This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json) Hash identifier: dIesc25kACVxIYDz4I0OjE6lTGdqNkqiy7uSE02hRik= Subject key identifier: E6:D4:E9:DF:A4:DC:60:38:B7:08:6B:8C:8F:44:9E:75:CE:E7:A9:07 Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b Certificate serial: 019AF12D6C2A81C99EB4C47001038A8CD9FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft Manifest number: 1126 Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: I3pyuOjC6u/rx0+xy73tcZQersfqgrMcDTLLGpqsHdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6c:2a:81:c9:9e:b4:c4:70:01:03:8a:8c:d9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=e6d4e9dfa4dc6038b7086b8c8f449e75cee7a907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:6a:a4:b4:06:db:3f:fa:26:67:e0:22:2b: 6c:0b:1a:ed:8c:43:1f:58:4c:97:41:cf:32:38:2b: ae:68:4a:02:71:bb:47:07:24:13:ce:df:63:27:9a: fd:42:93:40:0e:70:51:77:47:f3:f9:04:6e:4d:8e: e2:24:99:2b:d1:d1:30:20:0e:8f:0c:ec:1c:52:4b: b0:6f:dc:d5:11:a4:67:58:f3:62:0f:3c:57:0d:4d: 2b:4f:df:58:9a:ef:51:76:65:b4:71:b8:31:f8:3c: 87:50:8f:b4:b7:48:34:6f:a0:b5:11:a0:de:d3:99: e3:88:19:01:89:0f:74:25:ec:20:f5:3e:f4:18:ad: 6a:2c:f4:35:ad:cb:67:b1:4e:9e:d5:aa:08:be:1f: 0b:19:f2:4f:a0:ad:70:59:cb:e2:50:5a:ea:9f:4c: d5:79:1e:14:63:e4:23:7f:4e:36:ca:fe:55:99:37: 39:de:a7:30:91:24:af:62:74:f4:a7:ae:cc:21:41: 05:18:ff:97:55:89:ac:ee:9e:5d:45:e8:dd:97:55: de:22:e8:2a:cf:04:f2:36:bf:8b:df:7f:77:41:b9: 8a:5f:16:98:e2:85:0e:50:97:f4:08:8c:b7:1c:3f: de:cc:bf:d5:56:fd:41:b1:ef:0e:a3:1d:e3:95:4a: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D4:E9:DF:A4:DC:60:38:B7:08:6B:8C:8F:44:9E:75:CE:E7:A9:07 X509v3 Authority Key Identifier: keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:b3:af:c4:25:f8:c2:09:1f:62:72:4e:30:a4:57:e9:36: 36:59:65:db:99:37:b1:5f:76:46:10:7e:ac:d2:43:a5:e8:44: f7:fe:b5:ab:ae:96:d3:8d:64:e5:1d:13:f2:f8:e2:ac:6d:01: e6:a9:e0:65:83:8d:6f:34:ab:5c:ce:1f:8c:7a:74:16:92:fc: be:68:a5:3a:e2:e9:5b:61:01:6e:31:7d:4f:c6:db:36:4a:c1: e0:c2:d9:9e:2c:ea:c0:5c:72:f3:11:30:e9:67:82:d3:f9:e7: 57:29:05:56:8d:89:36:76:b5:89:df:ff:91:35:7d:cc:41:31: d8:16:84:2e:8a:26:7a:40:80:93:88:56:83:c2:36:70:0b:09: 3e:e3:d4:bc:b5:e4:87:24:d9:79:1a:3a:f6:48:9e:6b:85:a3: 55:dc:88:7a:a2:2c:20:5b:47:15:31:c5:f6:82:97:a1:60:2b: 09:a6:b6:14:89:5c:7f:9a:bd:81:ea:e4:10:b8:4b:bf:c5:df: 39:b3:62:69:2d:a8:bb:ac:e1:be:e1:71:76:9a:7c:48:45:32: c7:1d:c9:68:9b:31:4b:48:6c:e3:db:b3:c7:19:01:8b:31:be: 45:60:e3:fd:3f:b9:e5:e8:18:ef:a2:b2:2e:04:93:1e:d7:06: 1d:77:df:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWwqgcmetMRwAQOKjNn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWY3ODRiYmM2NjljMWRiNzZhOGJkMWQxZTk5MzkzZDhm MjE3NmIwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD EyhlNmQ0ZTlkZmE0ZGM2MDM4YjcwODZiOGM4ZjQ0OWU3NWNlZTdhOTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO5qpLQG2z/6JmfgIitsCxrtjEMf WEyXQc8yOCuuaEoCcbtHByQTzt9jJ5r9QpNADnBRd0fz+QRuTY7iJJkr0dEwIA6P DOwcUkuwb9zVEaRnWPNiDzxXDU0rT99Ymu9RdmW0cbgx+DyHUI+0t0g0b6C1EaDe 05njiBkBiQ90Jewg9T70GK1qLPQ1rctnsU6e1aoIvh8LGfJPoK1wWcviUFrqn0zV eR4UY+Qjf042yv5VmTc53qcwkSSvYnT0p67MIUEFGP+XVYms7p5dRejdl1XeIugq zwTyNr+L3393QbmKXxaY4oUOUJf0CIy3HD/ezL/VVv1Bse8Oox3jlUqxfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObU6d+k3GA4twhrjI9EnnXO56kHMB8GA1UdIwQY MBaAFFaveEu8Zpwdt2qL0dHpk5PY8hdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAt NTVlOThlMjVmY2FkLzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAtNTVlOThlMjVmY2Fk LzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzuzr8Ql +MIJH2JyTjCkV+k2Nlll25k3sV92RhB+rNJDpehE9/61q66W041k5R0T8vjirG0B 5qngZYONbzSrXM4fjHp0FpL8vmilOuLpW2EBbjF9T8bbNkrB4MLZnizqwFxy8xEw 6WeC0/nnVykFVo2JNna1id//kTV9zEEx2BaELoomekCAk4hWg8I2cAsJPuPUvLXk hyTZeRo69kiea4WjVdyIeqIsIFtHFTHF9oKXoWArCaa2FIlcf5q9gerkELhLv8Xf ObNiaS2ou6zhvuFxdpp8SEUyxx3JaJsxS0hs49uzxxkBizG+RWDj/T+55egY76Ky LgSTHtcGHXffgw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:48 2025 by rpki-client