This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft File: VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json) Hash identifier: SlEJMdjkj8IL0yPgo/GvNgo4BLNChTsSYT7ukeD81qk= Subject key identifier: FA:9C:43:E4:D0:11:3C:46:C2:A9:A2:40:A9:BD:A6:5A:82:59:F5:D1 Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F Certificate issuer: /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f Certificate serial: 019AF12D2E95E32EA6D1FDDBCA56CD1436E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft Manifest number: 0481 Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: rn1ScTtjR5mgIud7dK/BENTjhgFrIAlk/NUmMIXPfN8=) 2: b9YEmpfPninMk0asKBNPcoiyaVU.roa (hash: pUFz2xldxjhrYZJSx6acSw+dw/vauygsJMfm2bULKuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2e:95:e3:2e:a6:d1:fd:db:ca:56:cd:14:36:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=fa9c43e4d0113c46c2a9a240a9bda65a8259f5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:35:bf:bb:00:b6:29:fc:0c:9b:ce:8f:6a: e5:4c:67:a0:3f:de:33:35:88:9e:03:3d:2a:05:02: e0:64:fa:4e:6f:f7:0f:e0:0d:14:43:f5:2b:f1:f6: e0:2e:c9:5a:84:35:af:45:0f:ca:47:e5:1e:ef:74: 5b:71:dc:f4:45:24:cc:3c:8a:a6:06:dd:28:a0:c5: 03:2c:5f:6a:b9:29:ec:b3:ed:62:46:85:1a:bf:f9: 57:e5:f2:fa:20:32:d6:df:98:d3:63:b6:23:09:51: 7e:0d:d1:f9:1e:91:c4:f9:95:f0:5e:d5:f2:aa:93: 02:f6:85:14:71:f7:56:53:35:a1:3a:06:14:23:d1: 25:8c:c2:e4:06:e2:78:47:bb:5c:84:cd:bb:38:de: ae:56:93:15:b3:7d:66:fe:db:95:7b:62:28:1f:92: 7f:7f:e1:d9:f8:7a:d7:27:ee:fe:d3:c8:0a:56:21: 3d:63:2f:a3:db:d2:3b:74:a3:d3:25:07:b1:27:43: 4e:8e:0d:43:f9:c5:29:7f:98:88:a1:e9:a4:ed:a6: dc:d9:b4:7d:a6:1d:fc:d8:80:ab:fd:2a:e3:0a:0a: b3:ab:0e:63:04:64:a7:09:70:fa:18:26:a0:27:e7: 3d:e3:ee:c8:e1:1f:8f:11:66:ee:3d:33:cd:b9:b4: 46:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:43:E4:D0:11:3C:46:C2:A9:A2:40:A9:BD:A6:5A:82:59:F5:D1 X509v3 Authority Key Identifier: keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:33:85:c8:8c:9d:59:b2:14:f8:d7:cb:91:32:14:6f:16:bf: fe:9b:af:54:e0:90:91:78:7b:f4:cc:a3:67:b7:ed:65:8e:21: 18:18:1c:d6:16:24:e5:b5:94:30:42:2f:ef:c7:34:9a:e3:03: f5:39:d2:6b:d7:91:fb:51:55:5a:7b:c2:b8:c0:d6:0e:c9:11: e5:2e:b6:61:79:ac:3c:bb:c0:14:9b:5d:ab:e2:97:f8:f4:43: 16:79:f4:5e:e2:56:e4:d1:48:de:71:39:90:72:0f:59:a8:bd: 9d:b4:38:58:2d:43:8c:eb:a9:81:82:aa:a0:b8:89:98:ba:fe: 66:81:39:65:91:82:68:ad:6a:df:43:b4:1b:c1:c8:bf:48:4a: 66:98:71:71:56:42:12:08:8f:df:a0:52:4c:42:d8:2c:e4:c2: 43:00:e9:42:bc:a3:96:96:62:6a:df:24:c7:81:e2:b0:75:6f: fa:d9:fb:4f:20:92:bd:f1:59:39:a9:fe:cd:85:ba:88:f9:14: 36:b7:3c:08:aa:b5:22:44:a6:db:7c:35:1b:29:d4:52:48:6f: d9:30:cc:b0:d5:6e:ea:cc:84:58:2b:44:2d:c3:ae:12:a9:fa: d7:fb:2f:53:42:34:a5:05:a3:79:c2:29:32:6f:1b:4a:c1:18: 90:0b:6f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS6V4y6m0f3bylbNFDbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZTYyYjE3MTYxZjMzZTNiMWE2OTEwYzYyNzJmZWNiMzM4 ZTBmNmYwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD EyhmYTljNDNlNGQwMTEzYzQ2YzJhOWEyNDBhOWJkYTY1YTgyNTlmNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rE1v7sAtin8DJvOj2rlTGegP94z NYieAz0qBQLgZPpOb/cP4A0UQ/Ur8fbgLslahDWvRQ/KR+Ue73Rbcdz0RSTMPIqm Bt0ooMUDLF9quSnss+1iRoUav/lX5fL6IDLW35jTY7YjCVF+DdH5HpHE+ZXwXtXy qpMC9oUUcfdWUzWhOgYUI9EljMLkBuJ4R7tchM27ON6uVpMVs31m/tuVe2IoH5J/ f+HZ+HrXJ+7+08gKViE9Yy+j29I7dKPTJQexJ0NOjg1D+cUpf5iIoemk7abc2bR9 ph382ICr/SrjCgqzqw5jBGSnCXD6GCagJ+c94+7I4R+PEWbuPTPNubRGDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqcQ+TQETxGwqmiQKm9plqCWfXRMB8GA1UdIwQY MBaAFFbmKxcWHzPjsaaRDGJy/sszjg9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAt ZTBjMmJkZmQ2NTg1LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAtZTBjMmJkZmQ2NTg1 LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTOFyIyd WbIU+NfLkTIUbxa//puvVOCQkXh79MyjZ7ftZY4hGBgc1hYk5bWUMEIv78c0muMD 9TnSa9eR+1FVWnvCuMDWDskR5S62YXmsPLvAFJtdq+KX+PRDFnn0XuJW5NFI3nE5 kHIPWai9nbQ4WC1DjOupgYKqoLiJmLr+ZoE5ZZGCaK1q30O0G8HIv0hKZphxcVZC EgiP36BSTELYLOTCQwDpQryjlpZiat8kx4HisHVv+tn7TyCSvfFZOan+zYW6iPkU Nrc8CKq1IkSm23w1GynUUkhv2TDMsNVu6syEWCtELcOuEqn61/svU0I0pQWjecIp Mm8bSsEYkAtv8A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:59 2025 by rpki-client