This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft File: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json) Hash identifier: UDAmEhR/iV+/coG27WILlFjuMK+KUpIZRqaci+IZDeE= Subject key identifier: C7:FD:57:6A:E5:55:3D:2E:0B:B5:01:3B:6E:C9:32:14:1B:50:21:53 Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 Certificate issuer: /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Certificate serial: 019AF65355AAA3F48871A0559DA98D5983C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft Manifest number: 01D6 Signing time: Sun 07 Dec 2025 01:00:47 +0000 Manifest this update: Sun 07 Dec 2025 01:00:47 +0000 Manifest next update: Mon 08 Dec 2025 01:00:47 +0000 Files and hashes: 1: 0KZX05rL8h9xkUYSwRaJ35ZtOBw.roa (hash: 0p1i5WbBLqVZcu2ejejVhnVH/tBsiXUpsUEhbMpG3eU=) 2: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: 5a4MR4YaWZTEyPQ4qt+pjlcq/c65MCwWL25utWOvoc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:55:aa:a3:f4:88:71:a0:55:9d:a9:8d:59:83:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Validity Not Before: Dec 7 01:00:47 2025 GMT Not After : Dec 8 01:00:47 2025 GMT Subject: CN=c7fd576ae5553d2e0bb5013b6ec932141b502153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:cf:d1:e8:e2:29:4e:34:3a:dd:15:e6:5a: fb:77:c8:00:78:16:2e:bf:7f:56:01:85:14:7e:cb: 2c:58:8f:88:e8:0e:77:34:78:43:5c:65:7b:61:fc: 1a:22:89:5b:a1:9a:40:47:bd:f5:3a:bb:31:6d:4c: 43:54:46:fa:20:85:f5:2d:fa:1c:07:6e:52:72:95: 40:2a:cf:5c:94:42:2e:f6:97:d7:f5:fb:62:9d:41: 20:df:9d:d5:81:47:e8:65:f1:7a:9a:f0:ed:81:57: 5a:59:0c:a7:1d:a1:fb:c0:ea:59:26:69:ed:b5:3c: 0e:2e:53:32:d8:6f:d8:33:71:20:5d:4b:96:8c:31: 9a:c9:e9:1d:69:05:2a:84:72:97:58:8d:30:8c:17: 2c:b4:85:b0:9f:03:26:6f:fd:de:06:07:fa:eb:23: b0:80:98:49:1d:ba:2e:79:86:e8:59:3d:ce:df:dc: a5:3c:51:62:50:10:71:48:0c:91:5f:5f:46:26:0a: 26:d4:b4:84:09:43:36:2e:31:8e:a9:ae:c6:0d:cf: 9f:c7:df:44:f8:29:33:c3:8f:f4:7d:4d:bd:87:fc: ef:18:df:e4:03:f5:3f:89:0c:9e:60:8f:41:99:7e: 9b:ba:3b:ca:0f:5c:c3:d6:40:41:65:d2:7a:e4:e3: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FD:57:6A:E5:55:3D:2E:0B:B5:01:3B:6E:C9:32:14:1B:50:21:53 X509v3 Authority Key Identifier: keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ef:58:e1:2f:e8:9d:2d:84:db:76:14:24:1a:5d:51:9c:4a: c4:41:4c:bc:55:98:21:76:5f:bf:1b:fb:f2:d4:66:db:dd:33: 76:01:78:d0:60:c6:97:5c:ed:ad:c6:94:14:ba:97:14:01:89: cd:73:8d:31:50:a8:40:09:53:85:9f:d6:99:c1:5d:7f:65:6b: ce:08:10:1f:2f:61:c2:15:3f:b9:08:68:05:ac:d8:af:19:c8: 72:b6:cc:47:1e:fe:39:6e:26:7b:5d:33:1b:4b:97:b7:95:d0: 66:3c:45:92:a3:ff:50:49:3c:d9:e3:c6:a7:cf:bc:d7:fd:bf: bc:37:c6:d0:66:b2:97:b0:23:39:9d:7e:5c:c3:da:dc:21:e2: f7:60:ec:c4:0b:e3:45:f2:d2:3e:89:30:7a:3b:2e:9a:95:ef: b1:ce:66:28:49:95:83:54:9f:4d:6d:d4:53:84:e6:65:26:7b: a7:e5:8a:6f:6b:f1:0e:15:45:bc:6a:48:17:96:2f:a4:ed:f7: 3c:4f:ee:b7:71:af:b8:15:41:f8:b8:ca:51:9e:9f:18:7f:73: 25:46:37:a6:63:e5:fb:84:51:b0:24:76:13:ac:7e:97:3d:c1: b6:e1:d9:d9:e8:2a:7f:06:71:6d:27:79:c6:fe:c8:48:54:0b: 9b:51:dd:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U1Wqo/SIcaBVnamNWYPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZGViMWQ2YTM3N2FjOWQxZjViODg4YzVjZDFkNDAwYzc5 OTcyNzEwHhcNMjUxMjA3MDEwMDQ3WhcNMjUxMjA4MDEwMDQ3WjAzMTEwLwYDVQQD EyhjN2ZkNTc2YWU1NTUzZDJlMGJiNTAxM2I2ZWM5MzIxNDFiNTAyMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS7P0ejiKU40Ot0V5lr7d8gAeBYu v39WAYUUfsssWI+I6A53NHhDXGV7YfwaIolboZpAR731OrsxbUxDVEb6IIX1Lfoc B25ScpVAKs9clEIu9pfX9ftinUEg353VgUfoZfF6mvDtgVdaWQynHaH7wOpZJmnt tTwOLlMy2G/YM3EgXUuWjDGayekdaQUqhHKXWI0wjBcstIWwnwMmb/3eBgf66yOw gJhJHboueYboWT3O39ylPFFiUBBxSAyRX19GJgom1LSECUM2LjGOqa7GDc+fx99E +Ckzw4/0fU29h/zvGN/kA/U/iQyeYI9BmX6bujvKD1zD1kBBZdJ65ONvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf9V2rlVT0uC7UBO27JMhQbUCFTMB8GA1UdIwQY MBaAFFTesdajd6ydH1uIjFzR1ADHmXJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2It YjMzNmYzMWU0YTc0LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2ItYjMzNmYzMWU0YTc0 LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMO9Y4S/o nS2E23YUJBpdUZxKxEFMvFWYIXZfvxv78tRm290zdgF40GDGl1ztrcaUFLqXFAGJ zXONMVCoQAlThZ/WmcFdf2VrzggQHy9hwhU/uQhoBazYrxnIcrbMRx7+OW4me10z G0uXt5XQZjxFkqP/UEk82ePGp8+81/2/vDfG0Gayl7AjOZ1+XMPa3CHi92DsxAvj RfLSPokwejsumpXvsc5mKEmVg1SfTW3UU4TmZSZ7p+WKb2vxDhVFvGpIF5YvpO33 PE/ut3GvuBVB+LjKUZ6fGH9zJUY3pmPl+4RRsCR2E6x+lz3BtuHZ2egqfwZxbSd5 xv7ISFQLm1Hd6Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:41:22 2025 by rpki-client