This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft File: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json) Hash identifier: Di2Gu0SY9Pfm24QradhN7MoqssicEQkivIOqXDEOpIc= Subject key identifier: D5:4A:F7:54:1D:46:F3:82:C0:C5:9E:21:9A:C1:1B:CC:2F:28:20:9A Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F Certificate issuer: /CN=55bd49591c820eaec39bcb41c84d1708e130447f Certificate serial: 019AF19B49225AEB525F33EB975A1435657B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft Manifest number: 07B5 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: vT27uUf8OR7dO0A/UNclUJsoe1Ta5nD9toOIN2rpDV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:49:22:5a:eb:52:5f:33:eb:97:5a:14:35:65:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=d54af7541d46f382c0c59e219ac11bcc2f28209a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:67:b5:6e:43:f0:0b:da:ac:d8:9d:db:f1: 47:1c:89:a0:fe:d5:ec:07:47:20:98:51:81:15:82: 6f:8c:66:b0:da:a8:c4:8b:52:28:00:c8:51:f1:48: 73:93:d4:4b:97:8d:9a:25:7c:85:98:0e:c7:a0:29: a6:c1:31:93:39:d6:34:14:5f:a9:93:d9:ba:71:a3: ff:cc:a1:04:5b:66:f1:4b:fa:ba:f5:4e:c5:3a:3f: c1:db:01:7c:c5:5e:76:b7:1c:29:ae:05:f9:08:a1: 89:72:13:0c:84:58:f5:23:4f:91:a5:cd:16:78:0b: be:5a:ea:d0:b1:e8:61:5d:69:5d:bc:3e:1d:b2:99: b1:86:b7:63:47:f4:ab:f8:ee:bd:37:18:0c:df:28: 4a:bb:8b:3a:cd:e5:0a:45:a1:29:3a:a4:ca:fb:6f: 18:03:c4:79:a3:a9:e0:7b:1e:22:10:d8:6e:ff:f0: 6d:66:1c:91:a7:e2:d3:bb:08:24:e5:d1:a8:c4:02: e7:eb:2c:b8:96:a5:9d:35:af:d2:75:b9:fe:4c:05: e7:ca:5e:8f:4f:6a:84:f2:d9:ad:a7:0d:17:b4:76: a0:ea:c3:5e:55:68:2e:1e:2e:2b:3c:14:73:2c:13: 95:6d:96:48:92:4b:48:1f:71:9a:32:70:68:3a:16: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4A:F7:54:1D:46:F3:82:C0:C5:9E:21:9A:C1:1B:CC:2F:28:20:9A X509v3 Authority Key Identifier: keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cd:7b:7e:14:b2:47:b7:2d:99:25:2f:89:02:42:11:94:41: 11:f4:8f:bf:05:53:7e:b7:66:7c:7c:aa:e0:65:75:79:20:ae: a8:29:36:52:26:af:33:2f:2c:71:32:27:08:12:ce:a8:6f:6d: 4c:f8:93:4e:e8:b5:14:48:63:9e:04:fb:b3:86:b7:16:de:1a: 13:41:4c:6c:18:fd:24:41:0b:c9:af:aa:2c:60:03:c6:2e:4f: 26:0e:d5:c6:a4:b9:72:ae:0e:36:c3:67:dc:29:e1:67:e7:95: 5b:79:21:b9:94:02:c5:af:f6:f9:5a:87:ba:50:31:9a:26:db: fa:3a:9e:5f:20:81:d3:1a:11:c7:8c:95:a5:ae:ee:fb:0b:f3: 69:b7:ab:06:66:95:f8:34:0a:6e:ea:7b:9e:94:88:a0:72:2a: 08:84:af:fa:09:3e:0d:64:7b:39:fa:a3:b3:62:5e:7e:6d:4f: 13:3a:5a:52:f7:c8:2f:10:b0:88:61:7e:b8:fa:cb:e2:b1:6b: 84:d0:58:ea:5f:10:1b:0b:f7:68:24:bf:6e:77:55:ee:0b:07: db:74:13:87:8c:d3:39:04:e7:b0:7a:68:24:98:71:37:e9:42: 74:2c:45:f7:a2:5e:87:0c:8e:09:e0:c7:19:3e:bc:ee:fa:5c: 0b:c6:c0:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0kiWutSXzPrl1oUNWV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmQ0OTU5MWM4MjBlYWVjMzliY2I0MWM4NGQxNzA4ZTEz MDQ0N2YwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD EyhkNTRhZjc1NDFkNDZmMzgyYzBjNTllMjE5YWMxMWJjYzJmMjgyMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvlntW5D8AvarNid2/FHHImg/tXs B0cgmFGBFYJvjGaw2qjEi1IoAMhR8Uhzk9RLl42aJXyFmA7HoCmmwTGTOdY0FF+p k9m6caP/zKEEW2bxS/q69U7FOj/B2wF8xV52txwprgX5CKGJchMMhFj1I0+Rpc0W eAu+WurQsehhXWldvD4dspmxhrdjR/Sr+O69NxgM3yhKu4s6zeUKRaEpOqTK+28Y A8R5o6ngex4iENhu//BtZhyRp+LTuwgk5dGoxALn6yy4lqWdNa/Sdbn+TAXnyl6P T2qE8tmtpw0XtHag6sNeVWguHi4rPBRzLBOVbZZIkktIH3GaMnBoOhZi7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVK91QdRvOCwMWeIZrBG8wvKCCaMB8GA1UdIwQY MBaAFFW9SVkcgg6uw5vLQchNFwjhMER/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmIxSldSeUNEcTdEbTh0QnlFMFhDT0V3Ukg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mODc4MmQtZmQyYy00ZGYzLWEwZTYt M2YyN2ExOTY2NTc3LzEvVmIxSldSeUNEcTdEbTh0QnlFMFhDT0V3Ukg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mODc4MmQtZmQyYy00ZGYzLWEwZTYtM2YyN2ExOTY2NTc3 LzEvVmIxSldSeUNEcTdEbTh0QnlFMFhDT0V3Ukg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM17fhSy R7ctmSUviQJCEZRBEfSPvwVTfrdmfHyq4GV1eSCuqCk2UiavMy8scTInCBLOqG9t TPiTTui1FEhjngT7s4a3Ft4aE0FMbBj9JEELya+qLGADxi5PJg7VxqS5cq4ONsNn 3CnhZ+eVW3khuZQCxa/2+VqHulAxmibb+jqeXyCB0xoRx4yVpa7u+wvzaberBmaV +DQKbup7npSIoHIqCISv+gk+DWR7Ofqjs2Jefm1PEzpaUvfILxCwiGF+uPrL4rFr hNBY6l8QGwv3aCS/bndV7gsH23QTh4zTOQTnsHpoJJhxN+lCdCxF96JehwyOCeDH GT687vpcC8bAag== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:16 2025 by rpki-client