This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json) Hash identifier: xCuBsBf1v9EYB3rz2SXLhXwgYqPg9Xmvvgx55veApZM= Subject key identifier: 61:51:11:52:AC:A4:BC:8B:DB:E2:43:D2:F7:BC:78:DA:AB:29:B8:5E Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb Certificate serial: 019AF31B3F094E3B238BA93867CEE7BEF65B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft Manifest number: 05DC Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=) 2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: hyMCHtGnA0JxZYbmHC494WpQvO56ABTGUT+LMwuVEMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3f:09:4e:3b:23:8b:a9:38:67:ce:e7:be:f6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=61511152aca4bc8bdbe243d2f7bc78daab29b85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:37:22:27:ac:28:9e:2d:a0:51:c7:7e:26: 29:97:93:c7:21:5f:9f:1e:98:d2:3e:b0:ca:28:8a: 07:3d:d1:fb:34:fb:c0:d2:fa:cf:cc:ce:b5:85:a1: 12:8b:0c:0a:96:61:2a:d8:4e:61:b1:b9:54:cc:b7: b2:3a:81:36:c6:61:1d:44:9d:20:9e:2c:cb:03:43: fb:13:68:7e:ca:9f:56:36:89:d9:6a:d4:0d:95:fc: cd:26:ea:1d:87:c8:52:67:d1:a8:4b:65:ec:79:f9: df:50:fb:e9:0f:56:dc:e3:3e:36:cc:85:cb:72:f1: de:63:5b:9b:23:1a:af:f4:85:94:c4:dd:18:79:c3: ae:2d:62:9a:75:20:14:4f:ab:dc:f4:6d:80:ee:b2: 8c:8b:5e:e2:dc:b5:1f:42:ba:18:6e:ec:49:90:e5: 36:73:ac:66:d5:a3:67:10:bd:0c:d2:e6:e6:9b:cf: 0c:ac:94:75:26:a3:c1:32:a8:7e:9e:96:13:2e:6f: b0:f6:a1:69:c0:d9:dd:97:34:ed:da:8a:33:a2:7e: 64:fb:e3:64:19:74:3b:c9:a6:5d:29:ce:23:69:1c: 7c:88:f1:06:23:9f:65:07:10:11:82:91:b2:ab:63: 7c:44:56:81:b8:c8:30:87:e7:76:ab:2a:ed:3b:2f: 2b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:51:11:52:AC:A4:BC:8B:DB:E2:43:D2:F7:BC:78:DA:AB:29:B8:5E X509v3 Authority Key Identifier: keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a8:9b:44:c6:e7:05:72:e5:11:c8:d1:bb:5a:70:1d:77:4d: ca:4b:cd:60:da:be:e9:6c:66:9c:54:f0:6c:f6:19:56:be:ca: 1a:61:5a:01:e8:78:e5:0a:e7:16:61:d2:6e:a2:f8:c9:50:ac: f6:76:9e:c7:e1:ad:6e:f6:8d:8b:49:55:a8:a8:6a:9e:74:55: c5:03:22:fc:84:52:f8:1e:5e:bb:74:1a:8f:a3:10:ef:b2:02: 82:2e:33:e3:f3:89:08:40:c5:55:55:70:6d:4c:6e:07:6f:75: fd:59:34:f5:01:8d:a3:d4:0f:b1:fc:4e:19:e4:b3:26:1c:a0: 6b:14:24:9b:15:27:76:a8:ec:3d:25:9a:0d:79:83:b1:5e:50: 8e:51:8a:82:e0:fc:56:41:04:fa:18:07:e4:2f:b6:82:5d:76: 2b:66:dc:1e:8b:48:e2:4b:a1:17:e2:6f:54:22:33:35:6f:8c: a4:3a:6a:cb:7c:e1:b0:3b:2b:d9:ae:d0:28:72:27:6d:e5:9b: 67:56:92:cc:e2:8f:d2:e2:9d:38:de:88:87:2c:f5:55:bd:44: 65:09:cb:28:49:4e:3e:d6:10:59:4f:47:ea:e6:2a:32:e7:84: 54:91:ef:d5:0a:68:84:aa:95:1e:71:cb:d4:ea:a7:06:cb:c8: c1:30:f9:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGz8JTjsji6k4Z87nvvZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Mzc2ZGVmMTIyNDgzOWE2MTEzZDFkMGNkZDM5ODEwNGZh YWYyZmIwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD Eyg2MTUxMTE1MmFjYTRiYzhiZGJlMjQzZDJmN2JjNzhkYWFiMjliODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDo3IiesKJ4toFHHfiYpl5PHIV+f HpjSPrDKKIoHPdH7NPvA0vrPzM61haESiwwKlmEq2E5hsblUzLeyOoE2xmEdRJ0g nizLA0P7E2h+yp9WNonZatQNlfzNJuodh8hSZ9GoS2XsefnfUPvpD1bc4z42zIXL cvHeY1ubIxqv9IWUxN0YecOuLWKadSAUT6vc9G2A7rKMi17i3LUfQroYbuxJkOU2 c6xm1aNnEL0M0ubmm88MrJR1JqPBMqh+npYTLm+w9qFpwNndlzTt2oozon5k++Nk GXQ7yaZdKc4jaRx8iPEGI59lBxARgpGyq2N8RFaBuMgwh+d2qyrtOy8rRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFREVKspLyL2+JD0ve8eNqrKbheMB8GA1UdIwQY MBaAFFY3be8SJIOaYRPR0M3TmBBPqvL7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYt ZDgwODQ3MzNlOTgwLzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83MTRhOGQtOGNiYy00OGQwLTgxNTYtZDgwODQ3MzNlOTgw LzEvVmpkdDd4SWtnNXBoRTlIUXpkT1lFRS1xOHZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKibRMbn BXLlEcjRu1pwHXdNykvNYNq+6WxmnFTwbPYZVr7KGmFaAeh45QrnFmHSbqL4yVCs 9naex+GtbvaNi0lVqKhqnnRVxQMi/IRS+B5eu3Qaj6MQ77ICgi4z4/OJCEDFVVVw bUxuB291/Vk09QGNo9QPsfxOGeSzJhygaxQkmxUndqjsPSWaDXmDsV5QjlGKguD8 VkEE+hgH5C+2gl12K2bcHotI4kuhF+JvVCIzNW+MpDpqy3zhsDsr2a7QKHInbeWb Z1aSzOKP0uKdON6Ihyz1Vb1EZQnLKElOPtYQWU9H6uYqMueEVJHv1QpohKqVHnHL 1OqnBsvIwTD5zA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:10 2025 by rpki-client