-lIJaeGMyLThT4.mft (raw, json) Hash identifier: 5FcpsaXqSgtZ94nZNFXOgnhz+0+Ce/l9m2zCN3Z+SQQ= Subject key identifier: 32:AE:D1:C3:13:F8:9B:33:9D:3D:CC:75:90:50:32:A7:3D:46:2E:F2 Authority key identifier: BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E Certificate issuer: /CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e Certificate serial: 019AF1D18BEB506E47CE3A7ACEAB50785913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft Manifest number: 2D Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: YnVixS9QBSNC1Xd1ey8mGokC-Ds.roa (hash: eDkLHOySAjp0NYwilNk4so4mTyd47A0v6j4fqq/qTBo=) 2: _q95QGktBeaejm8XuHwJspqn26w.roa (hash: ZSUCS6tPG9DZgxCUv1bJms098kV8051ECQpKbYkAKVc=) 3: vwsqDaqOVGfNM-lIJaeGMyLThT4.crl (hash: 5BOJg097HFztzCCvo6RA6Ey66YmspON3S9TPWb33C4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8b:eb:50:6e:47:ce:3a:7a:ce:ab:50:78:59:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf0b2a0daa8e5467cd33e94825a7863322d3853e Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=32aed1c313f89b339d3dcc75905032a73d462ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:90:e8:34:c0:bf:90:ef:aa:85:86:d5:7f: c4:3b:de:6c:31:b7:91:15:73:5c:ad:82:3b:ce:a4: e6:8a:26:c7:7b:22:48:77:71:a8:2a:68:d9:a7:a5: 09:34:e2:59:77:bf:db:77:b8:28:ec:f2:65:2c:68: 17:75:d3:19:89:f0:e0:c1:2a:99:77:75:ce:ed:f2: 85:a6:d0:ce:fa:89:99:bf:9c:9f:54:0f:82:67:43: 25:f0:1d:bc:77:83:9d:6e:28:ba:3c:9c:17:50:9e: ef:1f:6c:56:37:77:59:7c:0f:68:39:79:96:6a:3a: 51:87:ac:73:ca:ae:da:d3:bb:a3:e8:d0:4a:40:1f: 5c:ed:3d:a3:34:f2:d8:4c:0e:73:63:54:2a:db:a8: cb:99:ce:92:e2:0e:65:26:e4:32:8d:9b:94:68:da: 57:67:b8:43:c6:8e:7e:7b:93:27:4e:67:95:ed:cd: 26:3a:10:a0:ca:5b:68:b8:36:1e:7a:18:0f:ee:58: 22:3b:77:1e:ab:ff:68:81:3c:e4:ba:fd:bb:39:24: 76:59:6d:51:28:28:ba:f3:c9:57:37:07:4a:37:c0: 11:4a:35:47:8c:19:1a:b4:86:05:d5:a8:92:61:8b: 69:48:60:1a:6b:b7:57:13:90:36:53:da:d4:c4:11: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AE:D1:C3:13:F8:9B:33:9D:3D:CC:75:90:50:32:A7:3D:46:2E:F2 X509v3 Authority Key Identifier: keyid:BF:0B:2A:0D:AA:8E:54:67:CD:33:E9:48:25:A7:86:33:22:D3:85:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwsqDaqOVGfNM-lIJaeGMyLThT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f4478b-b6f3-40c2-b858-2c333a5a1646/1/vwsqDaqOVGfNM-lIJaeGMyLThT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:19:c1:53:02:45:89:65:eb:d3:f9:7e:b0:03:49:33:63:bc: b4:62:df:7c:43:37:87:95:b6:02:8f:12:3e:fe:4f:15:d9:e6: d9:6e:58:05:ec:3e:0d:27:25:b4:96:4e:0b:0b:de:1b:7a:fc: a6:4b:58:e9:dd:ce:5a:8b:2a:fe:07:1f:1f:3c:97:a0:07:62: 35:14:b4:33:ab:16:6a:b9:58:14:65:97:a8:cd:f8:0f:59:9b: 7f:3f:1c:35:49:54:c4:c7:d5:6d:d5:52:96:48:39:ef:bc:b6: d7:1d:f0:9d:07:51:70:09:66:c6:a0:df:45:b4:36:01:f5:bd: 31:9f:67:68:68:d3:d5:65:7c:3f:93:17:94:9c:fe:62:c5:04: f0:13:e0:f6:c2:79:9d:4d:2c:7a:3d:b7:8d:53:96:36:79:82: f8:02:ce:fa:39:bf:aa:8c:a9:5a:ab:07:47:20:4c:cb:67:1a: 0a:d7:d2:89:35:35:9b:6d:4b:4c:18:01:65:b1:c4:62:e5:74: 22:10:12:b3:57:d7:db:13:e4:58:e9:74:14:a6:66:ac:3d:de: 23:23:bd:2a:4a:e4:97:f0:73:e7:a2:dc:7b:29:d7:9e:4d:4e: 94:99:73:dc:7c:07:e3:ef:99:43:43:23:82:a5:1b:26:56:01: c2:0c:26:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YvrUG5Hzjp6zqtQeFkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMGIyYTBkYWE4ZTU0NjdjZDMzZTk0ODI1YTc4NjMzMjJk Mzg1M2UwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EygzMmFlZDFjMzEzZjg5YjMzOWQzZGNjNzU5MDUwMzJhNzNkNDYyZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O6Q6DTAv5DvqoWG1X/EO95sMbeR FXNcrYI7zqTmiibHeyJId3GoKmjZp6UJNOJZd7/bd7go7PJlLGgXddMZifDgwSqZ d3XO7fKFptDO+omZv5yfVA+CZ0Ml8B28d4Odbii6PJwXUJ7vH2xWN3dZfA9oOXmW ajpRh6xzyq7a07uj6NBKQB9c7T2jNPLYTA5zY1Qq26jLmc6S4g5lJuQyjZuUaNpX Z7hDxo5+e5MnTmeV7c0mOhCgyltouDYeehgP7lgiO3ceq/9ogTzkuv27OSR2WW1R KCi688lXNwdKN8ARSjVHjBkatIYF1aiSYYtpSGAaa7dXE5A2U9rUxBFSYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKu0cMT+JsznT3MdZBQMqc9Ri7yMB8GA1UdIwQY MBaAFL8LKg2qjlRnzTPpSCWnhjMi04U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdndzcURhcU9WR2ZOTS1sSUphZUdNeUxUaFQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDQ3OGItYjZmMy00MGMyLWI4NTgt MmMzMzNhNWExNjQ2LzEvdndzcURhcU9WR2ZOTS1sSUphZUdNeUxUaFQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNDQ3OGItYjZmMy00MGMyLWI4NTgtMmMzMzNhNWExNjQ2 LzEvdndzcURhcU9WR2ZOTS1sSUphZUdNeUxUaFQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRnBUwJF iWXr0/l+sANJM2O8tGLffEM3h5W2Ao8SPv5PFdnm2W5YBew+DScltJZOCwveG3r8 pktY6d3OWosq/gcfHzyXoAdiNRS0M6sWarlYFGWXqM34D1mbfz8cNUlUxMfVbdVS lkg577y21x3wnQdRcAlmxqDfRbQ2AfW9MZ9naGjT1WV8P5MXlJz+YsUE8BPg9sJ5 nU0sej23jVOWNnmC+ALO+jm/qoypWqsHRyBMy2caCtfSiTU1m21LTBgBZbHEYuV0 IhASs1fX2xPkWOl0FKZmrD3eIyO9Kkrkl/Bz56LceynXnk1OlJlz3HwH4++ZQ0Mj gqUbJlYBwgwmTA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:38 2025 by rpki-client