This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json) Hash identifier: 8QLZdvqzBQpKqP97YI2yGoubbS0q8HkLphi74OzeN6E= Subject key identifier: 1C:FC:CC:75:77:6E:CF:5B:1D:FF:8E:9E:B9:39:7F:78:AA:92:E7:8A Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3 Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3 Certificate serial: 019AF20927107DD45B432A80F1395A8CD8FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft Manifest number: 03CA Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=) 2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=) 3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: AwReBDpE4/PWG+mYgWJMOBUGr/t2Rye7IDKtjz+RA2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:27:10:7d:d4:5b:43:2a:80:f1:39:5a:8c:d8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=1cfccc75776ecf5b1dff8e9eb9397f78aa92e78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:1e:85:f3:8f:1f:1c:01:1c:cd:d9:75:fe: 5e:2d:e6:40:2a:39:ce:29:97:ed:c2:d6:99:52:5e: d0:6a:fd:9a:47:0b:d1:e4:c9:5d:e9:31:5a:8f:f2: 3a:3e:a9:c4:fc:09:8e:91:1f:7e:ce:4b:f9:3a:2c: ea:f6:ac:9f:6c:e6:47:9d:7d:de:dd:86:b7:97:a3: 62:59:c0:31:08:7e:41:bb:46:74:5e:ce:50:05:4b: f3:c1:31:a5:cb:6b:36:6b:7a:66:e2:ba:34:f3:5b: 6a:8c:d2:2e:e9:c0:06:5c:cc:03:8a:4a:d9:b1:43: 08:ab:64:8c:e7:f7:78:58:ab:09:ec:48:b0:22:f0: 12:25:ab:a4:65:a5:95:6c:c3:90:1c:96:6f:4c:47: a9:7b:60:85:8f:37:d4:2f:89:1e:e6:31:ff:80:f9: 0e:a6:85:f2:a0:83:cf:b9:66:dc:31:50:a6:5e:84: 07:27:81:22:63:dc:5e:83:00:ce:c8:26:43:e5:e9: fc:50:fd:aa:d9:08:00:c0:b6:70:58:36:44:07:80: 2a:ec:bb:91:45:ad:f2:8b:fd:34:18:77:fd:d2:0a: 2c:bf:04:fb:b9:2e:ed:b8:f4:28:cf:61:27:46:aa: c5:08:26:c4:6c:5c:ef:c3:be:17:56:33:8d:94:b8: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FC:CC:75:77:6E:CF:5B:1D:FF:8E:9E:B9:39:7F:78:AA:92:E7:8A X509v3 Authority Key Identifier: keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:28:48:ad:fa:f4:fc:a7:74:4d:fd:18:0b:2a:b5:bc:1e:11: 32:86:29:c2:0e:21:ff:72:73:cf:89:bf:ec:a6:6e:c0:3a:e5: ca:d0:de:1c:89:53:70:44:3b:5f:63:38:eb:65:28:b4:01:71: a1:86:d0:70:8b:88:f1:34:1c:9c:ed:43:0e:63:b8:1e:24:1e: 55:49:26:dc:57:68:03:eb:09:9c:1f:bb:93:81:eb:be:2e:f1: 74:cd:ec:84:01:65:1b:be:d6:fa:50:dd:04:b1:8e:59:b5:a0: f4:a3:ee:e2:8f:ae:53:f3:92:d9:a0:17:cb:21:04:59:ee:12: 45:c2:3c:c2:fa:b7:09:57:d3:de:21:67:db:48:81:a0:d8:8c: df:25:a6:cd:bc:df:f8:11:b2:e8:2f:91:ee:1d:fa:cc:43:12: 86:f4:f1:a4:83:12:6f:8a:71:a1:61:14:8c:3c:e0:f6:11:5c: 69:05:09:1a:fe:d3:65:12:6b:05:35:84:f8:64:06:a8:e2:ac: 35:9c:c1:6b:a3:1f:39:7d:87:b7:19:90:06:48:c4:f1:fd:aa: 48:34:bb:8a:cc:4a:9e:fa:db:78:dd:c0:25:63:45:e1:37:8b: 67:c9:da:ed:65:0e:00:aa:b4:b8:bf:ca:2d:74:3d:82:02:62: ce:a1:fc:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCScQfdRbQyqA8TlajNj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj ZDcyZjMwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EygxY2ZjY2M3NTc3NmVjZjViMWRmZjhlOWViOTM5N2Y3OGFhOTJlNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIkehfOPHxwBHM3Zdf5eLeZAKjnO KZftwtaZUl7Qav2aRwvR5Mld6TFaj/I6PqnE/AmOkR9+zkv5Oizq9qyfbOZHnX3e 3Ya3l6NiWcAxCH5Bu0Z0Xs5QBUvzwTGly2s2a3pm4ro081tqjNIu6cAGXMwDikrZ sUMIq2SM5/d4WKsJ7EiwIvASJaukZaWVbMOQHJZvTEepe2CFjzfUL4ke5jH/gPkO poXyoIPPuWbcMVCmXoQHJ4EiY9xegwDOyCZD5en8UP2q2QgAwLZwWDZEB4Aq7LuR Ra3yi/00GHf90gosvwT7uS7tuPQoz2EnRqrFCCbEbFzvw74XVjONlLgjpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz8zHV3bs9bHf+Onrk5f3iqkueKMB8GA1UdIwQY MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXihIrfr0 /Kd0Tf0YCyq1vB4RMoYpwg4h/3Jzz4m/7KZuwDrlytDeHIlTcEQ7X2M462UotAFx oYbQcIuI8TQcnO1DDmO4HiQeVUkm3FdoA+sJnB+7k4Hrvi7xdM3shAFlG77W+lDd BLGOWbWg9KPu4o+uU/OS2aAXyyEEWe4SRcI8wvq3CVfT3iFn20iBoNiM3yWmzbzf +BGy6C+R7h36zEMShvTxpIMSb4pxoWEUjDzg9hFcaQUJGv7TZRJrBTWE+GQGqOKs NZzBa6MfOX2HtxmQBkjE8f2qSDS7isxKnvrbeN3AJWNF4TeLZ8na7WUOAKq0uL/K LXQ9ggJizqH8Uw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:20 2025 by rpki-client