This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json) Hash identifier: yfIUcNzjIdyN53Bg1dOMqWPasfGUdEy8lPAjfkqcPVc= Subject key identifier: EE:49:1B:7E:7A:B0:90:2F:E7:AF:9E:5E:C7:75:BB:40:D7:BD:68:34 Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d Certificate serial: 019AF31CC7F461EF49CC14C2939233AFBCD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft Manifest number: 06E1 Signing time: Sat 06 Dec 2025 10:02:20 +0000 Manifest this update: Sat 06 Dec 2025 10:02:20 +0000 Manifest next update: Sun 07 Dec 2025 10:02:20 +0000 Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: aRX0Ebp8aytutQ4BtV+Yoha7AeQIWE9PinmRYN8ErSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c7:f4:61:ef:49:cc:14:c2:93:92:33:af:bc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d Validity Not Before: Dec 6 10:02:20 2025 GMT Not After : Dec 7 10:02:20 2025 GMT Subject: CN=ee491b7e7ab0902fe7af9e5ec775bb40d7bd6834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:e4:38:26:ef:63:11:80:90:b7:81:d8:02: 48:83:c9:38:07:c6:68:ba:7b:12:f5:35:0c:79:51: e4:1c:29:fc:93:3c:f6:9e:e0:b2:89:56:e1:6c:63: b3:0e:4a:1f:1c:2e:25:bf:a3:33:da:71:97:66:33: 87:f6:c0:ea:cf:0e:5b:61:90:a5:9e:9e:69:98:67: 5b:4a:5e:0a:80:87:a0:73:f3:75:28:35:1f:c8:cd: fa:ff:00:ab:d2:6a:08:b4:60:08:67:62:64:79:6b: 86:8a:88:34:eb:dc:8b:aa:72:6f:76:ac:ee:e6:b4: c3:d3:39:62:48:f4:69:7b:80:1f:b2:28:8d:7d:52: 6d:ba:60:ea:eb:ea:1a:a3:3c:bc:13:41:bb:59:af: 57:0d:1d:47:08:a4:92:d0:ea:1d:20:71:25:2b:56: 10:f9:11:df:65:d4:01:35:71:dc:32:c8:46:9f:f6: 05:02:ae:9f:14:56:c3:c1:af:f3:d4:4b:74:65:e4: fb:7f:4d:e9:52:e6:05:61:5c:ea:5d:b8:0a:53:38: ae:e6:32:5c:2c:f3:c5:a1:a4:ab:53:5d:0f:d6:aa: 5a:e6:1e:84:4b:c1:2d:7a:ac:aa:43:15:0c:0c:ab: d6:82:fd:0a:77:28:0c:e5:f1:8a:b8:37:59:ed:23: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:1B:7E:7A:B0:90:2F:E7:AF:9E:5E:C7:75:BB:40:D7:BD:68:34 X509v3 Authority Key Identifier: keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fd:b8:69:0e:b2:77:35:3e:f8:16:29:4f:7d:97:9b:1b:6c: e7:48:44:6f:84:20:f6:99:5b:09:87:80:7f:5d:40:49:30:85: 4d:dc:13:4a:d9:f7:03:53:2b:0c:8a:3d:d4:88:be:78:c4:fc: 11:30:2d:27:d4:56:84:93:67:0d:84:d3:06:0e:f7:19:25:dd: 10:03:09:c2:bd:6c:e0:e0:56:e3:83:81:92:9e:78:c2:e5:8b: ac:50:9a:01:b3:05:ee:42:48:f8:1f:bc:7b:83:9a:98:0b:68: 88:23:f1:d7:6c:ca:3f:4f:72:db:49:2b:3f:1c:d3:25:ee:36: 9b:7f:40:28:ed:09:40:4b:32:de:9d:59:3d:1b:c1:05:40:be: 8e:93:f1:a5:6c:dc:d3:75:98:5b:bd:c7:d4:7b:0a:de:88:02: 53:bf:7f:23:86:9a:eb:d5:f9:4b:53:28:24:9c:3e:ce:f8:20: f9:3a:4f:f0:a6:11:e3:61:43:65:32:70:2a:32:54:34:0e:06: 5d:5f:b1:c5:89:fc:68:06:58:57:87:5d:25:2e:cd:5e:33:98: 94:42:aa:fb:98:ee:8b:18:90:b4:b0:e8:ba:d0:e7:0f:e4:52: 3a:0b:0c:ed:54:89:48:7f:27:84:c2:ea:aa:f7:4f:a4:66:d0: d2:64:d6:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMf0Ye9JzBTCk5Izr7zYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5 OGEzOGQwHhcNMjUxMjA2MTAwMjIwWhcNMjUxMjA3MTAwMjIwWjAzMTEwLwYDVQQD EyhlZTQ5MWI3ZTdhYjA5MDJmZTdhZjllNWVjNzc1YmI0MGQ3YmQ2ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtnkOCbvYxGAkLeB2AJIg8k4B8Zo unsS9TUMeVHkHCn8kzz2nuCyiVbhbGOzDkofHC4lv6Mz2nGXZjOH9sDqzw5bYZCl np5pmGdbSl4KgIegc/N1KDUfyM36/wCr0moItGAIZ2JkeWuGiog069yLqnJvdqzu 5rTD0zliSPRpe4AfsiiNfVJtumDq6+oaozy8E0G7Wa9XDR1HCKSS0OodIHElK1YQ +RHfZdQBNXHcMshGn/YFAq6fFFbDwa/z1Et0ZeT7f03pUuYFYVzqXbgKUziu5jJc LPPFoaSrU10P1qpa5h6ES8EteqyqQxUMDKvWgv0KdygM5fGKuDdZ7SM91wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5JG356sJAv56+eXsd1u0DXvWg0MB8GA1UdIwQY MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2 LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKf24aQ6y dzU++BYpT32Xmxts50hEb4Qg9plbCYeAf11ASTCFTdwTStn3A1MrDIo91Ii+eMT8 ETAtJ9RWhJNnDYTTBg73GSXdEAMJwr1s4OBW44OBkp54wuWLrFCaAbMF7kJI+B+8 e4OamAtoiCPx12zKP09y20krPxzTJe42m39AKO0JQEsy3p1ZPRvBBUC+jpPxpWzc 03WYW73H1HsK3ogCU79/I4aa69X5S1MoJJw+zvgg+TpP8KYR42FDZTJwKjJUNA4G XV+xxYn8aAZYV4ddJS7NXjOYlEKq+5juixiQtLDoutDnD+RSOgsM7VSJSH8nhMLq qvdPpGbQ0mTWWA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:37 2025 by rpki-client