This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json) Hash identifier: cM0oHnrVOyTD2AJZ/gqnJZ1hxt3yYqImiR3bQb6l1Dk= Subject key identifier: EE:DA:AC:75:56:9C:44:9F:C5:76:F4:91:19:82:0F:B6:9F:EF:36:1B Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2 Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2 Certificate serial: 019AF12E084D9DA368CB5AA3A8229AAD87C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: AIF2bBtN7uEmn8fsSbP0NunHryXu8dK7wHl5O4eWg4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:08:4d:9d:a3:68:cb:5a:a3:a8:22:9a:ad:87:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=eedaac75569c449fc576f49119820fb69fef361b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:20:40:bd:7e:26:f5:cc:01:83:e4:66:b9: 6e:76:4c:40:51:d2:f5:1a:7a:60:20:2a:82:ad:80: d8:9a:68:3c:47:7d:a8:f2:ad:e8:f5:6b:43:c1:f7: a6:16:a2:f9:61:37:35:c4:53:f7:6b:dd:0d:65:8d: aa:15:95:7b:ed:74:d3:07:91:a5:b4:b1:6a:d3:94: 1d:af:bf:0f:5c:7b:5e:df:c8:c9:91:12:34:39:46: 43:00:06:8f:20:ee:2b:15:e2:c3:87:40:ba:5e:7e: 2e:e9:01:cc:f4:00:d7:50:1b:51:79:fe:24:c3:3f: 00:a3:97:3c:c6:43:3a:76:a6:ce:68:f1:ed:3a:2a: 0f:82:9e:03:37:0a:90:96:92:fc:15:13:5f:8c:4b: aa:39:52:b0:5d:e9:99:e4:3f:61:8a:99:6e:c8:11: 8c:ec:6b:73:5f:e0:be:68:d3:d8:c6:b2:1a:b2:d0: 54:c4:9f:58:b0:cb:f0:ef:62:8f:27:06:c6:80:5b: e0:06:d8:5f:32:c4:b0:a9:6b:6b:09:65:f1:8f:f7: fa:ea:f2:00:3b:65:6a:94:29:5e:0e:90:bd:a5:1a: 50:c0:31:6b:5e:12:08:b8:00:be:99:98:6d:72:77: 45:8b:8c:93:d6:a2:1f:c6:be:ac:3e:89:88:f2:b0: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:AC:75:56:9C:44:9F:C5:76:F4:91:19:82:0F:B6:9F:EF:36:1B X509v3 Authority Key Identifier: keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:d1:3c:d6:2b:36:20:d0:f6:41:d7:24:9e:51:e7:8a:65:25: fa:25:b9:69:4b:59:84:fc:0b:1f:8f:ef:9c:6a:7c:84:ba:77: 63:00:bb:4d:11:ae:f6:91:16:54:bd:65:68:1b:d2:27:d7:ad: c4:1d:5f:38:11:cf:de:07:5b:f0:7d:64:ac:5b:53:34:cd:62: ad:fc:6f:9c:46:c2:da:f4:e2:1d:5c:a3:91:cc:50:0e:94:cd: 19:0e:98:90:a0:0d:07:d9:29:bd:38:ed:ff:9b:35:8d:cd:75: 75:e1:0e:86:1c:5d:dc:50:80:6a:04:05:44:e0:70:9d:1f:a3: 17:b2:c1:37:70:76:22:c2:3a:05:8e:42:56:98:fc:59:45:f0: ad:cb:81:32:97:46:23:cb:49:b4:bf:25:08:7d:fa:bf:b8:05: 55:fd:a1:c7:e8:6c:88:8d:e0:ab:58:b9:c4:49:53:a2:4a:55: 7c:f6:81:9c:12:de:10:3d:0f:4a:e2:83:21:7d:91:6b:70:92: e9:e4:e2:35:bc:83:6a:08:24:e3:4d:19:64:fd:0c:1e:5e:31: 1f:a6:76:ed:1c:0f:4f:f3:d7:6b:14:8d:7a:9e:ec:cc:27:6a: 77:68:46:bf:c7:87:4d:9c:e8:cd:11:48:7b:25:d7:bd:ec:9f: 1d:f9:a4:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLghNnaNoy1qjqCKarYfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFjYjlhYmJiNGNhOWUwODY2MmE5M2QyZTczMmU3MGIw NmMyZjIwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhlZWRhYWM3NTU2OWM0NDlmYzU3NmY0OTExOTgyMGZiNjlmZWYzNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiIgQL1+JvXMAYPkZrludkxAUdL1 GnpgICqCrYDYmmg8R32o8q3o9WtDwfemFqL5YTc1xFP3a90NZY2qFZV77XTTB5Gl tLFq05Qdr78PXHte38jJkRI0OUZDAAaPIO4rFeLDh0C6Xn4u6QHM9ADXUBtRef4k wz8Ao5c8xkM6dqbOaPHtOioPgp4DNwqQlpL8FRNfjEuqOVKwXemZ5D9hipluyBGM 7GtzX+C+aNPYxrIastBUxJ9YsMvw72KPJwbGgFvgBthfMsSwqWtrCWXxj/f66vIA O2VqlCleDpC9pRpQwDFrXhIIuAC+mZhtcndFi4yT1qIfxr6sPomI8rBsWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7arHVWnESfxXb0kRmCD7af7zYbMB8GA1UdIwQY MBaAFFX6y5q7tMqeCGYqk9LnMucLBsLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMt MmVjY2ZjZTExMmRkLzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMtMmVjY2ZjZTExMmRk LzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdE81is2 IND2QdcknlHnimUl+iW5aUtZhPwLH4/vnGp8hLp3YwC7TRGu9pEWVL1laBvSJ9et xB1fOBHP3gdb8H1krFtTNM1irfxvnEbC2vTiHVyjkcxQDpTNGQ6YkKANB9kpvTjt /5s1jc11deEOhhxd3FCAagQFROBwnR+jF7LBN3B2IsI6BY5CVpj8WUXwrcuBMpdG I8tJtL8lCH36v7gFVf2hx+hsiI3gq1i5xElTokpVfPaBnBLeED0PSuKDIX2Ra3CS 6eTiNbyDaggk400ZZP0MHl4xH6Z27RwPT/PXaxSNep7szCdqd2hGv8eHTZzozRFI eyXXveyfHfmkfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:13 2025 by rpki-client