This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json) Hash identifier: DqxylsFnstOU8xHDwOWTcRULoleNfhreeSudheMsDtg= Subject key identifier: 80:37:CA:96:95:F9:FC:89:55:A4:EE:24:B2:E3:CD:72:F2:8E:32:B0 Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab Certificate serial: 019AF19B58807E3BEF3A5A51A92BF8DF69E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft Manifest number: 01CC Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: DGx0MU8tRbVjNLm/zJjDbFcaEBbZSwAtZHUQtyti3XY=) 2: w9nvjOWk8C3C6okM2fJbltiz6Ts.roa (hash: cpGlnXUiTmun4rJ5XWY0h3JOGdRAWAFOUtSEsrbjwUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:58:80:7e:3b:ef:3a:5a:51:a9:2b:f8:df:69:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=8037ca9695f9fc8955a4ee24b2e3cd72f28e32b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:5e:36:f8:fd:8b:5f:a1:0f:fc:65:4d:86: 8c:8b:a6:b9:67:fc:08:54:5f:a7:3e:e7:99:03:99: 02:3a:0d:b8:2e:1c:a9:bc:81:b8:73:be:6b:21:cd: 95:bb:47:1b:42:76:55:92:0e:b2:c0:1d:c5:31:44: 56:f6:31:6d:8c:1f:75:b5:d9:d8:0b:50:9e:97:c0: 29:c0:b1:b0:22:6f:d7:f4:59:91:83:eb:2c:52:21: 81:fe:f0:8f:35:85:b4:b8:d3:22:5c:96:a4:43:03: 67:b6:34:66:14:13:2a:25:10:7e:13:c8:3d:01:45: 38:71:b9:62:3e:11:2d:ef:c8:8a:4f:db:29:ba:f5: ca:31:19:94:04:48:14:19:98:13:42:20:d5:1a:91: 4d:b9:73:b3:64:18:84:4a:bb:83:3c:7e:7b:08:66: a0:d9:13:f5:a8:13:3c:24:51:85:48:31:fb:d1:e0: 38:59:dd:c3:76:f8:65:42:96:19:c3:a5:7f:8f:ab: fb:77:d3:29:b3:62:dc:60:c0:ae:19:ed:9c:7a:a7: 5e:76:5e:d3:19:e9:14:17:04:e5:e2:d4:3b:76:2e: 0a:24:fb:33:90:82:73:c0:82:62:06:d1:86:f6:a0: 1e:b5:b2:ba:c6:99:b0:81:77:72:94:ae:bf:9a:10: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:37:CA:96:95:F9:FC:89:55:A4:EE:24:B2:E3:CD:72:F2:8E:32:B0 X509v3 Authority Key Identifier: keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:85:42:7b:39:ec:a5:b6:a0:a2:75:ec:11:57:87:9f:bf:01: 59:a8:93:45:09:e5:77:07:43:d8:ee:b2:7f:89:fb:32:b3:1d: b8:12:57:8d:ab:ea:89:54:c5:83:4b:0f:6c:ac:e9:62:02:dc: a5:28:e3:f2:4c:1e:d1:b4:3d:b9:b1:85:da:85:40:f4:79:97: e2:d9:f6:ce:28:48:7c:a7:e0:37:ab:37:7e:eb:d1:b1:42:a5: 4c:7e:c0:a9:a7:38:6a:79:ae:b1:0f:22:44:bd:0f:01:c1:95: 5e:10:13:f4:da:4b:17:b0:05:f9:61:e6:07:21:47:a7:49:80: 9b:40:cb:89:6e:b9:d7:bf:bb:5e:f8:be:db:12:00:98:d3:ba: 15:b4:0a:1d:9f:2a:04:52:91:ee:0c:1e:ef:d4:d5:3c:6a:a0: 82:35:12:d7:e8:5c:e1:f0:39:1d:7c:39:0b:39:4b:8e:d2:71: 0b:42:01:c1:b5:d2:c9:56:b9:d5:4d:0a:7e:9a:dd:80:c9:39: 8a:26:0a:e6:61:a9:97:cc:b8:f9:3c:20:7e:e0:c2:4e:b4:10: 56:81:dc:0f:38:1a:0a:53:bc:65:05:f3:27:46:01:24:33:ee: ae:13:0d:c3:e7:22:28:5b:63:5a:a5:a3:52:fb:ff:d4:39:dd: 89:94:22:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1iAfjvvOlpRqSv432npMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NjgyOGQ2MmE1Yjg5M2UyMmQ1ODY3ZjFhMTQyZDE5OGU4 NWUxYWIwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD Eyg4MDM3Y2E5Njk1ZjlmYzg5NTVhNGVlMjRiMmUzY2Q3MmYyOGUzMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjFeNvj9i1+hD/xlTYaMi6a5Z/wI VF+nPueZA5kCOg24LhypvIG4c75rIc2Vu0cbQnZVkg6ywB3FMURW9jFtjB91tdnY C1Cel8ApwLGwIm/X9FmRg+ssUiGB/vCPNYW0uNMiXJakQwNntjRmFBMqJRB+E8g9 AUU4cbliPhEt78iKT9spuvXKMRmUBEgUGZgTQiDVGpFNuXOzZBiESruDPH57CGag 2RP1qBM8JFGFSDH70eA4Wd3DdvhlQpYZw6V/j6v7d9Mps2LcYMCuGe2ceqdedl7T GekUFwTl4tQ7di4KJPszkIJzwIJiBtGG9qAetbK6xpmwgXdylK6/mhC1mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA3ypaV+fyJVaTuJLLjzXLyjjKwMB8GA1UdIwQY MBaAFFVoKNYqW4k+ItWGfxoULRmOheGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUt M2Q3NDM5ODBiNmUyLzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUtM2Q3NDM5ODBiNmUy LzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoVCezns pbagonXsEVeHn78BWaiTRQnldwdD2O6yf4n7MrMduBJXjavqiVTFg0sPbKzpYgLc pSjj8kwe0bQ9ubGF2oVA9HmX4tn2zihIfKfgN6s3fuvRsUKlTH7Aqac4anmusQ8i RL0PAcGVXhAT9NpLF7AF+WHmByFHp0mAm0DLiW6517+7Xvi+2xIAmNO6FbQKHZ8q BFKR7gwe79TVPGqggjUS1+hc4fA5HXw5CzlLjtJxC0IBwbXSyVa51U0KfprdgMk5 iiYK5mGpl8y4+TwgfuDCTrQQVoHcDzgaClO8ZQXzJ0YBJDPurhMNw+ciKFtjWqWj Uvv/1DndiZQiTw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:16:07 2025 by rpki-client