This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft File: vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json) Hash identifier: vXQMleQDAcDDDcTUmyGpBuUGx3/IpzDnTuoPgLWw980= Subject key identifier: 0C:C6:97:33:2A:22:A8:F3:2C:40:E1:6A:B1:33:C7:B4:F5:53:CC:92 Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65 Certificate issuer: /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165 Certificate serial: 019B4738B20EB9710216C5DA18808C5D8B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft Manifest number: 14C7 Signing time: Mon 22 Dec 2025 18:00:56 +0000 Manifest this update: Mon 22 Dec 2025 18:00:56 +0000 Manifest next update: Tue 23 Dec 2025 18:00:56 +0000 Files and hashes: 1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: Lgwv5sN+AEd9j+7mKQAeYGfrJF9lxqaorvMVYDPNOFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:b2:0e:b9:71:02:16:c5:da:18:80:8c:5d:8b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165 Validity Not Before: Dec 22 18:00:56 2025 GMT Not After : Dec 23 18:00:56 2025 GMT Subject: CN=0cc697332a22a8f32c40e16ab133c7b4f553cc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:d4:10:5f:5e:f7:ce:4f:37:41:cc:99:26: 67:d9:99:71:e9:48:1d:6a:50:b7:92:01:a9:3b:ee: ab:94:14:9b:c5:5a:45:ba:95:59:b1:53:68:97:ac: 8c:1b:10:72:02:96:c8:00:a6:b2:a6:a2:e8:53:39: 7e:9b:5b:94:b0:f8:60:00:b3:2c:51:38:98:ee:bb: 69:6a:94:fa:cd:be:b4:8f:b4:c8:49:88:b2:4e:07: a1:b2:ea:ca:31:fa:2e:8c:de:9a:37:15:e0:d5:58: e5:a4:90:77:b2:3a:85:dc:92:e7:1b:7d:b3:a3:08: 08:07:27:56:2b:f3:0e:8a:e7:31:b2:b7:d6:3a:c4: fb:64:36:2d:06:f3:4a:14:9f:24:e6:e2:59:ca:2c: 1b:65:51:e4:da:94:d4:09:dd:51:15:e1:1c:43:3c: 6a:1f:5e:27:8c:c6:0d:20:94:06:63:95:1a:eb:64: 9b:ed:63:b6:47:45:02:f5:9d:49:d5:ac:5f:74:0b: 62:0d:12:ad:7e:02:51:a5:39:de:64:a6:bb:11:88: eb:5d:90:44:8a:43:6e:c5:ab:fc:e7:e1:f6:35:c8: 90:a3:6c:35:0f:a0:d3:6c:da:77:1f:0b:87:0a:99: 84:5c:5c:01:1b:45:e1:c7:ee:cd:b7:50:dc:5d:7f: 43:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C6:97:33:2A:22:A8:F3:2C:40:E1:6A:B1:33:C7:B4:F5:53:CC:92 X509v3 Authority Key Identifier: keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b8:ef:06:56:e1:a8:2e:40:16:5c:ec:7b:a9:be:d0:02:06: 57:c5:94:86:a6:5d:22:9c:06:08:db:d9:25:f4:92:f9:4c:14: fd:84:71:6b:d2:85:1c:e2:b6:22:c9:36:be:4e:51:40:eb:8d: 07:81:3a:40:8c:07:3d:11:24:6e:66:33:28:25:88:00:b2:51: 79:f5:80:4c:b4:36:a4:47:46:b0:24:03:13:48:01:eb:c9:a7: c8:e7:1d:0c:92:64:8e:2f:58:0d:68:4a:41:31:99:04:21:df: a7:be:47:eb:47:59:a5:42:7d:09:18:f6:47:a9:23:ee:51:47: 21:c1:21:d3:d0:74:35:f6:e9:19:2c:fb:6b:dc:00:33:3c:ba: c9:ef:56:a5:90:0e:d6:21:66:9e:05:8d:0b:44:f5:45:b2:75: a9:06:90:73:44:f4:37:d3:10:93:a8:81:61:68:6b:9c:2f:20: 8a:79:46:3c:b4:71:19:c3:41:81:af:4a:3f:15:a4:bc:01:d5: 60:f0:30:bf:50:48:98:c1:ef:c4:db:63:df:cd:f5:98:9c:24: d3:95:c1:ab:ce:5d:e8:9e:22:4f:99:de:67:83:e3:57:74:b1: 3a:74:75:0d:92:b5:84:02:f0:40:d1:3f:57:40:5a:fe:1c:a8: 87:a8:b6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOLIOuXECFsXaGICMXYuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNmQyZGY1NzQwYjU3ZDQ5ZWQzZDJkZTI5YTk4Y2JjNjdm MjAxNjUwHhcNMjUxMjIyMTgwMDU2WhcNMjUxMjIzMTgwMDU2WjAzMTEwLwYDVQQD EygwY2M2OTczMzJhMjJhOGYzMmM0MGUxNmFiMTMzYzdiNGY1NTNjYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl3UEF9e985PN0HMmSZn2Zlx6Ugd alC3kgGpO+6rlBSbxVpFupVZsVNol6yMGxByApbIAKaypqLoUzl+m1uUsPhgALMs UTiY7rtpapT6zb60j7TISYiyTgehsurKMfoujN6aNxXg1VjlpJB3sjqF3JLnG32z owgIBydWK/MOiucxsrfWOsT7ZDYtBvNKFJ8k5uJZyiwbZVHk2pTUCd1RFeEcQzxq H14njMYNIJQGY5Ua62Sb7WO2R0UC9Z1J1axfdAtiDRKtfgJRpTneZKa7EYjrXZBE ikNuxav85+H2NciQo2w1D6DTbNp3HwuHCpmEXFwBG0Xhx+7Nt1DcXX9DUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzGlzMqIqjzLEDharEzx7T1U8ySMB8GA1UdIwQY MBaAFL5tLfV0C1fUntPS3impjLxn8gFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTkt YmE5MTc4Yzc5ZmM2LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wY2UzNzMtOTI5OC00OGZjLTkyNTktYmE5MTc4Yzc5ZmM2 LzEvdm0wdDlYUUxWOVNlMDlMZUthbU12R2Z5QVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLjvBlbh qC5AFlzse6m+0AIGV8WUhqZdIpwGCNvZJfSS+UwU/YRxa9KFHOK2Isk2vk5RQOuN B4E6QIwHPREkbmYzKCWIALJRefWATLQ2pEdGsCQDE0gB68mnyOcdDJJkji9YDWhK QTGZBCHfp75H60dZpUJ9CRj2R6kj7lFHIcEh09B0NfbpGSz7a9wAMzy6ye9WpZAO 1iFmngWNC0T1RbJ1qQaQc0T0N9MQk6iBYWhrnC8ginlGPLRxGcNBga9KPxWkvAHV YPAwv1BImMHvxNtj3831mJwk05XBq85d6J4iT5neZ4PjV3SxOnR1DZK1hALwQNE/ V0Ba/hyoh6i2Mg== -----END CERTIFICATE-----Generated at Tue Dec 23 01:55:50 2025 by rpki-client