This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json) Hash identifier: G9kVAxoET7xkyaqDEEAt12FXrqCoT3WWf1sEqkk5CVk= Subject key identifier: 28:1A:F1:9C:43:BC:A3:46:E6:FB:D9:6E:E4:02:CF:93:55:D9:59:BB Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1 Certificate serial: 019AF12D2D189CE4CED05A5C79654A142129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft Manifest number: 0E48 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: ie06R8QE/aC9vbQ2qoMeqgbphnBw4WFbv6aUMkV+Jx4=) 2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2d:18:9c:e4:ce:d0:5a:5c:79:65:4a:14:21:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546de326de9522bd296bed482385c9769258d8f1 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=281af19c43bca346e6fbd96ee402cf9355d959bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:8d:3a:6b:a1:4a:96:5b:a4:de:b1:ff:39: 15:9e:32:00:d0:0d:0d:cd:1f:e8:31:d1:a4:25:ed: 37:a2:3d:02:40:0a:dd:6b:5a:35:c9:be:5b:81:6a: ed:1e:65:b4:aa:c2:8c:b4:99:a9:90:f4:57:aa:ac: 77:94:b3:ff:58:09:1e:9f:75:ba:3f:21:af:17:11: d3:f9:4a:1a:ac:4c:8e:8f:03:3e:67:fb:ba:13:c8: 90:24:47:88:36:32:90:2e:de:c7:77:11:ea:6e:e1: 28:ff:a5:2f:1b:e8:9b:cb:e1:09:be:9c:be:4a:5d: 04:67:12:0a:55:38:d0:d2:0d:8f:86:9d:3f:04:de: c4:44:47:de:a0:0b:cd:3b:32:43:16:14:3f:10:29: 40:15:47:99:12:27:45:74:43:88:63:67:71:7f:03: bb:84:8b:5a:18:ca:35:f4:e5:b7:99:ca:bf:e1:0b: 35:f9:ee:4e:d9:03:05:79:15:7b:58:5e:5e:88:53: 20:79:6d:76:30:d0:d5:82:60:c5:a8:65:a7:c6:72: 2f:c2:c2:c7:d9:10:18:2e:34:ae:b0:88:af:40:2d: c8:4b:82:58:67:8e:52:7d:bf:d1:c5:c9:2d:13:ab: df:60:21:7f:d6:cd:51:70:61:ab:2b:b4:13:de:33: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:F1:9C:43:BC:A3:46:E6:FB:D9:6E:E4:02:CF:93:55:D9:59:BB X509v3 Authority Key Identifier: keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cc:5f:78:58:93:0e:c4:0b:e3:bc:c2:7b:6b:e6:5b:45:30: 75:c1:fc:40:80:0e:e2:4d:53:af:21:e2:b8:83:a0:de:81:07: d1:e9:4f:c9:19:75:4e:95:60:f8:85:0f:69:ff:fd:a8:8e:2c: 76:13:a1:41:7f:80:ea:00:59:f5:37:1c:bf:1d:b9:70:27:4c: 37:60:17:32:e5:a3:ca:01:8a:c0:7b:0f:e2:61:f5:f6:e7:a2: 81:dc:ad:7e:f3:20:2e:5c:68:7b:8c:5e:2c:20:a1:89:9c:f9: 8d:c2:8c:e3:e9:1e:89:5d:95:83:99:53:d8:5b:1f:22:cd:ab: d2:f6:1a:86:2e:06:ec:98:af:f7:d3:43:89:25:05:d3:b6:2c: 5c:b8:8d:dc:c7:df:e2:38:81:da:d0:65:f0:58:bf:94:a6:5e: e5:23:90:82:1a:17:fc:df:24:a7:b7:03:1b:54:74:70:21:e2: 3b:a8:64:e7:42:01:07:56:dc:30:b0:7c:1f:48:48:96:37:aa: 2e:3d:93:ae:21:3d:3b:42:2b:b6:ca:bc:90:2b:cf:93:27:37: 0a:ef:7e:10:f7:92:64:a6:59:ab:8d:50:4b:8b:ee:c6:d2:3f: 7b:c1:9f:de:7b:5c:bb:98:c0:04:dc:1d:22:d0:fc:16:55:bc: 98:16:14:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS0YnOTO0FpceWVKFCEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NmRlMzI2ZGU5NTIyYmQyOTZiZWQ0ODIzODVjOTc2OTI1 OGQ4ZjEwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EygyODFhZjE5YzQzYmNhMzQ2ZTZmYmQ5NmVlNDAyY2Y5MzU1ZDk1OWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a6NOmuhSpZbpN6x/zkVnjIA0A0N zR/oMdGkJe03oj0CQArda1o1yb5bgWrtHmW0qsKMtJmpkPRXqqx3lLP/WAken3W6 PyGvFxHT+UoarEyOjwM+Z/u6E8iQJEeINjKQLt7HdxHqbuEo/6UvG+iby+EJvpy+ Sl0EZxIKVTjQ0g2Php0/BN7EREfeoAvNOzJDFhQ/EClAFUeZEidFdEOIY2dxfwO7 hItaGMo19OW3mcq/4Qs1+e5O2QMFeRV7WF5eiFMgeW12MNDVgmDFqGWnxnIvwsLH 2RAYLjSusIivQC3IS4JYZ45Sfb/RxcktE6vfYCF/1s1RcGGrK7QT3jNNUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCga8ZxDvKNG5vvZbuQCz5NV2Vm7MB8GA1UdIwQY MBaAFFRt4ybelSK9KWvtSCOFyXaSWNjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEt NDkzNzYwMWM4ZmVhLzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEtNDkzNzYwMWM4ZmVh LzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsxfeFiT DsQL47zCe2vmW0UwdcH8QIAO4k1TryHiuIOg3oEH0elPyRl1TpVg+IUPaf/9qI4s dhOhQX+A6gBZ9Tccvx25cCdMN2AXMuWjygGKwHsP4mH19ueigdytfvMgLlxoe4xe LCChiZz5jcKM4+keiV2Vg5lT2FsfIs2r0vYahi4G7Jiv99NDiSUF07YsXLiN3Mff 4jiB2tBl8Fi/lKZe5SOQghoX/N8kp7cDG1R0cCHiO6hk50IBB1bcMLB8H0hIljeq Lj2TriE9O0Irtsq8kCvPkyc3Cu9+EPeSZKZZq41QS4vuxtI/e8Gf3ntcu5jABNwd ItD8FlW8mBYUtA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:56 2025 by rpki-client