This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json) Hash identifier: 9iqxZ/oMAyI1PihJWx5PJPnptVggMJKF/WLd4C9yBAc= Subject key identifier: 04:5F:34:10:A3:51:8C:A7:06:44:3F:AF:43:AB:CB:E1:D0:23:88:10 Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439 Certificate serial: 019B2219B22DC86A313D2A3660FE6633A068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft Manifest number: 10A5 Signing time: Mon 15 Dec 2025 13:01:07 +0000 Manifest this update: Mon 15 Dec 2025 13:01:07 +0000 Manifest next update: Tue 16 Dec 2025 13:01:07 +0000 Files and hashes: 1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=) 2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: w9NMKzRJwlBf9fKZ8rn6Hp8JODD4AnuhtlowI9pkQjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:b2:2d:c8:6a:31:3d:2a:36:60:fe:66:33:a0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439 Validity Not Before: Dec 15 13:01:07 2025 GMT Not After : Dec 16 13:01:07 2025 GMT Subject: CN=045f3410a3518ca706443faf43abcbe1d0238810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:b4:24:9b:09:a7:cf:ae:d8:24:79:f6:92: fb:f3:c0:82:a1:84:8e:86:b7:4e:42:3e:cf:ff:65: 22:87:79:b2:09:9b:50:5d:c2:92:98:62:6c:b0:e0: af:8b:a4:5f:5d:a5:bc:3e:c6:ec:d5:93:57:85:ac: 2e:d9:cd:25:2c:2b:d9:46:b3:d8:3e:5f:de:47:4f: 77:b8:c7:4f:86:d4:7d:33:5e:b9:91:63:33:46:25: 8b:a2:f5:41:c4:c7:8f:bf:33:36:b0:04:78:29:8c: 2f:7e:e6:b4:42:7e:42:41:cc:74:80:1f:12:9b:56: d3:61:e0:39:33:3a:87:2e:ab:4d:dc:e3:5a:79:e1: a6:19:33:da:5f:e5:b1:d4:1e:bd:b9:a4:9f:43:2a: ad:95:85:c4:85:b4:a9:1b:a2:14:4a:56:8a:b5:e2: ab:c3:5b:d8:b6:15:0a:9c:90:ee:1b:9b:e5:52:94: 61:48:f1:eb:81:b2:c0:e3:2f:0b:5c:17:ea:49:09: 33:7a:4e:e8:c7:d2:52:c4:5c:55:f7:b9:44:7c:dd: c3:93:15:d8:dd:58:75:0d:22:bb:ba:72:04:99:a0: c2:e6:f4:dc:47:1c:d3:28:4d:5e:78:12:56:e7:53: fe:ff:4a:ba:1a:d3:83:2a:71:1b:35:26:b5:1b:ef: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5F:34:10:A3:51:8C:A7:06:44:3F:AF:43:AB:CB:E1:D0:23:88:10 X509v3 Authority Key Identifier: keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0d:0c:74:cf:62:58:7e:76:6e:4c:4d:c9:be:4c:cd:c4:97: c4:f6:fe:93:9c:b1:d6:0d:18:49:00:b6:f4:43:07:28:ec:42: 41:77:23:55:a0:44:bc:27:29:1e:36:06:78:56:ba:4d:e0:f7: 82:4b:ab:8c:30:52:88:c4:8c:ab:e9:64:3f:43:4e:26:84:98: 20:60:cb:89:bf:c9:e9:6d:b7:b6:73:02:7c:d0:b6:fb:c0:7d: a0:93:fc:2a:df:81:eb:3b:32:7f:d9:79:a2:8c:7d:93:f0:0c: af:51:eb:4d:2d:05:99:f6:13:c6:d6:f8:3e:71:cd:6c:cd:7d: 77:e6:65:0f:da:28:60:71:7d:f1:2c:82:74:7b:a3:6a:35:2c: 88:56:cc:5e:0e:d9:af:cd:22:f5:1c:75:9e:bc:95:3c:ff:8e: 8a:4c:b7:41:79:68:9a:66:4a:85:89:bf:78:f4:bf:e2:1e:20: 3d:78:d7:fd:d4:86:39:b9:7f:9e:1b:d9:f2:d1:7d:94:61:45: 1a:6b:a0:04:08:a6:87:4f:8c:eb:55:49:d6:78:e4:48:36:47: 7b:70:17:53:e9:26:2e:6e:03:77:f6:b5:03:1e:72:47:21:e8: 12:06:ef:1b:5f:1f:f9:15:aa:09:77:4d:5d:fc:ea:78:45:ed: f6:d2:c8:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGbItyGoxPSo2YP5mM6BoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDg2NjFjNmFlZWNhY2Q5YjcxMTc2YTcyZGU5NmM5YjQ1 MDk0MzkwHhcNMjUxMjE1MTMwMTA3WhcNMjUxMjE2MTMwMTA3WjAzMTEwLwYDVQQD EygwNDVmMzQxMGEzNTE4Y2E3MDY0NDNmYWY0M2FiY2JlMWQwMjM4ODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov60JJsJp8+u2CR59pL788CCoYSO hrdOQj7P/2Uih3myCZtQXcKSmGJssOCvi6RfXaW8Psbs1ZNXhawu2c0lLCvZRrPY Pl/eR093uMdPhtR9M165kWMzRiWLovVBxMePvzM2sAR4KYwvfua0Qn5CQcx0gB8S m1bTYeA5MzqHLqtN3ONaeeGmGTPaX+Wx1B69uaSfQyqtlYXEhbSpG6IUSlaKteKr w1vYthUKnJDuG5vlUpRhSPHrgbLA4y8LXBfqSQkzek7ox9JSxFxV97lEfN3DkxXY 3Vh1DSK7unIEmaDC5vTcRxzTKE1eeBJW51P+/0q6GtODKnEbNSa1G++q0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARfNBCjUYynBkQ/r0Ory+HQI4gQMB8GA1UdIwQY MBaAFFcIZhxq7srNm3EXanLelsm0UJQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2It NDQxMDgxNjJlNDkyLzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82NDdhNGEtZDJmZC00M2UwLThmM2ItNDQxMDgxNjJlNDky LzEvVndobUhHcnV5czJiY1JkcWN0Nld5YlJRbERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ0MdM9i WH52bkxNyb5MzcSXxPb+k5yx1g0YSQC29EMHKOxCQXcjVaBEvCcpHjYGeFa6TeD3 gkurjDBSiMSMq+lkP0NOJoSYIGDLib/J6W23tnMCfNC2+8B9oJP8Kt+B6zsyf9l5 oox9k/AMr1HrTS0FmfYTxtb4PnHNbM19d+ZlD9ooYHF98SyCdHujajUsiFbMXg7Z r80i9Rx1nryVPP+Oiky3QXlommZKhYm/ePS/4h4gPXjX/dSGObl/nhvZ8tF9lGFF GmugBAimh0+M61VJ1njkSDZHe3AXU+kmLm4Dd/a1Ax5yRyHoEgbvG18f+RWqCXdN XfzqeEXt9tLIIQ== -----END CERTIFICATE-----Generated at Mon Dec 15 19:44:50 2025 by rpki-client