This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json) Hash identifier: cwbcbQjQN3DS7kjMbkkqEpLazFY+62DlTPgKrfQs07I= Subject key identifier: FE:10:59:D6:F5:D1:D4:C1:42:D5:07:C9:34:6A:90:A9:F1:5C:FD:AB Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a Certificate serial: 019AF5AEC55A348AB48752FC40212DA12C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft Manifest number: 1449 Signing time: Sat 06 Dec 2025 22:01:02 +0000 Manifest this update: Sat 06 Dec 2025 22:01:02 +0000 Manifest next update: Sun 07 Dec 2025 22:01:02 +0000 Files and hashes: 1: D67aVlXhc44LndQNsE5Bzd0G7rE.roa (hash: Dxh2s3RJlCzPr2UFPIR0UDzenFrh9ma2jyYFmd8QKIw=) 2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: gdQmFs4ohla4bx4qiE0t9qlgLWYGlkmROihh/i9YAqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c5:5a:34:8a:b4:87:52:fc:40:21:2d:a1:2c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a Validity Not Before: Dec 6 22:01:02 2025 GMT Not After : Dec 7 22:01:02 2025 GMT Subject: CN=fe1059d6f5d1d4c142d507c9346a90a9f15cfdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:93:c1:b8:01:a9:14:b9:6c:0e:e3:42:5c:75: 5b:c6:b8:50:c4:40:f7:b7:ef:f6:09:f2:2e:4e:b6: 46:d0:13:a5:f1:23:ae:14:ff:85:be:16:8f:f5:35: 5f:ea:45:48:17:12:10:5d:4f:b8:b3:fa:8c:c6:85: b6:63:0b:5a:45:73:a0:30:8e:d9:f0:49:c5:7b:4a: 33:85:4c:7b:7e:37:a7:95:89:99:76:7f:1c:92:ec: 41:73:e0:11:d6:e9:e9:6c:2c:c8:e6:fd:c6:cb:c4: 0d:b8:84:37:78:52:26:36:71:44:fb:35:64:64:f1: 25:dd:1e:3d:e7:cd:ce:80:ab:c8:5e:6b:65:d0:fa: 70:4c:07:be:0f:e4:9f:32:2f:c1:a0:c8:e6:45:c2: 70:e8:80:2c:e4:6c:26:3a:cf:bd:e1:fb:15:02:9d: ca:cc:29:62:3c:1b:a7:be:0d:5b:52:32:34:95:a8: aa:f7:37:44:5f:67:94:a6:c2:ff:91:c7:ce:06:48: cb:d5:13:2c:6c:73:df:8f:ef:6f:24:21:46:40:96: ae:b2:c2:fc:d7:22:f7:1c:2d:7b:04:10:b3:35:fd: 0c:0f:6c:65:4f:58:1e:8b:47:ab:f9:78:3a:99:5d: 3e:3a:61:f0:31:9f:6c:6a:59:a4:f6:ea:17:c4:05: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:59:D6:F5:D1:D4:C1:42:D5:07:C9:34:6A:90:A9:F1:5C:FD:AB X509v3 Authority Key Identifier: keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:71:1b:c9:52:5e:06:e4:dd:b7:f3:8e:b9:fa:b7:be:f6:2e: be:4b:2e:1c:9d:60:d6:3e:02:76:7d:bd:57:a3:73:6e:08:10: 80:b8:dc:6e:ce:63:1b:c5:36:e0:ac:9d:6f:16:fd:c9:53:b6: fd:99:04:7c:9a:1e:fe:18:74:ea:0e:f9:4d:2b:e7:90:56:58: d2:2c:b9:20:83:c6:82:59:da:c6:8a:ad:5b:ab:77:c6:87:b9: a8:9d:88:46:6c:71:6b:4c:e3:8d:6d:00:21:80:0f:0d:58:14: fb:1a:e4:cd:74:8a:bc:67:05:3b:ef:91:5a:98:29:b9:d9:7a: cc:86:b7:0f:96:00:9f:fb:e5:96:2f:54:ac:6f:ec:42:f6:ad: a1:df:a0:e0:2f:dc:1f:11:a9:35:c6:1d:a9:fc:1f:b5:01:3e: 83:65:94:61:7f:9c:f0:e0:7f:8a:db:cc:33:98:ec:00:39:23: 63:66:00:6d:63:1f:50:64:2e:7e:e2:59:cb:d1:57:5e:25:e7: c5:f6:8f:b2:2b:ad:96:c7:23:27:44:bd:6c:0a:78:d8:a0:10: 17:8c:d2:00:5d:14:5f:e8:97:41:a5:58:70:9a:22:28:e5:39: ba:fa:ed:f8:53:c4:d0:9c:79:d7:d6:47:24:2f:5f:61:a4:a4: 0d:92:d9:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsVaNIq0h1L8QCEtoSxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmYwOTRmMDQyN2IxNGYzNDk5ZjdjZGY2MWQ4ODNiMDg4 ODYyOGEwHhcNMjUxMjA2MjIwMTAyWhcNMjUxMjA3MjIwMTAyWjAzMTEwLwYDVQQD EyhmZTEwNTlkNmY1ZDFkNGMxNDJkNTA3YzkzNDZhOTBhOWYxNWNmZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55PBuAGpFLlsDuNCXHVbxrhQxED3 t+/2CfIuTrZG0BOl8SOuFP+FvhaP9TVf6kVIFxIQXU+4s/qMxoW2YwtaRXOgMI7Z 8EnFe0ozhUx7fjenlYmZdn8ckuxBc+AR1unpbCzI5v3Gy8QNuIQ3eFImNnFE+zVk ZPEl3R49583OgKvIXmtl0PpwTAe+D+SfMi/BoMjmRcJw6IAs5GwmOs+94fsVAp3K zCliPBunvg1bUjI0laiq9zdEX2eUpsL/kcfOBkjL1RMsbHPfj+9vJCFGQJaussL8 1yL3HC17BBCzNf0MD2xlT1gei0er+Xg6mV0+OmHwMZ9salmk9uoXxAVGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4QWdb10dTBQtUHyTRqkKnxXP2rMB8GA1UdIwQY MBaAFFQvCU8EJ7FPNJn3zfYdiDsIiGKKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGIt MGUwNjhjNDk3MGZmLzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGItMGUwNjhjNDk3MGZm LzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3EbyVJe BuTdt/OOufq3vvYuvksuHJ1g1j4Cdn29V6NzbggQgLjcbs5jG8U24Kydbxb9yVO2 /ZkEfJoe/hh06g75TSvnkFZY0iy5IIPGglnaxoqtW6t3xoe5qJ2IRmxxa0zjjW0A IYAPDVgU+xrkzXSKvGcFO++RWpgpudl6zIa3D5YAn/vlli9UrG/sQvatod+g4C/c HxGpNcYdqfwftQE+g2WUYX+c8OB/itvMM5jsADkjY2YAbWMfUGQufuJZy9FXXiXn xfaPsiutlscjJ0S9bAp42KAQF4zSAF0UX+iXQaVYcJoiKOU5uvrt+FPE0Jx519ZH JC9fYaSkDZLZIA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:14:54 2025 by rpki-client