This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json) Hash identifier: EcsUg7EpMoRtWU9qDYlgFE49+NsrhrpzW6M7+U/8PvE= Subject key identifier: BF:9E:3E:E8:0C:43:DB:1B:B6:64:CC:D7:66:6E:05:2E:60:68:DD:3A Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Certificate serial: 019AF19ABA9778AB3DB103B5D3313B489CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft Manifest number: 0AAF Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: 7nuD8elhlIUxcTnbEPvLA6ZLn5I.roa (hash: 90o2vgvA2ZcVDu1EqRM6Q9Z2wROKMEItuuXmbaFjrpw=) 2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: iPxndmXk1a2jz+HfpbiNoFhAwynVauX259Gu/GS3ZHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ba:97:78:ab:3d:b1:03:b5:d3:31:3b:48:9c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=bf9e3ee80c43db1bb664ccd7666e052e6068dd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:d2:b9:db:44:9f:42:04:ac:ea:20:c1:0e: 3f:27:2d:a2:06:8a:c1:f5:fe:c1:4b:6e:3f:c2:27: a5:9a:1c:c1:f4:3c:95:69:2f:6f:81:81:19:47:89: e3:ce:01:b8:ba:83:27:ab:be:97:5d:68:1e:3b:c8: 6c:b7:03:78:a8:5a:fc:5f:99:12:4c:15:6a:cc:74: 1d:43:3e:7a:eb:29:d5:2e:f3:89:15:9e:8d:34:7c: 14:cc:00:45:0d:0d:d0:e5:77:e0:c6:cb:c5:d0:06: f8:71:83:3e:4f:76:70:3b:8a:f0:83:29:6d:c0:69: 8f:b5:8d:2f:3a:24:2e:52:07:a9:9f:04:07:9c:60: ba:d8:ea:bb:85:bb:85:fa:30:63:26:77:ce:8f:bd: 9d:27:aa:6c:1c:e8:8f:38:83:7e:ed:97:4b:10:a4: 5c:1a:3f:a8:5b:6e:49:2c:26:e1:30:a1:be:fe:af: d3:c2:ae:ab:03:d0:12:a9:ec:72:70:b4:6b:35:f2: 09:29:47:f3:f7:03:8d:3e:ce:6e:37:74:62:a5:ae: af:32:b7:15:99:71:c9:ef:fb:2e:5e:7f:80:50:3c: 18:ed:e3:fc:38:53:76:53:25:f9:36:05:10:06:01: cf:6a:3d:e2:0e:c3:c3:79:fe:1e:42:d5:71:1c:b1: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9E:3E:E8:0C:43:DB:1B:B6:64:CC:D7:66:6E:05:2E:60:68:DD:3A X509v3 Authority Key Identifier: keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:df:0b:03:2e:2b:a4:70:66:43:7b:6b:c9:71:04:e2:cb:5e: 4d:6a:00:62:06:d6:52:0a:57:09:d2:08:18:26:8d:51:ca:6e: ce:76:03:74:a9:7e:8a:b9:7b:63:dd:d0:f0:ae:03:37:eb:2b: 17:7b:11:cf:09:96:b3:17:3a:7c:f7:bb:f0:26:d4:80:d7:2f: 36:35:db:14:79:83:99:cb:a7:0a:bf:57:cf:a3:ec:cb:90:89: 25:6c:a7:34:81:2b:f2:8f:b6:f6:4a:5b:3a:8d:b1:e5:95:ed: 70:75:0c:23:a9:b3:23:0c:41:95:8e:af:71:4c:3a:98:76:b9: 5a:c2:09:2f:89:03:0a:79:42:1f:19:f1:4b:b5:ac:32:48:e3: e2:2e:f9:b0:46:de:48:b8:eb:98:d6:35:4c:a7:13:5c:5f:84: 5f:8c:4d:14:fe:f2:34:96:e9:f8:7f:94:64:6d:4d:f6:d7:c0: 72:55:63:df:13:e5:b6:ee:b6:50:95:d2:c3:05:27:ab:a9:99: 6f:7e:d5:aa:d0:6d:67:2f:f0:bc:92:03:67:9d:0a:fb:1a:16: c1:50:3d:57:2c:2d:76:b8:98:f7:d7:b5:be:87:d8:d8:52:3f: 73:41:9f:e3:4a:fc:93:e7:a7:57:49:3f:dc:e5:1b:5d:30:3f: 5e:97:2a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrqXeKs9sQO10zE7SJzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0 ZjhjYjEwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EyhiZjllM2VlODBjNDNkYjFiYjY2NGNjZDc2NjZlMDUyZTYwNjhkZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzXSudtEn0IErOogwQ4/Jy2iBorB 9f7BS24/wielmhzB9DyVaS9vgYEZR4njzgG4uoMnq76XXWgeO8hstwN4qFr8X5kS TBVqzHQdQz566ynVLvOJFZ6NNHwUzABFDQ3Q5XfgxsvF0Ab4cYM+T3ZwO4rwgylt wGmPtY0vOiQuUgepnwQHnGC62Oq7hbuF+jBjJnfOj72dJ6psHOiPOIN+7ZdLEKRc Gj+oW25JLCbhMKG+/q/Twq6rA9ASqexycLRrNfIJKUfz9wONPs5uN3Ripa6vMrcV mXHJ7/suXn+AUDwY7eP8OFN2UyX5NgUQBgHPaj3iDsPDef4eQtVxHLGjgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+ePugMQ9sbtmTM12ZuBS5gaN06MB8GA1UdIwQY MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2 LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd8LAy4r pHBmQ3tryXEE4steTWoAYgbWUgpXCdIIGCaNUcpuznYDdKl+irl7Y93Q8K4DN+sr F3sRzwmWsxc6fPe78CbUgNcvNjXbFHmDmcunCr9Xz6Psy5CJJWynNIEr8o+29kpb Oo2x5ZXtcHUMI6mzIwxBlY6vcUw6mHa5WsIJL4kDCnlCHxnxS7WsMkjj4i75sEbe SLjrmNY1TKcTXF+EX4xNFP7yNJbp+H+UZG1N9tfAclVj3xPltu62UJXSwwUnq6mZ b37VqtBtZy/wvJIDZ50K+xoWwVA9VywtdriY99e1vofY2FI/c0Gf40r8k+enV0k/ 3OUbXTA/Xpcqdw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:07 2025 by rpki-client