This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json) Hash identifier: HhfzMgXpFQSnSlWmtxIFvY4KzFMr7XNinpkuPDW4eOk= Subject key identifier: B0:E7:34:37:1C:1A:28:20:B3:7E:A1:38:1B:F7:10:EC:95:A2:A8:79 Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76 Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976 Certificate serial: 019B5975BA3EE6F136C84D2C36309BD80CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft Manifest number: 06F7 Signing time: Fri 26 Dec 2025 07:00:46 +0000 Manifest this update: Fri 26 Dec 2025 07:00:46 +0000 Manifest next update: Sat 27 Dec 2025 07:00:46 +0000 Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: WaksjPMZgJD8hGekN1UWMaEghCK1ca4UBVweeVV+RS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ba:3e:e6:f1:36:c8:4d:2c:36:30:9b:d8:0c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976 Validity Not Before: Dec 26 07:00:46 2025 GMT Not After : Dec 27 07:00:46 2025 GMT Subject: CN=b0e734371c1a2820b37ea1381bf710ec95a2a879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:13:16:d1:1e:c7:1c:b4:87:af:99:73:5f: fb:7b:38:3f:a0:81:9a:b2:17:7b:e2:14:8c:b1:5b: 3d:c7:d9:9b:45:b5:c0:0b:27:9a:73:4a:8c:57:49: 0e:67:01:ca:41:e0:14:91:4d:95:c9:12:42:b6:6c: b4:6d:fa:eb:a0:5e:45:b6:52:ef:b6:6d:32:7f:6b: 31:96:c2:60:dc:6b:59:bb:0e:a9:3e:e8:a5:68:7d: 1e:f7:9e:31:ae:0d:9a:51:7c:56:03:8c:a6:27:fe: e4:98:20:de:0d:bf:e9:70:1d:ef:5f:0b:e7:be:5f: cc:af:69:49:ca:9c:61:65:48:f8:64:e7:06:97:65: 44:57:83:73:e3:15:e7:60:45:e4:85:81:84:cb:c2: 58:60:98:e5:d2:0b:c2:ec:95:ea:1e:e2:bf:1b:a2: ea:f8:9e:ab:14:88:86:63:1d:70:5e:46:7c:ab:cd: 9d:79:66:40:93:10:f3:95:05:eb:f7:74:31:70:f8: 0c:1c:c6:1e:49:ee:99:60:ac:5b:70:16:eb:3c:c3: b7:a6:fd:36:d9:32:57:6e:33:a2:9c:bf:1b:6f:1d: 9c:97:96:10:a4:27:9b:cc:f4:92:c0:3f:0a:a8:e7: 2d:63:f5:ad:53:4b:50:df:cd:a9:78:bf:25:45:4b: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E7:34:37:1C:1A:28:20:B3:7E:A1:38:1B:F7:10:EC:95:A2:A8:79 X509v3 Authority Key Identifier: keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7b:70:e3:63:1a:9f:69:b0:72:93:e8:c9:5f:a2:a4:75:e7: 7c:24:11:b9:40:05:5a:4a:f8:01:c0:6a:57:ce:47:b0:9a:17: b8:6c:3d:08:79:69:a6:89:65:57:53:4c:ea:c5:e2:6c:dd:aa: 81:71:28:10:11:7f:4a:f5:5e:28:7e:3a:9c:c5:31:77:2d:20: 7c:89:85:11:a2:22:5a:14:0e:a5:03:da:86:48:77:e2:a7:f7: e4:85:99:6b:49:f9:2f:a0:8c:81:83:d9:59:29:70:01:98:33: 75:4d:67:90:89:01:30:87:d1:c7:fa:1a:2c:6f:66:46:3d:0b: 21:76:83:a1:d4:56:65:be:d3:9e:d3:30:f4:a3:5f:a3:66:33: 2d:95:3b:dd:25:80:4f:d1:8c:01:18:24:6a:d4:84:e4:a9:a5: da:f2:a3:de:b6:10:cf:05:60:b5:96:74:a7:be:6d:64:ee:14: f9:64:cf:05:90:86:17:d5:c4:88:22:96:b6:1f:47:79:6d:69: 75:09:a3:7b:3e:e1:c6:ec:5b:cc:03:ae:c4:7e:f6:08:83:37: 17:bc:dc:2e:c9:9f:59:7e:24:35:a0:29:33:58:78:44:3a:e5: e1:2f:e0:16:82:4c:b6:29:00:af:15:86:0d:4c:88:9b:18:0b: b8:02:73:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbo+5vE2yE0sNjCb2Az0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDA4NjM0Y2ZhNWU4MTY2OTNjMmI3OWUyZThiOGFlZWJh ZjU5NzYwHhcNMjUxMjI2MDcwMDQ2WhcNMjUxMjI3MDcwMDQ2WjAzMTEwLwYDVQQD EyhiMGU3MzQzNzFjMWEyODIwYjM3ZWExMzgxYmY3MTBlYzk1YTJhODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4UTFtEexxy0h6+Zc1/7ezg/oIGa shd74hSMsVs9x9mbRbXACyeac0qMV0kOZwHKQeAUkU2VyRJCtmy0bfrroF5FtlLv tm0yf2sxlsJg3GtZuw6pPuilaH0e954xrg2aUXxWA4ymJ/7kmCDeDb/pcB3vXwvn vl/Mr2lJypxhZUj4ZOcGl2VEV4Nz4xXnYEXkhYGEy8JYYJjl0gvC7JXqHuK/G6Lq +J6rFIiGYx1wXkZ8q82deWZAkxDzlQXr93QxcPgMHMYeSe6ZYKxbcBbrPMO3pv02 2TJXbjOinL8bbx2cl5YQpCebzPSSwD8KqOctY/WtU0tQ382peL8lRUsICQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDnNDccGiggs36hOBv3EOyVoqh5MB8GA1UdIwQY MBaAFFXQhjTPpegWaTwreeLouK7rr1l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEt MDU3NWQwYTQ2YmFhLzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xZGE3M2YtMDgyZS00ZjE3LWI2YTEtMDU3NWQwYTQ2YmFh LzEvVmRDR05NLWw2QlpwUEN0NTR1aTRydXV2V1hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXtw42Ma n2mwcpPoyV+ipHXnfCQRuUAFWkr4AcBqV85HsJoXuGw9CHlppollV1NM6sXibN2q gXEoEBF/SvVeKH46nMUxdy0gfImFEaIiWhQOpQPahkh34qf35IWZa0n5L6CMgYPZ WSlwAZgzdU1nkIkBMIfRx/oaLG9mRj0LIXaDodRWZb7TntMw9KNfo2YzLZU73SWA T9GMARgkatSE5Kml2vKj3rYQzwVgtZZ0p75tZO4U+WTPBZCGF9XEiCKWth9HeW1p dQmjez7hxuxbzAOuxH72CIM3F7zcLsmfWX4kNaApM1h4RDrl4S/gFoJMtikArxWG DUyImxgLuAJzAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client