This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft File: Vr293X0J23mHNBsRBSMdQMfIorA.mft (raw, json) Hash identifier: 6ZnbW92heBhuUTto6Mw1FDOm0ErEwDGPSar0X+arbGw= Subject key identifier: 64:A0:B9:82:E0:9A:32:36:3A:AB:2B:24:8B:80:C9:78:AA:08:54:22 Authority key identifier: 56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0 Certificate issuer: /CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0 Certificate serial: 019AF1D1AA53F55391946E879655E91BB335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft Manifest number: 08C3 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: Vr293X0J23mHNBsRBSMdQMfIorA.crl (hash: PzOfplPwyVN6a0zaKv85NZidEHM2gQ9IC3bvOH97Zgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:aa:53:f5:53:91:94:6e:87:96:55:e9:1b:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=64a0b982e09a32363aab2b248b80c978aa085422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:a0:8b:56:6f:9e:e3:13:22:6e:79:1c:53: 4a:fa:02:a8:44:24:fa:be:72:24:e8:91:c7:08:27: f3:b4:7f:25:37:d6:f9:0d:6e:d4:dd:f0:5f:01:97: 04:df:06:83:b5:1b:74:5e:9d:bf:b6:4a:b6:62:fb: 11:19:07:ac:3c:35:3a:c8:69:2d:0a:29:6a:ec:68: 0e:83:4d:eb:35:27:f9:4d:c0:a4:d7:f6:4e:73:bd: 54:ae:d4:ad:ca:24:e6:db:63:f0:bc:69:98:7c:33: 7f:16:b9:fb:3d:d5:b7:00:0d:eb:e8:1a:f5:90:02: a6:73:7e:60:a5:82:26:d8:8d:65:66:a2:f8:b0:ee: de:f2:70:48:ea:5a:ce:e3:ef:7c:91:14:0d:8b:2f: 9e:7f:87:e0:76:d7:d8:91:87:04:1c:69:42:96:a9: d2:e4:32:90:95:79:7c:be:8e:19:87:54:b5:55:3e: d5:fb:9c:9e:2f:9d:cd:bf:cb:3d:5f:99:37:5c:b3: 51:3b:ed:39:cf:c9:20:82:d1:fc:36:fb:ae:48:71: fe:2d:27:d3:ef:77:ae:62:00:18:bf:c6:c6:47:34: 60:8f:23:42:79:c7:b2:f3:c4:3b:68:26:22:ef:1d: 47:8f:b9:3a:c4:82:79:36:76:18:e5:d0:99:5e:1b: e7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A0:B9:82:E0:9A:32:36:3A:AB:2B:24:8B:80:C9:78:AA:08:54:22 X509v3 Authority Key Identifier: keyid:56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:59:8f:59:87:95:77:17:44:7d:2f:03:3b:07:cd:3d:e9:ed: 0a:37:d5:4e:32:8a:2e:9c:3d:eb:53:a7:b5:df:d6:b7:e8:b2: 5f:f9:7d:a1:b6:73:fb:51:ce:ef:e4:3d:99:73:d2:ed:aa:ab: 76:15:fd:4d:a1:a9:d2:86:f2:89:ee:eb:ab:4a:6f:b7:9e:69: 41:d7:83:2a:9a:a8:fe:2a:a2:bb:3b:8e:d9:df:3d:d3:41:a4: f7:c9:38:33:2f:35:8b:86:f2:4d:7e:19:e0:46:73:7b:2c:57: 03:7d:0c:4d:53:19:7f:7b:02:c0:a7:50:2d:5c:12:0a:34:7e: 70:34:75:0f:69:ba:41:31:24:1d:f7:9f:0b:a5:82:57:f7:f7: 03:0b:d9:3d:00:60:fd:80:c4:0b:48:f9:5e:66:6f:1e:77:2e: ac:db:1a:4c:c3:b5:12:95:4e:e7:33:70:a5:76:04:81:4f:10: 65:32:76:02:cd:1a:f3:54:fb:8a:ea:a3:f7:91:dc:85:74:99: 10:24:5a:17:ab:f6:b7:5c:32:c5:b6:aa:61:ec:33:51:db:9b: 76:46:72:70:55:93:00:30:32:a8:76:d7:88:6e:0c:d8:fa:a6: 5b:37:b2:5e:7f:76:55:6d:07:cf:a1:d2:16:80:63:af:c0:b4: 86:b2:ad:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0apT9VORlG6HllXpG7M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YmRiZGRkN2QwOWRiNzk4NzM0MWIxMTA1MjMxZDQwYzdj OGEyYjAwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg2NGEwYjk4MmUwOWEzMjM2M2FhYjJiMjQ4YjgwYzk3OGFhMDg1NDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLugi1ZvnuMTIm55HFNK+gKoRCT6 vnIk6JHHCCfztH8lN9b5DW7U3fBfAZcE3waDtRt0Xp2/tkq2YvsRGQesPDU6yGkt Cilq7GgOg03rNSf5TcCk1/ZOc71UrtStyiTm22PwvGmYfDN/Frn7PdW3AA3r6Br1 kAKmc35gpYIm2I1lZqL4sO7e8nBI6lrO4+98kRQNiy+ef4fgdtfYkYcEHGlClqnS 5DKQlXl8vo4Zh1S1VT7V+5yeL53Nv8s9X5k3XLNRO+05z8kggtH8NvuuSHH+LSfT 73euYgAYv8bGRzRgjyNCecey88Q7aCYi7x1Hj7k6xIJ5NnYY5dCZXhvnRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSguYLgmjI2OqsrJIuAyXiqCFQiMB8GA1UdIwQY MBaAFFa9vd19Cdt5hzQbEQUjHUDHyKKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnIyOTNYMEoyM21ITkJzUkJTTWRRTWZJb3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMTAzNWQtNTAwNi00MGRkLTkwYjUt ZTkwOWE0OWUxYjcxLzEvVnIyOTNYMEoyM21ITkJzUkJTTWRRTWZJb3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMTAzNWQtNTAwNi00MGRkLTkwYjUtZTkwOWE0OWUxYjcx LzEvVnIyOTNYMEoyM21ITkJzUkJTTWRRTWZJb3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1mPWYeV dxdEfS8DOwfNPentCjfVTjKKLpw961Ontd/Wt+iyX/l9obZz+1HO7+Q9mXPS7aqr dhX9TaGp0obyie7rq0pvt55pQdeDKpqo/iqiuzuO2d8900Gk98k4My81i4byTX4Z 4EZzeyxXA30MTVMZf3sCwKdQLVwSCjR+cDR1D2m6QTEkHfefC6WCV/f3AwvZPQBg /YDEC0j5XmZvHncurNsaTMO1EpVO5zNwpXYEgU8QZTJ2As0a81T7iuqj95HchXSZ ECRaF6v2t1wyxbaqYewzUdubdkZycFWTADAyqHbXiG4M2PqmWzeyXn92VW0Hz6HS FoBjr8C0hrKt+w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:01 2025 by rpki-client