This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft File: vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json) Hash identifier: opxZigGD1z+ZyPcqO7KcfA7agAvmJJ52/eOUDGf7a5A= Subject key identifier: 76:84:71:6E:4A:BF:1A:D1:A8:9E:99:F9:28:D1:B6:9C:FB:66:7B:6D Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26 Certificate issuer: /CN=be9ee82223f040586be3ddb6aaaf655e99429126 Certificate serial: 019AF31CE94476864870DB556E03D6425C74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft Manifest number: 08A6 Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: A2txNThWck2HtefcChKRV1quIWC/YoL/7DRK9nDqVGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e9:44:76:86:48:70:db:55:6e:03:d6:42:5c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126 Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=7684716e4abf1ad1a89e99f928d1b69cfb667b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:eb:a3:35:f1:49:e7:15:48:8f:a6:71:8d: c1:53:c2:e4:a9:0e:47:22:46:e7:31:0a:d2:38:2b: 3e:fc:d0:77:f5:df:9a:83:39:d4:7f:d1:44:a1:83: ce:58:6c:07:6e:fd:6a:fc:c9:76:2a:ca:0e:a1:23: 38:4b:57:d8:8a:13:38:b7:b6:a4:ec:d8:7f:3d:82: 2f:e4:21:c2:f8:9e:72:ae:a1:91:6b:6c:94:fd:6b: 7e:43:00:83:90:db:5c:75:95:7e:cf:df:f8:43:71: 69:65:84:08:52:b6:00:da:cf:86:21:4a:eb:ac:0b: 6f:d1:10:65:bc:62:b3:e5:f7:b4:9f:f4:d8:79:9b: 75:29:4c:93:75:c1:07:73:14:61:9f:59:ea:70:e9: 22:a4:bb:0b:87:1f:d1:33:73:a4:7b:c1:cd:00:03: 33:b9:08:5a:82:53:c7:16:22:f6:9f:d3:63:b1:78: f1:21:66:43:7a:6c:da:60:23:17:d0:cb:07:2b:8d: 8f:e3:bf:90:4e:b8:55:71:3f:22:49:62:6a:47:d1: 71:c2:d9:41:a8:11:7b:29:9f:1d:2a:db:87:6c:b4: d6:da:8d:cf:ff:14:48:0d:ff:46:3c:a1:58:77:06: bc:90:0b:71:f5:66:28:06:10:6e:35:e8:9d:b4:b6: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:71:6E:4A:BF:1A:D1:A8:9E:99:F9:28:D1:B6:9C:FB:66:7B:6D X509v3 Authority Key Identifier: keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7d:04:c5:6e:2d:df:3d:8c:f4:cd:27:55:e8:ea:a0:9d:f4: 85:f6:a2:de:83:f7:c8:24:88:41:a9:7f:3f:8c:38:01:b4:05: 33:90:80:1f:cb:4c:d8:36:fc:e2:0a:7c:08:a3:e1:d2:98:93: 98:5f:42:46:24:ec:49:a3:1d:fa:ac:15:16:7b:28:fc:9f:27: 4a:51:ed:0f:46:54:29:28:3a:21:1d:0e:a3:b5:78:d9:5f:45: b3:87:55:3c:48:90:cb:48:7e:fb:d0:f0:b4:7a:ef:4a:39:48: 25:42:c6:2e:01:94:8e:ef:00:e0:f6:26:ec:15:0b:ec:32:aa: d2:0f:a7:e8:f9:19:1c:d0:8d:8f:76:3f:7d:5a:32:8e:ea:c3: 18:74:05:33:84:c8:24:5e:68:94:85:d6:9a:b8:1c:4b:87:33: 3e:d1:c7:4c:5e:13:3f:4e:38:5e:c4:5c:fc:41:25:6b:7b:84: 1b:73:10:a1:3f:f0:c5:cb:9d:4a:6b:7c:1a:d7:bd:ab:a4:b1: 47:47:bb:66:fc:5d:77:bb:d3:b7:64:37:00:0d:33:7b:02:24: d9:64:ed:e6:46:46:5f:3c:31:88:49:03:99:08:51:e2:22:e8: 0e:95:a5:f0:54:84:67:81:97:bb:ce:73:22:0b:b8:e8:bc:49: 96:d5:b3:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOlEdoZIcNtVbgPWQlx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWVlODIyMjNmMDQwNTg2YmUzZGRiNmFhYWY2NTVlOTk0 MjkxMjYwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD Eyg3Njg0NzE2ZTRhYmYxYWQxYTg5ZTk5ZjkyOGQxYjY5Y2ZiNjY3YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3urrozXxSecVSI+mcY3BU8LkqQ5H IkbnMQrSOCs+/NB39d+agznUf9FEoYPOWGwHbv1q/Ml2KsoOoSM4S1fYihM4t7ak 7Nh/PYIv5CHC+J5yrqGRa2yU/Wt+QwCDkNtcdZV+z9/4Q3FpZYQIUrYA2s+GIUrr rAtv0RBlvGKz5fe0n/TYeZt1KUyTdcEHcxRhn1nqcOkipLsLhx/RM3Oke8HNAAMz uQhaglPHFiL2n9NjsXjxIWZDemzaYCMX0MsHK42P47+QTrhVcT8iSWJqR9FxwtlB qBF7KZ8dKtuHbLTW2o3P/xRIDf9GPKFYdwa8kAtx9WYoBhBuNeidtLaavwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaEcW5KvxrRqJ6Z+SjRtpz7ZnttMB8GA1UdIwQY MBaAFL6e6CIj8EBYa+PdtqqvZV6ZQpEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnA3b0lpUHdRRmhyNDkyMnFxOWxYcGxDa1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMjdjNDYtNTdlZS00ZjJmLTk4OWQt MjhjMGU3ZGYxNmEzLzEvdnA3b0lpUHdRRmhyNDkyMnFxOWxYcGxDa1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMjdjNDYtNTdlZS00ZjJmLTk4OWQtMjhjMGU3ZGYxNmEz LzEvdnA3b0lpUHdRRmhyNDkyMnFxOWxYcGxDa1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP30ExW4t 3z2M9M0nVejqoJ30hfai3oP3yCSIQal/P4w4AbQFM5CAH8tM2Db84gp8CKPh0piT mF9CRiTsSaMd+qwVFnso/J8nSlHtD0ZUKSg6IR0Oo7V42V9Fs4dVPEiQy0h++9Dw tHrvSjlIJULGLgGUju8A4PYm7BUL7DKq0g+n6PkZHNCNj3Y/fVoyjurDGHQFM4TI JF5olIXWmrgcS4czPtHHTF4TP044XsRc/EEla3uEG3MQoT/wxcudSmt8Gte9q6Sx R0e7Zvxdd7vTt2Q3AA0zewIk2WTt5kZGXzwxiEkDmQhR4iLoDpWl8FSEZ4GXu85z Igu46LxJltWz+g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:17 2025 by rpki-client