This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft File: VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json) Hash identifier: AKJXv+1a+5JM66j05JCQg2ptyzpRQ5cwN35GfSaNjA0= Subject key identifier: C6:BC:DE:0E:6B:26:51:AE:6A:C3:20:3A:FA:5A:CE:06:B8:FE:68:7D Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48 Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548 Certificate serial: 019B10142B47CE1BB086A8CA16D69D8B624D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft Manifest number: 0C67 Signing time: Fri 12 Dec 2025 01:01:55 +0000 Manifest this update: Fri 12 Dec 2025 01:01:55 +0000 Manifest next update: Sat 13 Dec 2025 01:01:55 +0000 Files and hashes: 1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: qAO10aG3H6on1o7WCJXRhrbpKIkBhCzjOo3x4w6uAAk=) 2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:2b:47:ce:1b:b0:86:a8:ca:16:d6:9d:8b:62:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548 Validity Not Before: Dec 12 01:01:55 2025 GMT Not After : Dec 13 01:01:55 2025 GMT Subject: CN=c6bcde0e6b2651ae6ac3203afa5ace06b8fe687d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:8d:a5:d9:10:b7:3d:35:1c:d5:9c:a0:1f: ad:a8:88:af:a5:80:b1:dd:33:67:1c:d5:74:bd:ae: 7a:4d:6e:d5:65:3d:e6:72:74:16:fe:ea:59:b7:08: 68:68:b3:63:fb:e7:17:44:9b:34:40:69:9f:c9:f3: 20:31:7b:26:87:0d:69:ca:fb:64:5c:15:59:c4:96: 53:2e:47:43:ba:a9:a4:f4:6b:d5:c2:0a:8a:70:98: 9f:1e:7c:b9:1f:61:97:bd:3d:dd:5e:1b:86:c2:59: 0d:60:4f:41:b2:73:0e:cb:53:94:11:d3:be:bf:b9: ea:c3:19:38:a4:01:d7:39:a8:2e:4c:0e:f1:84:d7: 44:c9:ef:f8:93:33:96:34:8d:e6:0e:7f:cd:03:ec: 24:66:89:2e:98:a9:92:09:f3:ab:32:78:43:72:35: df:9a:66:d9:0d:a0:c0:c8:f1:ce:55:36:22:55:fe: 6c:1a:08:74:0b:df:6b:2e:97:c6:87:ec:70:3f:5d: 99:fc:4c:a5:98:b2:aa:3f:78:61:a2:8f:f6:45:f5: e0:a3:bf:3d:76:c3:10:fd:24:e7:ae:42:c0:85:97: 2b:37:fd:e9:95:38:7c:3a:8f:8a:58:23:62:25:44: 0a:73:05:7e:2c:ab:2b:5a:2d:1b:12:e8:72:77:db: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BC:DE:0E:6B:26:51:AE:6A:C3:20:3A:FA:5A:CE:06:B8:FE:68:7D X509v3 Authority Key Identifier: keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:45:82:05:97:cc:e8:f8:70:f9:cd:a2:b4:81:c2:72:a2:57: ba:d3:6a:c2:f1:a1:e4:16:1f:b4:a7:aa:9c:b3:90:65:47:40: d0:22:81:1f:b4:37:68:8a:34:9c:b0:7d:2c:74:28:52:61:5a: d0:93:a7:73:a4:6a:a8:b3:ab:6b:87:96:03:9e:d1:37:83:91: 95:f3:6e:8a:6c:47:51:2e:a6:3c:bb:68:76:9a:0e:d3:32:1e: 1e:5c:d5:e9:74:6f:03:b7:d9:6e:8c:75:2c:06:f1:1e:a4:d6: 41:09:31:fb:fa:72:b1:b5:2f:32:86:2a:c9:59:b2:f7:26:d5: fe:ed:ce:5d:86:c6:86:64:85:c4:ec:ff:cc:3f:ad:56:8c:dc: 86:ae:85:84:c4:d4:e1:5b:22:ab:8f:a2:3c:4c:94:7b:6f:43: ec:68:25:56:47:70:46:7b:6f:e1:83:41:fa:19:a0:24:fb:55: 9b:fe:c6:6c:05:d0:1f:35:c1:40:76:cb:da:30:12:a0:98:1f: a0:58:7d:76:71:9d:57:0b:05:5b:c6:2f:29:a0:7a:8d:b9:98: f3:d9:de:16:c3:a5:8c:da:51:6c:c1:f0:2a:4d:39:43:07:2f: c1:3f:01:87:7b:7f:92:a4:64:d7:11:0f:b0:c4:00:79:54:54: 18:e1:a0:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFCtHzhuwhqjKFtadi2JNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGNkZDE3MzJlNTY0M2ExNWVlZDllZTc3ZTEzOTRiODAy NDI1NDgwHhcNMjUxMjEyMDEwMTU1WhcNMjUxMjEzMDEwMTU1WjAzMTEwLwYDVQQD EyhjNmJjZGUwZTZiMjY1MWFlNmFjMzIwM2FmYTVhY2UwNmI4ZmU2ODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1KNpdkQtz01HNWcoB+tqIivpYCx 3TNnHNV0va56TW7VZT3mcnQW/upZtwhoaLNj++cXRJs0QGmfyfMgMXsmhw1pyvtk XBVZxJZTLkdDuqmk9GvVwgqKcJifHny5H2GXvT3dXhuGwlkNYE9BsnMOy1OUEdO+ v7nqwxk4pAHXOaguTA7xhNdEye/4kzOWNI3mDn/NA+wkZokumKmSCfOrMnhDcjXf mmbZDaDAyPHOVTYiVf5sGgh0C99rLpfGh+xwP12Z/EylmLKqP3hhoo/2RfXgo789 dsMQ/STnrkLAhZcrN/3plTh8Oo+KWCNiJUQKcwV+LKsrWi0bEuhyd9vwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMa83g5rJlGuasMgOvpazga4/mh9MB8GA1UdIwQY MBaAFFcM3Rcy5WQ6Fe7Z7nfhOUuAJCVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEt MzhhNWM5MTA1Y2M1LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEtMzhhNWM5MTA1Y2M1 LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEWCBZfM 6Phw+c2itIHCcqJXutNqwvGh5BYftKeqnLOQZUdA0CKBH7Q3aIo0nLB9LHQoUmFa 0JOnc6RqqLOra4eWA57RN4ORlfNuimxHUS6mPLtodpoO0zIeHlzV6XRvA7fZbox1 LAbxHqTWQQkx+/pysbUvMoYqyVmy9ybV/u3OXYbGhmSFxOz/zD+tVozchq6FhMTU 4Vsiq4+iPEyUe29D7GglVkdwRntv4YNB+hmgJPtVm/7GbAXQHzXBQHbL2jASoJgf oFh9dnGdVwsFW8YvKaB6jbmY89neFsOljNpRbMHwKk05QwcvwT8Bh3t/kqRk1xEP sMQAeVRUGOGgIg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:37:32 2025 by rpki-client