This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json) Hash identifier: +3ECtwjOmvkvYpGsyFovb/9UGi1nMm/5Q40iW+TBMe4= Subject key identifier: C3:B5:0C:28:E4:53:18:15:22:33:63:95:28:7D:83:3F:AD:C9:28:C7 Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d Certificate serial: 019AF31B2C1CEE34A0B33CAAA7098D658379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft Manifest number: 0A51 Signing time: Sat 06 Dec 2025 10:00:35 +0000 Manifest this update: Sat 06 Dec 2025 10:00:35 +0000 Manifest next update: Sun 07 Dec 2025 10:00:35 +0000 Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: DeyG7kZ9hriX/AusDCi+hZqcf80arclkmGWiq2suqUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:2c:1c:ee:34:a0:b3:3c:aa:a7:09:8d:65:83:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d Validity Not Before: Dec 6 10:00:35 2025 GMT Not After : Dec 7 10:00:35 2025 GMT Subject: CN=c3b50c28e453181522336395287d833fadc928c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:7c:c1:35:be:2c:b1:d4:ac:14:21:95:e7: 73:fe:79:b9:56:93:1c:e4:0c:d1:dd:73:3a:7d:ed: 0f:fa:5f:07:fe:64:56:cc:95:7d:90:66:b6:05:26: 7d:f6:bf:92:c1:34:3b:d4:02:e0:dc:12:78:7f:7c: 8c:5a:46:22:d5:a5:79:d1:a0:61:cd:d8:c1:c5:1d: c9:18:1d:64:e7:29:e7:7a:41:8a:8c:e0:37:7a:f6: 5f:11:7f:e8:a8:b8:ce:30:49:93:28:ed:be:a8:ba: 7b:18:9e:ad:75:64:51:f6:c5:6d:25:5b:c1:4b:d8: f2:b4:bd:e7:fb:3b:57:62:2e:15:b3:2f:2f:1e:e0: 41:af:1d:7b:53:60:de:3a:fd:d3:73:9d:b1:73:d0: 11:1a:dd:80:22:dc:53:5f:1c:9e:53:36:55:5a:4f: 16:55:8e:d1:79:e6:07:b0:ec:42:83:b2:0c:96:2f: 36:b1:d1:e5:20:50:d3:eb:67:74:34:0e:ed:bf:82: c4:80:9a:b8:c6:a3:3a:ab:15:da:ec:73:85:a3:61: bc:ab:5d:9f:9d:5e:4c:41:bd:70:1e:37:74:21:6e: 17:41:5c:14:d5:b2:bc:73:3c:f3:0f:a5:7b:80:fd: ec:67:20:56:de:a4:27:bc:db:54:1d:75:2a:a9:a8: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B5:0C:28:E4:53:18:15:22:33:63:95:28:7D:83:3F:AD:C9:28:C7 X509v3 Authority Key Identifier: keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7f:2a:ab:ef:0e:0b:42:74:7c:73:dc:3a:a2:af:b6:86:2e: 92:83:d6:c2:6c:19:dc:b6:78:45:c0:a7:4d:1b:25:87:8c:93: 07:ce:19:c5:97:17:2b:d7:31:40:a6:87:0a:43:ab:87:50:fb: 39:49:5a:98:44:fa:91:64:82:1c:29:27:7c:ae:98:81:2f:b7: e1:dc:8e:da:8f:7c:e2:dc:30:ea:4a:a5:e6:12:56:26:38:17: 56:92:b7:a7:95:0b:ba:83:a0:ee:d7:e5:d8:d0:20:f5:54:9e: de:69:3c:67:d9:a0:ee:06:ad:26:ff:42:bd:f9:7e:a5:db:02: 96:19:3b:dc:c1:f2:55:4e:d4:bf:c5:5a:dc:47:16:dc:b3:7c: 29:88:4f:d3:53:6a:66:64:10:ae:99:8d:a9:60:d6:2a:c8:95: 20:4b:6c:78:2d:6a:0a:fb:62:5e:c0:58:d4:e3:1f:e8:fc:cd: 74:f2:62:25:79:52:83:32:aa:cc:90:c6:ff:63:13:2a:61:05: 78:93:13:1c:bf:08:c2:30:85:fa:f6:92:2f:c9:f2:b0:b1:55: d1:af:2a:be:b4:6f:1b:b8:c0:3c:cc:95:75:4c:8d:b7:1f:83: 8c:99:39:f3:8f:5e:7d:97:c3:c0:d2:13:15:05:c5:83:47:fb: 4f:52:dd:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGywc7jSgszyqpwmNZYN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx NDY0NWQwHhcNMjUxMjA2MTAwMDM1WhcNMjUxMjA3MTAwMDM1WjAzMTEwLwYDVQQD EyhjM2I1MGMyOGU0NTMxODE1MjIzMzYzOTUyODdkODMzZmFkYzkyOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EV8wTW+LLHUrBQhledz/nm5VpMc 5AzR3XM6fe0P+l8H/mRWzJV9kGa2BSZ99r+SwTQ71ALg3BJ4f3yMWkYi1aV50aBh zdjBxR3JGB1k5ynnekGKjOA3evZfEX/oqLjOMEmTKO2+qLp7GJ6tdWRR9sVtJVvB S9jytL3n+ztXYi4Vsy8vHuBBrx17U2DeOv3Tc52xc9ARGt2AItxTXxyeUzZVWk8W VY7ReeYHsOxCg7IMli82sdHlIFDT62d0NA7tv4LEgJq4xqM6qxXa7HOFo2G8q12f nV5MQb1wHjd0IW4XQVwU1bK8czzzD6V7gP3sZyBW3qQnvNtUHXUqqajFsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMO1DCjkUxgVIjNjlSh9gz+tySjHMB8GA1UdIwQY MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2 LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon8qq+8O C0J0fHPcOqKvtoYukoPWwmwZ3LZ4RcCnTRslh4yTB84ZxZcXK9cxQKaHCkOrh1D7 OUlamET6kWSCHCknfK6YgS+34dyO2o984tww6kql5hJWJjgXVpK3p5ULuoOg7tfl 2NAg9VSe3mk8Z9mg7gatJv9Cvfl+pdsClhk73MHyVU7Uv8Va3EcW3LN8KYhP01Nq ZmQQrpmNqWDWKsiVIEtseC1qCvtiXsBY1OMf6PzNdPJiJXlSgzKqzJDG/2MTKmEF eJMTHL8IwjCF+vaSL8nysLFV0a8qvrRvG7jAPMyVdUyNtx+DjJk5849efZfDwNIT FQXFg0f7T1LdUg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:41 2025 by rpki-client