This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft File: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft (raw, json) Hash identifier: e7LmYy4KXtI613CP/uJOtLQRsSDL3kBnDsGajib+USg= Subject key identifier: 01:78:D3:C0:20:AB:4D:57:04:38:90:60:39:0E:89:25:3C:C2:36:DB Authority key identifier: 55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF Certificate issuer: /CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef Certificate serial: 019B48144C24F1EBBDFDCCDB81E829C57E8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft Manifest number: 1749 Signing time: Mon 22 Dec 2025 22:00:48 +0000 Manifest this update: Mon 22 Dec 2025 22:00:48 +0000 Manifest next update: Tue 23 Dec 2025 22:00:48 +0000 Files and hashes: 1: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl (hash: kpMmnr67RwLbrbU3khg56kf9X3sksdTCnT7xxXGRo9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:4c:24:f1:eb:bd:fd:cc:db:81:e8:29:c5:7e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef Validity Not Before: Dec 22 22:00:48 2025 GMT Not After : Dec 23 22:00:48 2025 GMT Subject: CN=0178d3c020ab4d5704389060390e89253cc236db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:84:ae:6e:f6:5b:3c:ec:98:8d:75:b1:39: ff:9e:87:d3:69:68:74:f8:5e:66:83:9f:18:f1:07: 81:49:22:71:cc:c2:71:28:7c:2f:cf:6a:3e:42:02: 06:93:1a:d4:ff:e0:c0:5e:c8:54:74:3b:15:47:0c: 4c:49:5a:3f:e2:af:75:b1:80:38:9c:19:17:3c:e4: de:57:6f:3c:7f:89:87:2e:10:db:52:41:b1:ac:cb: ff:7b:37:02:a6:ea:59:b8:c6:0f:f2:40:81:90:eb: 9a:9f:fd:96:53:c3:86:97:dc:f7:0f:19:91:24:41: a4:e4:d8:e4:f6:bf:d3:30:83:83:dc:6c:dd:b1:e3: 68:09:b9:11:21:75:78:89:8b:f0:6b:c1:02:d8:32: d9:84:51:9f:11:b3:68:37:32:fa:fd:d7:aa:5a:29: db:9d:25:ad:b3:d9:0a:1d:93:e5:73:ab:55:46:1d: 79:92:9c:4c:19:03:94:33:f1:26:7b:ed:93:ac:31: 88:7e:e3:14:40:3f:8b:d2:40:cf:91:8e:2d:8a:f7: aa:8a:b0:02:43:41:1d:f2:ff:78:23:46:34:cc:a5: 24:b9:03:88:a2:29:70:04:1c:1b:d4:77:ff:1b:76: ad:a4:fc:3f:cd:5d:e3:93:db:d2:4e:4d:6b:1a:d1: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:78:D3:C0:20:AB:4D:57:04:38:90:60:39:0E:89:25:3C:C2:36:DB X509v3 Authority Key Identifier: keyid:55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:24:a5:3f:a8:81:68:8f:ba:fd:fc:64:f8:d4:52:c9:09:f0: 50:61:88:16:81:cf:3d:0e:61:69:bb:d9:fa:e5:13:c0:bb:a1: d4:78:e9:c5:1b:32:44:10:99:ef:a3:67:13:2d:22:3f:4d:38: f4:b0:51:16:eb:10:af:df:ad:4a:61:60:da:90:a0:11:75:f6: a6:c1:0f:e6:cd:17:9b:4c:3a:38:bb:73:d5:b5:22:36:b5:cb: a0:5a:a5:93:8b:20:75:07:33:75:f8:e0:1a:74:a3:39:fd:72: cb:1b:cf:af:13:9c:f1:49:da:ba:ab:f3:a1:c2:3f:4f:25:29: c3:1f:2e:71:7a:37:95:ff:1a:4a:ab:f4:c7:f1:c9:1f:db:b0: 80:83:7d:d2:22:a8:75:f2:41:63:27:03:67:2a:13:2a:08:40: 4b:69:61:32:9a:15:6b:90:39:38:93:80:4d:fc:5d:b1:88:e5: 15:a9:2b:cb:4a:10:8e:c6:95:21:68:30:47:66:6d:2e:67:dc: c1:c4:d8:16:49:35:92:56:90:d3:f4:5d:05:2b:a0:39:75:7d: c3:9d:fb:f3:a2:e9:39:01:c3:a6:64:ef:aa:e9:ca:f5:57:8c: d9:63:d6:08:d5:e6:29:cc:81:f1:60:12:3a:70:bf:c1:ab:a5: 74:e5:f1:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFEwk8eu9/czbgegpxX6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZGVkOWQwMmU3ZjYxNjE5MDUzYTM3MjJhN2E1YTM5ZjNl Yjg2ZWYwHhcNMjUxMjIyMjIwMDQ4WhcNMjUxMjIzMjIwMDQ4WjAzMTEwLwYDVQQD EygwMTc4ZDNjMDIwYWI0ZDU3MDQzODkwNjAzOTBlODkyNTNjYzIzNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQiErm72WzzsmI11sTn/nofTaWh0 +F5mg58Y8QeBSSJxzMJxKHwvz2o+QgIGkxrU/+DAXshUdDsVRwxMSVo/4q91sYA4 nBkXPOTeV288f4mHLhDbUkGxrMv/ezcCpupZuMYP8kCBkOuan/2WU8OGl9z3DxmR JEGk5Njk9r/TMIOD3GzdseNoCbkRIXV4iYvwa8EC2DLZhFGfEbNoNzL6/deqWinb nSWts9kKHZPlc6tVRh15kpxMGQOUM/Eme+2TrDGIfuMUQD+L0kDPkY4tiveqirAC Q0Ed8v94I0Y0zKUkuQOIoilwBBwb1Hf/G3atpPw/zV3jk9vSTk1rGtECOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF408Agq01XBDiQYDkOiSU8wjbbMB8GA1UdIwQY MBaAFFXe2dAuf2FhkFOjcip6Wjnz64bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85MDM0MTAtOGY3Ny00MDIwLWFmNTct MTUzMzljMzk3NTUwLzEvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85MDM0MTAtOGY3Ny00MDIwLWFmNTctMTUzMzljMzk3NTUw LzEvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSSlP6iB aI+6/fxk+NRSyQnwUGGIFoHPPQ5habvZ+uUTwLuh1HjpxRsyRBCZ76NnEy0iP004 9LBRFusQr9+tSmFg2pCgEXX2psEP5s0Xm0w6OLtz1bUiNrXLoFqlk4sgdQczdfjg GnSjOf1yyxvPrxOc8UnauqvzocI/TyUpwx8ucXo3lf8aSqv0x/HJH9uwgIN90iKo dfJBYycDZyoTKghAS2lhMpoVa5A5OJOATfxdsYjlFakry0oQjsaVIWgwR2ZtLmfc wcTYFkk1klaQ0/RdBSugOXV9w53786LpOQHDpmTvqunK9VeM2WPWCNXmKcyB8WAS OnC/wauldOXxDg== -----END CERTIFICATE-----Generated at Tue Dec 23 01:58:21 2025 by rpki-client