This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json) Hash identifier: kGaD7ex/ja9p0E+gg/bHlFTtkIUR8MjTpRfXA4ekDLs= Subject key identifier: 98:F3:F1:73:C9:EA:96:1E:37:17:9D:DC:9A:84:C0:3E:F0:05:01:E3 Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71 Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971 Certificate serial: 019B2C6677097B2E4B749621A48EB9EB14C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft Manifest number: 0DD4 Signing time: Wed 17 Dec 2025 13:01:11 +0000 Manifest this update: Wed 17 Dec 2025 13:01:11 +0000 Manifest next update: Thu 18 Dec 2025 13:01:11 +0000 Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: DOxpvo0feoIJ1kNc3DBzyPzjs9aRclrNnIEFm16JacM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:77:09:7b:2e:4b:74:96:21:a4:8e:b9:eb:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971 Validity Not Before: Dec 17 13:01:11 2025 GMT Not After : Dec 18 13:01:11 2025 GMT Subject: CN=98f3f173c9ea961e37179ddc9a84c03ef00501e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cf:7c:57:5a:e2:75:98:ca:5f:65:c5:02:d9: 9c:cc:13:74:74:35:be:52:60:32:b6:69:46:53:f9: 05:60:13:ea:e5:46:45:a9:26:1c:fd:d5:32:c5:04: 0f:38:6d:3f:29:83:31:87:29:e0:cb:8e:0a:be:6a: 1b:e1:78:7a:8d:7d:01:3b:97:cd:d7:54:83:dd:06: 76:8c:54:c1:ba:23:78:64:7a:60:00:e5:a6:42:31: e5:06:e0:e6:62:46:44:55:af:0d:28:97:9e:91:50: 16:db:1a:e7:59:0d:a2:53:cf:38:7b:d4:6d:b1:6f: 1d:d6:0d:b3:df:b6:55:e7:30:d1:40:07:11:fc:88: 4c:d7:e1:10:75:42:76:08:24:08:37:9e:67:be:a6: 76:93:eb:97:1c:57:b4:c9:06:2c:5c:85:de:f4:5a: 98:1e:6a:47:e2:6a:ce:5a:30:3e:be:a5:bd:c7:2c: 87:e3:c8:4c:06:14:29:56:de:bd:10:25:a8:22:08: bd:29:6b:f4:c8:09:ff:e1:0b:2e:f7:1f:b6:64:8d: 44:15:6c:45:98:01:d4:b6:a8:1e:6b:53:0c:ba:75: ee:9c:58:03:46:76:af:d8:61:7a:03:10:12:86:47: f3:d5:6b:be:95:27:21:f9:05:bd:7e:c5:2d:09:55: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F3:F1:73:C9:EA:96:1E:37:17:9D:DC:9A:84:C0:3E:F0:05:01:E3 X509v3 Authority Key Identifier: keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d5:6a:73:ea:2c:47:a3:06:d6:cc:cd:4e:10:8f:40:d1:f9: cd:20:a7:65:6c:d1:61:23:f5:04:fa:4e:1e:e4:a8:af:32:4b: 1a:b9:ad:09:64:50:e7:b3:9a:4b:62:d4:76:2b:a3:b6:48:51: d4:fd:6c:be:2b:47:5e:fc:ee:8f:76:fa:f5:ae:19:31:0c:02: 99:db:d5:06:2e:c2:9b:96:51:fa:75:a7:fa:82:0d:57:66:91: 70:d4:64:04:6c:e1:22:5b:8f:43:fd:d1:22:f2:47:b2:7d:0a: ff:4b:f3:2a:76:4f:93:ad:7d:55:25:b4:3d:55:4a:c7:69:9c: 31:c7:e9:da:56:85:83:a4:91:e2:5a:6c:90:f3:ca:19:a9:04: e1:ba:6e:76:19:ca:be:dc:36:c5:0f:c5:48:2f:ef:5c:d2:df: 69:01:77:0e:18:70:3b:23:db:88:04:0c:ef:24:36:02:cd:66: 4b:fb:ac:3f:c0:93:54:5d:48:a9:7c:a5:76:a1:cd:1b:97:40: e3:e7:f2:58:a4:1d:37:41:9d:81:b2:26:43:8f:07:03:54:1c: e5:b8:fc:19:0b:59:98:1a:34:82:16:07:55:5f:ab:5c:b3:e0: 54:eb:24:b6:c8:44:1c:cd:f1:3a:85:b4:cf:93:9c:fd:b3:c5: b4:37:42:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZncJey5LdJYhpI656xTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2Y2ZDdjNmNkODMzYmVhNWRhZWQ1NzYyNTdkMmEzNDgy ODI5NzEwHhcNMjUxMjE3MTMwMTExWhcNMjUxMjE4MTMwMTExWjAzMTEwLwYDVQQD Eyg5OGYzZjE3M2M5ZWE5NjFlMzcxNzlkZGM5YTg0YzAzZWYwMDUwMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1898V1ridZjKX2XFAtmczBN0dDW+ UmAytmlGU/kFYBPq5UZFqSYc/dUyxQQPOG0/KYMxhyngy44Kvmob4Xh6jX0BO5fN 11SD3QZ2jFTBuiN4ZHpgAOWmQjHlBuDmYkZEVa8NKJeekVAW2xrnWQ2iU884e9Rt sW8d1g2z37ZV5zDRQAcR/IhM1+EQdUJ2CCQIN55nvqZ2k+uXHFe0yQYsXIXe9FqY HmpH4mrOWjA+vqW9xyyH48hMBhQpVt69ECWoIgi9KWv0yAn/4Qsu9x+2ZI1EFWxF mAHUtqgea1MMunXunFgDRnav2GF6AxAShkfz1Wu+lSch+QW9fsUtCVXypwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjz8XPJ6pYeNxed3JqEwD7wBQHjMB8GA1UdIwQY MBaAFL4/bXxs2DO+pdrtV2JX0qNIKClxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQt NDNkMDE3MDk0ZTczLzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQtNDNkMDE3MDk0ZTcz LzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtVqc+os R6MG1szNThCPQNH5zSCnZWzRYSP1BPpOHuSorzJLGrmtCWRQ57OaS2LUdiujtkhR 1P1svitHXvzuj3b69a4ZMQwCmdvVBi7Cm5ZR+nWn+oINV2aRcNRkBGzhIluPQ/3R IvJHsn0K/0vzKnZPk619VSW0PVVKx2mcMcfp2laFg6SR4lpskPPKGakE4bpudhnK vtw2xQ/FSC/vXNLfaQF3DhhwOyPbiAQM7yQ2As1mS/usP8CTVF1IqXyldqHNG5dA 4+fyWKQdN0GdgbImQ48HA1Qc5bj8GQtZmBo0ghYHVV+rXLPgVOsktshEHM3xOoW0 z5Oc/bPFtDdC+Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:16 2025 by rpki-client