This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft File: VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json) Hash identifier: 8FY4+FBjBXztAhWwW1YdkTigz9YXV6vtFvHWScr7U+k= Subject key identifier: 81:9A:6C:74:85:8F:F2:2D:86:53:3C:BE:7A:74:19:C8:F9:82:50:DF Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED Certificate issuer: /CN=5695c54a09593ddc83face12db52bf6a22b976ed Certificate serial: 019AF2AD9C5823B4FD754E118F340C8ACD3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft Manifest number: 0873 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: VOCwh1utjz1n3G0fRSWrGdBLX3E.roa (hash: N86Thb+Z2Cee2FUQYjZTboBPyhDY9zRcG/ZzIf2sbhE=) 2: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: YifBJ4zoq4QR167PcNd37VyYNPHOrhpJ4t42PleMUSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9c:58:23:b4:fd:75:4e:11:8f:34:0c:8a:cd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=819a6c74858ff22d86533cbe7a7419c8f98250df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:94:f0:fd:98:7f:8b:6d:3c:0d:61:d4:9a: 3b:66:a7:3c:ec:fa:38:31:a2:0d:71:36:53:45:7d: c6:50:6d:ea:ae:f8:5e:b3:04:fe:73:2b:ac:03:a3: e3:94:fa:9a:7d:18:5e:0f:2f:b0:0a:92:cb:76:c6: 48:32:6d:7f:ed:00:a4:e2:2c:b8:9d:df:6c:03:69: e5:1a:f5:c2:fb:1f:81:d5:78:ca:4b:ac:1b:73:57: 31:f3:59:cd:2e:3f:ba:3c:85:5c:25:bc:1b:c8:33: 63:3a:6e:06:e3:4e:21:9f:c5:77:0e:1d:91:98:88: c4:ee:49:ce:da:94:9b:02:b2:b2:a3:fd:79:cf:0c: 33:0e:c7:9f:00:99:92:fb:e8:27:cf:ae:94:f1:1c: 80:d4:66:b4:68:63:61:29:9f:8c:6f:0d:f0:47:bf: 77:46:07:8a:39:a3:0e:e0:ab:4c:4d:a5:18:6b:68: 4a:e1:31:a6:ea:7f:cd:f7:e1:a0:d2:d7:58:68:f1: fe:de:17:4f:c6:d4:93:23:01:db:12:44:b3:6e:dd: 93:0d:d4:a0:95:0c:b8:ac:65:fd:c2:6d:c1:4f:39: c7:b9:e9:3b:3b:84:71:42:4d:af:dc:46:b6:d1:fa: d6:73:63:81:b3:60:03:54:f3:a2:c4:20:28:76:89: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:6C:74:85:8F:F2:2D:86:53:3C:BE:7A:74:19:C8:F9:82:50:DF X509v3 Authority Key Identifier: keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:93:d8:04:84:80:d8:78:fd:ff:51:d8:d3:2a:f1:23:f0:fb: 9d:bc:2a:74:03:66:9e:4e:8c:02:65:75:9d:f6:14:d3:4b:90: 28:2f:cd:5a:d9:73:a4:c8:5f:92:10:60:f1:98:96:eb:61:bd: a3:a3:58:9c:06:a8:9c:bf:09:8e:80:58:f2:44:3f:41:e4:cf: 5c:9f:e8:ae:c9:f6:c2:36:aa:41:1e:c9:a8:b5:27:17:70:11: 16:84:a6:14:85:42:16:ea:3e:28:82:63:80:8d:18:c4:03:e3: d2:dc:ff:bb:89:ef:6f:5e:61:03:1b:65:88:eb:f5:24:22:87: 15:bf:1c:e3:d1:19:9e:b5:c4:4e:40:8d:79:22:fe:4b:2e:67: 2b:d8:28:c7:8d:1b:aa:21:fa:57:d4:53:1b:75:50:55:ef:e8: 49:c8:e6:2d:41:bc:33:70:41:fe:64:4f:3b:8a:8f:7d:9c:51: 8a:d3:6d:64:53:e5:37:0f:ef:f2:12:3f:c7:38:cc:30:60:ae: e5:c4:17:a6:7f:ba:11:04:ce:0c:03:0a:ac:42:d2:56:b7:8e: c3:cd:ad:c7:df:52:b4:bc:f5:60:46:0c:31:d2:1b:a5:88:7c: 91:bb:05:af:4b:44:1a:11:fe:5f:1c:73:30:b7:71:c1:47:0d: de:85:eb:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZxYI7T9dU4RjzQMis06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OTVjNTRhMDk1OTNkZGM4M2ZhY2UxMmRiNTJiZjZhMjJi OTc2ZWQwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD Eyg4MTlhNmM3NDg1OGZmMjJkODY1MzNjYmU3YTc0MTljOGY5ODI1MGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmieU8P2Yf4ttPA1h1Jo7Zqc87Po4 MaINcTZTRX3GUG3qrvheswT+cyusA6PjlPqafRheDy+wCpLLdsZIMm1/7QCk4iy4 nd9sA2nlGvXC+x+B1XjKS6wbc1cx81nNLj+6PIVcJbwbyDNjOm4G404hn8V3Dh2R mIjE7knO2pSbArKyo/15zwwzDsefAJmS++gnz66U8RyA1Ga0aGNhKZ+Mbw3wR793 RgeKOaMO4KtMTaUYa2hK4TGm6n/N9+Gg0tdYaPH+3hdPxtSTIwHbEkSzbt2TDdSg lQy4rGX9wm3BTznHuek7O4RxQk2v3Ea20frWc2OBs2ADVPOixCAodon/4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGabHSFj/IthlM8vnp0Gcj5glDfMB8GA1UdIwQY MBaAFFaVxUoJWT3cg/rOEttSv2oiuXbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUt ZTNmYTllNjNiOWJjLzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUtZTNmYTllNjNiOWJj LzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZPYBISA 2Hj9/1HY0yrxI/D7nbwqdANmnk6MAmV1nfYU00uQKC/NWtlzpMhfkhBg8ZiW62G9 o6NYnAaonL8JjoBY8kQ/QeTPXJ/orsn2wjaqQR7JqLUnF3ARFoSmFIVCFuo+KIJj gI0YxAPj0tz/u4nvb15hAxtliOv1JCKHFb8c49EZnrXETkCNeSL+Sy5nK9gox40b qiH6V9RTG3VQVe/oScjmLUG8M3BB/mRPO4qPfZxRitNtZFPlNw/v8hI/xzjMMGCu 5cQXpn+6EQTODAMKrELSVreOw82tx99StLz1YEYMMdIbpYh8kbsFr0tEGhH+Xxxz MLdxwUcN3oXrwA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:14 2025 by rpki-client